last executing test programs: 16m5.034199236s ago: executing program 32 (id=2489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e20, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "350fc1c0b157a54bd5095a3786794b3ba35aef3765944d5b3bbb9aae120bfb30", "effc13072363bf36209fa46b5ff23a37", {"a6223c0b8057e213e10eb9cb4e39d324", "e6ee775163c2020872dcaef776d11d75"}}}}}, 0x86) 15m26.185337653s ago: executing program 33 (id=2664): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000000)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 14m15.820620108s ago: executing program 34 (id=3013): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x2}], 0x1}, 0x480c0) 10m26.925345033s ago: executing program 35 (id=4104): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r4, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x4, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_usb_disconnect(r1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 10m26.811014837s ago: executing program 36 (id=4105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x5000, 0xf877, 0x200, 0x1, 0x0, [{0x6, 0x5, 0x0, '\x00', 0x5}, {0xff, 0xf4, 0x1, '\x00', 0x5}, {0x2, 0x3, 0x81, '\x00', 0xff}, {0x9, 0x5, 0x6, '\x00', 0x2}, {0x93, 0xff, 0x25, '\x00', 0xe0}, {0x15, 0x5, 0x0, '\x00', 0xfb}, {0x81, 0x7, 0x4, '\x00', 0xbc}, {0xfb, 0x44, 0xa5, '\x00', 0x2}, {0x4, 0x8, 0x6, '\x00', 0x2}, {0x5c, 0x3, 0x9, '\x00', 0x4}, {0xaf, 0x41, 0x90, '\x00', 0xa}, {0x5, 0x3, 0x7}, {0x7, 0xfb, 0x5, '\x00', 0x40}, {0x0, 0xa, 0x6, '\x00', 0xc6}, {0x2, 0xa, 0x3, '\x00', 0x5}, {0x40, 0x5, 0x42}, {0x0, 0x0, 0x3, '\x00', 0x81}, {0xff, 0x1, 0x70, '\x00', 0x8}, {0x9, 0x3, 0xfd, '\x00', 0x6}, {0xcf, 0xd, 0x1, '\x00', 0xf7}, {0x9, 0x7, 0x9, '\x00', 0x83}, {0x2, 0x5, 0x8, '\x00', 0xf1}, {0x2, 0x80, 0x4, '\x00', 0xd}, {0x4, 0x7, 0x3, '\x00', 0xf}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m0.003404195s ago: executing program 37 (id=4138): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/194, 0xc2}, {0x0}], 0x6, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000a00)=0x7, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x70, 0x4000000}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14"], 0x232) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m27.614434703s ago: executing program 38 (id=4471): r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'wg2\x00', {0x9}, 0x1}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001080)=0x4, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0xecb6bcbdeffb5fd9, 0x17, 0x50, {0x50, 0x3b, "fc8c51a84c6fab6a95b70dac52e6631d6ee1d0296234ebdf023d2c738d4e39af11dcc3a9dc84ab97594baf578b849875b152fedf8eff0884f435fc06a41c6c3c75a67bdce35b76c28f07aafdd710"}}, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x4, {@in6_addr=@mcast1}}}]}, 0x38}}, 0x20000050) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_setup(0x335e, 0x0) io_uring_enter(r4, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 6m21.183840043s ago: executing program 7 (id=4789): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_complete(0x0) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) 6m21.183542581s ago: executing program 7 (id=4790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6m21.092929183s ago: executing program 7 (id=4791): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/../file0/../file0/../file0/file0\x00') 6m20.551768009s ago: executing program 7 (id=4792): syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x119) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 6m19.032426288s ago: executing program 7 (id=4801): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @multicast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="00050000270000012cbd7000fedbdf2509025159595638800800f400c1e3510bb77dc90981878e093c7ece11"], 0x500}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051) 6m18.932098681s ago: executing program 39 (id=4801): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @multicast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="00050000270000012cbd7000fedbdf2509025159595638800800f400c1e3510bb77dc90981878e093c7ece11"], 0x500}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051) 5m21.742320601s ago: executing program 40 (id=5003): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000380)={0x18, 0x1, 0x0, 0x0, r3}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@remote, 0x3501, 0x0, 0x2}}, 0xe8) connect$inet6(r4, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000006c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1ff, {[@fastopen={0x1e, 0xc, "4d1f3200754292a1377c"}]}}}}}}}}, 0x0) 5m19.889432522s ago: executing program 41 (id=5009): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x4, 0x100, @void}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5m19.105940964s ago: executing program 42 (id=5010): pipe(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = gettid() futex(&(0x7f0000000240)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010182}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)={0x9}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0xf26f5a31d1e29085) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="3aadca36f01f1b4c3e21caa067fa3a5f256967248d0a41392876298ae61a635f5e01ee61526ab73ae6ec3091eb6768b283dc4f9410aae67ac2cb46ea5fb3fdf3c4c7778821f60686f064858b4f5fd14433d6f3d6ac185ccd89f77f2c1f43d0815adac8c63c936f921619c36164567b147ddba9f56826ad2016ee004d94f760fd59ce7a11cf99061ac7c15d4d26f503073c4f34382c1b59260cc20b8162890b01a3c098e84f58d4ac942b17b95c9e4e64e7558cc4cd8225e2c8071bf3116a3bd9f55aca1624d10dcda0c5313b", @ANYRES64=0x0], 0x10) close(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5000000230000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x1a24080, &(0x7f0000000600)=ANY=[@ANYRESDEC=r6, @ANYBLOB, @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYRESOCT=r1]) 5m0.508744376s ago: executing program 43 (id=5029): openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x183942, 0xa1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000002c0)="e73428846d55c590a008a61ed35d35516ddeb9cebbf99ccc5c1452df91ff5423849f4484ec63d3e30f440fd1ebbcb80a7f09d7cf8cb5e14481abf2a55e7137cc284985f6bbda8a3891af9b84c7baab3de6656ae4f6c95930960cca0a2041ab09d181d3495172613562f21f3379b6dd2a6072d21820e4ae39d89032c7ce1507bb275f1e73838fc2816ac4cdbac1125fa0caf02dc1ef27fdacd25812b81eea1c8e3d241779334600000000", &(0x7f00000003c0)="a8c40a835087a4001b7b04af944cdb0f5ea4b0a88060149098cf758829e8d6f89e05"}}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7ff, 0x0, '\x00', {0x7fe, 0x200, 0x4, 0x2, r2, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000006, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xe, 0x4, 0x5}}}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) close(0xffffffffffffffff) eventfd2(0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=@setlink={0x40, 0x13, 0x5, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x408}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x0) 4m33.741549856s ago: executing program 6 (id=5035): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x48, 0xd7, 0xa9, 0x8, 0x7b0, 0x6, 0x9ed4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xdb, 0x4, 0xc0, 0xe6, [{{0x9, 0x4, 0x93, 0x4, 0x0, 0x87, 0xce, 0xbf, 0x5}}, {{0x9, 0x4, 0x93, 0x2, 0x0, 0xff, 0x4, 0xb, 0xa}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xf, 0xb3, 0xb0, 0x40, 0x110a, 0x1150, 0x8f77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x93, 0x5, 0x10, 0x5, [{{0x9, 0x4, 0x56, 0x57, 0x1, 0x92, 0xaf, 0x63, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x55a, 0x5b}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x3, 0x7, 0xffff, 0x0, 0x9}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x7, 0x7c, "9a313b"}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0xa0, "9592"}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x2, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0xd}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9, 0x1, 0x35, 0x20, 0x8}, 0xe2, &(0x7f0000000380)={0x5, 0xf, 0xe2, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x31, 0x7, 0x0, 0x8000, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xcd, "d2cc6133787f31616fa584574e27f6fe"}, @generic={0xbe, 0x10, 0x1d750a8acb299b86, "9524e1258d0dc8f7d6fde4a2b789970afcc20356263a3fa320e94e32c85920506a68518520c98619ce4f4da0f1d23a3e6ec5133b9cd06d74e449de7483eab1577d67561b29d5cf36fab29ed1ac05113507b17bed4b20b149d29c4c0ce15e6f2d9521e92ba3a1c0e6f9a2dfca2f6fed716c98af41546843102b2e007f1fd8487643949d48a287ca2650845c0c442fb8b848d38ed76164f8873b28286a880dbc84a62c1db56e2b2c25a9b22ac6a95cc8fb7a9f76f7189150edd78b11"}]}, 0x5, [{0x89, &(0x7f0000000480)=@string={0x89, 0x3, "991d3adce1a4c4ba1e439d3913c5bddf897334f4f111be8a2e036a1edf01573f6ed71e1e31d4573d9e3daf9defd39940d43949d5e811bc96e2837b60a8d9f9b50b384260cacdb985a39a3976247cae32bf0abc358f85cafc98381eeaae27bd8594a3a36646dd04dd30bb9c1c724a182fbea0ef7285b2fabcd2a676cd2e2b68374d41f4998bebf6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x444}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "2d4836a60097cebbf97beaaf98746775ba4250deb7cae232ddcb41580a5fd1a9627f946cce5264aae4618c0dade5062d42e9e7f334b1a63abf5ba9c757403cc1dbd8939f3286484442dbb99932bb291338fa084933ed41a7ac6b94d7bcca601def0d8fcfe8c98772d0d611106ee8bbdecd93b7e71e612c47dc5e873403c31d47e494972b8b57e4a3e6109942be04c4bfe97503a5c1503a9259e2262572431f1659cf2ece9cf5f3be2c44623d9f99d69a8d418d15c1d34630f0dbf5a69eee1d7e381328b00aecede3c9c2a4ad83ea57637d3170aa76d75657382db20b4ba2847919bfa4"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x500a}}]}) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 4m30.073740423s ago: executing program 6 (id=5037): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002140), 0x2802, 0x0) readv(r2, &(0x7f0000002280)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) unshare(0x64000600) 4m26.258020548s ago: executing program 6 (id=5039): syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="fffffbffffffaaaaaaaaaaaa6000"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbec000000000000", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setrlimit(0xb, &(0x7f0000000240)={0x3, 0x7}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xe23, @local}, 0x4b) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000140009050000000000f6ffff01000000", @ANYRES32=0x0, @ANYBLOB="d2ff01007f000001"], 0x20}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000030f0400000000005f0068b274352b257a4437d2b50c3766b43db6ac84f4fd4d6c8013fe66320ec5c4113a8789b0ea81f3e4828ab2c996a373eb04d8c244327ab02cecda1bf7eb8dca32f73d793a200fc9c861246a8135eeeb2f9d06f31e4fe51088bfd70044ed46a876bbd83fa86debd2150ce76799b01ccebf12a18558182b302eb27dc9766d9fa97d8b357bbd5e9eaa16285ef0a98d5a16963eaf921b721238a1576abc077f9ae9c755496b22"], 0x0, 0x28, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="317d740790b18368b731986e9bb73873c2129544d8af5e328451b3072b2363fb13824153797882119528dc4071e59daec8792492d4ef3bfd821d57337becae68fc5536eeddeb23f0671f516fca734ad387ebf182ac672f5d4a050000000000000091b3f3b8ca3ca7198581622898ab856a83650e283ac563d3c3749e0a86dd6506acd41ed1acaaf4b5510b3aff23ae7bb37b99945f95793a54f2e772ee1702fd341e48f633", @ANYRES64=0x0], 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 4m22.015802809s ago: executing program 44 (id=5032): socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x74, 0x1e, 0x109, 0x0, 0xfffffffe, {}, [{0x60, 0x1, [@m_ct={0x5c, 0xc, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "cfc11146aa6a7b5dc6e34631ba00aa90"}, @TCA_CT_ZONE={0x6, 0x4, 0x81}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x74}, 0x1, 0x2b1e}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) 4m19.854194106s ago: executing program 6 (id=5044): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4m14.826567971s ago: executing program 6 (id=5048): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x3d, r2}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m13.88197873s ago: executing program 6 (id=5049): syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000740)={0x1, 0x0, 0x201e, 0x81db, 0x9, 0x8, 0x45}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x40102, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$NBD_DO_IT(r3, 0xab03) landlock_restrict_self(0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004046}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m11.003506116s ago: executing program 3 (id=5054): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"}) 4m10.600784195s ago: executing program 3 (id=5055): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x358, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006c617374000000000c00028008000140000000060900010073797a30000000000900020073797a320000000014000000110001c98c8254a599c10000000000"], 0x74}}, 0x0) socket(0x2, 0x80805, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 4m8.121646813s ago: executing program 3 (id=5057): syz_open_dev$midi(&(0x7f0000000000), 0x20000000000003, 0x129a00) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000880)=0x8, 0x6) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000300)='./bus\x00', 0x91) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xe]}, 0x8) close(r7) socket$can_raw(0x1d, 0x3, 0x1) writev(r6, &(0x7f0000000100), 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x7ff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 4m6.711572407s ago: executing program 3 (id=5059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)='@/,!(,{(*\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048050}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574000000004747b52467e3c2cae716fc753aea3a2dfdee3dbde59a6ef660334e119ca7228ef2a933050995b4f96ebbf5604f16df1ea2e1649edb484937a55a10bd50ea817dedb95f92cd44a62c8fec4f12b6675c0625de09b5bd3c5788440bae18a7182d486729f5cabc1ce2329899398f21a86839b85771fd92f41d85c797649f", @ANYRES32=r0], 0x60}}, 0x0) 3m59.999909261s ago: executing program 3 (id=5063): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) 3m59.986478668s ago: executing program 3 (id=5064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391d", 0x11}], 0x1}}], 0x1, 0x20008000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0xc8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) 3m58.019693839s ago: executing program 45 (id=5049): syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000740)={0x1, 0x0, 0x201e, 0x81db, 0x9, 0x8, 0x45}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x40102, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$NBD_DO_IT(r3, 0xab03) landlock_restrict_self(0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004046}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m44.603921144s ago: executing program 46 (id=5064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391d", 0x11}], 0x1}}], 0x1, 0x20008000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0xc8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) 3m43.099996228s ago: executing program 4 (id=5079): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b4884c350cb1c9a5209ad334d1c1ccc0f3676272febbe9e396bebb587b58a71faa13bd64ad802f1d49201cb55ab74c60f9b23640d8453ffb5e692eb022997c861fd283e9e1427abe81eebf4049a1b5a1df7b9c8b855753c84a6cc3534761a2f21574e7704e3b1e2b86a5b31fc21147aba99124f7a288cf9359ed"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r5) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) keyctl$search(0xa, r5, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 3m41.870412637s ago: executing program 4 (id=5080): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="4001000000d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x1008}) ioctl$TCXONC(r2, 0x540a, 0x2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m34.74784025s ago: executing program 4 (id=5082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000080)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x34d4ddce7c5c73c0}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x40) 3m33.793485379s ago: executing program 9 (id=5083): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x1, 0x1}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) 3m33.56668375s ago: executing program 9 (id=5084): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000500)={0x7, 0x4, 0x7, 0x8000}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x4, 0x1, 0x9}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000100)='N', 0x34000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 3m33.5640185s ago: executing program 9 (id=5085): openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000008c0), &(0x7f0000000340)=0x8) 3m31.428471785s ago: executing program 9 (id=5086): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x30) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 3m30.795802561s ago: executing program 4 (id=5087): futex(&(0x7f0000000000)=0x1, 0x3, 0x80000000, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x3) sendmsg$nl_route_sched(r3, 0x0, 0x404c0c0) 3m28.783636962s ago: executing program 9 (id=5088): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) capset(0x0, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x2}) creat(&(0x7f0000000240)='.