last executing test programs: 25m5.839724317s ago: executing program 32 (id=11): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26", 0x2f) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f00004d3000/0x1000)=nil, &(0x7f00005be000/0x1000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r9, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@link_local, @link_local, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0xbe}}]}, 0x2c}}, 0x50) close(0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x68000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0xb20}, 0x48) 24m51.465368175s ago: executing program 33 (id=35): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="6930d8697c97a65b36159a023034632628cd4474514a1368f1e71dd9b7c48436c2ea07f3bd58a6bbc0f065ddba346122dff6ad81d21cea72e7d951c5c5b21a9f0ba768cd18ddcc7de78e2ba9ac88654a1d99806fb236617ff138f15994a6259de4f933ae62cdc98b2e33514066dd1b9ae1546df8db973d467507b2ecb6a4ece57b2ba7b9df20a0d6817b9fc2ee34e709a8bdef99624ab97472db298354edf3c072c710b9ba9d9a0ae44928172ce6a0d2695a17057255ec6e0b09c684a7f808e38302eb375390ae65d665da7f176a45ed0144a762fc666931f1a4c0ed03fb42e8f7ed4439add1a96b90904330d8e3c91527b405f36e89e44599c5ba4e742f1a281f0dab5fc2dc8855a78e1812ba99ce71fbabef429e87295d941c555c0fdacfa1f3256b70c1fc84b2d0df2c589dac34698d8d108474f84dce58efcbe580b8f348c550c6ca9abe230330d05dffea89475391015c707ddc45a3958a68ea44b5f7d81a84b9064111954da3b5c832df657efd5f0849b32834a053f4a052d7fd7d4db17be80879bf6859bc9605664557eceeb74753416e41b92fb84b572b3c78b6aab6f0bdfcfd7d3a830f12d1b3046e615889ae554db34d35775c6272243d7132426dfc9027ea50d62b91f356c58093933ad75013f9470ec90bfe1d9376002dbbcba9b7e7a1e023f878bfa4d88a9421c035951fd3169c5508ecf28c3a8691605242cc858fb56af44956bb5e677d1d90f0a3b97ad30c74adfc2f22232f7f1fa022c1f0492619cf98381039f26c784ca4d4706f67013bf457fe927aad53c1aa0da90d2730155664d84e41792f3f461840e41135c5b82c87834156b9d6403b7001e5ebb1846a6ad80723387bb92f8d991fa8db1fa65ef90a5054798635c18e7ff7649c41e867fb070bcfef61445a7d0c0c5fa02da82969db96aada4095e8cb2bf7728bf95eb020594c0d3617467701d8c4dd01c750712dae33dfba7548032b48ab93ff3c82e104b08116c1a68fb3b28a1b8ccc23c2698803828d1da099a5437b248078b502f7ccd867af9f8c79bc55643414c57466a781032bdd6dea9acd5cde821480a85c308dd03af012d03cb552b3770124ac279c9427c0e1b761c525eb251598d326bc650b5f055b610688fdaf9789e60fc234f1881536016901ddb2597b47e7bc675cac3ae8c50169230af084998dd6be35dc3609c5edbc93da3fe98ebb475a0d30437017ef640b96fd48ef52f509cf57e65c73ac09603081cd980e8b9d73ef4acf4511cfbb07d5074a6561192c2b2bce29cef8ec70ff599d4751103ffec500a8657d6ef30499b9ad0b10f3e7b6b53fc61dfbbb209e3691b1cba1af62468ebcb61c4c0a776fbfc92c5d2a10350bad29915e44cc952de4226ab646e28ab008683e470ccae3486bdb4ab4a6ffea9a671237bf0943660d929667ebe4a5f9cd1bdecbb53262a4fe3eaeed7fbb4ed1ca40da9e2efdaae4da05b14c754360f3c3e5b96f203c4f87e5feeb73abb88aa57fb850702339b5ac192810597e99fefedd52558fc6aad5d2ac0eaec00dda68467a3c7c7cdc3b724990f1b2f4f65e9181e5ebd0a343c491a1fe0e4378f241bd071fabeb1487044fe5c5eb942eb92dc80ff317cabfa10c75434441716a7339115a3071e45eb2d0800627b99a4fb59e260b26d53953ff3f255dc4bf40d3cc8797287fe3d6356d1eaaf67745ef73844b4c64e89ca0f04a87659427c26f0d6bfa2f4881ef69dc5c7b4515c7c4394f621fb98f2c6f496b7ac640d3a1fcd483ae10c4ee9710a896e67175a679f2461be09c722be20df30c9670299db21bc8aeae63e57ebeab1ca61c265f10d8def8243583e6967c5e40162110025a65f0c658db29f5eb0e50b2dd318ac55209721c8c0d51fb05c9ff3106731b058e14c8c89dd33bef6333f218c9f66e2bd9fd897b985bda3747c88fbd24d90cc8428380048330abb044f9e7107ccae059b961e0c6a53d182de21cb77e12d1ed0faeeb214c9ab6b7dd5f99d9278df393958a7a46aa734726938ca2172e4cba5f0a68cc2823bd5aa622c099fd936e303549ea4a80521b12b616526fdaf00779de369a5a83dcedbb739d426eb7f3864cbe346ff458433ca67a86ccbc703939216e4a001d9ccc84b4c438e5bb583e733973b3b0d2fa9a1bd4be4fc2b497b80e1455657a3f339f512cd38428e022d311075190c8d443cd94505dc52b0c7b6138f2279dcfd0a20a564e45b8f144a6f09e5beda5303f885a7d9fbdb4a6f3778ff9e9fc6e0dbee5bdd0330c3c956ddc36f10fb6811320ab30b4817934bd7e11bdcefb58132a17ac76fb54aaab0188a32eec2284f1a24835cc79c6909f742ab35631b919673eb84d53715dc8bdac9b6d28a24b869929d7fb7bcb34b5b5bab1ee69ee38c86541982806b84db06d0dc81e940a872ca89a5a7e1c191bec2808ac6aa0d733c1d647f88df8455ccfbd35fd5bef780bc8c4fb86efb1951b8382915939779493c20279b165c2b775b7d5b63ea0ceec09a17472bab7ec8122dbcf5ebaf4ac3db25fd0776f13cd67a36ce6cfa58acd262cbf4bdcbf2fa7239c79386dc580121e986de5b78a4351388e7fa6461a7657bdb4383c659409f16c7508d5e5618d116a659bc0462c130b088d63ac4bb69c0d756b5fa2e80004019d6ca5371ea361e8cc613954332ee959de1766f8f3689ab8daf45b69ec0810d0ab7e3b402860c8b94ffc25de57920f8da7a3bc7badc4dc9088bc7f6c71b1d4d960c258cd87abcd739bbd5115aef29f994f062318e8accab85f5c64a263ca14c1629284f7369d86436d174f6f2b1a5e014dc5cc3021efbce66bb88d7b3827be33365d8ab2daed7c6dc0651b77af1dd289684df8e21b6a81c66a27294c7cbf5cd90add094477cd6dec894b140a409add754727459c695c4e63dc73fb491af8c22edf1dbabe56a9969146056259a65f9c1c62973abba625b8065fdcccddda10cd7ff7b2144c63b754af792cfe395902608da630aeed913e9f014bdd184c9341c62fe0c7dd2660e26eab22cbd0d9e21ba0552e71f1ce17407672f01ef1012877fb7da93cdc92056ecad3ab01922b3a8e13661ef1372d84ce5167153ca2551edfed8c2c6557626f2554d67a852a8d2b566fa40c6dfeee3b63e2be83523f64365922531ac93ae196fa6a98b3b8708eb90f410f150c3e8680d9cb7265f108f2b860e7d8c7dd64405bd545eea08520cb33857b3090fe1b364e47151eb847ff444fab989dbe1e03b29409d46fff338d6ae5a4c61426ba4b170d96617774b6f3ae64beb7f791334f4d48d3fd26969d4a4342a8f1088bafdbefbcb1990e9d0fc95edf96113137e619cb15df9c4d9a21de468e40d284f5af88cb8b038540b91ba070f311efe1b081000da886eaddb3aaad90bca70e2ed34dadacccebb095d8e116ac9911c2c4f2a7a95e939853950b5e04a98b6bc9340b28e323ad7cc58888e33ef8bf438080dc26c71c8e12e0bbccb1fde98231ebf61a9011a2190b33c941d927128d30570c11b2a51d919d4caf1fbca673931fb2016b81c12e4a31b3458d0f215c97c9dfec8d514d66e748931b6e8bd06085c7ee8e7b845912053766ceaa20f1917d075fdcf2e9cca3e21bbbb1dc0a5cad36ee44e7a4e136ec5e5fc233cb63d5f035f96628a7abb281b493d9cf8fc4251fc9c3c004bd5d64713c05ba68de2318826b01db27661561b6dd381e5973b887797bb21f7a7f30c9343696a60775c36e5b05eb19dc62fef3ff99f8f00e8ccd25e00bd1863609f51e6a69f7e9c650aff3c8897ed6ee4c8d0b0356627cf69a3a3abd0c352e255b2c6250834c9fb272d83bdeb959ebc1e7207546da012b3eb4861c98fa1fd126b18a14585a2e142b98e5fe902a4961ccbdf7b7728588b7559511b30a2d2e86857d0281bd5e08103dcd11becfeb8e9c5b3e4813c79c14055e46203a5cebaa30fedec57ed23538afa85711e0ef3f72541af4d3e6c938590ee053d4ad1de8ecac6c49f1d70707c4d93e031b6f930658425fb0dfc3cde7c9f775eb3cf28fff76097c35e532335a80053fc198b6de7fb09b87e2219ec04782f35bedffef4c08e6316b25824caffef257d7a072fcd6251450dd9882e25e3e0a05a63b022e53ffcbff4097ad150095fb7065c47f7b8a9fc2c8186a5942663e661d80649af235707a87619d277dc8b5ef70190663991a531d67660c74f778301f9939d4511eca1f8bdee0706fec004a6042e45954f710a9e90081a8b297bcde440bc8d54676ba38397734196aa3835d361d8f36acbe4c1bf0f2782d27611555b19d1b9bd1ba493ab4c3a884216bc143629d8d418518f9a06b2b0d25a5e10ce515f47c5a54fa63212a686eab067600d56b234fba7be63b4d40f8be1fef0e69a55373f8faaa8f02b2b85aaee0720d0dff9a0e84850d998959df6397cd824c1a7bed9b73ca92f83ba66e3f170c3b34a3f7ad509d7bdf916d5367c22454f2252ecbb9a334e2fd2032c569fbf4bfcf6f41bd003ed10911f2644d66f4a6ec4a2eca936fcaff29ea9f454d5fc68575cfcb7e6cf8cffca37d1c5d374ca1ed77ffde5a01d349e4d18ddd15cc7397e696d6a92e0ed7260efd42ac23b5396840df636f85f83b6fcfb27f3503e130200a77c61c01b3c80a5b77c90eff390e27c3c1256efae5da2cb7ca7169cb824a164da49078e461f4640ff4d7b074a32676aac9f96746c36fa151145e1d13187191dc9739fe3c3af9418d6258e525ac82f626666278fc888cc0b8616d851469d3c676c1a0ac6c71b5914009b9797a914f1498f6f439a92205f855a4bf69843489dd425c4b5482522b96f385ab8138aefa8833eaf2056cfd068da37229fc7a5900d30c152cf92cf2a4f7a7505190268b08c9acd3839d560ab5762a0dfca0f2db56e2298c1f7d894b98ae8c98dfc81ef6e8e7a8a7138f12005f54bcfb93c9244468b7c76fc3afdc4c59abea57ce6302291c5130697834e838147d62112c96acefb57900eef463048068a0344f2e09d4c5a9488b63b92c5a67d1486ef56aff7f79c06fc5eb3eed23ea56f4331a638bbde8e9b022c29c08a803fb2e386012a1cf008106e619b5fab2a60653fba60c6ec7fd19f33a8e2ff6dc8046c117d3d8131d5f23b70f900ae5d632a51bf76420b9a1055c4bf49e22b5011e0fd12c12c403b42f54f799ba61b57c0bc0933adabdb909f0609602e73e583a9747a8f0477f0ea3621669343960f2dad82056471f596449ba52bef2fb24959f80659df251df5443dfe6b6a91fe0919cf0193afb37a786f9d13eeeafacd839f876e70c791e911b6e8c35fff3e4dbb787bf50fdcf9c8d001d8c078c0cb994f17a95f08d8de87700286c251011ffd8baf2e976e587730390e412e35b664a1dbff7744b68c91eee7356348c2fbe5a2e38985337cdeceb12c836cb1bade7c4c999eff6333bc5c0f779573080d046f96cca17802a0a2b7b0d36560868c2e54a883bf3ed16d5067adb0f4ff81d246b00ab30aaa58ba139e0e2d84c2b86e77934ff04cbb05f5ce568ceeb3ceb1baaf084160617f6821fc503c238a6daa5ffc19321a878ebad11a898f8d0d27b823c2e3ce57a9333d9d40a492da5ba26593ccf97b25c7b6698d9b8b4a46dce1c81c98093a790075411a6a7abca59e592f37eac9d588ab3a2e86edfbba12bbb83af804afb015a8c240dda9124a0c9c9691569eae6e948b48d4cf470f898075a1d5f13a239b3c1e31e8d98ddde799d8c3035d1e3949c2ec5a760a0f38314f66b3bf40de785c7a60a8f22d701a9e70d6a3f1b35d6d1e94038f8a7f4c97fb5370c9f83e31daa73a6e648a21e929324faa27482b039bf2d55032bfd8d1b5712b9250c8269b0daae8dbb5c8d4a243484b0d5f941a987242d06987bedfa97a3e062510c9b4cd3b82222ef22a4927749f38bd4259c3e6c8d8cbf0a1224bb80d8a5923827e18b18778dd44e7e3fa8b8b407c0cdec6fbccb5e33c2fbd9f5f0a7e35c4a04dedd69cdda7d888f2082903dd86e45732a687568a248a9af16253db86bae7e893a8a8c380e53d596733523499c74ab1c1b1ab26888533bf2d3ccfe221033442ce0d34aa34bd9c420d4e39413c95de2c2acdc520fc6ce524149bc80e9bd32bc7d72e7def1c425391fdee15cd89a090ec7aa29a4b9c0bfc01df19b9bf692c4569a9f3e0e19b288710089f677905780d2c3132c909cb29bee3bd6d62f060a944d66c78493b01279203e7a1185001ee8f6cb0967e8b3ce9aa50106c5576912a7dae46229ff03b65cc659cf49dae6aa6b162d6dba82119c511119225d6a536fc24bbc55f6e237d957a43f351c50378d0efc9ba1eac7d6a1b280c16454452294c457b8eb10dabc768edd67877b2ed08abba8768bc6579eccde4839ee7d68f80cc4aa318fd458f97ea9609f3135ea417aa455592e394b1f5ab6ccc14385ddbb416d47279e5748ee4e02e76ecba7d7474fb6ed6a851da3e156a7542bb9ad9b48b8362bff43755ce5b657d5a752ef632bb416184e70f1937c494ed9db084cc1177ac6c491772b739fba1b4be52acc2cc0975c8dc0b00929f503fb3cfe4c7e6670295edaef2327cec950737f0cc96eb30e7fa8217d9b9968274c413ec79e1b050814145432bf164f6e7b75a43424dec600502011190097ffd1edf795be01c4135a9be178b6b050d82d8542375abb40f0fe776965bf3f0630a2652e5bcf3dc237a84a4634081d0a9ba1842e6ddd4faf787aa6449a50fa9498ffe97c2759558112d1b0ec0db512d7990fc0efce6bde80f4b1ec9799d0cdcd41e6863eb473c3edb5c2e70ddc7d3aba52c2ad2e054b01eb3d92c2023b33975b23a72211fec063bb4fbaa49abacc47efea7d5ede3675ad49eb74b7fdaa5667b9ddff2e6007eccc90a7cfda32a053d9fd2aa1d01fe54c112b955d8c26e3e0ac2994fcf3f50d1fb129ee3df3db886d93faad74cec81c11e2e0922fcd0b2187cb75369598a3b5c8c8495870403b2593647a8a2d4d86601da9fbf49f1222dcfe5b64d0102d3c9296d0c0d459c5a7bab1580fb0b25a5ef71eb579546bda6ea58be241ec8ac9737e0e30ea47fa93c4cf2d44d2b6421c856dd5e1c2c3569040113d7006be693b293074a2a6188b228129fc79f9984f5bafd6f7a32f68bd3dc7197a7094e93561d208f0c948d364743854efc6af051a3e2a7eea8f132442d1e3a87e670190f3752ef0699f470ed15719ba274371179935ff79853b928cda754d1045929f8db75ca71825f21642f738622e392bc0b35ca98eff3821b7d122732f8ccf8d251d84589ce028d2efe7d7cbd34e8137f518e2feda64d9c788713df3e1450e8a36dc031c22f3d5bf7d294a66f90b64fd285aeded6e4a07b82c740c87598a9684f8f6d47b266169696b126e66d7b4532ace038a2b7921bd62fc806bb552676abb8204b4ad975d449d1be97ec9b55dc8b2b10a3dfe4880487de3f8c6a3b4426ac6adfa03845b4d0cf1e6cbd86be473d154bf7439dee05d555268a769ab339b299379cb8546f16ed8bbb789049eb57dcaca48c26e78982cc331ba474bcdd9f893f5f6526b4999fabcadc7bc6e8805ecc68902a31522e20b3f1817c1b516f16ab5bcdc7101165d59ce074e633dc68202221d2bae4ea62a13f6a5e7c82e8fd232fc076ca7399b5d01c325d67ab82f50acc789dfe8cab35de7e2131081a9d90606e5dc5a9c3af3fc9bc895174215d8aeae8dfe75b33be25298a11eabf2e0481050731edb27894df45a17985ffb4f3f27ad6393af9ac6f461737394ffc89f9549b7607dbecbf7803899d2e6513a74473ec0fb6569f6d27cc9a83f242f4ab78aea3c293ee846a2e0b3114991d5543902c848a7e451da4789e478f707e585defb47e3ce3525cfa17571772e1526c16c1065e5f438442c25e43e1023511022647244415f0bb7d28be2f7a75dae78b5da0f9d063c66ac396ef0b66fdb7e701e4caf9a435ccc476cdf3e5356ade531a3e33640ede4af542bcdb1ec54fcfe6f0ba105e0fd72b707611020ae1adc3f794b3c66e3c1f9ab0c87e5641a4891d74a194b9cd8ce14c81ad35df9a3c7862921e2d8c3942d4a57f4f4d13a6d82d75a21f1b862e8f4402c8b2c0fe2fb788ab761a22a4377497b34d137d0184d2d7bce69826e7ecbf63a89b133f263d58945627bd79472e3cbef5595a0c9d2e512605b578f2e558d4c4b31416c12f5709f68bd4e7ab1b0954f395299d634102bbbc97506e2dc938c5ecd9fdb26566eeb4de1621954ecb5af9b0d9d39b0fb1b972fd92b959277bf78d0a1763df9d9bc4182ad3f3b8eeb19d00cf41016f4d0d4623f2541a73f588f5108cde960b0bdc93ec260c14a498931226c981b41804bc09ca8a9168d9a4e17d269815e7ada71be1fc410b38874aa5782abc7ba7976daa94d724c9687c419165e77b7effe77d07e5fd6f55993b8a151889e57166c2ff63f04e3e09eead6f8c92e49e926c8f60a2f933c8926be5fb83b650b126cdbd9d239f6f11d717f8f32fd757350e7db0bd32e191052524922b2bf2b92801a717be7504ab79d55e425b09a79c8a84af1cf94c66dada7789e6d67dc041b4ac0e57c4e658d11be13af2fc3c200086e147a2223296a4253297155210440f0f17c3aa21ab7e15fe2e12bb9e9356d1018cc68313034b469152b650adab57f73350a6c0f76a36580a7dd8af218d656fa4bdd57b9d584e5acd1fa95e14120d7f9ed1fc3a83aa24135ca45472844d115f0a1bdebe2f6bc37cabdd0d7f9aab4fdc6a2c58aa0beb0ce431620d5ede6ef98e2b77e8d0558d250aa20c54c62d4b61d9bdd63286c6887ee3a556677e0673c94e46b9f834c6e4996b1c91141cd0d39b712f93e5195a7f7838f3af8325f649938d8c319ceebfa8154d23197bcbcf616be6f1f5d6fc070ed76abe89d6b94bf8a8d3f5b9bedce758b17d1e0be38bce845c8c3209d3fc30901494408c96956d050d14548d6edf55f4add18c91fb6da723a0c7c3c3f4c4b3a7056e611bdabdfd4edfb7a79a2b02c05ef4027c15db8bf2bcd015c66ae6d3203164615c56dba94606702caa577777e05e642ce3df5573ba3ae268f4ce4b38cc9013faf21d7dd7174ce7ea498c9451a1626f02398e49a33def46d228edb6de6fe8dec11f553634fb923849e3cdfbe645cff327b8251afc107b7fb8cf3cd735ed9bb1275ecc804a4f126bfeb853e13e636a74a4efc9faf01118aa82d00ac20ce0c0af140c756ab90e5dfa238707318c353c7bc9342c36ddcb6e74400933c8fa99448f3a169b95cd6d2558d755e1dd53f3fcfc46b057c550de64829e556c8cae40e796ef76fcb953086168fb2eae89349f29d3dd26ac6282292355be3b123b0c02e553bfb8948afe8d7e8ae5d63184b20795481a9385be05e9eff807b94eb1e977d50a7dd7da582695aa496a9a7587d01f970c3ed8d63db217164824d8b8bf4c5e493f801e1ed241afda4b695a4c606d6b5344493d9922dff76b4be7021d26b60d1f785d205c39d83694b0585eff60c9e1bb2f7023c5b5d3d043897baa9a9ef3507c280d9580d43c7985db146694b8649e2bf67e37081a945c4c81fad0a48e64d8877dd149443c8f4d2267b4aeaec8f168b44d5af109f505644e2a545fefb13d673210bd2b418b054cb4fc9fb7f2041e87be5f31466b51b308deff16bd9878a3ec72d0a1ad27c5cbd497b2c9585d914392da52b3708b198a3693d2988f03c7d3a41762c78cb9c268dbbcb0d1efc800fab4183286d924604a5fe9657cebad2d8bb0ef0006a46a4ef9fe92c3fdc1682b993239421879cb5626bae2368b646e61c870342b5cbb7f7baab7142a9ca2378805310c1abc12098c796550a20f3d5f01141470c1b5550857202ec712e3813d1ff7150111f4730bd83c8516aa86b345c280fb461c7bc6ff6f0bea507033d312027f51b4a90becfb048e676bfecfe2b1cd7504a226e89bb4df31d13436db7765062fc74789b75f82e77a6e83f49092558d38da47755ca0373ee0979c880e224bd5f70d6a69d8e2463d9b70bc7dbbdc9f27e1ba38d5adfdd6a5a0c564cda76a9ed6dc0e5117b06b9817d6d47f2a82d41a5a821431fe5f38eb3417d820c769afc09ffd001fd0a6f3c3879dc74ffcba15b8b29a4f435249226ee1cd7fb8c0bb6ec9012178bd25c05e69cb1d6e7121295a4e166c80d918b915232e6e8823ed6529eda300f2541142092df194de0cc255beed438afa94cbd350acf809e7f0467830b20108b95c9b653b030e311026cecc32332697cc2f8ef9cecb227de6de7144fc4b25e2180784f55204b17612228548fc825e60c88144c72abf3cb468a2d5491c431f38d858fb5471ce84c69d1d2b38e8ae2b134f4f94aa03996b2e0f1edc538ff32f7ee409b79922660b0f3421083298b14f26733577ff59b672b7214bd0e4508503c61da0b70cb6186b01ed575f9e5bf8f3bf538c2260f4a82755094c33c931ad0bb346518cff593de0985602852749610e073f20dd0be87ec8c452c3dfb4ac19d73a489e74a8a48411faac7ecf7e53d76ced94495ec2e814259fb5114a7986fb81a936d38c99443ebd55026acc6c78e1b14728551bae0bdb86cd518eeeb22dbfd7f7a32d2b94f7b0f757f34d6d22156e4dc1e7b9533fcf7a0d0cc3e41480345ddc68c11e47f8c514f1ed601d69e5b36e03962643544064ddbf689a3cbf378074879f6cd33d56c0a728a2050ab202981d6723b99a0e505cd8fea39da000bc7608a53024614407a5ebd5e034b9a59fa952841ab4f0758e988161e56fb454db449b3090eb1c4154ea6e34ea13101bb3a62dfa1878448952b1955a3c462432d7035228caf6ed4381e3ec1295e90decc62ebed5e60acbae3d26982e7834ee00a7632f581b6198f9bf42161a4980d08fac53d40b81731e4c727f5a24e75f6a262a1d2ab37b3ebc09ca6b0ffb0a1edf942e93d17d95eb3532b57488469575d9d47c2d08eec166f8fc1f6183795e1d5e48f46ae05a173af5765e03e98e6710b408cbeb169fb67f1d79a1999a977b7df51d7ede5aca5d31e9d75d2be3838a014d8283c3566ef5ea37955d6e66628d755c927e14d40f723428a69e03c8b100924b72e2c49926208044ff49536b0a1eca6c7c42ff9c90716fa35b02d2d869bcceb60e91dacf34ac1249f5d7934a078417e4fd416da2fbf9122fd37c042712ad9ce8592806b556d26163990b11466bf759615d2b852e75681a8b87571b5f0a21a4b5617cb94e2dc9efb264c0a331a752994d10a958b245cb40d9985365c4dd3b9551c4d03157aa29222a2af29ada6c123eaf08722310da16f7611cfe729255044642a8c5cb9f94c3f778248bf35520ac980af12ddd3b001df23404e49e3a57cc11fd12e51e422a92b5bf9e2ad225d42ad5d0325ca35804340fdde061c5bf2a4c8cc86e946a60040130ce831b9be93885f4ddb9fb7584ad875b05d59128f533c40c541ec03dfccba2af6fbdae4efb10a45e0f7d9851126b1dd9d374cec36067cdf2eefcb0a0cbf5619fa7ac2027d4b5c9da389bc1ffee655aef769a5aa542b291c0d71c8dc5e54268dc5f86a4133cc917a84efaf1456de9106c6fb3f5d41ff9f9a76a1dd3243a5e99c95e933d32e13f3eeb5a550", 