\x00', 0xd0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x144}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ccba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e0132269c182e5d0186448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a3193f93b5e3e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a4", 0x145}], 0x1}}], 0x1, 0x4000001) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x167) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x4}) 3m28.142957625s ago: executing program 4 (id=5089): mkdir(0x0, 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001100)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001200)=0x0) ioprio_set$pid(0x2, r2, 0x2000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x1ad72f7) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000001280)={0x101, 0x2}) accept4$netrom(r5, 0x0, 0x0, 0x80800) syz_open_procfs(r1, &(0x7f0000000140)='net/stat\x00') r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000001240)=@other={'decodes', ' ', 'io+mem'}, 0xf) 3m27.15801121s ago: executing program 4 (id=5090): open(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x284800, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5837, 0x6, 0x7, 0xe51, 0x9, 0x800000005478, 0x103d, 0x6, 0xb6, 0x32a, 0xfffffffffffffffd, 0xffffffff, 0x1, 0x4000000000b, 0x7, 0x6a], 0x10000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m22.141349096s ago: executing program 9 (id=5091): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{@fixed}]}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)=@multiplanar_overlay={0x7, 0x1, 0x4, 0x4, 0x1, {0x77359400}, {0x4, 0x1, 0x65, 0x0, 0x3, 0x5, "9d874313"}, 0x9, 0x3, {0x0}, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006d00010000000000fcdbdf2500", @ANYRES32=r7, @ANYBLOB="000000000080000018003480140035007465616d5f736c6176655f3000000080"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3m17.942555888s ago: executing program 7 (id=5067): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000000)={0xc9}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 3m11.573003799s ago: executing program 47 (id=5090): open(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x284800, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5837, 0x6, 0x7, 0xe51, 0x9, 0x800000005478, 0x103d, 0x6, 0xb6, 0x32a, 0xfffffffffffffffd, 0xffffffff, 0x1, 0x4000000000b, 0x7, 0x6a], 0x10000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m6.691648847s ago: executing program 48 (id=5091): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{@fixed}]}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)=@multiplanar_overlay={0x7, 0x1, 0x4, 0x4, 0x1, {0x77359400}, {0x4, 0x1, 0x65, 0x0, 0x3, 0x5, "9d874313"}, 0x9, 0x3, {0x0}, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006d00010000000000fcdbdf2500", @ANYRES32=r7, @ANYBLOB="000000000080000018003480140035007465616d5f736c6176655f3000000080"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3m2.690213552s ago: executing program 49 (id=5067): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000000)={0xc9}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 2m46.028734855s ago: executing program 0 (id=5102): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2m44.932891829s ago: executing program 0 (id=5103): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) open$dir(0x0, 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/152, 0x98) 2m43.919257788s ago: executing program 0 (id=5104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x813f, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42) 2m35.791659612s ago: executing program 0 (id=5105): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) r5 = dup(r4) read$FUSE(r5, 0x0, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x8356, 0x30, 0x3, 0x0}) socket$inet6(0xa, 0x2, 0x3a) 2m34.764305645s ago: executing program 0 (id=5106): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x2e9}], 0x1}}], 0x1, 0x400c0) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x2000000000b09c, 0x0) 2m33.759064914s ago: executing program 0 (id=5107): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000100)) sendmmsg$inet(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m18.309234029s ago: executing program 50 (id=5107): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000100)) sendmmsg$inet(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.222590841s ago: executing program 2 (id=5465): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x20800000000f51) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) io_uring_setup(0x4a47, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) readv(0xffffffffffffffff, 0x0, 0x0) 5.860161016s ago: executing program 2 (id=5466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 5.85963366s ago: executing program 2 (id=5467): creat(&(0x7f0000000040)='./bus\x00', 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES16=r0, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 5.67009766s ago: executing program 5 (id=5469): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2840, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) 5.609934482s ago: executing program 5 (id=5470): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x7008, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 5.609707167s ago: executing program 5 (id=5471): socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=readahead,k\"']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) creat(&(0x7f0000000080)='./file0\x00', 0x11) 4.259381176s ago: executing program 8 (id=5477): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) ioctl(0xffffffffffffffff, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 4.180361825s ago: executing program 8 (id=5478): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) read$FUSE(r1, 0x0, 0x0) 4.120221224s ago: executing program 8 (id=5479): syz_usb_connect(0x1, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) write$char_usb(r0, 0x0, 0x9) 3.783917301s ago: executing program 2 (id=5480): socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000006c0), 0x0, 0x20, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x7aed979249b5ae9d, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000000, 0x800, 0x7}, 0x6}, 0x20, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="c3b9fa79d427aa8b51d42c0b50dc14fd", 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) 3.442106018s ago: executing program 5 (id=5482): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 2.997411078s ago: executing program 8 (id=5483): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.992300502s ago: executing program 5 (id=5484): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)}) syz_open_dev$vim2m(0x0, 0x2000000003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000810) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000380)=0x200000000) r3 = dup2(r2, r2) write$vhost_msg_v2(r3, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="1dd4", 0x2}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x2, @local, 0x6}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)='w', 0x1}], 0x1}}], 0x3, 0x800) shutdown(r7, 0x1) 2.847503581s ago: executing program 2 (id=5485): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80010000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x138) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xcae, 0x0, &(0x7f00000001c0), 0x0) 2.846998604s ago: executing program 8 (id=5486): pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) 2.578940577s ago: executing program 1 (id=5489): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x20800000000f51) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) io_uring_setup(0x4a47, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) readv(0xffffffffffffffff, 0x0, 0x0) 1.716902716s ago: executing program 1 (id=5490): syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}}, 0x9) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x800) 1.716626318s ago: executing program 1 (id=5491): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 1.429808139s ago: executing program 1 (id=5492): syz_usb_connect(0x1, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) write$char_usb(r0, 0x0, 0x9) 836.232568ms ago: executing program 8 (id=5493): socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000006c0), 0x0, 0x20, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x7aed979249b5ae9d, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000000, 0x800, 0x7}, 0x6}, 0x20, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="c3b9fa79d427aa8b51d42c0b50dc14fd", 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) 726.541614ms ago: executing program 5 (id=5494): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00"/267], 0x190) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x7, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x2, 0x7e) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) 337.484296ms ago: executing program 2 (id=5495): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80c2, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) 60.108727ms ago: executing program 1 (id=5496): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) read$FUSE(r1, 0x0, 0x0) 0s ago: executing program 1 (id=5497): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180008000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000a80)='contention_end\x00', r1, 0x0, 0x1}, 0x18) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) unshare(0x6a040000) r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)="15", 0x1, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xd00, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400001, 0x2]}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x2}, 0xa) kernel console output (not intermixed with test programs): lave_0: entered promiscuous mode [ 1238.727487][T28451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.731007][T28451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.734093][T28451] bridge_slave_1: entered allmulticast mode [ 1238.737854][T28451] bridge_slave_1: entered promiscuous mode [ 1238.787243][T28432] hsr_slave_0: entered promiscuous mode [ 1238.790634][T28432] hsr_slave_1: entered promiscuous mode [ 1238.793591][T28432] debugfs: 'hsr0' already exists in 'hsr' [ 1238.796035][T28432] Cannot create hsr debugfs directory [ 1238.887340][T28451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.896439][T28451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.103661][T28404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1239.106929][T28404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1239.114868][T28451] team0: Port device team_slave_0 added [ 1239.258377][T28451] team0: Port device team_slave_1 added [ 1239.269461][T28504] chnl_net:caif_netlink_parms(): no params data found [ 1239.401343][T24996] bridge_slave_1: left allmulticast mode [ 1239.403166][T24996] bridge_slave_1: left promiscuous mode [ 1239.405005][T24996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.413166][T24996] bridge_slave_0: left allmulticast mode [ 1239.414991][T24996] bridge_slave_0: left promiscuous mode [ 1239.416841][T24996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.973462][T24996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.985418][T24996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.996166][T24996] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1240.004786][T24996] bond0 (unregistering): Released all slaves [ 1240.044591][T28451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.047359][T28451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.060610][T28451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.067150][T28451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.072993][T28451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.084186][T28451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.143166][T24996] tipc: Disabling bearer [ 1240.153977][T24996] tipc: Left network mode [ 1240.506769][T28451] hsr_slave_0: entered promiscuous mode [ 1240.510533][T28451] hsr_slave_1: entered promiscuous mode [ 1240.513941][T28451] debugfs: 'hsr0' already exists in 'hsr' [ 1240.516576][T28451] Cannot create hsr debugfs directory [ 1240.789301][T28504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.792385][T28504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.795436][T28504] bridge_slave_0: entered allmulticast mode [ 1240.801660][T28504] bridge_slave_0: entered promiscuous mode [ 1240.859917][T28504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.863068][T28504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.865602][T28504] bridge_slave_1: entered allmulticast mode [ 1240.869651][T28504] bridge_slave_1: entered promiscuous mode [ 1240.979534][T24996] hsr_slave_0: left promiscuous mode [ 1240.984269][T24996] hsr_slave_1: left promiscuous mode [ 1240.987981][T24996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.991373][T24996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.997267][T24996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.001231][T24996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.047641][T24996] veth1_macvtap: left promiscuous mode [ 1241.050185][T24996] veth0_macvtap: left promiscuous mode [ 1241.052494][T24996] veth1_vlan: left promiscuous mode [ 1241.054736][T24996] veth0_vlan: left promiscuous mode [ 1241.157047][T24996] pim6reg (unregistering): left allmulticast mode [ 1242.500193][T24996] team0 (unregistering): Port device team_slave_1 removed [ 1242.672007][T24996] team0 (unregistering): Port device team_slave_0 removed [ 1244.057404][T20441] lo speed is unknown, defaulting to 1000 [ 1244.060528][T20441] infiniband syz2: ib_query_port failed (-19) [ 1244.063973][T28504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.090936][T28504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.234648][T28404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.243445][T28504] team0: Port device team_slave_0 added [ 1244.270249][T28504] team0: Port device team_slave_1 added [ 1244.427597][T28504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.432012][T28504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.445592][T28504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.451274][T28504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.453458][T28504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.461853][T28504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.620963][T28504] hsr_slave_0: entered promiscuous mode [ 1244.625624][T28504] hsr_slave_1: entered promiscuous mode [ 1244.628893][T28504] debugfs: 'hsr0' already exists in 'hsr' [ 1244.631265][T28504] Cannot create hsr debugfs directory [ 1244.957942][T28404] veth0_vlan: entered promiscuous mode [ 1244.974399][T28404] veth1_vlan: entered promiscuous mode [ 1245.094522][T28404] veth0_macvtap: entered promiscuous mode [ 1245.121821][T28404] veth1_macvtap: entered promiscuous mode [ 1245.216445][T24996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.229628][T28432] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1245.263077][T28432] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1245.380216][T28432] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1245.458300][T24996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.473317][T28404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.479576][T28432] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1245.493398][T28404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.674786][T24996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.702908][T25003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.705884][T25003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.782321][T25003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.806017][T25003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.864666][T24996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.015897][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.034020][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.073000][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.075674][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.237101][T24996] bridge_slave_1: left allmulticast mode [ 1246.241670][T24996] bridge_slave_1: left promiscuous mode [ 1246.243588][T24996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.275136][T24996] bridge_slave_0: left allmulticast mode [ 1246.277026][T24996] bridge_slave_0: left promiscuous mode [ 1246.286956][T24996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.023391][T28600] slcan: can't register candev [ 1247.034655][T28600] Falling back ldisc for ttyS3. [ 1247.108579][T24996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.122102][T24996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.148239][T24996] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1247.182268][T24996] bond0 (unregistering): Released all slaves [ 1247.196740][T28432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.683676][T28432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.684991][T28451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1247.731038][T28451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1247.845323][T28451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1247.872238][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.877454][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.892776][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.895702][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.915561][T28451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1248.212139][T28504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1248.392820][T28504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1248.442027][T28504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1248.465380][T28504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1248.708806][T24996] hsr_slave_0: left promiscuous mode [ 1248.719410][T24996] hsr_slave_1: left promiscuous mode [ 1248.722037][T24996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.724600][T24996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.738970][T24996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.742521][T24996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.820574][T24996] veth1_macvtap: left promiscuous mode [ 1248.822361][T24996] veth0_macvtap: left promiscuous mode [ 1248.825741][T24996] veth1_vlan: left promiscuous mode [ 1248.827341][T24996] veth0_vlan: left promiscuous mode [ 1250.644571][T24996] team0 (unregistering): Port device team_slave_1 removed [ 1250.837640][T24996] team0 (unregistering): Port device team_slave_0 removed [ 