0x2000, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e00000000a0dc4d663b"], 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23m46.843421482s ago: executing program 34 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x8, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e20, 0x3, @private2, 0x1}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x5452, &(0x7f0000001080)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = socket(0xf, 0x3, 0x2) write(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) r6 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000280)=""/4096, 0x9005) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0) 21m14.54788493s ago: executing program 35 (id=448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x3, 0x8, 0xff, 0x3}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) modify_ldt$write(0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x41045508, 0x0) 19m25.123258287s ago: executing program 36 (id=635): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000380)={0x0, 0x0, '\x00', {0x0, @reserved}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r4, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {r4, 0x8}}, 0x10) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 18m52.496487501s ago: executing program 37 (id=677): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10, 0x4040011}}], 0x1, 0x0) 14m45.380755661s ago: executing program 38 (id=1172): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mkdir(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/212, 0xd4}], 0x1}, 0x33}], 0x1, 0x10040, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0)={r7, 0xcb}, 0x8) r8 = gettid() r9 = epoll_create(0x3fc) r10 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r10, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0xeeef0000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000, 0xfffe}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 12m13.374924053s ago: executing program 39 (id=1514): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 12m1.623335716s ago: executing program 40 (id=1542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400003800008000b400000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x3000000, 0x0, 0x4044081}, 0x0) 7m22.283625669s ago: executing program 1 (id=2372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x5c, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m20.649695542s ago: executing program 1 (id=2376): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x103002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@generic={0x8}) 7m19.887976777s ago: executing program 1 (id=2378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) unshare(0x28040680) 7m7.855881235s ago: executing program 1 (id=2411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x800, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4000) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5234a, 0x48308}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68810}, 0x4) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802}]) 7m5.742909983s ago: executing program 1 (id=2418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000200)=0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) recvmmsg(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000bc0), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r3) r4 = socket(0x10, 0x3, 0x0) unshare(0x24020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) write(r4, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000000b80)="1a", 0x1}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4004041) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x160, 0x0) 7m4.122949151s ago: executing program 1 (id=2421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) unshare(0x28040680) 6m48.10752483s ago: executing program 41 (id=2421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) unshare(0x28040680) 5m56.500639786s ago: executing program 7 (id=2606): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001840)=""/141, 0x8d, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000480)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 5m55.579691693s ago: executing program 7 (id=2608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000"], 0x9c}}, 0x0) close(r0) 5m54.671058081s ago: executing program 7 (id=2610): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x48, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x34, 0x1, [@m_csum={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000014) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m53.674225958s ago: executing program 7 (id=2613): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m52.753163163s ago: executing program 7 (id=2615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) 5m51.873438422s ago: executing program 7 (id=2618): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 5m36.044279714s ago: executing program 42 (id=2618): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 3m39.698245854s ago: executing program 4 (id=2858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe0351244d391edad}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x4, 0x0, 0x0, 0x1000, {[@sack={0x5, 0x6, [0xd]}]}}}}}}}, 0x0) 3m38.69536034s ago: executing program 4 (id=2861): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x5c, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048890}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m36.608638851s ago: executing program 4 (id=2863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1afb640cf24e459220900000001090212ad8c000000000904210000080650"], 0x0) 3m33.860076237s ago: executing program 4 (id=2868): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) rt_sigaction(0xf, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @private=0x80000000}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_post_recv\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x24) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='8'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) lseek(r4, 0x851, 0x0) 3m32.229323182s ago: executing program 4 (id=2872): syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xee) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x2, 0x80000, 0x0, 0x0, 0x10000}}, 0x50) 3m18.218634905s ago: executing program 4 (id=2903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB='\x00'/21], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000013ef90b4b278911ea0331347cade267", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000180)='./cgroup/../file0\x00', 0x200400, 0x40) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.458910096s ago: executing program 43 (id=2903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB='\x00'/21], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000013ef90b4b278911ea0331347cade267", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000180)='./cgroup/../file0\x00', 0x200400, 0x40) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m36.440458389s ago: executing program 0 (id=2961): r0 = socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@local, @initdev}, &(0x7f0000000100)=0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = dup(r1) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x3, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000001907800001312473ecfd2108b000000000000000000000000633a36f50623d0a222688cea8d91a888ee4aebdcf97fb9e7da8eefede8a810c398455bb51d5f368ca9054e94ba06ecd7314df89825722798f67cd9209adbccf306474b53f7c1d6f865df1b6a51583e897a39aaf05feaa60dcdc1abd92e7df0fbe2582bf8f3ee9b004dad3e5e12a98ddb0e6bb477fd1d5bd3221e3b4f8b3d44fca1950a619630d07025066cbb6e5fb5167343bc"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x80001001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) 2m35.480817739s ago: executing program 0 (id=2963): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) symlink(0x0, 0x0) 2m34.527764387s ago: executing program 0 (id=2965): socket$inet(0x2, 0x4000000000000001, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000001440)=0x9) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2m33.423647562s ago: executing program 0 (id=2966): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m32.476684213s ago: executing program 0 (id=2968): syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xee) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x2, 0x80000, 0x0, 0x0, 0x10000}}, 0x50) 2m20.880948168s ago: executing program 0 (id=2987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="59e8c238a7809e7923826a67bfeadc21544f194e7c6138a5a7b98c9b0a778d5e5fa41423f5778fe2dcf82dad78896b334bdaf6fca9b5a6b0402a4607a18b905ec008415e55b2592828d7d2dbe15f1b8dfdb67a6db3c329547830aa7e12577b1461a61c6bf0c83c176f6e9d41b5e04c2fd34a", @ANYRESOCT=r4, @ANYBLOB='\x00'/26], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000013ef90b4b278911ea0331347cade267"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.359581476s ago: executing program 2 (id=3000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8) sendto$inet(r0, &(0x7f0000000200)='%', 0x1, 0x4000054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001b80)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000580)="5d094bf726b70bbd0d91c1fe4c826a3fe11d5d7ce574261c0fb27fd6b7d89055c59cedb91abc812353f993d9d8ca82fa7debf2c760278d57f8b830e0158a70a2f6f40f328afa7e5ef7f7699066423a37a184848b1d", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001000)="5120ad94ae44de1b71cc09606d8e09ed981d3284161ffea1cfe080060d4580a5e2fe94e147a72da119b0fbd8349634bdd96030052a070eb51d87d6b275f159934f1568ed23641281b010f4569d52d93e5e7d55", 0x53}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x3, 0x48014) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m10.747905082s ago: executing program 2 (id=3001): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000300)={0x30, 0x5, 0x0, {0x0, 0x2, 0x56d, 0x7}}, 0x30) 2m5.860297315s ago: executing program 2 (id=3006): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4afdbc4"}, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0x7, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m5.531123167s ago: executing program 44 (id=2987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="59e8c238a7809e7923826a67bfeadc21544f194e7c6138a5a7b98c9b0a778d5e5fa41423f5778fe2dcf82dad78896b334bdaf6fca9b5a6b0402a4607a18b905ec008415e55b2592828d7d2dbe15f1b8dfdb67a6db3c329547830aa7e12577b1461a61c6bf0c83c176f6e9d41b5e04c2fd34a", @ANYRESOCT=r4, @ANYBLOB='\x00'/26], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000013ef90b4b278911ea0331347cade267"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m4.418354111s ago: executing program 2 (id=3009): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) ioctl$EVIOCGABS20(r2, 0x80184560, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) pipe(&(0x7f0000000040)) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x33524742}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 2m0.356569617s ago: executing program 2 (id=3016): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 1m58.260148153s ago: executing program 2 (id=3018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x7f, 0x2, 0x8, @mcast1, @private2, 0x7800, 0x40, 0x4, 0x1}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 1m42.926909751s ago: executing program 45 (id=3018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x7f, 0x2, 0x8, @mcast1, @private2, 0x7800, 0x40, 0x4, 0x1}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 40.572728949s ago: executing program 6 (id=3128): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 39.657833172s ago: executing program 6 (id=3131): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}}}}}}, 0x0) 38.631681052s ago: executing program 6 (id=3133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe0351244d391edad}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x1000}}}}}}, 0x0) 37.832951555s ago: executing program 6 (id=3135): socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x109301) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffffffffffffff, 0x8}, 0x0, 0x0) 37.028349604s ago: executing program 6 (id=3136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8) sendto$inet(r0, &(0x7f0000000200)='%', 0x1, 0x4000054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001b80)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001000)="5120ad94ae44de1b71cc09606d8e09ed981d3284161ffea1cfe080060d4580a5e2fe94e147a72da119b0fbd8349634bdd96030052a070eb51d87d6b275f159934f1568ed23641281b010f4569d52d93e5e7d5514ab4448852c93304b06d0", 0x5e}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x2, 0x48014) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 36.345232974s ago: executing program 6 (id=3138): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x1, 0xa, 0x9, 0x1, {0x5, 0x17d, 0x4, 0x3, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x8001}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf2505000000080003006db0492fdf8be01a82c011dfa1c8ac05e614b592dde4b8e1e3febce4e6bd207c", @ANYRES32=0x0, @ANYBLOB="0c0006000200000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) clock_gettime(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) 20.900918748s ago: executing program 46 (id=3138): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x1, 0xa, 0x9, 0x1, {0x5, 0x17d, 0x4, 0x3, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x8001}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf2505000000080003006db0492fdf8be01a82c011dfa1c8ac05e614b592dde4b8e1e3febce4e6bd207c", @ANYRES32=0x0, @ANYBLOB="0c0006000200000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) clock_gettime(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) 12.996383514s ago: executing program 5 (id=3177): socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES32=r0], 0x0) 12.70597568s ago: executing program 3 (id=3178): r0 = io_uring_setup(0x3bf9, &(0x7f0000000040)={0x0, 0x70a6, 0x2, 0x0, 0x1ed}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001340)={0x1, 0x0, 0x0, &(0x7f0000001280)=[{0x0}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='sys_exit\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) r9 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)) write$vga_arbiter(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000025c0)={0x1, 0x0, 0x0, &(0x7f0000002540)=[{0x0}], 0x0}, 0x20) 12.147811124s ago: executing program 9 (id=3179): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24, 0x0, 0x7}, {0x6, 0x8, 0x3, 0x7ffffdbd}]}) 11.487637844s ago: executing program 8 (id=3180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) 11.487434267s ago: executing program 9 (id=3181): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}, 0x0) 9.391287507s ago: executing program 8 (id=3182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8) sendto$inet(r0, &(0x7f0000000200)='%', 0x1, 0x4000054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001b80)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001000)="5120ad94ae44de1b71cc09606d8e09ed981d3284161ffea1cfe080060d4580a5e2fe94e147a72da119b0fbd8349634bdd96030052a070eb51d87d6b275f159934f1568ed23641281b010f4569d52d93e5e7d5514ab4448852c93304b06d0", 0x5e}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x3, 0x48014) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 9.113839224s ago: executing program 5 (id=3183): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x400001) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000200)={0x2, 0x2877, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x24a5c07, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000007d40)="$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") socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x4, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x15fc898106c5677c, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 8.495356183s ago: executing program 8 (id=3184): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x802, 0x3865, 0x8, 0xdfe, 0x40, 0x5, 0x65cf, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) 8.438577578s ago: executing program 9 (id=3185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0x36) 7.723119953s ago: executing program 3 (id=3186): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 7.088548942s ago: executing program 5 (id=3187): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x400001) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6.789953229s ago: executing program 9 (id=3188): r0 = socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@local, @initdev}, &(0x7f0000000100)=0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x3, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000001907800001312473ecfd2108b000000000000000000000000633a36f50623d0a222688cea8d91a888ee4aebdcf97fb9e7da8eefede8a810c398455bb51d5f368ca9054e94ba06ecd7314df89825722798f67cd9209adbccf306474b53f7c1d6f865df1b6a51583e897a39aaf05feaa60dcdc1abd92e7df0fbe2582bf8f3ee9b004dad3e5e12a98ddb0e6bb477fd1d5bd3221e3b4f8b3d44fca1950a619630d07025066cbb6e5fb5167343bc"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x80001001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 6.064212302s ago: executing program 3 (id=3189): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000180)="e6270ebc", 0x4}, {0x0}, {&(0x7f0000001700)}, {&(0x7f0000001780)}], 0x4) 5.213982369s ago: executing program 9 (id=3190): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) accept4$inet(r3, &(0x7f0000000100), &(0x7f00000001c0)=0x10, 0x80800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) fcntl$getflags(r4, 0x40a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000bf0a0000000080008f00000000000000e4dbb045625f3bd8ff7a6c2ba41062b7c954fda317fa6fcef733"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) get_robust_list(r0, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x242, 0x2a1) ptrace$peeksig(0x4209, r0, &(0x7f0000000400)={0x9, 0x0, 0x2}, &(0x7f0000000900)=[{}, {}]) sendfile(r6, r6, 0x0, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) 4.922111663s ago: executing program 3 (id=3191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, 0x0, 0x0, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9120008c}], 0x1) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 4.764764768s ago: executing program 8 (id=3192): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0) 4.585527483s ago: executing program 5 (id=3193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8) sendto$inet(r0, &(0x7f0000000200)='%', 0x1, 0x4000054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001b80)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001000)="5120ad94ae44de1b71cc09606d8e09ed981d3284161ffea1cfe080060d4580a5e2fe94e147a72da119b0fbd8349634bdd96030052a070eb51d87d6b275f159934f1568ed23641281b010f4569d52d93e5e7d5514ab4448852c93304b06d0", 0x5e}], 0x1}}, {{&(0x7f00000014c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x3, 0x48014) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.764520708s ago: executing program 3 (id=3194): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}, 0x0) 3.532967685s ago: executing program 8 (id=3195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)='U', 0x1080}], 0x29a, 0x0, 0x3e80}, 0x0) 1.713590486s ago: executing program 5 (id=3196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x2b, 0xb, 0x0, 0x4, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.27617675s ago: executing program 8 (id=3197): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x18, r6, 0x1, 0x0, 0x0, {0x16}, [@HEADER={0x4}]}, 0x18}}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) r7 = inotify_init1(0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x2}, 0x6e) inotify_add_watch(r7, 0x0, 0x20000004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 621.020296ms ago: executing program 9 (id=3198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 565.667993ms ago: executing program 3 (id=3199): socket$inet(0x2b, 0x801, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x3, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000001907800001312473ecfd2108b000000000000000000000000633a36f50623d0a222688cea8d91a888ee4aebdcf97fb9e7da8eefede8a810c398455bb51d5f368ca9054e94ba06ecd7314df89825722798f67cd9209adbccf306474b53f7c1d6f865df1b6a51583e897a39aaf05feaa60dcdc1abd92e7df0fbe2582bf8f3ee9b004dad3e5e12a98ddb0e6bb477fd1d5bd3221e3b4f8b3d44fca1950a619630d07025066cbb6e5fb5167343bc"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x80001001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 0s ago: executing program 5 (id=3200): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): veth1_virt_wifi: entered allmulticast mode [ 1431.658549][T15811] veth0_virt_wifi: entered promiscuous mode [ 1431.664783][T15811] veth0_virt_wifi: entered allmulticast mode [ 1431.674041][T15811] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1431.681693][T15811] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1431.690161][T15811] veth1_vlan: entered allmulticast mode [ 1431.699218][T15811] veth0_vlan: entered allmulticast mode [ 1431.709525][T15811] vlan0: entered promiscuous mode [ 1431.715636][T15811] vlan0: entered allmulticast mode [ 1431.723982][T15811] vlan1: entered promiscuous mode [ 1431.730225][T15811] vlan1: entered allmulticast mode [ 1431.738370][T15811] macvlan0: entered promiscuous mode [ 1431.744689][T15811] macvlan0: entered allmulticast mode [ 1431.753239][T15811] macvlan1: entered promiscuous mode [ 1431.759798][T15811] macvlan1: entered allmulticast mode [ 1431.768341][T15811] ipvlan0: entered promiscuous mode [ 1431.773800][T15811] ipvlan0: entered allmulticast mode [ 1431.780268][T15811] ipvlan1: entered promiscuous mode [ 1431.785633][T15811] ipvlan1: entered allmulticast mode [ 1431.792385][T15811] veth1_macvtap: entered allmulticast mode [ 1431.801352][T15811] veth0_macvtap: entered allmulticast mode [ 1431.811480][T15811] macvtap0: entered promiscuous mode [ 1431.818341][T15811] macvtap0: entered allmulticast mode [ 1431.827004][T15811] macsec0: entered promiscuous mode [ 1431.833248][T15811] macsec0: entered allmulticast mode [ 1431.841654][T15811] geneve0: entered promiscuous mode [ 1431.847471][T15811] geneve0: entered allmulticast mode [ 1431.855576][T15811] geneve1: entered promiscuous mode [ 1431.861201][T15811] geneve1: entered allmulticast mode [ 1431.869887][T15811] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1431.878055][T15811] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1431.888749][T15811] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1431.896483][T15811] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1431.907540][T15811] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 1431.915387][T15811] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1431.926450][T15811] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1431.934534][T15811] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1431.945034][T15811] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 1431.952613][T15811] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 1431.963410][T15811] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 1431.971964][T15811] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 1433.018093][ T9609] Bluetooth: hci3: command tx timeout [ 1433.126313][ T4207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.221081][T15774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.229266][T15774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.237436][T15774] bridge_slave_0: entered allmulticast mode [ 1433.250928][T15774] bridge_slave_0: entered promiscuous mode [ 1433.275076][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1433.365547][ T4207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.519403][T15774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.527830][T15774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.535775][T15774] bridge_slave_1: entered allmulticast mode [ 1433.546369][T15774] bridge_slave_1: entered promiscuous mode [ 1433.646407][ T4207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.833497][ T4207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1434.127729][ T9304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1434.158735][ T9304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1434.175221][ T9304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1434.212465][ T9304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1434.232342][T15824] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1434.246999][ T9304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1434.357495][T15774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.392302][T15774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.636069][T15774] team0: Port device team_slave_0 added [ 1435.097120][ T9304] Bluetooth: hci3: command tx timeout [ 1435.225641][T15774] team0: Port device team_slave_1 added [ 1435.740160][ T4207] bridge_slave_1: left allmulticast mode [ 1435.746075][ T4207] bridge_slave_1: left promiscuous mode [ 1435.755115][ T4207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.898447][ T4207] bridge_slave_0: left allmulticast mode [ 1435.904453][ T4207] bridge_slave_0: left promiscuous mode [ 1435.911481][ T4207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.236120][ T4207] vxlan0 (unregistering): left promiscuous mode [ 1436.242771][ T4207] vxlan0 (unregistering): left allmulticast mode [ 1436.308932][ T4207] team0: Port device vxlan0 removed [ 1436.367824][ T9304] Bluetooth: hci4: command tx timeout [ 1436.412885][ T4207] bridge0 (unregistering): left allmulticast mode [ 1436.499678][ T4207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.540174][ T4207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.583998][ T4207] bond0 (unregistering): Released all slaves [ 1436.804255][T15774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.812068][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1436.842448][T15774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.961066][T15774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.970096][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1436.998690][T15774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.049769][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 1437.079455][ T4207] tipc: Left network mode [ 1438.035151][ T4207] hsr_slave_0: left promiscuous mode [ 1438.071860][ T4207] hsr_slave_1: left promiscuous mode [ 1438.080044][ T4207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.113165][ T4207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.147199][ T4207] team0: left allmulticast mode [ 1438.152411][ T4207] team_slave_0: left allmulticast mode [ 1438.159070][ T4207] team_slave_1: left allmulticast mode [ 1438.164784][ T4207] team0: left promiscuous mode [ 1438.170182][ T4207] team_slave_0: left promiscuous mode [ 1438.176954][ T4207] team_slave_1: left promiscuous mode [ 1438.238306][T15291] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1438.257201][ T4207] pim6reg (unregistering): left allmulticast mode [ 1438.452314][ T9304] Bluetooth: hci4: command tx timeout [ 1438.750606][ T4207] team0 (unregistering): Port device team_slave_1 removed [ 1438.811220][T15291] usb 1-1: config 0 has no interfaces? [ 1438.890027][T15291] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1438.899958][T15291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.908772][T15291] usb 1-1: Product: syz [ 1438.913413][T15291] usb 1-1: Manufacturer: syz [ 1438.918452][T15291] usb 1-1: SerialNumber: syz [ 1438.953161][ T4207] team0 (unregistering): Port device team_slave_0 removed [ 1439.210862][T15291] usb 1-1: config 0 descriptor?? [ 1439.615906][T15774] hsr_slave_0: entered promiscuous mode [ 1439.626601][T15774] hsr_slave_1: entered promiscuous mode [ 1439.636477][T15774] debugfs: 'hsr0' already exists in 'hsr' [ 1439.642621][T15774] Cannot create hsr debugfs directory [ 1439.722816][ T4207] IPVS: stop unused estimator thread 0... [ 1440.208944][T15828] chnl_net:caif_netlink_parms(): no params data found [ 1440.527804][ T9304] Bluetooth: hci4: command tx timeout [ 1441.217278][T15291] usb 1-1: USB disconnect, device number 44 [ 1442.445773][T15874] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1442.456318][T15879] syzkaller0: entered promiscuous mode [ 1442.465252][T15879] syzkaller0: entered allmulticast mode [ 1442.528828][T15828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.536534][T15828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.545843][T15828] bridge_slave_0: entered allmulticast mode [ 1442.555998][T15828] bridge_slave_0: entered promiscuous mode [ 1442.615329][ T9304] Bluetooth: hci4: command tx timeout [ 1442.666962][T15828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.675409][T15828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.683820][T15828] bridge_slave_1: entered allmulticast mode [ 1442.696490][T15828] bridge_slave_1: entered promiscuous mode [ 1443.044731][T15774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1443.128302][T15828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.156496][T15774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1443.212239][T15828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.231467][T15774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1443.250343][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2672'. [ 1443.402152][T15774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1443.656324][T15828] team0: Port device team_slave_0 added [ 1443.737873][T15828] team0: Port device team_slave_1 added [ 1444.487773][T15828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.496652][T15828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.525570][T15828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.606572][T15828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.614943][T15828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.641800][T15828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.398452][T15911] binder: 15908:15911 ioctl 4018620d 0 returned -22 [ 1445.443003][T15828] hsr_slave_0: entered promiscuous mode [ 1445.454115][T15828] hsr_slave_1: entered promiscuous mode [ 1445.463703][T15828] debugfs: 'hsr0' already exists in 'hsr' [ 1445.470129][T15828] Cannot create hsr debugfs directory [ 1445.500876][T15901] sp0: Synchronizing with TNC [ 1445.508189][T15911] binder: 15908:15911 ioctl c018620c 0 returned -14 [ 1445.967725][T15774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.443455][T15774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.607721][ T9609] Bluetooth: hci4: command 0x0405 tx timeout [ 1446.653591][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.661755][T10702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.818156][T15904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1446.825194][T15904] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1446.832401][T15904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1446.839013][T15904] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1446.899014][T15904] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1446.920012][T15904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1446.926622][T15904] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1446.930359][ T9304] Bluetooth: hci1: command 0x0406 tx timeout [ 1447.039450][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.047368][T10702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.103170][T15904] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1447.155978][T15904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1447.163678][T15904] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1447.244599][T15904] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1447.755900][T15924] syzkaller0: entered promiscuous mode [ 1447.763444][T15924] syzkaller0: entered allmulticast mode [ 1447.788584][T15926] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1447.942197][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'. [ 1448.234999][T15904] [U] è [ 1448.616387][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'. [ 1448.826272][T15828] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1448.867712][ T9609] Bluetooth: hci2: command 0x0c1a tx timeout [ 1448.874424][ T9609] Bluetooth: hci5: command 0x0406 tx timeout [ 1448.929249][T15828] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1448.980155][T15828] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1449.013698][ T9609] Bluetooth: hci3: command 0x0c1a tx timeout [ 1449.038460][T15828] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1449.173284][ T9609] Bluetooth: hci4: command 0x0405 tx timeout [ 1449.292181][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2683'. [ 1449.742684][T15656] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1449.816166][T15656] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1450.928942][ T9609] Bluetooth: hci2: command 0x0c1a tx timeout [ 1451.091926][ T9609] Bluetooth: hci3: command 0x0c1a tx timeout [ 1451.130431][T15961] binder: 15960:15961 ioctl 4018620d 0 returned -22 [ 1451.248675][ T9609] Bluetooth: hci4: command 0x0405 tx timeout [ 1451.315472][T15961] binder: 15960:15961 ioctl c018620c 0 returned -14 [ 1451.463662][T15958] fido_id[15958]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1451.574765][T15774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.588418][T15967] binder: 15965:15967 ioctl c018620c 80000380 returned -22 [ 1451.631409][T15828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.930775][T15828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.027484][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.035316][T10702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.373326][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.381709][T10702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.944343][T15979] sp0: Synchronizing with TNC [ 1453.008286][ T9304] Bluetooth: hci2: command 0x0c1a tx timeout [ 1453.090233][T15984] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1453.154538][T15974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1453.166491][T15974] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1453.174284][T15974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1453.179723][ T9304] Bluetooth: hci3: command 0x0c1a tx timeout [ 1453.193079][T15974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1453.217046][T15974] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1454.101118][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2692'. [ 1454.439384][T15828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.711008][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2692'. [ 1454.929436][ T9609] Bluetooth: hci1: command 0x0406 tx timeout [ 1455.218951][ T9609] Bluetooth: hci5: command 0x0406 tx timeout [ 1455.287258][ T9609] Bluetooth: hci4: command 0x0405 tx timeout [ 1455.293534][ T9609] Bluetooth: hci3: command 0x0c1a tx timeout [ 1455.300364][ T9609] Bluetooth: hci2: command 0x0c1a tx timeout [ 1455.321599][T15774] veth0_vlan: entered promiscuous mode [ 1455.461020][T15774] veth1_vlan: entered promiscuous mode [ 1455.700665][T15974] [U] è [ 1456.028947][T15774] veth0_macvtap: entered promiscuous mode [ 1456.092511][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2694'. [ 1456.105360][T15774] veth1_macvtap: entered promiscuous mode [ 1456.358826][T15774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.556273][T15774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.673306][ T3674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.760361][ T3674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.907444][ T3674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.916597][ T3674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.329344][T12117] Bluetooth: hci4: command 0x0405 tx timeout [ 1457.641193][T16033] ------------[ cut here ]------------ [ 1457.648020][T16033] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xfffffff9, 0xfffffff7] s64=[0xfffffff9, 0xfffffff7] u32=[0xfffffff9, 0xfffffff7] s32=[0xfffffff9, 0xffffffff] var_off=(0xfffffff0, 0xf)(1) [ 1457.671690][T16033] WARNING: CPU: 0 PID: 16033 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0xb26/0x14b0 [ 1457.683122][T16033] Modules linked in: [ 1457.687793][T16033] CPU: 0 UID: 0 PID: 16033 Comm: syz.0.2697 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) [ 1457.700742][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1457.711690][T16033] RIP: 0010:reg_bounds_sanity_check+0xb26/0x14b0 [ 1457.720859][T16033] Code: ff ff ff b5 20 ff ff ff ff b5 18 ff ff ff ff b5 48 ff ff ff ff b5 10 ff ff ff ff b5 08 ff ff ff e8 3f 19 02 ff 48 83 c4 38 90 <0f> 0b 90 90 4c 8b bd 70 ff ff ff e9 83 f8 ff ff 8b 3a e8 e3 62 79 [ 1457.743043][T16033] RSP: 0018:ffff88812e162f28 EFLAGS: 00010286 [ 1457.750141][T16033] RAX: ffffffff81207e8e RBX: ffff88804f754000 RCX: 0000000000080000 [ 1457.759279][T16033] RDX: ffffc9000fc1f000 RSI: 0000000000003639 RDI: 000000000000363a [ 1457.768244][T16033] RBP: ffff88812e1630a8 R08: ffffea000000000f R09: 0000000000000000 [ 1457.777142][T16033] R10: ffff888237b71028 R11: ffff88823f245a30 R12: 0000000000000000 [ 1457.785545][T16033] R13: ffff888054aaac20 R14: 0000000000000000 R15: 0000000000000000 [ 1457.794244][T16033] FS: 0000000000000000(0000) GS:ffff8881aa69a000(0063) knlGS:00000000f4c36b40 [ 1457.804080][T16033] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1457.811171][T16033] CR2: 00007fb37fe04000 CR3: 000000012e1e2000 CR4: 00000000003526f0 [ 1457.819859][T16033] Call Trace: [ 1457.825767][T16033] [ 1457.829908][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.835820][T16033] reg_set_min_max+0x267/0x440 [ 1457.841794][T16033] check_cond_jmp_op+0x3187/0x4820 [ 1457.847836][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.853434][T16033] do_check+0x2374/0x15760 [ 1457.858466][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.864313][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.870228][T16033] do_check_common+0x2470/0x36e0 [ 1457.875406][T16033] bpf_check+0x61f8/0x2a100 [ 1457.880474][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.885814][T16033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1457.893505][T16033] ? pcpu_block_update_hint_alloc+0x12df/0x1390 [ 1457.900822][T16033] ? kmsan_get_metadata+0x150/0x160 [ 1457.906269][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.911933][T16033] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1457.918946][T16033] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1457.927954][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.933486][T16033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1457.941153][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.946672][T16033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1457.953097][T16033] ? strncpy_from_user+0xf1/0x470 [ 1457.958775][T16033] ? stack_depot_save_flags+0x35/0x7b0 [ 1457.964593][T16033] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1457.973067][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.979297][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.985201][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1457.990919][T16033] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1457.998006][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1458.003982][T16033] ? kmsan_get_metadata+0xfb/0x160 [ 1458.009883][T16033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1458.016025][T16033] bpf_prog_load+0x28e6/0x2e50 [ 1458.021444][T16033] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1458.031388][T16033] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1458.039031][T16033] ? security_bpf+0x88/0x620 [ 1458.044057][T16033] ? _copy_from_user+0xcb/0x100 [ 1458.053786][T16033] __sys_bpf+0x7f4/0xed0 [ 1458.058774][T16033] __ia32_sys_bpf+0xa4/0xf0 [ 1458.063635][T16033] ia32_sys_call+0xadf/0x4310 [ 1458.068876][T16033] __do_fast_syscall_32+0xb0/0x150 [ 1458.074398][T16033] do_fast_syscall_32+0x38/0x80 [ 1458.079763][T16033] do_SYSENTER_32+0x1f/0x30 [ 1458.084670][T16033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1458.091608][T16033] RIP: 0023:0xf70ce539 [ 1458.096020][T16033] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1458.116208][T16033] RSP: 002b:00000000f4c3655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1458.125326][T16033] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 1458.136572][T16033] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1458.146330][T16033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1458.154900][T16033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1458.163673][T16033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1458.172339][T16033] [ 1458.175720][T16033] ---[ end trace 0000000000000000 ]--- [ 1458.530198][T16037] binder: 16035:16037 ioctl 4018620d 0 returned -22 [ 1458.596058][T16037] binder: 16035:16037 ioctl c018620c 0 returned -14 [ 1458.764090][T16039] syzkaller0: entered promiscuous mode [ 1458.771360][T16039] syzkaller0: entered allmulticast mode [ 1458.911864][T16044] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1459.481867][T15828] veth0_vlan: entered promiscuous mode [ 1459.655618][T15828] veth1_vlan: entered promiscuous mode [ 1460.084235][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2702'. [ 1460.174371][T15828] veth0_macvtap: entered promiscuous mode [ 1460.320815][T15828] veth1_macvtap: entered promiscuous mode [ 1460.590915][T15828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.886253][T15828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.047654][ T3674] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.154592][ T3674] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.202033][ T3674] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.238041][ T3674] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.645288][T16071] sp0: Synchronizing with TNC [ 1461.945256][T16065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1461.954886][T16065] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1461.962077][T16065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1461.969232][T16065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1462.021046][T16065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1463.488015][ T9304] Bluetooth: hci1: command 0x0406 tx timeout [ 1463.840945][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.848207][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1464.047403][ T9304] Bluetooth: hci4: command 0x0405 tx timeout [ 1464.050364][T12117] Bluetooth: hci3: command 0x0c1a tx timeout [ 1464.060437][ T9304] Bluetooth: hci2: command 0x0c1a tx timeout [ 1464.062353][ T9609] Bluetooth: hci5: command 0x0406 tx timeout [ 1464.103817][T16058] [U] è [ 1465.104023][T15646] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1465.381673][T15646] usb 7-1: config 0 has no interfaces? [ 1465.697569][T15646] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1465.709049][T15646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.718939][T15646] usb 7-1: Product: syz [ 1465.723513][T15646] usb 7-1: Manufacturer: syz [ 1465.732348][T15646] usb 7-1: SerialNumber: syz [ 1465.880514][T15646] usb 7-1: config 0 descriptor?? [ 1465.882387][T16109] binder: 16108:16109 ioctl 4018620d 0 returned -22 [ 1466.040786][T16109] binder: 16108:16109 ioctl c018620c 0 returned -14 [ 1467.627307][T10702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.635468][T10702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.070844][ T3674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.079328][ T3674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.159799][T16124] syzkaller0: entered promiscuous mode [ 1468.165892][T16124] syzkaller0: entered allmulticast mode [ 1468.371086][T16124] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1469.639101][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1470.264952][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1472.185056][T16162] sp0: Synchronizing with TNC [ 1472.408761][ T3737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.417544][ T3737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.637030][T16158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1472.644090][T16158] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1472.651359][T16158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1472.658411][T16158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1472.739559][T16158] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1472.799951][T15943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.809387][T15943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.997082][T15646] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1473.244394][T15646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1473.256018][T15646] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1473.265885][T15646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.520827][T15646] usb 5-1: config 0 descriptor?? [ 1473.531794][T16164] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1473.967102][T12117] Bluetooth: hci1: command 0x0406 tx timeout [ 1474.357681][T15646] usbhid 5-1:0.0: can't add hid device: -71 [ 1474.364475][T15646] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1474.488077][T15646] usb 5-1: USB disconnect, device number 121 [ 1474.694007][T12117] Bluetooth: hci3: command 0x0c1a tx timeout [ 1474.701451][ T9304] Bluetooth: hci2: command 0x0c1a tx timeout [ 1474.709809][ T9609] Bluetooth: hci5: command 0x0406 tx timeout [ 1474.767387][T16171] Bluetooth: hci4: command 0x0405 tx timeout [ 1474.864791][T16157] [U] è [ 1475.489874][T16177] binder: 16176:16177 ioctl 4018620d 0 returned -22 [ 1475.658244][T16177] binder: 16176:16177 ioctl c018620c 0 returned -14 [ 1476.041796][T16185] syzkaller0: entered promiscuous mode [ 1476.051050][T16185] syzkaller0: entered allmulticast mode [ 1476.224491][T16184] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1478.190329][T15646] usb 7-1: USB disconnect, device number 8 [ 1478.418912][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 1478.691566][T16204] lo: entered promiscuous mode [ 1478.697023][T16204] lo: entered allmulticast mode [ 1478.705953][T16204] tunl0: entered promiscuous mode [ 1478.714780][T16204] tunl0: entered allmulticast mode [ 1478.727278][T16204] gre0: entered promiscuous mode [ 1478.732864][T16204] gre0: entered allmulticast mode [ 1478.741795][T16204] gretap0: entered promiscuous mode [ 1478.748117][T16204] gretap0: entered allmulticast mode [ 1478.757196][T16204] erspan0: entered promiscuous mode [ 1478.762771][T16204] erspan0: entered allmulticast mode [ 1478.771430][T16204] ip_vti0: entered promiscuous mode [ 1478.778712][T16204] ip_vti0: entered allmulticast mode [ 1478.789522][T16204] ip6_vti0: entered promiscuous mode [ 1478.795651][T16204] ip6_vti0: entered allmulticast mode [ 1478.807100][T16204] sit0: entered promiscuous mode [ 1478.815512][T16204] sit0: entered allmulticast mode [ 1478.824761][T16204] ip6tnl0: entered promiscuous mode [ 1478.831446][T16204] ip6tnl0: entered allmulticast mode [ 1478.840847][T16204] ip6gre0: entered promiscuous mode [ 1478.847070][T16204] ip6gre0: entered allmulticast mode [ 1478.855832][T16204] syz_tun: entered promiscuous mode [ 1478.862057][T16204] syz_tun: entered allmulticast mode [ 1478.871673][T16204] ip6gretap0: entered promiscuous mode [ 1478.877850][T16204] ip6gretap0: entered allmulticast mode [ 1478.886901][T16204] bridge0: entered promiscuous mode [ 1478.892545][T16204] bridge0: entered allmulticast mode [ 1478.904503][T16204] vcan0: entered promiscuous mode [ 1478.910081][T16204] vcan0: entered allmulticast mode [ 1478.920153][T16204] bond0: entered promiscuous mode [ 1478.925788][T16204] bond_slave_0: entered promiscuous mode [ 1478.932997][T16204] bond_slave_1: entered promiscuous mode [ 1478.940309][T16204] bond0: entered allmulticast mode [ 1478.945952][T16204] bond_slave_0: entered allmulticast mode [ 1478.952291][T16204] bond_slave_1: entered allmulticast mode [ 1478.963547][T16204] team0: entered promiscuous mode [ 1478.969004][T16204] team_slave_0: entered promiscuous mode [ 1478.976449][T16204] team_slave_1: entered promiscuous mode [ 1478.984259][T16204] team0: entered allmulticast mode [ 1478.989940][T16204] team_slave_0: entered allmulticast mode [ 1478.996065][T16204] team_slave_1: entered allmulticast mode [ 1479.007347][T16204] dummy0: entered promiscuous mode [ 1479.012721][T16204] dummy0: entered allmulticast mode [ 1479.025108][T16204] nlmon0: entered promiscuous mode [ 1479.030685][T16204] nlmon0: entered allmulticast mode [ 1479.040262][T16204] caif0: entered promiscuous mode [ 1479.045797][T16204] caif0: entered allmulticast mode [ 1479.052419][T16204] batadv0: entered promiscuous mode [ 1479.058116][T16204] batadv0: entered allmulticast mode [ 1479.068334][T16204] vxcan0: entered promiscuous mode [ 1479.073789][T16204] vxcan0: entered allmulticast mode [ 1479.080961][T16204] vxcan1: entered promiscuous mode [ 1479.086315][T16204] vxcan1: entered allmulticast mode [ 1479.093785][T16204] veth0: entered promiscuous mode [ 1479.099350][T16204] veth0: entered allmulticast mode [ 1479.108650][T16204] veth1: entered promiscuous mode [ 1479.113930][T16204] veth1: entered allmulticast mode [ 1479.126409][T16204] veth0_to_bridge: entered promiscuous mode [ 1479.133046][T16204] veth0_to_bridge: entered allmulticast mode [ 1479.148167][T16204] veth1_to_bridge: entered promiscuous mode [ 1479.154339][T16204] veth1_to_bridge: entered allmulticast mode [ 1479.175329][T16204] veth0_to_bond: entered promiscuous mode [ 1479.181607][T16204] veth0_to_bond: entered allmulticast mode [ 1479.195298][T16204] veth1_to_bond: entered promiscuous mode [ 1479.201719][T16204] veth1_to_bond: entered allmulticast mode [ 1479.214962][T16204] veth0_to_team: entered promiscuous mode [ 1479.224144][T16204] veth0_to_team: entered allmulticast mode [ 1479.239639][T16204] veth1_to_team: entered promiscuous mode [ 1479.245783][T16204] veth1_to_team: entered allmulticast mode [ 1479.260795][T16204] veth0_to_batadv: entered promiscuous mode [ 1479.267271][T16204] veth0_to_batadv: entered allmulticast mode [ 1479.277701][T16204] batadv_slave_0: entered promiscuous mode [ 1479.284131][T16204] batadv_slave_0: entered allmulticast mode [ 1479.294435][T16204] veth1_to_batadv: entered promiscuous mode [ 1479.301250][T16204] veth1_to_batadv: entered allmulticast mode [ 1479.311868][T16204] batadv_slave_1: entered promiscuous mode [ 1479.318454][T16204] batadv_slave_1: entered allmulticast mode [ 1479.332000][T16204] xfrm0: entered promiscuous mode [ 1479.337648][T16204] xfrm0: entered allmulticast mode [ 1479.347051][T16204] veth0_to_hsr: entered promiscuous mode [ 1479.353224][T16204] veth0_to_hsr: entered allmulticast mode [ 1479.364085][T16204] hsr_slave_0: entered allmulticast mode [ 1479.373894][T16204] veth1_to_hsr: entered promiscuous mode [ 1479.380589][T16204] veth1_to_hsr: entered allmulticast mode [ 1479.390003][T16204] hsr_slave_1: entered allmulticast mode [ 1479.399432][T16204] hsr0: entered promiscuous mode [ 1479.405064][T16204] hsr0: entered allmulticast mode [ 1479.413423][T16204] veth1_virt_wifi: entered promiscuous mode [ 