1252.323036][T28432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.397968][T28451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.453269][T28451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.466488][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.468860][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.479340][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.481581][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.513309][T28504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.547738][T28504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.581902][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.584882][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.606313][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.609445][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.688270][T28432] veth0_vlan: entered promiscuous mode [ 1252.703988][T28432] veth1_vlan: entered promiscuous mode [ 1252.741203][T28432] veth0_macvtap: entered promiscuous mode [ 1252.745384][T28432] veth1_macvtap: entered promiscuous mode [ 1252.770863][T28432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.786177][T28432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.807122][ T169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.814880][ T169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.819819][T28451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.829344][ T169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.841375][ T169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.901539][T28504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.942660][T28451] veth0_vlan: entered promiscuous mode [ 1252.960655][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.963191][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.968092][T28451] veth1_vlan: entered promiscuous mode [ 1252.994357][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.996845][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.033563][T28451] veth0_macvtap: entered promiscuous mode [ 1253.061912][T28451] veth1_macvtap: entered promiscuous mode [ 1253.080096][T28451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.095693][T28451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.112939][T24996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.148959][T25251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.214607][T25251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.254659][T25251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.312439][T28504] veth0_vlan: entered promiscuous mode [ 1253.318526][T25251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.321357][T25251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.360496][T28504] veth1_vlan: entered promiscuous mode [ 1253.368349][T24996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.375692][T24996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.413616][T28504] veth0_macvtap: entered promiscuous mode [ 1253.420999][T28504] veth1_macvtap: entered promiscuous mode [ 1253.436455][T28504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.445392][T28504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.453314][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.463036][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.488522][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.491327][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.565656][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.573471][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.639915][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.645934][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.859281][T28727] trusted_key: encrypted_key: key user:syz not found [ 1253.905383][T28718] syz.3.5033 (28718): drop_caches: 2 [ 1255.111700][T25492] usb 11-1: new full-speed USB device number 40 using dummy_hcd [ 1257.890989][T25492] usb 11-1: device descriptor read/all, error -71 [ 1261.110955][T28752] netlink: 'syz.3.5036': attribute type 1 has an invalid length. [ 1262.090450][T28788] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5039'. [ 1262.907589][T28788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.939729][T28788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.789557][T28788] bond0 (unregistering): Released all slaves [ 1266.204108][ T5979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1266.217366][ T5979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1266.223869][ T5979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1266.228852][ T5979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1266.232529][ T5979] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1267.907103][T25515] libceph: connect (1)[c::]:6789 error -101 [ 1267.910000][T25515] libceph: mon0 (1)[c::]:6789 connect error [ 1267.915946][T28812] ceph: No mds server is up or the cluster is laggy [ 1267.934212][T28806] chnl_net:caif_netlink_parms(): no params data found [ 1268.192191][T25515] libceph: connect (1)[c::]:6789 error -101 [ 1268.195286][T25515] libceph: mon0 (1)[c::]:6789 connect error [ 1268.268634][T17474] Bluetooth: hci2: command tx timeout [ 1268.658494][T25148] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1268.818488][T25148] usb 9-1: Using ep0 maxpacket: 32 [ 1268.836416][T25148] usb 9-1: config 0 has an invalid interface number: 153 but max is 0 [ 1268.840247][T25148] usb 9-1: config 0 has no interface number 0 [ 1268.848626][T25148] usb 9-1: config 0 interface 153 has no altsetting 0 [ 1268.855069][T25148] usb 9-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=c1.31 [ 1268.863393][T25148] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.866751][T25148] usb 9-1: Product: syz [ 1268.873894][T25148] usb 9-1: Manufacturer: syz [ 1268.875733][T25148] usb 9-1: SerialNumber: syz [ 1268.884510][T25148] usb 9-1: config 0 descriptor?? [ 1268.895782][T25148] HFC-S_USB 9-1:0.153: probe with driver HFC-S_USB failed with error -5 [ 1268.950123][T28806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.033363][T28806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.043735][T28806] bridge_slave_0: entered allmulticast mode [ 1269.060953][T28806] bridge_slave_0: entered promiscuous mode [ 1269.078558][T28806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.080984][T28806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.083498][T28806] bridge_slave_1: entered allmulticast mode [ 1269.086991][T28806] bridge_slave_1: entered promiscuous mode [ 1269.467981][T28806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.541783][T28806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.132050][T28867] lo speed is unknown, defaulting to 1000 [ 1270.134521][T28867] lo speed is unknown, defaulting to 1000 [ 1270.137367][T28867] lo speed is unknown, defaulting to 1000 [ 1270.348665][T17474] Bluetooth: hci2: command tx timeout [ 1270.423272][T28806] team0: Port device team_slave_0 added [ 1270.445432][T28806] team0: Port device team_slave_1 added [ 1271.126217][T28806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.144221][T28806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.155638][T28806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.161700][T28806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.164564][T28806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.174017][T28806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.308313][T28867] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1271.354572][T28806] hsr_slave_0: entered promiscuous mode [ 1271.357413][T28806] hsr_slave_1: entered promiscuous mode [ 1271.368973][T28806] debugfs: 'hsr0' already exists in 'hsr' [ 1271.371025][T28806] Cannot create hsr debugfs directory [ 1272.428593][T17474] Bluetooth: hci2: command tx timeout [ 1272.777264][ T6331] usb 9-1: USB disconnect, device number 69 [ 1272.898356][T28867] lo speed is unknown, defaulting to 1000 [ 1272.911086][T28867] lo speed is unknown, defaulting to 1000 [ 1272.914631][T28867] lo speed is unknown, defaulting to 1000 [ 1272.917751][T28867] lo speed is unknown, defaulting to 1000 [ 1273.034391][T28867] lo speed is unknown, defaulting to 1000 [ 1273.074314][T28867] lo speed is unknown, defaulting to 1000 [ 1273.076907][T28867] lo speed is unknown, defaulting to 1000 [ 1273.193365][T28867] lo speed is unknown, defaulting to 1000 [ 1274.511392][T17474] Bluetooth: hci2: command tx timeout [ 1274.681321][T28923] input: syz0 as /devices/virtual/input/input144 [ 1275.113586][T17474] block nbd6: Receive control failed (result -32) [ 1275.283825][T28926] block nbd6: shutting down sockets [ 1276.016996][T28806] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1276.024132][T28806] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1276.051631][T28806] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1276.065483][T28806] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1276.722272][T28806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.787117][T28806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.936774][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.940235][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.994464][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.997614][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.649906][T28806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.310460][T28806] veth0_vlan: entered promiscuous mode [ 1278.317031][T28806] veth1_vlan: entered promiscuous mode [ 1278.344247][T28806] veth0_macvtap: entered promiscuous mode [ 1278.352918][T28806] veth1_macvtap: entered promiscuous mode [ 1278.363141][T28806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.371702][T28806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.390955][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.394380][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.400808][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.403566][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.557072][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.566531][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.601427][T25003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.605020][T25003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.925162][T29008] overlayfs: failed to resolve './file0': -2 [ 1286.618638][T25233] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1286.778660][T25233] usb 9-1: Using ep0 maxpacket: 8 [ 1286.784518][T25233] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1286.787251][T25233] usb 9-1: config 0 has no interface number 0 [ 1286.789371][T25233] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1286.793167][T25233] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1286.808153][T25233] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.816917][T25233] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1286.839465][T25233] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1286.858331][T25233] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.865925][T25233] usb 9-1: config 0 descriptor?? [ 1286.902488][T25233] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1287.443614][T25233] usb 9-1: USB disconnect, device number 70 [ 1287.515709][T25233] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1287.961643][T29088] 9pnet_fd: Insufficient options for proto=fd [ 1288.788595][T25233] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 1289.868590][T25233] usb 14-1: device descriptor read/64, error -71 [ 1290.118858][T25233] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 1290.197658][ T5979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1290.204368][ T5979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1290.208527][ T5979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1290.212794][ T5979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1290.215788][ T5979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1290.248514][T25233] usb 14-1: device descriptor read/64, error -71 [ 1290.366088][T25233] usb usb14-port1: attempt power cycle [ 1290.728588][T25233] usb 14-1: new full-speed USB device number 7 using dummy_hcd [ 1290.753377][T25233] usb 14-1: device descriptor read/8, error -71 [ 1290.988690][T25233] usb 14-1: new full-speed USB device number 8 using dummy_hcd [ 1291.028243][T25233] usb 14-1: device descriptor read/8, error -71 [ 1291.146275][T25233] usb usb14-port1: unable to enumerate USB device [ 1291.591272][T29104] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5068'. [ 1291.604138][T29104] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5068'. [ 1292.269811][ T5979] Bluetooth: hci4: command tx timeout [ 1294.360708][ T5979] Bluetooth: hci4: command tx timeout [ 1295.303883][T29115] 9pnet_fd: Insufficient options for proto=fd [ 1296.432664][ T5979] Bluetooth: hci4: command tx timeout [ 1298.508736][ T5979] Bluetooth: hci4: command tx timeout [ 1299.712319][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.116158][T29101] lo speed is unknown, defaulting to 1000 [ 1301.667188][T29101] chnl_net:caif_netlink_parms(): no params data found [ 1301.994555][T29101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.998686][T29101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.001367][T29101] bridge_slave_0: entered allmulticast mode [ 1302.004743][T29101] bridge_slave_0: entered promiscuous mode [ 1302.021270][T29101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.023712][T29101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.026793][T29101] bridge_slave_1: entered allmulticast mode [ 1302.037983][T29101] bridge_slave_1: entered promiscuous mode [ 1302.040912][T25069] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 1302.149240][T29101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.153970][T29101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.209295][T25069] usb 9-1: device descriptor read/64, error -71 [ 1302.448718][T25069] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 1302.578621][T25069] usb 9-1: device descriptor read/64, error -71 [ 1302.692134][T25069] usb usb9-port1: attempt power cycle [ 1303.028561][T25069] usb 9-1: new full-speed USB device number 73 using dummy_hcd [ 1303.053531][T25069] usb 9-1: device descriptor read/8, error -71 [ 1303.288722][T25069] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 1303.319983][T25069] usb 9-1: device descriptor read/8, error -71 [ 1303.428743][T25069] usb usb9-port1: unable to enumerate USB device [ 1303.681651][T17474] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1303.689673][T17474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1303.693489][T17474] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1303.696798][T17474] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1303.706974][T17474] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1305.798543][ T5979] Bluetooth: hci5: command tx timeout [ 1306.330846][ T6331] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1306.478565][ T6331] usb 9-1: Using ep0 maxpacket: 8 [ 1306.484266][ T6331] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.488469][ T6331] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1306.492190][ T6331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.503679][ T6331] usb 9-1: config 0 descriptor?? [ 1306.515364][ T6331] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1307.874416][ T5979] Bluetooth: hci5: command tx timeout [ 1308.098552][ T6331] gspca_vc032x: reg_w err -110 [ 1308.100492][ T6331] vc032x 9-1:0.0: probe with driver vc032x failed with error -110 [ 1309.952407][ T5979] Bluetooth: hci5: command tx timeout [ 1312.028804][ T5979] Bluetooth: hci5: command tx timeout [ 1312.628826][T29101] team0: Port device team_slave_0 added [ 1312.640671][T29101] team0: Port device team_slave_1 added [ 1312.835401][T29173] warn_alloc: 22 callbacks suppressed [ 1312.835414][T29173] syz.4.5080: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1312.868442][T29173] CPU: 3 UID: 0 PID: 29173 Comm: syz.4.5080 Not tainted syzkaller #0 PREEMPT(full) [ 1312.868461][T29173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1312.868468][T29173] Call Trace: [ 1312.868472][T29173] [ 1312.868478][T29173] dump_stack_lvl+0x16c/0x1f0 [ 1312.868497][T29173] warn_alloc+0x248/0x3a0 [ 1312.868523][T29173] ? __pfx_warn_alloc+0x10/0x10 [ 1312.868543][T29173] ? sfq_init+0x9ee/0x2540 [ 1312.868555][T29173] ? __vmalloc_node_noprof+0xad/0xf0 [ 1312.868569][T29173] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 1312.868585][T29173] ? sfq_init+0x9ee/0x2540 [ 1312.868600][T29173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1312.868613][T29173] ? ___kmalloc_large_node+0xed/0x160 [ 1312.868631][T29173] __kvmalloc_node_noprof+0x30a/0x620 [ 1312.868643][T29173] ? sfq_init+0x9ee/0x2540 [ 1312.868652][T29173] ? rcu_is_watching+0x12/0xc0 [ 1312.868664][T29173] ? sfq_init+0x9ee/0x2540 [ 1312.868677][T29173] ? sfq_init+0x9ee/0x2540 [ 1312.868686][T29173] sfq_init+0x9ee/0x2540 [ 1312.868704][T29173] ? __pfx_sfq_init+0x10/0x10 [ 1312.868716][T29173] ? qdisc_alloc+0x94f/0xc50 [ 1312.868729][T29173] ? __pfx_sfq_init+0x10/0x10 [ 1312.868740][T29173] qdisc_create+0x454/0xfc0 [ 1312.868752][T29173] tc_modify_qdisc+0x11d8/0x2170 [ 1312.868770][T29173] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1312.868791][T29173] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1312.868801][T29173] rtnetlink_rcv_msg+0x3c6/0xe90 [ 1312.868817][T29173] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1312.868838][T29173] ? ref_tracker_free+0x37c/0x830 [ 1312.868857][T29173] netlink_rcv_skb+0x155/0x420 [ 1312.868873][T29173] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1312.868889][T29173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1312.868908][T29173] ? netlink_deliver_tap+0x1ae/0xd30 [ 1312.868924][T29173] netlink_unicast+0x5aa/0x870 [ 1312.868940][T29173] ? __pfx_netlink_unicast+0x10/0x10 [ 1312.868954][T29173] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1312.868972][T29173] netlink_sendmsg+0x8d1/0xdd0 [ 1312.868988][T29173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1312.869004][T29173] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1312.869018][T29173] ____sys_sendmsg+0xa95/0xc70 [ 1312.869030][T29173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1312.869039][T29173] ? get_compat_msghdr+0x11a/0x170 [ 1312.869055][T29173] ? __pfx_futex_wake_mark+0x10/0x10 [ 1312.869073][T29173] ___sys_sendmsg+0x134/0x1d0 [ 1312.869088][T29173] ? __pfx____sys_sendmsg+0x10/0x10 [ 1312.869108][T29173] ? find_held_lock+0x2b/0x80 [ 1312.869128][T29173] __sys_sendmsg+0x16d/0x220 [ 1312.869142][T29173] ? __pfx___sys_sendmsg+0x10/0x10 [ 1312.869155][T29173] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1312.869174][T29173] ? rcu_is_watching+0x12/0xc0 [ 1312.869186][T29173] __do_fast_syscall_32+0x7c/0x3a0 [ 1312.869202][T29173] do_fast_syscall_32+0x32/0x80 [ 1312.869216][T29173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1312.869229][T29173] RIP: 0023:0xf70fe579 [ 1312.869238][T29173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1312.869248][T29173] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1312.869259][T29173] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 1312.869265][T29173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1312.869271][T29173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1312.869277][T29173] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1312.869283][T29173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1312.869296][T29173] [ 1312.869300][T29173] Mem-Info: [ 1312.992973][T29173] active_anon:3251 inactive_anon:1897 isolated_anon:0 [ 1312.992973][T29173] active_file:3419 inactive_file:16374 isolated_file:0 [ 1312.992973][T29173] unevictable:1770 dirty:186 writeback:0 [ 1312.992973][T29173] slab_reclaimable:6952 slab_unreclaimable:71316 [ 1312.992973][T29173] mapped:22704 shmem:1978 pagetables:1238 [ 1312.992973][T29173] sec_pagetables:328 bounce:0 [ 1312.992973][T29173] kernel_misc_reclaimable:0 [ 1312.992973][T29173] free:62204 free_pcp:4111 free_cma:0 [ 1313.006885][T29173] Node 0 active_anon:2588kB inactive_anon:0kB active_file:456kB inactive_file:44kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3188kB dirty:12kB writeback:0kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8112kB pagetables:1528kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB [ 1313.016447][T29173] Node 1 active_anon:10416kB inactive_anon:7588kB active_file:13220kB inactive_file:65452kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:87628kB dirty:732kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7024kB pagetables:3324kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB [ 1313.025923][T29173] Node 0 DMA free:2720kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:28kB free_cma:0kB [ 1313.035748][T29173] lowmem_reserve[]: 0 288 288 288 288 [ 1313.037793][T29173] Node 0 DMA32 free:18868kB boost:2048kB min:15268kB low:18572kB high:21876kB reserved_highatomic:4096KB free_highatomic:460KB active_anon:2588kB inactive_anon:0kB active_file:456kB inactive_file:44kB unevictable:3536kB writepending:12kB present:1032196kB managed:295140kB mlocked:0kB bounce:0kB free_pcp:13000kB local_pcp:2928kB free_cma:0kB [ 1313.047552][T29173] lowmem_reserve[]: 0 0 0 0 0 [ 1313.049148][T29173] Node 1 DMA32 free:226756kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10416kB inactive_anon:7588kB active_file:13220kB inactive_file:65452kB unevictable:3544kB writepending:732kB present:1048432kB managed:948220kB mlocked:8kB bounce:0kB free_pcp:3276kB local_pcp:832kB free_cma:0kB [ 1313.060402][T29173] lowmem_reserve[]: 0 0 0 0 0 [ 1313.062178][T29173] Node 0 DMA: 54*4kB (UE) 27*8kB (UE) 13*16kB (UE) 9*32kB (UE) 4*64kB (UE) 2*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2720kB [ 1313.066918][T29173] Node 0 DMA32: 45*4kB (MEH) 42*8kB (UMEH) 111*16kB (UMEH) 108*32kB (UMH) 33*64kB (UM) 30*128kB (UM) 6*256kB (UM) 1*512kB (U) 1*1024kB (M) 2*2048kB (UM) 0*4096kB = 18868kB [ 1313.074177][T29173] Node 1 DMA32: 1857*4kB (UME) 1110*8kB (UME) 1600*16kB (UME) 1322*32kB (UME) 492*64kB (UME) 255*128kB (UME) 126*256kB (UME) 41*512kB (UM) 16*1024kB (UM) 5*2048kB (UM) 0*4096kB = 228212kB [ 1313.080309][ T5979] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1313.080344][ T5979] Bluetooth: hci2: adv larger than maximum supported [ 1313.081550][T29183] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5081'. [ 1313.083007][ T5979] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1313.083397][T29173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.093519][T29173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.096419][T29173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.099474][T29173] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1313.102441][T29173] 22037 total pagecache pages [ 1313.103955][T29173] 270 pages in swap cache [ 1313.105343][T29173] Free swap = 52948kB [ 1313.106626][T29173] Total swap = 124996kB [ 1313.107972][T29173] 524155 pages RAM [ 1313.109193][T29173] 0 pages HighMem/MovableOnly [ 1313.110670][T29173] 209475 pages reserved [ 1313.111980][T29173] 0 pages cma reserved [ 1313.158540][T25069] usb 9-1: USB disconnect, device number 75 [ 1313.263923][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.396624][T29101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.399836][T29101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.413284][T29101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.431546][T29181] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5081'. [ 1313.570268][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.632866][T29101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.635864][T29101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.647558][T29101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.679194][T29161] lo speed is unknown, defaulting to 1000 [ 1314.317628][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.420380][T29101] hsr_slave_0: entered promiscuous mode [ 1314.427078][T29101] hsr_slave_1: entered promiscuous mode [ 1314.431305][T29101] debugfs: 'hsr0' already exists in 'hsr' [ 1314.433385][T29101] Cannot create hsr debugfs directory [ 1314.665736][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.608680][T29161] chnl_net:caif_netlink_parms(): no params data found [ 1315.904518][ T61] bridge_slave_1: left allmulticast mode [ 1315.906471][ T61] bridge_slave_1: left promiscuous mode [ 1315.908354][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.929830][ T61] bridge_slave_0: left allmulticast mode [ 1315.931653][ T61] bridge_slave_0: left promiscuous mode [ 1315.933782][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.973091][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.997645][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.016664][ T61] bond0 (unregistering): Released all slaves [ 1317.785247][T29161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.791762][T29161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.797352][T29161] bridge_slave_0: entered allmulticast mode [ 1317.821081][T29161] bridge_slave_0: entered promiscuous mode [ 1317.896479][T29161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.937205][T29161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.946876][T29161] bridge_slave_1: entered allmulticast mode [ 1318.017584][T29161] bridge_slave_1: entered promiscuous mode [ 1319.227301][T29246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5088'. [ 1319.411597][T29161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.456014][T29161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.607899][ T61] hsr_slave_0: left promiscuous mode [ 1319.612789][ T61] hsr_slave_1: left promiscuous mode [ 1319.615449][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.625872][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.632524][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.636223][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.693901][ T61] veth1_macvtap: left promiscuous mode [ 1319.696467][ T61] veth0_macvtap: left promiscuous mode [ 1319.699200][ T61] veth1_vlan: left promiscuous mode [ 1319.701601][ T61] veth0_vlan: left promiscuous mode [ 1319.708982][ T5979] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1319.992103][T29255] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1323.447726][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1323.655982][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1325.719130][T29161] team0: Port device team_slave_0 added [ 1325.758272][T29161] team0: Port device team_slave_1 added [ 1325.842586][T29161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.847655][T29161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.865845][T29161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.888217][T29161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.893536][T29161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.905051][T29161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.948345][T29263] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5091'. [ 1326.111930][T29161] hsr_slave_0: entered promiscuous mode [ 1326.116612][T29161] hsr_slave_1: entered promiscuous mode [ 1326.121555][T29161] debugfs: 'hsr0' already exists in 'hsr' [ 1326.123475][T29161] Cannot create hsr debugfs directory [ 1326.125367][T29101] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1326.136451][T29101] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1326.285524][T29101] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1326.316889][T29101] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1326.875251][T29161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.939655][T29101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.958851][T29101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.966596][T25251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.969724][T25251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.006065][T25251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.008692][T25251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.027482][T29101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1327.033819][T29101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1327.583914][T29161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.799641][T29101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.907813][T29161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.018193][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.125889][T29161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.185472][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.254447][T29101] veth0_vlan: entered promiscuous mode [ 1328.474705][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.529364][T29101] veth1_vlan: entered promiscuous mode [ 1328.549852][T29161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1328.566983][T29101] veth0_macvtap: entered promiscuous mode [ 1328.576872][T29161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1328.597670][T29161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1328.619656][T29101] veth1_macvtap: entered promiscuous mode [ 1328.634899][T29161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1328.812648][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.857382][T29101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.887239][T29101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.934642][T24996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.937479][T24996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.959732][T24996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.968459][T25251] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.245021][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.412130][T29161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.428510][T25251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.431943][T25251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.464681][T29161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.915081][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.934822][T24996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.938936][T24996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.954913][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.957552][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.963748][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.966708][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.391310][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.654079][T29358] netlink: 'syz.7.5067': attribute type 10 has an invalid length. [ 1330.758868][T29359] netlink: 'syz.7.5067': attribute type 10 has an invalid length. [ 1330.761451][T29359] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5067'. [ 1336.615367][T17474] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1336.621024][T17474] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1336.624574][T17474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1336.627912][T17474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1336.630838][T17474] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1338.673389][ T5979] Bluetooth: hci6: command tx timeout [ 1339.105553][T29358] batman_adv: batadv0: Adding interface: team0 [ 1339.108226][T29358] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.174228][T29358] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1339.386425][T29359] team0: entered promiscuous mode [ 1339.388289][T29359] team_slave_0: entered promiscuous mode [ 1339.640194][T29359] team_slave_1: entered promiscuous mode [ 1340.110401][T29359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.118180][T29359] batman_adv: batadv0: Interface activated: team0 [ 1340.183364][T29359] batman_adv: batadv0: Interface deactivated: team0 [ 1340.198673][T29359] batman_adv: batadv0: Removing interface: team0 [ 1340.536707][T29359] bridge0: port 3(team0) entered blocking state [ 1340.641369][T29359] bridge0: port 3(team0) entered disabled state [ 1340.651353][T29359] team0: entered allmulticast mode [ 1340.653117][T29359] team_slave_0: entered allmulticast mode [ 1340.683928][T29359] team_slave_1: entered allmulticast mode [ 1340.748678][ T5979] Bluetooth: hci6: command tx timeout [ 1341.063106][T17474] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1341.071982][T17474] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1341.075113][T17474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1341.078655][T17474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1341.082570][T17474] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1341.175260][T29359] bridge0: port 3(team0) entered blocking state [ 1341.177656][T29359] bridge0: port 3(team0) entered forwarding state [ 1341.367950][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.549066][T29361] lo speed is unknown, defaulting to 1000 [ 1341.565729][T29161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.617635][T29161] veth0_vlan: entered promiscuous mode [ 1341.627690][T29161] veth1_vlan: entered promiscuous mode [ 1341.648528][T29368] lo speed is unknown, defaulting to 1000 [ 1341.684422][T29161] veth0_macvtap: entered promiscuous mode [ 1341.808154][T29161] veth1_macvtap: entered promiscuous mode [ 1341.846724][T29161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.931759][T29161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.040635][T25003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.044606][T25003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.048093][T25003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.078098][T29361] chnl_net:caif_netlink_parms(): no params data found [ 1342.112807][T25003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.482233][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.484690][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.831963][ T5979] Bluetooth: hci6: command tx timeout [ 1343.148663][ T5979] Bluetooth: hci7: command tx timeout [ 1343.534704][T29368] chnl_net:caif_netlink_parms(): no params data found [ 1343.721331][T25003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.730137][T25003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.779741][ T61] bridge_slave_1: left allmulticast mode [ 1343.782424][ T61] bridge_slave_1: left promiscuous mode [ 1343.785360][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.811385][ T61] bridge_slave_0: left allmulticast mode [ 1343.818759][ T61] bridge_slave_0: left promiscuous mode [ 1343.820632][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.864643][ T61] bridge_slave_1: left allmulticast mode [ 1343.866528][ T61] bridge_slave_1: left promiscuous mode [ 1343.874656][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.900765][ T61] bridge_slave_0: left allmulticast mode [ 1343.902621][ T61] bridge_slave_0: left promiscuous mode [ 1343.904479][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.908587][ T5979] Bluetooth: hci6: command tx timeout [ 1345.238788][ T5979] Bluetooth: hci7: command tx timeout [ 1345.564788][T17474] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1345.569921][T17474] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1345.572869][T17474] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1345.575560][T17474] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1345.580290][T17474] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1345.975552][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.014804][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.034469][ T61] bond0 (unregistering): Released all slaves [ 1346.592923][T29361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.596180][T29361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.600110][T29361] bridge_slave_0: entered allmulticast mode [ 1346.604092][T29361] bridge_slave_0: entered promiscuous mode [ 1346.864019][T29361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.869484][T29361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.872735][T29361] bridge_slave_1: entered allmulticast mode [ 1346.901006][T29361] bridge_slave_1: entered promiscuous mode [ 1347.309679][T17474] Bluetooth: hci7: command tx timeout [ 1347.629222][T17474] Bluetooth: hci8: command