1479.419976][T16204] veth1_virt_wifi: entered allmulticast mode [ 1479.432505][T16204] veth0_virt_wifi: entered promiscuous mode [ 1479.438891][T16204] veth0_virt_wifi: entered allmulticast mode [ 1479.450581][T16204] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1479.458692][T16204] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1479.467699][T16204] veth1_vlan: entered allmulticast mode [ 1479.476561][T16204] veth0_vlan: entered allmulticast mode [ 1479.487533][T16204] vlan0: entered promiscuous mode [ 1479.493895][T16204] vlan0: entered allmulticast mode [ 1479.502468][T16204] vlan1: entered promiscuous mode [ 1479.508948][T16204] vlan1: entered allmulticast mode [ 1479.517715][T16204] macvlan0: entered promiscuous mode [ 1479.524310][T16204] macvlan0: entered allmulticast mode [ 1479.536176][T16204] macvlan1: entered promiscuous mode [ 1479.542982][T16204] macvlan1: entered allmulticast mode [ 1479.551748][T16204] ipvlan0: entered promiscuous mode [ 1479.557494][T16204] ipvlan0: entered allmulticast mode [ 1479.563984][T16204] ipvlan1: entered promiscuous mode [ 1479.570059][T16204] ipvlan1: entered allmulticast mode [ 1479.576461][T16204] veth1_macvtap: entered allmulticast mode [ 1479.585453][T16204] veth0_macvtap: entered allmulticast mode [ 1479.594399][T16204] macvtap0: entered promiscuous mode [ 1479.600987][T16204] macvtap0: entered allmulticast mode [ 1479.609447][T16204] macsec0: entered promiscuous mode [ 1479.615677][T16204] macsec0: entered allmulticast mode [ 1479.624215][T16204] geneve0: entered promiscuous mode [ 1479.629858][T16204] geneve0: entered allmulticast mode [ 1479.640623][T16204] geneve1: entered promiscuous mode [ 1479.646132][T16204] geneve1: entered allmulticast mode [ 1479.654566][T16204] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1479.662227][T16204] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1479.672818][T16204] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 1479.680775][T16204] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 1479.691415][T16204] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 1479.700139][T16204] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 1479.711038][T16204] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 1479.719172][T16204] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 1479.729863][T16204] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1479.740083][T16204] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 1479.750590][T16204] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1479.758075][T16204] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 1481.848620][T14318] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1481.868657][T14318] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1481.878899][T14318] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1481.970640][T14318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1482.009531][T14318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1482.594991][T16227] sp0: Synchronizing with TNC [ 1482.848488][T16217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1482.855116][T16217] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1482.862407][T16217] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1482.869202][T16217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1482.875707][T16217] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1482.882320][T16217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1482.888758][T16217] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1483.017152][T16217] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1483.415690][T16236] binder: 16235:16236 ioctl 4018620d 0 returned -22 [ 1483.494209][T16236] binder: 16235:16236 ioctl c018620c 0 returned -14 [ 1484.168231][T16171] Bluetooth: hci1: command 0x0406 tx timeout [ 1484.249836][T15291] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1484.279538][T15291] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1484.572223][T16242] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1484.961508][T16171] Bluetooth: hci5: command 0x0406 tx timeout [ 1485.007108][T16171] Bluetooth: hci0: command 0x041b tx timeout [ 1485.013393][T16171] Bluetooth: hci4: command 0x0405 tx timeout [ 1485.020180][T16171] Bluetooth: hci3: command 0x0c1a tx timeout [ 1485.026455][T16171] Bluetooth: hci2: command 0x0c1a tx timeout [ 1485.089947][T16229] [U] è [ 1485.318355][T16221] chnl_net:caif_netlink_parms(): no params data found [ 1485.801501][T16248] fido_id[16248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1486.517017][T15656] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1486.837312][T15656] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1486.852268][T15656] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1486.864711][T15656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.984169][T15656] usb 6-1: config 0 descriptor?? [ 1486.993310][T16258] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1487.099556][T12117] Bluetooth: hci0: command 0x041b tx timeout [ 1487.596540][T15656] elan 0003:04F3:0755.002C: unknown main item tag 0x0 [ 1487.605945][T15656] elan 0003:04F3:0755.002C: item fetching failed at offset 3/5 [ 1487.712122][T15656] elan 0003:04F3:0755.002C: Hid Parse failed [ 1487.724158][T15656] elan 0003:04F3:0755.002C: probe with driver elan failed with error -22 [ 1487.868099][T15656] usb 6-1: USB disconnect, device number 38 [ 1488.269696][T16277] binder: 16276:16277 ioctl 4018620d 0 returned -22 [ 1488.408101][T16277] binder: 16276:16277 ioctl c018620c 0 returned -14 [ 1488.594576][T16221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.611208][T16221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.620345][T16221] bridge_slave_0: entered allmulticast mode [ 1488.632052][T16221] bridge_slave_0: entered promiscuous mode [ 1488.832301][T16221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.840996][T16221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.858315][T16221] bridge_slave_1: entered allmulticast mode [ 1488.963238][T16221] bridge_slave_1: entered promiscuous mode [ 1489.167624][T12117] Bluetooth: hci0: command 0x041b tx timeout [ 1489.459123][T16287] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1489.506282][T16221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.661838][T16221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.348305][T16291] sp0: Synchronizing with TNC [ 1490.374613][T16221] team0: Port device team_slave_0 added [ 1490.452961][T16221] team0: Port device team_slave_1 added [ 1491.009236][T16221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.016626][T16221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.043456][T16221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.256111][T12117] Bluetooth: hci0: command 0x041b tx timeout [ 1491.330769][T16221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.338199][T16221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.364897][T16221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.553306][T16221] hsr_slave_0: entered promiscuous mode [ 1491.564276][T16221] hsr_slave_1: entered promiscuous mode [ 1491.573129][T16221] debugfs: 'hsr0' already exists in 'hsr' [ 1491.579282][T16221] Cannot create hsr debugfs directory [ 1491.741458][T16296] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1491.748889][T16296] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1491.755516][T16296] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1491.762457][T16296] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1491.769414][T16296] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1491.821472][T16171] Bluetooth: hci5: command 0x0406 tx timeout [ 1493.060034][T16296] [U] è [ 1493.807584][T16171] Bluetooth: hci0: command 0x041b tx timeout [ 1493.808743][T12117] Bluetooth: hci4: command 0x0405 tx timeout [ 1493.813986][T16171] Bluetooth: hci3: command 0x0c1a tx timeout [ 1493.823198][T12117] Bluetooth: hci2: command 0x0c1a tx timeout [ 1494.357323][T15656] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1494.644564][T15656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1494.656050][T15656] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1494.665714][T15656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.770495][T16335] binder: 16334:16335 ioctl 4018620d 0 returned -22 [ 1494.919036][T16336] binder: 16334:16336 ioctl c018620c 0 returned -14 [ 1494.960128][T15656] usb 5-1: config 0 descriptor?? [ 1494.978977][T16330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1495.003949][T16221] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1495.226633][T16221] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1495.386022][T16221] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1495.553532][T16221] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1495.588109][T15656] elan 0003:04F3:0755.002D: unknown main item tag 0x0 [ 1495.595489][T15656] elan 0003:04F3:0755.002D: item fetching failed at offset 3/5 [ 1495.705875][T15656] elan 0003:04F3:0755.002D: Hid Parse failed [ 1495.715748][T15656] elan 0003:04F3:0755.002D: probe with driver elan failed with error -22 [ 1495.877691][T15656] usb 5-1: USB disconnect, device number 122 [ 1495.889140][ T9304] Bluetooth: hci0: command 0x041b tx timeout [ 1496.547262][T16342] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1497.063678][T16349] lo: entered promiscuous mode [ 1497.069120][T16349] lo: entered allmulticast mode [ 1497.078266][T16349] tunl0: entered promiscuous mode [ 1497.083647][T16349] tunl0: entered allmulticast mode [ 1497.092679][T16349] gre0: entered promiscuous mode [ 1497.098309][T16349] gre0: entered allmulticast mode [ 1497.107815][T16349] gretap0: entered promiscuous mode [ 1497.113579][T16349] gretap0: entered allmulticast mode [ 1497.122446][T16349] erspan0: entered promiscuous mode [ 1497.128358][T16349] erspan0: entered allmulticast mode [ 1497.137635][T16349] ip_vti0: entered promiscuous mode [ 1497.146344][T16349] ip_vti0: entered allmulticast mode [ 1497.155877][T16349] ip6_vti0: entered promiscuous mode [ 1497.161739][T16349] ip6_vti0: entered allmulticast mode [ 1497.171575][T16349] sit0: entered promiscuous mode [ 1497.177216][T16349] sit0: entered allmulticast mode [ 1497.185596][T16349] ip6tnl0: entered promiscuous mode [ 1497.191254][T16349] ip6tnl0: entered allmulticast mode [ 1497.200257][T16349] ip6gre0: entered promiscuous mode [ 1497.205888][T16349] ip6gre0: entered allmulticast mode [ 1497.215036][T16349] syz_tun: entered promiscuous mode [ 1497.221343][T16349] syz_tun: entered allmulticast mode [ 1497.230935][T16349] ip6gretap0: entered promiscuous mode [ 1497.236965][T16349] ip6gretap0: entered allmulticast mode [ 1497.249094][T16349] bridge0: entered promiscuous mode [ 1497.254635][T16349] bridge0: entered allmulticast mode [ 1497.262675][T16349] vcan0: entered promiscuous mode [ 1497.268035][T16349] vcan0: entered allmulticast mode [ 1497.274492][T16349] bond0: entered promiscuous mode [ 1497.279946][T16349] bond_slave_0: entered promiscuous mode [ 1497.286533][T16349] bond_slave_1: entered promiscuous mode [ 1497.293308][T16349] bond0: entered allmulticast mode [ 1497.298793][T16349] bond_slave_0: entered allmulticast mode [ 1497.304916][T16349] bond_slave_1: entered allmulticast mode [ 1497.314309][T16349] team0: entered promiscuous mode [ 1497.319640][T16349] team_slave_0: entered promiscuous mode [ 1497.326176][T16349] team_slave_1: entered promiscuous mode [ 1497.333014][T16349] team0: entered allmulticast mode [ 1497.338567][T16349] team_slave_0: entered allmulticast mode [ 1497.344428][T16349] team_slave_1: entered allmulticast mode [ 1497.356235][T16349] dummy0: entered promiscuous mode [ 1497.361817][T16349] dummy0: entered allmulticast mode [ 1497.370216][T16349] nlmon0: entered promiscuous mode [ 1497.375563][T16349] nlmon0: entered allmulticast mode [ 1497.383879][T16349] caif0: entered promiscuous mode [ 1497.389343][T16349] caif0: entered allmulticast mode [ 1497.395497][T16349] batadv0: entered promiscuous mode [ 1497.401330][T16349] batadv0: entered allmulticast mode [ 1497.410451][T16349] vxcan0: entered promiscuous mode [ 1497.417155][T16349] vxcan0: entered allmulticast mode [ 1497.423916][T16349] vxcan1: entered promiscuous mode [ 1497.429525][T16349] vxcan1: entered allmulticast mode [ 1497.436119][T16349] veth0: entered promiscuous mode [ 1497.441546][T16349] veth0: entered allmulticast mode [ 1497.453432][T16349] veth1: entered promiscuous mode [ 1497.459581][T16349] veth1: entered allmulticast mode [ 1497.468922][T16349] veth0_to_bridge: entered promiscuous mode [ 1497.475164][T16349] veth0_to_bridge: entered allmulticast mode [ 1497.490393][T16349] veth1_to_bridge: entered promiscuous mode [ 1497.497254][T16349] veth1_to_bridge: entered allmulticast mode [ 1497.511682][T16349] veth0_to_bond: entered promiscuous mode [ 1497.518089][T16349] veth0_to_bond: entered allmulticast mode [ 1497.529531][T16349] veth1_to_bond: entered promiscuous mode [ 1497.535650][T16349] veth1_to_bond: entered allmulticast mode [ 1497.548554][T16349] veth0_to_team: entered promiscuous mode [ 1497.557346][T16349] veth0_to_team: entered allmulticast mode [ 1497.569753][T16349] veth1_to_team: entered promiscuous mode [ 1497.575746][T16349] veth1_to_team: entered allmulticast mode [ 1497.588191][T16349] veth0_to_batadv: entered promiscuous mode [ 1497.594362][T16349] veth0_to_batadv: entered allmulticast mode [ 1497.603274][T16349] batadv_slave_0: entered promiscuous mode [ 1497.609752][T16349] batadv_slave_0: entered allmulticast mode [ 1497.618709][T16349] veth1_to_batadv: entered promiscuous mode [ 1497.625050][T16349] veth1_to_batadv: entered allmulticast mode [ 1497.634221][T16349] batadv_slave_1: entered promiscuous mode [ 1497.640631][T16349] batadv_slave_1: entered allmulticast mode [ 1497.649699][T16349] xfrm0: entered promiscuous mode [ 1497.658782][T16349] xfrm0: entered allmulticast mode [ 1497.667616][T16349] veth0_to_hsr: entered promiscuous mode [ 1497.673586][T16349] veth0_to_hsr: entered allmulticast mode [ 1497.682500][T16349] hsr_slave_0: entered allmulticast mode [ 1497.691141][T16349] veth1_to_hsr: entered promiscuous mode [ 1497.697902][T16349] veth1_to_hsr: entered allmulticast mode [ 1497.707097][T16349] hsr_slave_1: entered allmulticast mode [ 1497.715720][T16349] hsr0: entered promiscuous mode [ 1497.721190][T16349] hsr0: entered allmulticast mode [ 1497.729382][T16349] veth1_virt_wifi: entered promiscuous mode [ 1497.735768][T16349] veth1_virt_wifi: entered allmulticast mode [ 1497.744884][T16349] veth0_virt_wifi: entered promiscuous mode [ 1497.752427][T16349] veth0_virt_wifi: entered allmulticast mode [ 1497.764271][T16349] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1497.772295][T16349] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1497.780759][T16349] veth1_vlan: entered allmulticast mode [ 1497.789700][T16349] veth0_vlan: entered allmulticast mode [ 1497.799262][T16349] vlan0: entered promiscuous mode [ 1497.805464][T16349] vlan0: entered allmulticast mode [ 1497.813891][T16349] vlan1: entered promiscuous mode [ 1497.820146][T16349] vlan1: entered allmulticast mode [ 1497.828489][T16349] macvlan0: entered promiscuous mode [ 1497.834721][T16349] macvlan0: entered allmulticast mode [ 1497.843468][T16349] macvlan1: entered promiscuous mode [ 1497.850308][T16349] macvlan1: entered allmulticast mode [ 1497.862206][T16349] ipvlan0: entered promiscuous mode [ 1497.867768][T16349] ipvlan0: entered allmulticast mode [ 1497.873974][T16349] ipvlan1: entered promiscuous mode [ 1497.879739][T16349] ipvlan1: entered allmulticast mode [ 1497.885982][T16349] veth1_macvtap: entered allmulticast mode [ 1497.895455][T16349] veth0_macvtap: entered allmulticast mode [ 1497.904718][T16349] macvtap0: entered promiscuous mode [ 1497.911401][T16349] macvtap0: entered allmulticast mode [ 1497.920055][T16349] macsec0: entered promiscuous mode [ 1497.926347][T16349] macsec0: entered allmulticast mode [ 1497.935373][T16349] geneve0: entered promiscuous mode [ 1497.941219][T16349] geneve0: entered allmulticast mode [ 1497.950177][T16349] geneve1: entered promiscuous mode [ 1497.955741][T16349] geneve1: entered allmulticast mode [ 1497.967960][T16349] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1497.975738][T16349] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1497.986968][T16349] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1497.994986][T16349] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1498.005694][T16349] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1498.013565][T16349] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1498.024050][T16349] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1498.031718][T16349] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1498.042007][T16349] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1498.049470][T16349] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1498.059961][T16349] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 