tx timeout [ 1347.828953][T29361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.833740][T29361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.981662][T29368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.984407][T29368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.986915][T29368] bridge_slave_0: entered allmulticast mode [ 1348.014285][T29368] bridge_slave_0: entered promiscuous mode [ 1348.103274][T29429] lo speed is unknown, defaulting to 1000 [ 1348.180096][T29361] team0: Port device team_slave_0 added [ 1348.186312][T29361] team0: Port device team_slave_1 added [ 1348.527434][T29368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.530285][T29368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.533282][T29368] bridge_slave_1: entered allmulticast mode [ 1348.538030][T29368] bridge_slave_1: entered promiscuous mode [ 1348.912541][T29361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.915358][T29361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.927978][T29361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.932971][T29361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.935444][T29361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.944295][T29361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.010053][T29368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.053818][T29368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.388582][T17474] Bluetooth: hci7: command tx timeout [ 1349.708602][T17474] Bluetooth: hci8: command tx timeout [ 1351.338832][T29464] random: crng reseeded on system resumption [ 1351.827327][T17474] Bluetooth: hci8: command tx timeout [ 1353.868661][T17474] Bluetooth: hci8: command tx timeout [ 1361.085152][ T40] audit: type=1326 audit(2000000187.966:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29473 comm="syz.0.5101" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be579 code=0x0 [ 1361.162932][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.919722][T29361] hsr_slave_0: entered promiscuous mode [ 1371.922122][T29361] hsr_slave_1: entered promiscuous mode [ 1371.924358][T29361] debugfs: 'hsr0' already exists in 'hsr' [ 1371.926456][T29361] Cannot create hsr debugfs directory [ 1371.931706][T29368] team0: Port device team_slave_0 added [ 1371.937410][T29368] team0: Port device team_slave_1 added [ 1372.392668][T29368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.396095][T29368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.416000][T29368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.437733][T29368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.444619][T29368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.455085][T29368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.865768][ T61] hsr_slave_0: left promiscuous mode [ 1372.907185][ T61] hsr_slave_1: left promiscuous mode [ 1372.929762][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1372.932430][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.953029][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1372.955393][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.995453][ T61] hsr_slave_0: left promiscuous mode [ 1373.006605][ T61] hsr_slave_1: left promiscuous mode [ 1373.017991][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.022215][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.034937][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.039565][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.161702][ T61] veth1_macvtap: left promiscuous mode [ 1373.164156][ T61] veth0_macvtap: left promiscuous mode [ 1373.166600][ T61] veth1_vlan: left promiscuous mode [ 1373.169116][ T61] veth0_vlan: left promiscuous mode [ 1373.202400][ T61] veth1_macvtap: left promiscuous mode [ 1373.205612][ T61] veth0_macvtap: left promiscuous mode [ 1373.208892][ T61] veth1_vlan: left promiscuous mode [ 1373.211952][ T61] veth0_vlan: left promiscuous mode [ 1374.361713][T29513] usb 1-1: USB disconnect, device number 2 [ 1375.836169][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1376.059468][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1379.547452][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1379.774794][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1381.352216][T29368] hsr_slave_0: entered promiscuous mode [ 1381.354587][T29368] hsr_slave_1: entered promiscuous mode [ 1381.357148][T29368] debugfs: 'hsr0' already exists in 'hsr' [ 1381.359385][T29368] Cannot create hsr debugfs directory [ 1381.367787][T25069] lo speed is unknown, defaulting to 1000 [ 1381.370748][T25069] infiniband syz0: ib_query_port failed (-19) [ 1382.092036][T29429] chnl_net:caif_netlink_parms(): no params data found [ 1382.683954][T29429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.694552][T29429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.697969][T29429] bridge_slave_0: entered allmulticast mode [ 1382.716567][T29429] bridge_slave_0: entered promiscuous mode [ 1382.739017][T29429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.742897][T29429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.747800][T29429] bridge_slave_1: entered allmulticast mode [ 1382.755672][T29429] bridge_slave_1: entered promiscuous mode [ 1382.930826][T29429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.964559][T29429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.076589][T29429] team0: Port device team_slave_0 added [ 1383.099117][T29429] team0: Port device team_slave_1 added [ 1383.450907][T29361] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1383.644826][T29429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.648116][T29429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.670171][T29429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.675033][T29361] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1383.776545][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.883005][T29429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.887891][T29429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.900541][T29429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.909983][T29361] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1383.920331][T29361] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1384.009968][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.291147][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.433192][T29429] hsr_slave_0: entered promiscuous mode [ 1384.437054][T29429] hsr_slave_1: entered promiscuous mode [ 1384.444646][T29429] debugfs: 'hsr0' already exists in 'hsr' [ 1384.447304][T29429] Cannot create hsr debugfs directory [ 1384.543532][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.977696][T29361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.982239][T29368] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1385.070790][ T61] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.186268][T29429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.211366][T29368] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1385.227349][T29368] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1385.297915][ T61] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.315373][T29368] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1385.391846][T29429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.455181][ T61] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.471177][T29361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.492893][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.496414][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.565835][T29429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.651052][ T61] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.674111][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.677668][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.745183][T29429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.106276][ T61] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.144965][T29368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.185780][T29368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.204411][T29429] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1386.267989][ T61] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.284756][T25000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.287920][T25000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.297564][T29429] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1386.313307][T29429] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1386.328299][T25000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.330662][T25000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.335630][T29429] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1386.437765][ T61] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.467796][T29361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.586418][ T61] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.660551][T29429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.683400][T29429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.726179][T25003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.729118][T25003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.734491][T25003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.737518][T25003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.786861][T29429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1386.796274][T29429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1386.994076][ T61] bridge_slave_1: left allmulticast mode [ 1386.996198][ T61] bridge_slave_1: left promiscuous mode [ 1386.998121][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.027762][ T61] bridge_slave_0: left allmulticast mode [ 1387.039306][ T61] bridge_slave_0: left promiscuous mode [ 1387.042080][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.075577][ T61] bridge_slave_1: left allmulticast mode [ 1387.089235][ T61] bridge_slave_1: left promiscuous mode [ 1387.091779][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.123488][ T61] bridge_slave_0: left allmulticast mode [ 1387.126063][ T61] bridge_slave_0: left promiscuous mode [ 1387.129573][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.144972][ T61] team0: left allmulticast mode [ 1387.147218][ T61] team_slave_0: left allmulticast mode [ 1387.150113][ T61] team_slave_1: left allmulticast mode [ 1387.152551][ T61] bridge0: port 3(team0) entered disabled state [ 1387.171439][ T61] bridge_slave_1: left allmulticast mode [ 1387.173822][ T61] bridge_slave_1: left promiscuous mode [ 1387.176344][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.193074][ T61] bridge_slave_0: left allmulticast mode [ 1387.195506][ T61] bridge_slave_0: left promiscuous mode [ 1387.198068][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.047282][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.069363][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.081749][ T61] bond0 (unregistering): Released all slaves [ 1388.715271][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.738141][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.750271][ T61] bond0 (unregistering): Released all slaves [ 1389.361779][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.378174][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.388559][ T61] bond0 (unregistering): Released all slaves [ 1389.427750][T29368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.478028][T29361] veth0_vlan: entered promiscuous mode [ 1389.504874][T29361] veth1_vlan: entered promiscuous mode [ 1389.537060][T29429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.744424][T29361] veth0_macvtap: entered promiscuous mode [ 1389.763336][T29368] veth0_vlan: entered promiscuous mode [ 1389.769262][T29361] veth1_macvtap: entered promiscuous mode [ 1389.818938][T29368] veth1_vlan: entered promiscuous mode [ 1389.997656][ T5979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1390.006168][ T5979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1390.012606][ T5979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1390.017260][T29361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.025385][ T5979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1390.035366][ T5979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1390.090196][T29361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.116839][T29429] veth0_vlan: entered promiscuous mode [ 1390.245282][T25003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.251879][T29368] veth0_macvtap: entered promiscuous mode [ 1390.263390][T25003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.273959][T29429] veth1_vlan: entered promiscuous mode [ 1390.338311][T29368] veth1_macvtap: entered promiscuous mode [ 1390.343688][T25003] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.435134][T25003] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.486017][T29368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.559046][T29429] veth0_macvtap: entered promiscuous mode [ 1390.640932][T29429] veth1_macvtap: entered promiscuous mode [ 1390.761871][T29368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.915140][T29429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.945556][ T102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.969202][T24996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.972957][T24996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.981146][ T102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.985255][ T102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.020448][ T102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.025934][T29429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.121086][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.125051][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.161163][T24996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.355707][T24996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.367095][T24996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.397863][T29590] chnl_net:caif_netlink_parms(): no params data found [ 1391.413808][T24996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.481370][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.496071][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.118769][T17474] Bluetooth: hci1: command tx timeout [ 1393.566147][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.569899][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.677125][ T61] hsr_slave_0: left promiscuous mode [ 1393.689985][ T61] hsr_slave_1: left promiscuous mode [ 1393.694831][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.697831][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.716418][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.720132][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.775453][ T61] hsr_slave_0: left promiscuous mode [ 1393.785518][ T61] hsr_slave_1: left promiscuous mode [ 1393.797867][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.801952][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.816404][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.819613][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.884586][ T61] hsr_slave_0: left promiscuous mode [ 1393.896148][ T61] hsr_slave_1: left promiscuous mode [ 1393.899696][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.902142][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.919522][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.922763][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.094156][ T61] veth1_macvtap: left promiscuous mode [ 1394.096934][ T61] veth0_macvtap: left promiscuous mode [ 1394.107290][ T61] veth1_vlan: left promiscuous mode [ 1394.122096][ T61] veth0_vlan: left promiscuous mode [ 1394.175474][ T61] veth1_macvtap: left promiscuous mode [ 1394.177772][ T61] veth0_macvtap: left promiscuous mode [ 1394.186376][ T61] veth1_vlan: left promiscuous mode [ 1394.188283][ T61] veth0_vlan: left promiscuous mode [ 1394.188712][T17474] Bluetooth: hci1: command tx timeout [ 1394.244329][ T61] veth1_macvtap: left promiscuous mode [ 1394.246704][ T61] veth0_macvtap: left promiscuous mode [ 1394.252016][ T61] veth1_vlan: left promiscuous mode [ 1394.254232][ T61] veth0_vlan: left promiscuous mode [ 1396.271847][T17474] Bluetooth: hci1: command tx timeout [ 1397.547107][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1397.867209][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1398.351159][T17474] Bluetooth: hci1: command tx timeout [ 1400.339740][T29613] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5110'. [ 1401.267071][ T5979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1401.274254][ T5979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1401.277948][ T5979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1401.282392][ T5979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1401.285705][ T5979] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1401.629193][T29618] udevd[29618]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1401.643750][T29616] udevd[29616]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1403.389917][T17474] Bluetooth: hci2: command tx timeout [ 1405.474914][T17474] Bluetooth: hci2: command tx timeout [ 1405.842227][ T5979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1405.886385][ T5979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1405.925130][ T5979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1405.990859][ T5979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1406.019345][ T5979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1406.421781][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1406.671278][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1407.548807][T17474] Bluetooth: hci2: command tx timeout [ 1408.112701][T17474] Bluetooth: hci4: command tx timeout [ 1409.628844][T17474] Bluetooth: hci2: command tx timeout [ 1410.188951][T17474] Bluetooth: hci4: command tx timeout [ 1412.268885][T17474] Bluetooth: hci4: command tx timeout [ 1412.584875][ T61] team_slave_1 (unregistering): left promiscuous mode [ 1412.594862][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1412.913518][ T61] team_slave_0 (unregistering): left promiscuous mode [ 1412.937792][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1414.348885][T17474] Bluetooth: hci4: command tx timeout [ 1415.946019][T29590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.991791][T29590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.994836][T29590] bridge_slave_0: entered allmulticast mode [ 1415.999143][T29590] bridge_slave_0: entered promiscuous mode [ 1416.035993][T29590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.041847][T29590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.045039][T29590] bridge_slave_1: entered allmulticast mode [ 1416.051751][T29590] bridge_slave_1: entered promiscuous mode [ 1416.614089][T29590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.957171][T29590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.593528][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.860567][T29590] team0: Port device team_slave_0 added [ 1427.878127][T29590] team0: Port device team_slave_1 added [ 1428.114091][T29676] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5120'. [ 1428.145639][T29590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.149201][T29590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.158028][T29590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.167253][T29590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.170308][T29590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.182849][T29590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.241034][T17474] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 1428.241105][T17474] Bluetooth: hci6: adv larger than maximum supported [ 1428.245803][T17474] Bluetooth: hci6: Malformed LE Event: 0x0d [ 1428.398641][T29678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5120'. [ 1428.456525][T29590] hsr_slave_0: entered promiscuous mode [ 1428.470764][T29590] hsr_slave_1: entered promiscuous mode [ 1428.474102][T29590] debugfs: 'hsr0' already exists in 'hsr' [ 1428.476515][T29590] Cannot create hsr debugfs directory [ 1429.033139][T29625] chnl_net:caif_netlink_parms(): no params data found [ 1429.202129][T29634] chnl_net:caif_netlink_parms(): no params data found [ 1429.627283][T29625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.638542][T29625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.640981][T29625] bridge_slave_0: entered allmulticast mode [ 1429.644319][T29625] bridge_slave_0: entered promiscuous mode [ 1429.727891][T29625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.736236][T29625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.739808][T29625] bridge_slave_1: entered allmulticast mode [ 1429.744993][T29625] bridge_slave_1: entered promiscuous mode [ 1430.024787][T29625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.112801][T29634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.115186][T29634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.118129][T29634] bridge_slave_0: entered allmulticast mode [ 1430.129109][T29634] bridge_slave_0: entered promiscuous mode [ 1430.137768][T29625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.149099][T29634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.151508][T29634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.154015][T29634] bridge_slave_1: entered allmulticast mode [ 1430.157332][T29634] bridge_slave_1: entered promiscuous mode [ 1431.960083][T29625] team0: Port device team_slave_0 added [ 1431.966268][T29634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.972627][T29634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.072157][T29625] team0: Port device team_slave_1 added [ 1432.546425][T29732] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 1432.558487][ T6017] IPVS: starting estimator thread 0... [ 1432.658536][T29735] IPVS: using max 31 ests per chain, 74400 per kthread [ 1432.786004][T29634] team0: Port device team_slave_0 added [ 1432.793221][T29634] team0: Port device team_slave_1 added [ 1432.809865][T29625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.812935][T29625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.834545][T29625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.194911][T29625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.198096][T29625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.216913][T29625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.265725][T29634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.269173][T29634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.280190][T29634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.293676][T29634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.297943][T29634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.321807][T29634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.511699][T29625] hsr_slave_0: entered promiscuous mode [ 1433.516333][T29625] hsr_slave_1: entered promiscuous mode [ 1433.529846][T29625] debugfs: 'hsr0' already exists in 'hsr' [ 1433.532028][T29625] Cannot create hsr debugfs directory [ 1433.923325][T29634] hsr_slave_0: entered promiscuous mode [ 1433.931655][T29634] hsr_slave_1: entered promiscuous mode [ 1433.935749][T29634] debugfs: 'hsr0' already exists in 'hsr' [ 1433.938841][T29634] Cannot create hsr debugfs directory [ 1434.448527][T29590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1434.949436][T29590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1435.224770][T29590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1435.238079][T29590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1435.623648][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.743559][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.756475][T29781] netlink: 'syz.8.5122': attribute type 21 has an invalid length. [ 1435.760453][T29781] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5122'. [ 1435.763696][T29781] netlink: 'syz.8.5122': attribute type 4 has an invalid length. [ 1435.766153][T29781] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5122'. [ 1435.782873][T29781] batadv1: entered promiscuous mode [ 1435.789257][T29781] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1435.842282][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.867766][T29590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.886472][T29590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.895577][T25003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.898715][T25003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.931322][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.946768][T25003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.950203][T25003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.158202][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.276664][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.307224][T29590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.393638][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.525919][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.696868][T29590] veth0_vlan: entered promiscuous mode [ 1436.730491][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.751130][T29590] veth1_vlan: entered promiscuous mode [ 1436.775255][T29590] veth0_macvtap: entered promiscuous mode [ 1436.780315][T29590] veth1_macvtap: entered promiscuous mode [ 1436.794103][T29590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.805798][T29590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.819462][T25251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.823159][T25251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.828104][T25251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.832933][T25251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.879363][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.990177][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.075762][T25251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.084550][T25251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.144010][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.242496][T25003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.245706][T25003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.344301][ T61] bridge_slave_1: left allmulticast mode [ 1437.346410][ T61] bridge_slave_1: left promiscuous mode [ 1437.351889][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.373157][ T61] bridge_slave_0: left allmulticast mode [ 1437.375689][ T61] bridge_slave_0: left promiscuous mode [ 1437.377727][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.400695][ T61] bridge_slave_1: left allmulticast mode [ 1437.403033][ T61] bridge_slave_1: left promiscuous mode [ 1437.406380][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.420561][ T61] bridge_slave_0: left allmulticast mode [ 1437.423497][ T61] bridge_slave_0: left promiscuous mode [ 1437.426298][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.433705][ T61] bridge_slave_1: left allmulticast mode [ 1437.435766][ T61] bridge_slave_1: left promiscuous mode [ 1437.438328][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.455555][ T61] bridge_slave_0: left allmulticast mode [ 1437.457701][ T61] bridge_slave_0: left promiscuous mode [ 1437.468137][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.481098][ T61] bridge_slave_1: left allmulticast mode [ 1437.483133][ T61] bridge_slave_1: left promiscuous mode [ 1437.485142][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.490882][ T61] bridge_slave_0: left allmulticast mode [ 1437.492934][ T61] bridge_slave_0: left promiscuous mode [ 1437.495224][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.122011][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.131269][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.136756][ T61] bond0 (unregistering): Released all slaves [ 1438.593687][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.604590][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.610154][ T61] bond0 (unregistering): Released all slaves [ 1439.076085][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.083417][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.089463][ T61] bond0 (unregistering): Released all slaves [ 1439.612321][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.617608][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.622828][ T61] bond0 (unregistering): Released all slaves [ 1439.893419][ T61] tipc: Disabling bearer [ 1439.906211][ T61] tipc: Left network mode [ 1439.939846][T29869] serio: Serial port ptm0 [ 1440.330825][T29625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1440.341827][T29625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1440.348087][T29625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1440.355646][T29625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1440.475495][T29634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1440.483919][T29634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1440.493297][T29634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1440.500788][T29634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1440.741222][T29625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.802407][T29625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.822013][ T61] hsr_slave_0: left promiscuous mode [ 1440.824615][ T61] hsr_slave_1: left promiscuous mode [ 1440.827279][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.830809][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.834114][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.837014][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.863779][ T61] hsr_slave_0: left promiscuous mode [ 1440.866481][ T61] hsr_slave_1: left promiscuous mode [ 1440.869519][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.872350][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.876845][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.880535][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.891654][ T61] hsr_slave_0: left promiscuous mode [ 1440.905986][ T61] hsr_slave_1: left promiscuous mode [ 1440.913199][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.917083][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.928493][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.931607][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.941011][ T61] hsr_slave_0: left promiscuous mode [ 1440.943946][ T61] hsr_slave_1: left promiscuous mode [ 1440.946765][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.960464][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.968029][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.971784][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.525025][ T61] veth1_macvtap: left promiscuous mode [ 1441.528181][ T61] veth0_macvtap: left promiscuous mode [ 1441.533291][ T61] veth1_vlan: left promiscuous mode [ 1441.537619][ T61] veth0_vlan: left promiscuous mode [ 1441.553050][ T61] veth1_macvtap: left promiscuous mode [ 1441.556349][ T61] veth0_macvtap: left promiscuous mode [ 1441.560690][ T61] veth1_vlan: left promiscuous mode [ 1441.562562][ T61] veth0_vlan: left promiscuous mode [ 1441.565498][ T61] veth1_macvtap: left promiscuous mode [ 1441.567528][ T61] veth0_macvtap: left promiscuous mode [ 1441.569721][ T61] veth1_vlan: left promiscuous mode [ 1441.571782][ T61] veth0_vlan: left promiscuous mode [ 1441.578055][ T61] veth1_macvtap: left promiscuous mode [ 1441.580648][ T61] veth0_macvtap: left promiscuous mode [ 1441.583188][ T61] veth1_vlan: left promiscuous mode [ 1441.585529][ T61] veth0_vlan: left promiscuous mode [ 1442.175274][T29931] netlink: 'syz.5.5133': attribute type 12 has an invalid length. [ 1442.178076][T29931] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.5133'. [ 1443.354706][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1443.535842][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1443.627546][T29935] ieee802154 phy1 wpan1: encryption failed: -22 [ 1444.268615][ T5979] Bluetooth: hci4: command 0x0405 tx timeout [ 1444.479130][T29938] hugetlbfs: syz.8.5135 (29938): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1446.149983][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1446.314498][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1448.800198][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1448.925378][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1451.065490][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1451.218011][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1452.334452][T29634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.352003][T25251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.355562][T25251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.422619][T25251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.425786][T25251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.436356][T29634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.475897][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.478651][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.512306][T25251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.515477][T25251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.818304][T29625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.897754][T29625] veth0_vlan: entered promiscuous mode [ 1452.923077][T29625] veth1_vlan: entered promiscuous mode [ 1452.944554][T29625] veth0_macvtap: entered promiscuous mode [ 1452.954495][T29625] veth1_macvtap: entered promiscuous mode [ 1452.966274][T29625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.977791][T29625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.996579][ T1240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.000382][ T1240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.049765][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.087423][T25000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.152238][T29634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.196396][T25000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.200221][T25000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.251762][T25000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.258617][T25000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.288301][T29634] veth0_vlan: entered promiscuous mode [ 1453.303982][T29634] veth1_vlan: entered promiscuous mode [ 1453.323475][T29634] veth0_macvtap: entered promiscuous mode [ 1453.327949][T29634] veth1_macvtap: entered promiscuous mode [ 1453.363771][T29634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1453.380855][T29634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.399900][T25251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.403767][T25251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.406723][T25251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.418125][T25251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.546327][T25251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.568485][T25251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.610277][T25251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.612794][T25251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.430493][T30027] netlink: 'syz.1.5143': attribute type 10 has an invalid length. [ 1454.454646][T30027] batman_adv: batadv0: Adding interface: team0 [ 1454.457008][T30027] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.466562][T30027] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1454.536109][T30027] netlink: 'syz.1.5143': attribute type 10 has an invalid length. [ 1454.541979][T30027] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5143'. [ 1454.548622][T30027] team0: entered promiscuous mode [ 1454.552813][T30027] team_slave_0: entered promiscuous mode [ 1454.578366][T30027] team_slave_1: entered promiscuous mode [ 1454.618522][T30027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.638893][T30027] batman_adv: batadv0: Interface activated: team0 [ 1454.649468][T30027] batman_adv: batadv0: Interface deactivated: team0 [ 1454.665878][T30027] batman_adv: batadv0: Removing interface: team0 [ 1454.697456][T30027] bridge0: port 3(team0) entered blocking state [ 1454.714924][T30027] bridge0: port 3(team0) entered disabled state [ 1454.737373][T30027] team0: entered allmulticast mode [ 1454.752124][T30027] team_slave_0: entered allmulticast mode [ 1454.778070][T30027] team_slave_1: entered allmulticast mode [ 1454.849854][T30027] bridge0: port 3(team0) entered blocking state [ 1454.852848][T30027] bridge0: port 3(team0) entered forwarding state [ 1458.161069][T30128] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1458.648602][T25515] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 1458.830773][T25515] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1458.840391][T25515] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1458.844291][T25515] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.849698][T25515] usb 13-1: Product: syz [ 1458.853384][T25515] usb 13-1: Manufacturer: syz [ 1458.857452][T25515] usb 13-1: SerialNumber: syz [ 1458.862413][T25515] usb 13-1: config 0 descriptor?? [ 1459.401082][T30170] ieee802154 phy1 wpan1: encryption failed: -22 [ 1460.186631][T30185] netlink: 'syz.2.5162': attribute type 9 has an invalid length. [ 1460.509896][ T5979] Bluetooth: hci6: command 0x0406 tx timeout [ 1460.798529][T30134] comedi comedi2: reset error (fatal) [ 1460.812904][T25492] usb 13-1: USB disconnect, device number 19 [ 1461.840276][ T59] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 1461.988625][ T59] usb 13-1: Using ep0 maxpacket: 8 [ 1462.002951][ T59] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 1462.006796][ T59] usb 13-1: config 0 has no interface number 0 [ 1462.009922][ T59] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1462.014414][ T59] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1462.022177][ T59] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1462.044698][ T59] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1462.052924][ T59] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1462.063929][ T59] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.086956][ T59] usb 13-1: config 0 descriptor?? [ 1462.108638][ T59] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1462.964035][T30243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1464.350255][T25564] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1464.358636][T25233] usb 13-1: USB disconnect, device number 20 [ 1464.364968][T25233] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 1464.521450][T25564] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1464.528136][T25564] usb 6-1: config 0 has no interface number 0 [ 1464.533515][T25564] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1464.537291][T25564] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1464.544146][T25564] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1464.550013][T25564] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1464.554601][T25564] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1464.561559][T25564] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1464.566759][T25564] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1464.575378][T25564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.585413][T25564] usb 6-1: config 0 descriptor?? [ 1464.589106][T30273] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1464.596149][T30273] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1464.615297][T25564] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1464.824312][T25564] usb 6-1: USB disconnect, device number 18 [ 1464.834071][T25564] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1465.435832][T30317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1465.788711][T17474] Bluetooth: hci4: command 0x0405 tx timeout [ 1466.069571][T30331] netlink: 'syz.8.5179': attribute type 10 has an invalid length. [ 1466.087106][T30331] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1468.348584][T17474] Bluetooth: hci1: command tx timeout [ 1470.455491][T30457] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5196'. [ 1472.509490][T30506] syz.5.5202 (30506): drop_caches: 2 [ 1472.663154][T30506] syz.5.5202 (30506): drop_caches: 2 [ 1473.253291][T30514] ieee802154 phy1 wpan1: encryption failed: -22 [ 1473.959065][T30529] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1473.964181][T30529] cramfs: wrong magic [ 1474.836750][T30547] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1474.854338][T30550] IPv6: Can't replace route, no match found [ 1475.268782][ T6331] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1475.429070][ T6331] usb 10-1: Using ep0 maxpacket: 8 [ 1475.434741][ T6331] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1475.438762][ T6331] usb 10-1: config 0 has no interface number 0 [ 1475.441452][ T6331] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1475.446763][ T6331] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1475.452787][ T6331] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1475.457538][ T6331] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1475.464429][ T6331] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1475.470779][ T6331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.479222][ T6331] usb 10-1: config 0 descriptor?? [ 1475.496555][ T6331] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1476.604497][T30587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5223'. [ 1476.788954][T30161] block nbd64: NBD_DISCONNECT [ 1476.986220][T30159] udevd[30159]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1477.710624][T20441] usb 10-1: USB disconnect, device number 12 [ 1477.733926][T20441] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1477.796240][T30612] netlink: 'syz.2.5229': attribute type 1 has an invalid length. [ 1479.670157][T30652] bad cache= option: noneno [ 1479.670157][T30652] blocksize : 16 [ 1479.670157][T30652] min keysize : 0 [ 1479.670157][T30652] max keysize : 64 [ 1479.670157][T30652] ivsize : 16 [ 1479.670157][T30652] chunksize : 16 [ 1479.670157][T30652] walksize : 16 [ 1479.670157][T30652] statesize : 0 [ 1479.670157][T30652] [ 1479.670157][T30652] name : hmac(sm3) [ 1479.670157][T30652] driver : hmac(sm3-avx) [ 1479.670157][T30652] module : kernel [ 1479.670157][T30652] priority : 400 [ 1479.670157][T30652] refcnt : 1 [ 1479.670157][T30652] selftest : passed [ 1479.670157][T30652] internal : no [ 1479.670157][T30652] type : ahash [ 1479.670157][T30652] async : no [ 1479.670157][T30652] blocksize : 64 [ 1479.670157][T30652] digestsize : 32 [ 1479.670157][T30652] [ 1479.670157][T30652] name : cmac(aes) [ 1479.670157][T30652] driver : cmac(aes-aesni) [ 1479.670157][T30652] module : kernel [ 1479.670157][T30652] priority : 300 [ 1479.670157][T30652] refcnt : 1 [ 1479.670157][T30652] selftest : passed [ 1479.670157][T30652] internal : no [ 1479.670157][T30652] type : shash [ 1479.670157][T30652] blocksize : 16 [ 1479.670157][T30652] digestsize : 16 [ 1479.670157][T30652] [ 1479.670157][T30652] name : xcbc(aes) [ 1479.670157][T30652] driver : xcbc(aes-aesni) [ 1479.670157][T30652] module : kernel [ 1479.670157][T30652] priority : 300 [ 1479.670157][T30652] refcnt : 1 [ 1479.670157][T30652] selftest : passed [ 1479.670157][T30652] internal : no [ 1479.670157][T30652] type : shash [ 1479.670157][T30652] blocksize : 16 [ 1479.670157][T30652] digestsize : 16 [ 1479.670157][T30652] [ 1479.670157][T30652] name : hmac(rmd160) [ 1479.670157][T30652] driver : hmac(rmd160-generic) [ 1479.670157][T30652] module : kernel [ 1479.670157][T30652] priority : 100 [ 1479.670157][T30652] refcnt : 1 [ 1479.670824][T30652] CIFS: VFS: bad cache= option: noneno [ 1479.670824][T30652] blocksize : 16 [ 1479.670824][T30652] min keysize : 0 [ 1479.670824][T30652] max keysize : 64 [ 1479.670824][T30652] ivsize : 16 [ 1479.670824][T30652] chunksize : 16 [ 1479.670824][T30652] walksize : 16 [ 1479.670824][T30652] statesize : 0 [ 1479.670824][T30652] [ 1479.670824][T30652] name : hmac(sm3) [ 1479.670824][T30652] driver : hmac(sm3-avx) [ 1479.670824][T30652] module : kernel [ 1479.670824][T30652] priority : 400 [ 1479.670824][T30652] refcnt : 1 [ 1479.670824][T30652] selftest : passed [ 1479.670824][T30652] internal : no [ 1479.670824][T30652] type : ahash [ 1479.670824][T30652] async : no [ 1479.670824][T30652] blocksize : 64 [ 1479.670824][T30652] digestsize : 32 [ 1479.670824][T30652] [ 1479.670824][T30652] name : cmac(aes) [ 1479.670824][T30652] driver : cmac(aes-aesni) [ 1479.670824][T30652] module : kernel [ 1479.670824][T30652] priority : 300 [ 1479.670824][T30652] refcnt : 1 [ 1479.670824][T30652] selftest : passed [ 1479.670824][T30652] internal : no [ 1479.670824][T30652] type : shash [ 1479.670824][T30652] blocksize : 16 [ 1479.670824][T30652] digestsize : 16 [ 1479.670824][T30652] [ 1479.670824][T30652] name : xcbc(aes) [ 1479.670824][T30652] driver : xcbc(aes-aesni) [ 1479.670824][T30652] module : kernel [ 1479.670824][T30652] priority : 300 [ 1479.670824][T30652] refcnt : 1 [ 1479.670824][T30652] selftest : passed [ 1479.670824][T30652] internal : no [ 1479.670824][T30652] type : shash [ 1479.670824][T30652] blocksize : 16 [ 1479.670824][T30652] digestsize : 16 [ 1479.670824][T30652] [ 1479.670824][T30652] name : hmac(rmd160) [ 1479.670824][T30652] driver : hmac(rmd160-generic) [ 1479.670824][T30652] module : kernel [ 1479.670824][T30652] priority : 100 [ 1479.670824][T30652] refcnt : 1 [ 1481.366643][T30713] overlayfs: missing 'lowerdir' [ 1481.484187][T30715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5247'. [ 1481.493482][T30715] bridge_slave_1: left allmulticast mode [ 1481.495602][T30715] bridge_slave_1: left promiscuous mode [ 1481.498717][T30715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.589499][T30715] bridge_slave_0: left allmulticast mode [ 1481.593067][T30715] bridge_slave_0: left promiscuous mode [ 1481.596864][T30715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.178148][T30765] IPVS: Error joining to the multicast group [ 1483.392589][T17474] Bluetooth: hci2: command tx timeout [ 1484.048703][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.194548][T25000] bridge_slave_0: left allmulticast mode [ 1484.199111][T25000] bridge_slave_0: left promiscuous mode [ 1484.201804][T25000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.479432][T25000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.491102][T25000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.496436][T25000] bond0 (unregistering): Released all slaves [ 1485.639778][T17474] Bluetooth: hci2: command tx timeout [ 1485.848667][ T6331] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1486.000461][ T6331] usb 10-1: Using ep0 maxpacket: 32 [ 1486.005546][ T6331] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1486.013996][ T6331] usb 10-1: config 0 has no interface number 0 [ 1486.016748][ T6331] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1486.027094][ T6331] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1486.032982][ T6331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.036658][ T6331] usb 10-1: Product: syz [ 1486.039247][ T6331] usb 10-1: Manufacturer: syz [ 1486.041395][ T6331] usb 10-1: SerialNumber: syz [ 1486.080144][ T6331] usb 10-1: config 0 descriptor?? [ 1486.089119][ T6331] smsc75xx v1.0.0 [ 1486.090497][ T6331] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1486.122981][T25000] hsr_slave_0: left promiscuous mode [ 1486.124422][ T6331] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 1486.129791][T25000] hsr_slave_1: left promiscuous mode [ 1486.132986][T25000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1486.136250][T25000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.143867][T25000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1486.147547][T25000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.180781][T25000] veth1_macvtap: left promiscuous mode [ 1486.183211][T25000] veth0_macvtap: left promiscuous mode [ 1486.186180][T25000] veth1_vlan: left promiscuous mode [ 1486.189153][T25000] veth0_vlan: left promiscuous mode [ 1486.485375][T30837] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1486.488362][T30837] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1486.580313][T30837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1486.582416][T30837] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1486.584639][T30863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.588836][T30863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.631033][T30837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1486.632945][T30837] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1486.761434][T30837] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1486.765338][T30837] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1486.812849][T30870] netlink: 'syz.1.5275': attribute type 1 has an invalid length. [ 1487.956676][T25000] team0 (unregistering): Port device team_slave_1 removed [ 1488.102280][T25000] team0 (unregistering): Port device team_slave_0 removed [ 1489.207025][T30857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.210654][T30857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.214759][T30857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.218264][T30857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.465163][T30904] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5282'. [ 1489.469968][T30904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5282'. [ 1489.508274][T25492] usb 10-1: USB disconnect, device number 13 [ 1489.967921][T30904] bond0: (slave bond_slave_1): Releasing backup interface [ 1489.986267][T30913] wlan1: mtu less than device minimum [ 1490.188948][T25000] IPVS: stop unused estimator thread 0... [ 1490.203365][ T40] audit: type=1326 audit(2000000317.086:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30896 comm="syz.8.5283" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7fc00000 [ 1490.321079][T25000] bridge_slave_1: left allmulticast mode [ 1490.326246][T25000] bridge_slave_1: left promiscuous mode [ 1490.328903][T25000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.336201][T25000] bridge_slave_0: left allmulticast mode [ 1490.342623][T25000] bridge_slave_0: left promiscuous mode [ 1490.345490][T25000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.792221][T30953] netlink: 'syz.5.5291': attribute type 1 has an invalid length. [ 1490.908795][ T6018] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 1491.080297][ T6018] usb 13-1: config 0 has no interfaces? [ 1491.083053][ T6018] usb 13-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 1491.087929][ T6018] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.120357][ T6018] usb 13-1: config 0 descriptor?? [ 1491.305281][T25000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.317563][T25000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.329217][T25000] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1491.335822][T25000] bond0 (unregistering): Released all slaves [ 1491.716060][T25000] hsr_slave_0: left promiscuous mode [ 1491.726759][T25000] hsr_slave_1: left promiscuous mode [ 1491.730513][T25000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1491.733870][T25000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.737731][T25000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.740846][T25000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.798262][T25000] veth1_macvtap: left promiscuous mode [ 1491.818734][T25000] veth0_macvtap: left promiscuous mode [ 1491.821547][T25000] veth1_vlan: left promiscuous mode [ 1491.823995][T25000] veth0_vlan: left promiscuous mode [ 1492.095639][ T6017] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1492.287201][ T6017] usb 6-1: config 16 has an invalid interface number: 248 but max is 0 [ 1492.291386][ T6017] usb 6-1: config 16 has no interface number 0 [ 1492.298673][ T6017] usb 6-1: config 16 interface 248 has no altsetting 0 [ 1492.306147][ T6017] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice=ae.26 [ 1492.310079][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.313634][ T6017] usb 6-1: Product: syz [ 1492.315685][ T6017] usb 6-1: Manufacturer: syz [ 1492.317319][ T6017] usb 6-1: SerialNumber: syz [ 1492.536279][ T6017] mos7840 6-1:16.248: required endpoints missing [ 1492.565235][ T6017] usb 6-1: USB disconnect, device number 19 [ 1493.450052][T25000] team0 (unregistering): Port device team_slave_1 removed [ 1493.477552][T25148] usb 13-1: USB disconnect, device number 21 [ 1493.646352][T25000] team0 (unregistering): Port device team_slave_0 removed [ 1494.922006][T30985] netlink: 'syz.2.5301': attribute type 1 has an invalid length. [ 1495.059650][T25000] IPVS: stop unused estimator thread 0... [ 1496.038517][T25351] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 1496.057159][T30987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.198523][T25351] usb 13-1: Using ep0 maxpacket: 8 [ 1496.203028][T25351] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1496.209860][T25351] usb 13-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1496.213508][T25351] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.216583][T25351] usb 13-1: Product: syz [ 1496.218267][T25351] usb 13-1: Manufacturer: syz [ 1496.221843][T25351] usb 13-1: SerialNumber: syz [ 1496.233414][T25351] usb 13-1: config 0 descriptor?? [ 1496.240620][T25351] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1496.875682][T31027] netlink: 'syz.5.5314': attribute type 1 has an invalid length. [ 1497.988651][T29995] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1498.140598][T29995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1498.146878][T29995] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1498.151157][T29995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.154435][T29995] usb 