1498.069686][T16349] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 1498.893578][T16221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.279728][T16221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.439870][T15243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.447577][T15243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.667965][T15243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.675878][T15243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.512271][T16362] sp0: Synchronizing with TNC [ 1501.120891][T16377] binder: 16374:16377 ioctl 4018620d 0 returned -22 [ 1501.232150][T16377] binder: 16374:16377 ioctl c018620c 0 returned -14 [ 1502.287244][ T9304] Bluetooth: hci5: command 0x0406 tx timeout [ 1502.289559][T16369] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1502.329514][T16369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1502.336330][T16369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1502.343524][T16369] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1502.350718][T16369] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1503.095784][T16221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.461366][T16369] [U] è [ 1503.782759][T16395] tipc: Started in network mode [ 1503.788665][T16395] tipc: Node identity deafd5f4125a, cluster identity 4711 [ 1503.797518][T16395] tipc: Enabled bearer , priority 0 [ 1503.948655][T16395] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1504.215381][T16404] tipc: Resetting bearer [ 1504.438459][ T9304] Bluetooth: hci0: command 0x041b tx timeout [ 1504.444756][ T9304] Bluetooth: hci4: command 0x0405 tx timeout [ 1504.458738][T12117] Bluetooth: hci3: command 0x0c1a tx timeout [ 1504.465652][T12117] Bluetooth: hci2: command 0x0c1a tx timeout [ 1504.639177][T16394] tipc: Disabling bearer [ 1504.818764][T16408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2773'. [ 1507.575707][T16221] veth0_vlan: entered promiscuous mode [ 1507.759971][T16430] binder: 16429:16430 ioctl 4018620d 0 returned -22 [ 1507.822054][T16221] veth1_vlan: entered promiscuous mode [ 1507.859869][T16430] binder: 16429:16430 ioctl c018620c 0 returned -14 [ 1508.321365][T16221] veth0_macvtap: entered promiscuous mode [ 1508.461364][T16221] veth1_macvtap: entered promiscuous mode [ 1508.768434][T16221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.978904][T16221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.084856][T16444] netlink: 'syz.4.2782': attribute type 8 has an invalid length. [ 1509.152781][ T4301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.244129][ T4301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.318382][ T4301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.394549][ T4301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.309462][T16447] sp0: Synchronizing with TNC [ 1510.348943][T16459] tipc: Enabling of bearer rejected, failed to enable media [ 1511.918301][T16450] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1511.925375][T16450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1511.932838][T16450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1511.939804][T16450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1511.946370][T16450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1511.978021][T12117] Bluetooth: hci5: command 0x0406 tx timeout [ 1513.100989][T16450] [U] è [ 1513.968266][T12117] Bluetooth: hci0: command 0x041b tx timeout [ 1513.971569][T16171] Bluetooth: hci4: command 0x0405 tx timeout [ 1513.975355][T12117] Bluetooth: hci3: command 0x0c1a tx timeout [ 1513.983388][ T9304] Bluetooth: hci2: command 0x0c1a tx timeout [ 1515.154775][T15243] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.240277][T16498] binder: 16496:16498 ioctl 4018620d 0 returned -22 [ 1515.349102][T16498] binder: 16496:16498 ioctl c018620c 0 returned -14 [ 1515.402828][T15243] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.738648][T15243] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.041722][T15243] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.816428][T15243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.933656][T15243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.295727][T15243] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1517.493073][T15243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.595434][T15243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.660470][T15243] bond0 (unregistering): Released all slaves [ 1518.164407][T16517] tipc: Started in network mode [ 1518.169992][T16517] tipc: Node identity ca0d6f5d3ab8, cluster identity 4711 [ 1518.179673][T16517] tipc: Enabled bearer , priority 0 [ 1518.304122][T16519] tipc: Resetting bearer [ 1518.395261][T15243] tipc: Left network mode [ 1518.472240][T16513] tipc: Disabling bearer [ 1519.173078][T15243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.246291][T15243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1520.098934][T15243] team0 (unregistering): Port device team_slave_1 removed [ 1520.290899][T15243] team0 (unregistering): Port device team_slave_0 removed [ 1520.968190][T16538] sp0: Synchronizing with TNC [ 1521.934800][T16559] binder: 16558:16559 ioctl 4018620d 0 returned -22 [ 1522.073909][T16559] binder: 16558:16559 ioctl c018620c 0 returned -14 [ 1522.224992][T16541] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1522.235912][T16541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1522.244277][T16541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1522.251198][T16541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1522.258065][T16541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1522.527744][T12117] Bluetooth: hci5: command 0x0406 tx timeout [ 1522.740122][T16541] [U] è [ 1524.287335][T12117] Bluetooth: hci0: command 0x041b tx timeout [ 1524.293714][T12117] Bluetooth: hci4: command 0x0405 tx timeout [ 1524.300582][T14318] Bluetooth: hci3: command 0x0c1a tx timeout [ 1524.301098][T16171] Bluetooth: hci2: command 0x0c1a tx timeout [ 1524.491239][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.500103][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.671628][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.680053][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.301520][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.313074][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1527.212513][T16590] tipc: Enabled bearer , priority 0 [ 1527.283270][T16590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1527.353907][T16595] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2810'. [ 1527.429075][T16593] tipc: Resetting bearer [ 1527.545953][T16589] tipc: Disabling bearer [ 1528.800033][T16607] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2813'. [ 1529.021778][T16610] binder: 16609:16610 ioctl 4018620d 0 returned -22 [ 1529.098151][T16610] binder: 16609:16610 ioctl c018620c 0 returned -14 [ 1529.312259][T16616] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1531.561825][T16638] tipc: Enabled bearer , priority 0 [ 1531.810644][T16639] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1531.944449][T16635] tipc: Disabling bearer [ 1534.278287][T16656] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1534.818511][T16661] binder: 16659:16661 ioctl 4018620d 0 returned -22 [ 1534.922228][T16661] binder: 16659:16661 ioctl c018620c 0 returned -14 [ 1536.126049][T15291] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1536.387636][T15291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1536.400398][T15291] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1536.409961][T15291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.596009][T15291] usb 1-1: config 0 descriptor?? [ 1536.608917][T16671] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1537.370197][T15291] elan 0003:04F3:0755.002E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1537.569737][T15291] usb 1-1: USB disconnect, device number 45 [ 1537.632306][T16679] tipc: Started in network mode [ 1537.638164][T16679] tipc: Node identity 1e59bb787589, cluster identity 4711 [ 1537.646483][T16679] tipc: Enabled bearer , priority 0 [ 1537.773224][T16681] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1537.819527][T16679] tipc: Resetting bearer [ 1537.971976][T16678] tipc: Disabling bearer [ 1538.465149][T16684] fido_id[16684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1540.110002][T16697] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1540.312309][T16697] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1540.361073][T16697] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1540.445069][T16697] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1540.524798][T16697] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 1540.535917][T16697] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1540.669562][T16697] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1540.735438][T16697] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1540.796610][T16697] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1541.871638][T16711] binder: 16710:16711 ioctl 4018620d 0 returned -22 [ 1541.998384][T16711] binder: 16710:16711 ioctl c018620c 0 returned -14 [ 1544.368946][T16731] tipc: Enabling of bearer rejected, failed to enable media [ 1546.767549][T16757] loop8: detected capacity change from 0 to 256 [ 1547.187990][T16757] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 1547.635000][T16766] binder: 16763:16766 ioctl 4018620d 0 returned -22 [ 1547.709181][T16766] binder: 16763:16766 ioctl c018620c 0 returned -14 [ 1549.927104][T15291] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 1550.167592][T15291] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1550.178176][T15291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.306215][T16790] tipc: Enabling of bearer rejected, failed to enable media [ 1550.371323][T15291] usb 9-1: config 0 descriptor?? [ 1552.455747][T15291] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1552.466815][T15291] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1552.479110][T15291] asix 9-1:0.0: probe with driver asix failed with error -71 [ 1552.763775][T15291] usb 9-1: USB disconnect, device number 14 [ 1552.897752][T15656] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1553.172903][T15656] usb 5-1: config index 0 descriptor too short (expected 44306, got 18) [ 1553.182431][T15656] usb 5-1: config 0 has too many interfaces: 140, using maximum allowed: 32 [ 1553.192092][T15656] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 140 [ 1553.204151][T15656] usb 5-1: config 0 has no interface number 0 [ 1553.213528][T15656] usb 5-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.22 [ 1553.223363][T15656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.413835][T15656] usb 5-1: config 0 descriptor?? [ 1553.458684][T15656] usb-storage 5-1:0.33: USB Mass Storage device detected [ 1553.819427][T15656] usb 5-1: USB disconnect, device number 123 [ 1555.002938][T16825] binder: 16822:16825 ioctl 4018620d 0 returned -22 [ 1555.109044][T16825] binder: 16822:16825 ioctl c018620c 0 returned -14 [ 1556.789759][T16839] tipc: Enabling of bearer rejected, failed to enable media [ 1557.447520][T16846] loop5: detected capacity change from 0 to 2048 [ 1558.052213][T16846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1559.165660][ T30] audit: type=1326 audit(1754688387.324:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.358048][ T30] audit: type=1326 audit(1754688387.384:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.381658][ T30] audit: type=1326 audit(1754688387.384:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.410035][ T30] audit: type=1326 audit(1754688387.434:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.435729][ T30] audit: type=1326 audit(1754688387.434:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.458848][ T30] audit: type=1326 audit(1754688387.444:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.481950][ T30] audit: type=1326 audit(1754688387.454:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.511433][ T30] audit: type=1326 audit(1754688387.454:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.537026][ T30] audit: type=1326 audit(1754688387.464:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1559.560125][ T30] audit: type=1326 audit(1754688387.464:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.6.2878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1561.221082][T16881] 9p: Unknown access argument 18446744073709551615: -34 [ 1561.250645][T12201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.548942][T16883] binder: 16882:16883 ioctl 4018620d 0 returned -22 [ 1561.644202][T16883] binder: 16882:16883 ioctl c018620c 0 returned -14 [ 1562.994806][T16900] tipc: Enabling of bearer rejected, failed to enable media [ 1563.224645][T16906] input: syz1 as /devices/virtual/input/input71 [ 1563.307761][T15656] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1563.514806][T15656] usb 7-1: config 0 has no interfaces? [ 1563.779160][T15656] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1563.789426][T15656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.798079][T15656] usb 7-1: Product: syz [ 1563.802858][T15656] usb 7-1: Manufacturer: syz [ 1563.810080][T15656] usb 7-1: SerialNumber: syz [ 1564.079890][T15656] usb 7-1: config 0 descriptor?? [ 1566.330538][T15656] usb 7-1: USB disconnect, device number 9 [ 1567.037837][T16935] binder: 16933:16935 ioctl 4018620d 0 returned -22 [ 1567.119041][T16937] binder: 16933:16937 ioctl c018620c 0 returned -14 [ 1570.380407][T16954] tipc: Enabling of bearer rejected, failed to enable media [ 1571.376134][ T30] audit: type=1326 audit(1754688399.474:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.0.2904" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1571.402692][ T30] audit: type=1326 audit(1754688399.534:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.0.2904" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1571.837588][ T30] audit: type=1326 audit(1754688399.694:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.0.2904" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1571.861278][ T30] audit: type=1326 audit(1754688399.694:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.0.2904" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1571.884567][ T30] audit: type=1326 audit(1754688399.694:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.0.2904" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1571.910061][ T30] audit: type=1326 audit(1754688399.814:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.0.2904" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1571.933772][ T30] audit: type=1326 audit(1754688399.834:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.0.2904" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1571.957004][ T30] audit: type=1326 audit(1754688399.834:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.0.2904" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1572.719397][T15656] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1572.768798][T15656] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1573.327256][T15656] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1573.650437][T15656] usb 1-1: config 0 has no interfaces? [ 1573.828495][T15656] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1573.838653][T15656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.849160][T15656] usb 1-1: Product: syz [ 1573.853700][T15656] usb 1-1: Manufacturer: syz [ 1573.859461][T15656] usb 1-1: SerialNumber: syz [ 1573.950564][T15656] usb 1-1: config 0 descriptor?? [ 1574.429488][T16987] fido_id[16987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1575.793342][T16994] binder: 16993:16994 ioctl 4018620d 0 returned -22 [ 1575.845507][T16994] binder: 16993:16994 ioctl c018620c 0 returned -14 [ 1576.067448][T15656] usb 1-1: USB disconnect, device number 46 [ 1583.128427][ T30] audit: type=1326 audit(1754688411.264:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.0.2915" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ce539 code=0x0 [ 1584.145849][T17038] loop6: detected capacity change from 0 to 2048 [ 1585.408651][T15656] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1585.733651][T15656] usb 9-1: config 0 has no interfaces? [ 1585.785736][T17053] binder: 17052:17053 ioctl 4018620d 0 returned -22 [ 1585.806508][T15656] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1585.816441][T15656] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.827641][T15656] usb 9-1: Product: syz [ 1585.832221][T15656] usb 9-1: Manufacturer: syz [ 1585.837219][T15656] usb 9-1: SerialNumber: syz [ 1585.875095][T17053] binder: 17052:17053 ioctl c018620c 0 returned -14 [ 1586.040310][T15656] usb 9-1: config 0 descriptor?? [ 1586.773510][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.780564][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1587.859416][T15291] usb 9-1: USB disconnect, device number 15 [ 1588.433400][ T9304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1588.443072][ T9304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1588.464404][ T9304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1588.515028][ T9304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1588.527185][ T9304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1590.697190][ T9304] Bluetooth: hci1: command tx timeout [ 1590.808590][T17071] chnl_net:caif_netlink_parms(): no params data found [ 1590.887157][ T30] audit: type=1326 audit(1754688419.044:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.8.2927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1590.910502][ T30] audit: type=1326 audit(1754688419.054:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.8.2927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1590.933601][ T30] audit: type=1326 audit(1754688419.054:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.8.2927" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1592.575150][T15656] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1592.669362][T15656] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1592.767692][ T9304] Bluetooth: hci1: command tx timeout [ 1593.330200][T16802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.677168][T16802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.716109][T15291] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1594.079336][T15291] usb 9-1: config 0 has no interfaces? [ 1594.148466][T15291] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1594.158483][T15291] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.167347][T15291] usb 9-1: Product: syz [ 1594.171845][T15291] usb 9-1: Manufacturer: syz [ 1594.177043][T15291] usb 9-1: SerialNumber: syz [ 1594.231118][T16802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.251815][T17105] fido_id[17105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1594.359733][T15291] usb 9-1: config 0 descriptor?? [ 1594.519359][T16802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.703018][T17071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.711182][T17071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.719164][T17071] bridge_slave_0: entered allmulticast mode [ 1594.728676][T17071] bridge_slave_0: entered promiscuous mode [ 1594.854005][ T9304] Bluetooth: hci1: command tx timeout [ 1594.924240][T17071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.932231][T17071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.948141][T17071] bridge_slave_1: entered allmulticast mode [ 1594.957232][T17071] bridge_slave_1: entered promiscuous mode [ 1595.644083][T17071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.783883][T17071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.815877][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.942376][T16802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.668897][T15656] usb 9-1: USB disconnect, device number 16 [ 1596.707991][ T30] audit: type=1326 audit(1754688424.874:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1596.731284][ T30] audit: type=1326 audit(1754688424.874:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1596.948474][ T9304] Bluetooth: hci1: command tx timeout [ 1596.996434][ T30] audit: type=1326 audit(1754688424.964:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1597.019540][ T30] audit: type=1326 audit(1754688424.964:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1597.044733][ T30] audit: type=1326 audit(1754688424.974:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1597.068956][ T30] audit: type=1326 audit(1754688424.974:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1597.094389][ T30] audit: type=1326 audit(1754688424.974:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1597.118287][ T30] audit: type=1326 audit(1754688424.984:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1597.141390][ T30] audit: type=1326 audit(1754688425.004:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1597.164356][ T30] audit: type=1326 audit(1754688425.024:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.6.2938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 1597.873755][T16802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.992704][T16802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1598.050697][T16802] bond0 (unregistering): Released all slaves [ 1598.423730][T16802] tipc: Left network mode [ 1598.499159][T17071] team0: Port device team_slave_0 added [ 1598.771326][T17071] team0: Port device team_slave_1 added [ 1599.580901][T16802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.589799][T16802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.689662][T16802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1599.697708][T16802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.969846][T16802] team0 (unregistering): Port device team_slave_1 removed [ 1601.009097][T16802] team0 (unregistering): Port device team_slave_0 removed [ 1601.353047][T17071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.360884][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.391364][T17071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.643872][T17071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.651854][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.679314][T17071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.632207][T17071] hsr_slave_0: entered promiscuous mode [ 1602.641780][T17071] hsr_slave_1: entered promiscuous mode [ 1602.650636][T17071] debugfs: 'hsr0' already exists in 'hsr' [ 1602.656607][T17071] Cannot create hsr debugfs directory [ 1602.745253][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.834392][T16802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.030027][T16802] tipc: Disabling bearer [ 1603.383947][T16802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.415535][T16802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.443979][T16802] bond0 (unregistering): Released all slaves [ 1603.883048][T16802] tipc: Left network mode [ 1604.504824][T16802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.524366][T16802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.211218][T16802] team0 (unregistering): Port device team_slave_1 removed [ 1605.446443][T16802] team0 (unregistering): Port device team_slave_0 removed [ 1609.571584][T17071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1609.780487][T17071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1609.916541][T17071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1609.944592][T17071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1612.309270][T17071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.558379][T17071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.710762][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.719081][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.847199][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.854780][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.552580][T17215] loop8: detected capacity change from 0 to 8192 [ 1614.325181][T17228] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1614.334869][T17228] FAT-fs (loop8): Filesystem has been set read-only [ 1616.374346][T17071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.139421][T17243] fuse: Bad value for 'fd' [ 1617.445940][T17071] veth0_vlan: entered promiscuous mode [ 1617.636345][T17071] veth1_vlan: entered promiscuous mode [ 1617.918711][T17249] sch_fq: defrate 0 ignored. [ 1618.133922][T17071] veth0_macvtap: entered promiscuous mode [ 1618.248736][T17071] veth1_macvtap: entered promiscuous mode [ 1618.633639][T17071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1618.799911][T17071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1618.993049][ T4207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.082410][ T4207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.185800][ T4207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.275815][ T4207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.973041][T17172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.981959][T17172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.619364][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.627891][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.561722][T17359] loop2: detected capacity change from 0 to 1024 [ 1631.620678][T17359] EXT4-fs: Ignoring removed orlov option [ 1631.821684][T17359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1632.609746][T17071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1633.316503][T15291] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1633.713476][T15291] usb 7-1: config 0 has no interfaces? [ 1633.772455][T15291] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1633.782851][T15291] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.791764][T15291] usb 7-1: Product: syz [ 1633.796238][T15291] usb 7-1: Manufacturer: syz [ 1633.801761][T15291] usb 7-1: SerialNumber: syz [ 1634.100708][T15291] usb 7-1: config 0 descriptor?? [ 1636.551558][T15291] usb 7-1: USB disconnect, device number 10 [ 1638.229756][T17409] netlink: 'syz.6.3002': attribute type 27 has an invalid length. [ 1639.120473][T17409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.130913][T17409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.716819][T17409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1639.739433][T17409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.049995][T17412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.062617][T17412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.164221][T17412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1641.187445][T16802] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.257409][T16802] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.320723][ T4301] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.413017][ T4301] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.533277][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3008'. [ 1643.630756][T17437] tipc: Started in network mode [ 1643.636047][T17437] tipc: Node identity ac14140f, cluster identity 4711 [ 1643.645060][T17437] tipc: New replicast peer: 255.255.255.255 [ 1643.653979][T17437] tipc: Enabled bearer , priority 10 [ 1644.638825][T16171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1644.710003][T16171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1644.727497][T16171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1644.777076][T15655] tipc: Node number set to 2886997007 [ 1644.801242][T16171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1644.845994][T16171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1645.137580][T15655] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1645.865452][T15655] usb 3-1: config 0 has no interfaces? [ 1645.903361][T15655] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1645.913424][T15655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.922095][T15655] usb 3-1: Product: syz [ 1645.926473][T15655] usb 3-1: Manufacturer: syz [ 1645.933665][T15655] usb 3-1: SerialNumber: syz [ 1646.082244][T15655] usb 3-1: config 0 descriptor?? [ 1647.014116][T16171] Bluetooth: hci3: command tx timeout [ 1647.949772][T15646] usb 3-1: USB disconnect, device number 46 [ 1647.983704][T17443] chnl_net:caif_netlink_parms(): no params data found [ 1648.166369][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.173622][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1648.741313][T17473] loop2: detected capacity change from 0 to 512 [ 1648.823273][T17473] ======================================================= [ 1648.823273][T17473] WARNING: The mand mount option has been deprecated and [ 1648.823273][T17473] and is ignored by this kernel. Remove the mand [ 1648.823273][T17473] option from the mount to silence this warning. [ 1648.823273][T17473] ======================================================= [ 1649.087193][T16171] Bluetooth: hci3: command tx timeout [ 1649.136222][ T4301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.379648][ T4301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.495139][T17473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1649.509737][T17473] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.735756][ T4301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.034461][ T4301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.165359][T17071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.627783][T17443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.635682][T17443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.650813][T17443] bridge_slave_0: entered allmulticast mode [ 1650.660880][T17443] bridge_slave_0: entered promiscuous mode [ 1650.790355][T17443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.798528][T17443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.806428][T17443] bridge_slave_1: entered allmulticast mode [ 1650.817208][T17443] bridge_slave_1: entered promiscuous mode [ 1651.171477][T16171] Bluetooth: hci3: command tx timeout [ 1651.431716][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.489391][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.688510][T17492] input: syz0 as /devices/virtual/input/input74 [ 1652.438804][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.463702][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.514866][ T4301] bond0 (unregistering): Released all slaves [ 1653.051286][T17443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1653.153249][ T4301] tipc: Left network mode [ 1653.177913][T17443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1653.248778][T16171] Bluetooth: hci3: command tx timeout [ 1653.936289][T17443] team0: Port device team_slave_0 added [ 1654.157409][T17443] team0: Port device team_slave_1 added [ 1655.235296][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1655.245524][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.331647][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1655.339620][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.749605][ T4301] team0 (unregistering): Port device team_slave_1 removed [ 1656.929269][ T4301] team0 (unregistering): Port device team_slave_0 removed [ 1657.531192][T17443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.538706][T17443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.566093][T17443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.945456][T17443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.953229][T17443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.981508][T17443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.911182][T17443] hsr_slave_0: entered promiscuous mode [ 1658.922117][T17443] hsr_slave_1: entered promiscuous mode [ 1660.207386][T15656] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1660.435997][T15656] usb 7-1: config 0 has no interfaces? [ 1660.510082][T15656] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1660.520413][T15656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.529076][T15656] usb 7-1: Product: syz [ 1660.533482][T15656] usb 7-1: Manufacturer: syz [ 1660.538578][T15656] usb 7-1: SerialNumber: syz [ 1660.640927][T15656] usb 7-1: config 0 descriptor?? [ 1661.712485][T17443] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1661.885514][T17443] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1661.999501][T17443] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1662.115767][T17443] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1662.986563][T15646] usb 7-1: USB disconnect, device number 11 [ 1663.677129][T15655] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1663.939889][T15655] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1663.950706][T15655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.994840][T17443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.050325][T15655] usb 7-1: config 0 descriptor?? [ 1664.257458][T17443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.383862][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.392100][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.636473][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.644444][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.766191][T15655] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1664.782134][T15655] asix 7-1:0.0: probe with driver asix failed with error -61 [ 1666.621854][T15291] usb 7-1: USB disconnect, device number 12 [ 1667.400877][ T9304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1667.442159][ T9304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1667.457935][ T9304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1667.509265][ T9304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1667.558596][ T9304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1667.671783][T17443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1669.648236][T16171] Bluetooth: hci2: command tx timeout [ 1670.408822][T17570] chnl_net:caif_netlink_parms(): no params data found [ 1671.695080][ T3737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.745517][T16171] Bluetooth: hci2: command tx timeout [ 