6-1: Product: syz [ 1498.156184][T29995] usb 6-1: Manufacturer: syz [ 1498.158087][T29995] usb 6-1: SerialNumber: syz [ 1498.162435][T29995] usb 6-1: config 0 descriptor?? [ 1498.290713][T25351] gspca_zc3xx: reg_r err -32 [ 1498.978903][T25351] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1498.982570][T25351] gspca_zc3xx 13-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1499.728558][ T6144] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 1499.738471][T31056] comedi comedi2: reset error (fatal) [ 1499.746561][T29995] usb 6-1: USB disconnect, device number 20 [ 1499.858528][ T6144] usb 10-1: device descriptor read/64, error -71 [ 1500.033469][ T6018] usb 13-1: USB disconnect, device number 22 [ 1500.109586][ T6144] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 1500.164758][T31065] netlink: 'syz.8.5329': attribute type 1 has an invalid length. [ 1500.238757][ T6144] usb 10-1: device descriptor read/64, error -71 [ 1500.348932][ T6144] usb usb10-port1: attempt power cycle [ 1500.698533][ T6144] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 1500.720593][ T6144] usb 10-1: device descriptor read/8, error -71 [ 1500.968563][ T6144] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 1500.989978][ T6144] usb 10-1: device descriptor read/8, error -71 [ 1501.099330][ T6144] usb usb10-port1: unable to enumerate USB device [ 1501.484708][T31095] pim6reg1: entered promiscuous mode [ 1501.487068][T31095] pim6reg1: entered allmulticast mode [ 1501.768617][ T6920] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1501.928642][ T6920] usb 7-1: Using ep0 maxpacket: 8 [ 1501.934308][ T6920] usb 7-1: config 0 has an invalid interface number: 38 but max is 0 [ 1501.939013][ T6920] usb 7-1: config 0 has no interface number 0 [ 1501.941536][ T6920] usb 7-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1501.945647][ T6920] usb 7-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1501.953324][ T6920] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 1501.957391][ T6920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.960509][ T6920] usb 7-1: Product: syz [ 1501.962403][ T6920] usb 7-1: Manufacturer: syz [ 1501.964421][ T6920] usb 7-1: SerialNumber: syz [ 1501.968763][ T6920] usb 7-1: config 0 descriptor?? [ 1501.974131][ T6920] xbox_remote_probe: Unexpected endpoint_in [ 1504.385059][ T6018] usb 7-1: USB disconnect, device number 25 [ 1506.779777][T31215] fuse: Bad value for 'fd' [ 1507.283323][T31224] binder: 31221:31224 ioctl 4018620d 0 returned -22 [ 1507.290516][T31224] binder: 31221:31224 ioctl 40046205 0 returned -22 [ 1508.737987][T31236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5388'. [ 1510.021472][T31262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1510.793662][ T6144] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 1510.982105][ T6144] usb 13-1: Using ep0 maxpacket: 16 [ 1510.988309][ T6144] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 1510.992936][ T6144] usb 13-1: config 0 has no interface number 0 [ 1511.003879][ T6144] usb 13-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1511.008268][ T6144] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.014227][ T6144] usb 13-1: Product: syz [ 1511.016581][ T6144] usb 13-1: Manufacturer: syz [ 1511.023682][ T6144] usb 13-1: SerialNumber: syz [ 1511.037495][ T6144] usb 13-1: config 0 descriptor?? [ 1511.050371][ T6144] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1511.980042][ T6144] gspca_spca1528: reg_w err -110 [ 1512.000229][ T6144] spca1528 13-1:0.1: probe with driver spca1528 failed with error -110 [ 1512.923608][ T6331] usb 13-1: USB disconnect, device number 23 [ 1512.957924][T31325] vivid-002: disconnect [ 1512.961934][T31324] vivid-002: reconnect [ 1514.678563][T25069] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1514.831241][T25069] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1514.836937][T25069] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1514.841348][T25069] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.844742][T25069] usb 10-1: Product: syz [ 1514.846676][T25069] usb 10-1: Manufacturer: syz [ 1514.849066][T25069] usb 10-1: SerialNumber: syz [ 1514.853233][T25069] usb 10-1: config 0 descriptor?? [ 1516.062746][ T6144] libceph: connect (1)[c::]:6789 error -101 [ 1516.065520][ T6144] libceph: mon0 (1)[c::]:6789 connect error [ 1516.078597][T31376] ceph: No mds server is up or the cluster is laggy [ 1516.158519][ T6920] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1516.328690][ T6920] usb 7-1: Using ep0 maxpacket: 32 [ 1516.332645][ T6920] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1516.335273][ T6920] usb 7-1: config 0 has no interface number 0 [ 1516.337261][ T6920] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1516.342934][ T6920] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1516.345929][ T6920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.349356][ T6920] usb 7-1: Product: syz [ 1516.350745][ T6920] usb 7-1: Manufacturer: syz [ 1516.352277][ T6920] usb 7-1: SerialNumber: syz [ 1516.355190][ T6920] usb 7-1: config 0 descriptor?? [ 1516.361399][ T6920] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1516.364544][ T6920] em28xx 7-1:0.132: Video interface 132 found: [ 1516.458763][T31355] comedi comedi2: reset error (fatal) [ 1516.470211][ T6331] usb 10-1: USB disconnect, device number 18 [ 1516.776723][T31381] Driver unsupported XDP return value 0 on prog (id 496) dev N/A, expect packet loss! [ 1516.855265][ T6920] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1517.112739][ T6920] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1517.120436][ T6920] em28xx 7-1:0.132: board has no eeprom [ 1517.161343][T31399] ieee802154 phy1 wpan1: encryption failed: -22 [ 1517.178473][ T6920] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1517.183189][ T6920] em28xx 7-1:0.132: analog set to bulk mode. [ 1517.188320][T25492] em28xx 7-1:0.132: Registering V4L2 extension [ 1517.195632][ T6920] usb 7-1: USB disconnect, device number 26 [ 1517.199352][ T6920] em28xx 7-1:0.132: Disconnecting em28xx [ 1517.700460][T25492] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1517.707408][T25492] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1517.713257][T25492] em28xx 7-1:0.132: No AC97 audio processor [ 1517.728003][T25492] usb 7-1: Decoder not found [ 1517.729704][T25492] em28xx 7-1:0.132: failed to create media graph [ 1517.731804][T25492] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1517.749054][T25492] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1517.752920][ T6920] em28xx 7-1:0.132: Closing input extension [ 1517.780862][ T6920] em28xx 7-1:0.132: Freeing device [ 1518.032905][T31416] ieee802154 phy1 wpan1: encryption failed: -22 [ 1518.358552][ T6017] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 1518.550099][ T6017] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1519.002816][ T6017] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1519.006831][ T6017] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.010576][ T6017] usb 13-1: Product: syz [ 1519.012650][ T6017] usb 13-1: Manufacturer: syz [ 1519.015170][ T6017] usb 13-1: SerialNumber: syz [ 1519.033847][ T6017] usb 13-1: config 0 descriptor?? [ 1519.520303][T31447] ieee802154 phy1 wpan1: encryption failed: -22 [ 1520.460099][T31461] siw: device registration error -23 [ 1520.678601][T31419] comedi comedi2: reset error (fatal) [ 1520.693472][ T6331] usb 13-1: USB disconnect, device number 24 [ 1522.081090][T31486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1524.058600][T25069] usb 13-1: new low-speed USB device number 25 using dummy_hcd [ 1524.222008][T25069] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 1524.225404][T25069] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.229727][T25069] usb 13-1: config 0 has no interface number 0 [ 1524.232324][T25069] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1524.235782][T25069] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.242104][T25069] usb 13-1: config 0 descriptor?? [ 1524.247993][T25069] ldusb 13-1:0.55: Interrupt in endpoint not found [ 1524.451155][ T6920] usb 13-1: USB disconnect, device number 25 [ 1526.828548][ T6920] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1526.980125][ T6920] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1526.983670][ T6920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.987932][ T6920] usb 6-1: config 0 has no interface number 0 [ 1526.990684][ T6920] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1526.995212][ T6920] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1527.001298][ T6920] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1527.006275][ T6920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.012358][ T6920] usb 6-1: config 0 descriptor?? [ 1527.019868][ T6920] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1527.222868][ T6331] usb 6-1: USB disconnect, device number 21 [ 1528.088751][ T5933] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 1528.091917][ T5933] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5933, name: syz-executor [ 1528.097742][ T5933] preempt_count: 1, expected: 0 [ 1528.100840][ T5933] RCU nest depth: 0, expected: 0 [ 1528.103056][ T5933] no locks held by syz-executor/5933. [ 1528.105847][ T5933] Preemption disabled at: [ 1528.105857][ T5933] [] schedule+0xe0/0x3a0 [ 1528.110506][ T5933] CPU: 0 UID: 0 PID: 5933 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1528.110528][ T5933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1528.110541][ T5933] Call Trace: [ 1528.110547][ T5933] [ 1528.110555][ T5933] dump_stack_lvl+0x16c/0x1f0 [ 1528.110585][ T5933] __might_resched+0x3c0/0x5e0 [ 1528.110603][ T5933] ? __pfx___might_resched+0x10/0x10 [ 1528.110616][ T5933] ? pcpu_block_update+0x562/0x660 [ 1528.110644][ T5933] ? find_held_lock+0x2b/0x80 [ 1528.110664][ T5933] vfree+0x75/0xb50 [ 1528.110693][ T5933] ? rcu_is_watching+0x12/0xc0 [ 1528.110713][ T5933] ? kfree+0x24f/0x4d0 [ 1528.110729][ T5933] ? free_percpu+0x6db/0x13c0 [ 1528.110752][ T5933] futex_hash_free+0x98/0xc0 [ 1528.110772][ T5933] __mmdrop+0x33f/0x580 [ 1528.110788][ T5933] ? rcu_is_watching+0x12/0xc0 [ 1528.110805][ T5933] finish_task_switch.isra.0+0x7a4/0xc10 [ 1528.110820][ T5933] ? __switch_to+0x7a5/0x11a0 [ 1528.110840][ T5933] __schedule+0x1198/0x5de0 [ 1528.110856][ T5933] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1528.110875][ T5933] ? debug_object_activate+0x2ec/0x4c0 [ 1528.110898][ T5933] ? __lock_acquire+0x62e/0x1ce0 [ 1528.110934][ T5933] ? __pfx___schedule+0x10/0x10 [ 1528.110960][ T5933] ? find_held_lock+0x2b/0x80 [ 1528.110979][ T5933] ? schedule+0x2d7/0x3a0 [ 1528.111002][ T5933] schedule+0xe7/0x3a0 [ 1528.111022][ T5933] schedule_hrtimeout_range_clock+0x217/0x320 [ 1528.111103][ T5933] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 1528.111130][ T5933] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1528.111163][ T5933] poll_schedule_timeout.constprop.0+0xc4/0x1c0 [ 1528.111188][ T5933] do_select+0x1339/0x17e0 [ 1528.111224][ T5933] ? __pfx_do_select+0x10/0x10 [ 1528.111242][ T5933] ? __lock_acquire+0xb97/0x1ce0 [ 1528.111270][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111287][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111305][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111323][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111340][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111358][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111413][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111432][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111450][ T5933] ? __pfx_pollwake+0x10/0x10 [ 1528.111472][ T5933] ? find_held_lock+0x2b/0x80 [ 1528.111489][ T5933] ? compat_core_sys_select+0x1dd/0x880 [ 1528.111508][ T5933] ? compat_core_sys_select+0x685/0x880 [ 1528.111524][ T5933] compat_core_sys_select+0x685/0x880 [ 1528.111547][ T5933] ? __pfx_compat_core_sys_select+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1528.111587][ T5933] ? set_compat_user_sigmask+0x213/0x2a0 [ 1528.111606][ T5933] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1528.111631][ T5933] __ia32_compat_sys_pselect6_time32+0x2d1/0x390 [ 1528.111657][ T5933] ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10 [ 1528.111684][ T5933] ? rcu_is_watching+0x12/0xc0 [ 1528.111707][ T5933] __do_fast_syscall_32+0x7c/0x3a0 [ 1528.111732][ T5933] do_fast_syscall_32+0x32/0x80 [ 1528.111754][ T5933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1528.111777][ T5933] RIP: 0023:0xf7f24579 [ 1528.111793][ T5933] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1528.111811][ T5933] RSP: 002b:00000000ffff8a60 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1528.111827][ T5933] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00000000ffff8c74 [ 1528.111840][ T5933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffff8a90 [ 1528.111851][ T5933] RBP: 00000000ffff8aa4 R08: 0000000000000000 R09: 0000000000000000 [ 1528.111861][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.111873][ T5933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1528.111900][ T5933] [ 1528.178515][ T6920] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1528.873193][ T6920] usb 6-1: device descriptor read/all, error -71 [ 1528.913089][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.005629][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.120463][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.216170][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.389104][ T13] team0: left allmulticast mode [ 1529.391256][ T13] team_slave_0: left allmulticast mode [ 1529.393821][ T13] team_slave_1: left allmulticast mode [ 1529.396332][ T13] bridge0: port 3(team0) entered disabled state [ 1529.405319][ T13] bridge_slave_1: left allmulticast mode [ 1529.409130][ T13] bridge_slave_1: left promiscuous mode [ 1529.412259][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.417415][ T13] bridge_slave_0: left allmulticast mode [ 1529.420169][ T13] bridge_slave_0: left promiscuous mode [ 1529.422990][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.871264][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.877551][ T13] bond0 (unregistering): Released all slaves [ 1530.175235][ T13] hsr_slave_0: left promiscuous mode [ 1530.178049][ T13] hsr_slave_1: left promiscuous mode [ 1530.181030][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.183982][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.187281][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.191119][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.222889][ T13] veth1_macvtap: left promiscuous mode [ 1530.225326][ T13] veth0_macvtap: left promiscuous mode [ 1530.227823][ T13] veth1_vlan: left promiscuous mode [ 1530.231588][ T13] veth0_vlan: left promiscuous mode [ 1531.425696][ T13] team_slave_1 (unregistering): left promiscuous mode [ 1531.429101][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1531.577352][ T13] team_slave_0 (unregistering): left promiscuous mode [ 1531.580921][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1532.466746][ T6331] infiniband syz1: ib_query_port failed (-19) VM DIAGNOSIS: 07:56:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616d85 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc900010fed58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b0f96c0 R15=ffffffff85616d20 RIP=ffffffff85616daf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008009a018 CR3=000000004b6fa000 CR4=00352ef0 DR0=0000000100000000 DR1=0000000000001000 DR2=0000000000000006 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 60ef55523533db78 4753ae74594c36c2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 622dd01e48e50e0f 7bb785a05f7a5883 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea247652868de375 dd7c81bd9c8e4ea4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40f4256998ef5639 452050e278396241 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003dc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e4f93b00d6ea0c00 00039e4400000019 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d689c40035948100 3ebb4e000fb08200 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 418c670000000019 00039e4400000003 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00039e4400000000 db742c0000039e3e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ad880b7757c1ae1f 1144a191946899c8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d4aefbc23eb2689 fad69ef41b075e21 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffc90007a80000 RDX=ffffc90007a7f901 RSI=ffffc90007a7f9d0 RDI=ffffc90007a7f5b8 RBP=ffffc90007a7f600 RSP=ffffc90007a7f528 R8 =ffffffff91d2f05a R9 =0000000000000000 R10=0000000000000001 R11=00000000000863cd R12=ffffc90007a7f608 R13=ffffc90007a7f5c8 R14=ffffc90007a7f5c0 R15=ffffc90007a78000 RIP=ffffffff816ab409 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080202018 CR3=000000004e1de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000009 RCX=ffffffff84e8fc50 RDX=1ffff9200060de64 RSI=ffffffff84e8fc5a RDI=0000000000000001 RBP=ffffc9000306f320 RSP=ffffc9000306f0c0 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000009 R11=0000000000000000 R12=00000000000001ff R13=ffffc9000306f170 R14=ffff888024ff815b R15=0000000000000a0d RIP=ffffffff84e8fc6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4b123bd300 ffffffff 00c00000 GS =0000 ffff8880976c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e6b9cf8000 CR3=0000000047fb9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000010ffe95 RBX=0000000000000003 RCX=ffffffff8b909bf9 RDX=0000000000000000 RSI=ffffffff8de4c5f1 RDI=ffffffff8c162d00 RBP=ffffed1003864000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c320000 R14=ffffffff90ab7990 R15=0000000000000000 RIP=ffffffff8b90875f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057cb799c CR3=0000000054e62000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000