1671.819473][T17443] veth0_vlan: entered promiscuous mode [ 1671.858683][T17443] veth1_vlan: entered promiscuous mode [ 1672.004443][ T3737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.222484][ T3737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.498018][ T3737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.875345][T17443] veth0_macvtap: entered promiscuous mode [ 1672.978878][T17608] random: crng reseeded on system resumption [ 1673.026772][T17443] veth1_macvtap: entered promiscuous mode [ 1673.147659][ T3737] bridge_slave_1: left allmulticast mode [ 1673.153729][ T3737] bridge_slave_1: left promiscuous mode [ 1673.161175][ T3737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.267722][ T3737] bridge_slave_0: left allmulticast mode [ 1673.276819][ T3737] bridge_slave_0: left promiscuous mode [ 1673.283944][ T3737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.847901][T16171] Bluetooth: hci2: command tx timeout [ 1674.248634][ T3737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.325283][ T3737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.407629][ T3737] bond0 (unregistering): Released all slaves [ 1674.680821][ T11] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1674.856186][T17443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1674.878728][ T11] usb 6-1: config 0 has no interfaces? [ 1674.939803][ T11] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1674.949775][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.958988][ T11] usb 6-1: Product: syz [ 1674.963297][ T11] usb 6-1: Manufacturer: syz [ 1674.968733][ T11] usb 6-1: SerialNumber: syz [ 1674.994631][ T11] usb 6-1: config 0 descriptor?? [ 1675.022759][T17570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.031315][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.040081][T17570] bridge_slave_0: entered allmulticast mode [ 1675.050727][T17570] bridge_slave_0: entered promiscuous mode [ 1675.161152][T17443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1675.430543][T16802] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.445551][T17570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.454371][T17570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.462627][T17570] bridge_slave_1: entered allmulticast mode [ 1675.472224][T17570] bridge_slave_1: entered promiscuous mode [ 1675.681823][ T3737] hsr_slave_0: left promiscuous mode [ 1675.766937][ T3737] hsr_slave_1: left promiscuous mode [ 1675.775891][ T3737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1675.783978][ T3737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.873081][ T3737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1675.881414][ T3737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.897112][T16171] Bluetooth: hci2: command tx timeout [ 1675.923500][ T3737] veth1_macvtap: left promiscuous mode [ 1675.929967][ T3737] veth0_macvtap: left promiscuous mode [ 1675.938509][ T3737] veth1_vlan: left promiscuous mode [ 1675.944277][ T3737] veth0_vlan: left promiscuous mode [ 1676.987992][ T11] usb 6-1: USB disconnect, device number 39 [ 1677.291087][ T3737] team0 (unregistering): Port device team_slave_1 removed [ 1677.451023][ T3737] team0 (unregistering): Port device team_slave_0 removed [ 1678.032921][T16802] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.459044][T15243] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.653731][T15243] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.689755][T17570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.814534][T17570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.434927][T17570] team0: Port device team_slave_0 added [ 1679.550978][T17570] team0: Port device team_slave_1 added [ 1679.940748][T17570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.949010][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.976930][T17570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.262014][T17570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.269513][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.299931][T17570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.275385][T17570] hsr_slave_0: entered promiscuous mode [ 1681.288630][T17570] hsr_slave_1: entered promiscuous mode [ 1681.298202][T17570] debugfs: 'hsr0' already exists in 'hsr' [ 1681.304164][T17570] Cannot create hsr debugfs directory [ 1683.311066][T15655] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1683.603529][T15655] usb 7-1: config 0 has no interfaces? [ 1683.678095][T15655] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1683.687917][T15655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.696354][T15655] usb 7-1: Product: syz [ 1683.701089][T15655] usb 7-1: Manufacturer: syz [ 1683.706016][T15655] usb 7-1: SerialNumber: syz [ 1683.811267][T15655] usb 7-1: config 0 descriptor?? [ 1684.742462][T17570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1684.853727][T17570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1684.959891][T17570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1685.039429][T17570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1686.293361][ T5869] usb 7-1: USB disconnect, device number 13 [ 1686.665821][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.900013][T17570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.056838][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.064750][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.195127][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.202882][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.128214][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.136849][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.498937][ T1871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.508981][ T1871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.994565][T17570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.774258][T17570] veth0_vlan: entered promiscuous mode [ 1691.980139][T17570] veth1_vlan: entered promiscuous mode [ 1692.452060][T15656] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1692.484489][T17570] veth0_macvtap: entered promiscuous mode [ 1692.577789][T17570] veth1_macvtap: entered promiscuous mode [ 1692.744031][T15656] usb 6-1: config 0 has no interfaces? [ 1692.800499][T15656] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1692.812315][T15656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.821826][T15656] usb 6-1: Product: syz [ 1692.826309][T15656] usb 6-1: Manufacturer: syz [ 1692.833287][T15656] usb 6-1: SerialNumber: syz [ 1692.970476][T15656] usb 6-1: config 0 descriptor?? [ 1692.973979][T17570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.122020][T17570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1693.273210][T15943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.365265][T15943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.439608][ T4207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.505450][ T4207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.385454][ T5869] usb 6-1: USB disconnect, device number 40 [ 1698.602610][T17772] evm: overlay not supported [ 1698.673762][T17770] overlay: filesystem on ./file0 not supported as upperdir [ 1703.577012][T15655] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1703.897195][T15655] usb 9-1: config 0 has no interfaces? [ 1703.955222][T15655] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1703.965572][T15655] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.977091][T15655] usb 9-1: Product: syz [ 1703.981497][T15655] usb 9-1: Manufacturer: syz [ 1703.986493][T15655] usb 9-1: SerialNumber: syz [ 1704.047575][T16802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.055803][T16802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.175126][T15655] usb 9-1: config 0 descriptor?? [ 1704.718687][T17172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.727469][T17172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.719068][T15655] usb 9-1: USB disconnect, device number 17 [ 1707.844839][T17844] loop6: detected capacity change from 0 to 512 [ 1708.046231][T17844] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.3077: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 1708.273486][T17844] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.3077: Bad quota inode: 3, type: 0 [ 1708.328894][T17844] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1708.475078][T17844] EXT4-fs (loop6): mount failed [ 1709.621198][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1709.630697][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1710.840560][T15655] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1711.120849][T17873] loop3: detected capacity change from 0 to 2048 [ 1711.189880][T15655] usb 7-1: config 0 has no interfaces? [ 1711.357277][T15655] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1711.369733][T15655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.379309][T15655] usb 7-1: Product: syz [ 1711.383902][T15655] usb 7-1: Manufacturer: syz [ 1711.388864][T15655] usb 7-1: SerialNumber: syz [ 1711.526206][T15655] usb 7-1: config 0 descriptor?? [ 1712.577094][T17890] loop8: detected capacity change from 0 to 512 [ 1712.640899][T17890] EXT4-fs: Ignoring removed nobh option [ 1712.828210][T17890] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 1712.889392][T17890] System zones: 0-2, 18-18, 34-34 [ 1712.930462][T17890] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.944843][T17890] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1713.586335][ T5869] usb 7-1: USB disconnect, device number 14 [ 1713.920413][T17896] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1714.159799][T15828] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1715.940796][T17925] loop3: detected capacity change from 0 to 256 [ 1716.495045][T17925] FAT-fs (loop3): Directory bread(block 64) failed [ 1716.502151][T17925] FAT-fs (loop3): Directory bread(block 65) failed [ 1716.509751][T17925] FAT-fs (loop3): Directory bread(block 66) failed [ 1716.516832][T17925] FAT-fs (loop3): Directory bread(block 67) failed [ 1716.523949][T17925] FAT-fs (loop3): Directory bread(block 68) failed [ 1716.531842][T17925] FAT-fs (loop3): Directory bread(block 69) failed [ 1716.539205][T17925] FAT-fs (loop3): Directory bread(block 70) failed [ 1716.546135][T17925] FAT-fs (loop3): Directory bread(block 71) failed [ 1716.553588][T17925] FAT-fs (loop3): Directory bread(block 72) failed [ 1716.560817][T17925] FAT-fs (loop3): Directory bread(block 73) failed [ 1717.848047][ T5869] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1718.078761][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 1718.148451][ T5869] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.160475][ T5869] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.171698][ T5869] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1718.179215][ T5869] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1718.188868][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.391040][ T5869] usb 4-1: config 0 descriptor?? [ 1718.610521][ T11] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1719.106095][ T5869] cougar 0003:060B:500A.0031: unexpected long global item [ 1719.197130][ T5869] cougar 0003:060B:500A.0031: parse failed [ 1719.204046][ T5869] cougar 0003:060B:500A.0031: probe with driver cougar failed with error -22 [ 1719.287286][ T11] usb 9-1: config 0 has no interfaces? [ 1719.341205][ T5869] usb 4-1: USB disconnect, device number 15 [ 1719.501212][ T11] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1719.511131][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.520178][ T11] usb 9-1: Product: syz [ 1719.524662][ T11] usb 9-1: Manufacturer: syz [ 1719.529737][ T11] usb 9-1: SerialNumber: syz [ 1719.730926][ T11] usb 9-1: config 0 descriptor?? [ 1720.353906][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1721.320958][T17960] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1721.477048][T17960] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1721.520059][T17960] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1721.529473][T17960] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1721.597215][ T11] usb 9-1: USB disconnect, device number 18 [ 1721.644054][T17960] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1721.732480][T17960] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1721.809535][T17960] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1721.882086][T17960] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1721.971442][T17960] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1721.980166][T17960] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1723.060395][T17985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3113'. [ 1726.482930][ T11] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1726.742366][ T11] usb 9-1: config 0 has no interfaces? [ 1726.823755][ T11] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1726.836923][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.845364][ T11] usb 9-1: Product: syz [ 1726.852427][ T11] usb 9-1: Manufacturer: syz [ 1726.858206][ T11] usb 9-1: SerialNumber: syz [ 1726.952286][ T11] usb 9-1: config 0 descriptor?? [ 1727.028332][T18024] loop6: detected capacity change from 0 to 512 [ 1727.148295][T18024] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1727.161930][T18024] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1727.287647][T18024] EXT4-fs (loop6): 1 truncate cleaned up [ 1727.296232][T18024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1727.672494][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'. [ 1727.860317][T16221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.377439][T18039] netlink: 'syz.9.3130': attribute type 27 has an invalid length. [ 1728.821881][T18039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.832108][T18039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.149377][T18039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.187303][T18039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.602451][ T11] usb 9-1: USB disconnect, device number 19 [ 1730.279887][T18040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.300514][T18040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.465283][T18040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1730.553939][T15943] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.600241][ T3737] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.684955][ T3737] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.748816][ T3737] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.677636][T18065] loop6: detected capacity change from 0 to 128 [ 1732.832498][T18065] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1732.911852][T18065] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1733.445614][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3138'. [ 1733.618846][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3139'. [ 1735.219398][T18078] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3141'. [ 1736.049315][T15656] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1736.157696][ T5869] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1736.289616][T15656] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1736.301101][T15656] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.312445][T15656] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1736.322130][T15656] usb 10-1: config 1 has no interface number 0 [ 1736.328654][T15656] usb 10-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1736.340340][T15656] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1736.407386][ T5869] usb 4-1: config 0 has no interfaces? [ 1736.448547][T15655] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1736.484026][ T5869] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1736.494429][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.503340][ T5869] usb 4-1: Product: syz [ 1736.507856][ T5869] usb 4-1: Manufacturer: syz [ 1736.512748][ T5869] usb 4-1: SerialNumber: syz [ 1736.579280][T15656] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1736.589123][T15656] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.597787][T15656] usb 10-1: Product: syz [ 1736.602385][T15656] usb 10-1: Manufacturer: syz [ 1736.607843][T15656] usb 10-1: SerialNumber: syz [ 1736.631892][ T5869] usb 4-1: config 0 descriptor?? [ 1736.640073][T15655] usb 6-1: Using ep0 maxpacket: 32 [ 1736.685498][T15655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.697619][T15655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.708110][T15655] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1736.717757][T15655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.902581][T15655] usb 6-1: config 0 descriptor?? [ 1736.978354][T15655] hub 6-1:0.0: USB hub found [ 1737.079449][T15656] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1737.129445][T15656] usb 10-1: USB disconnect, device number 70 [ 1737.275295][T15655] hub 6-1:0.0: 1 port detected [ 1737.998963][T15655] hub 6-1:0.0: activate --> -90 [ 1738.418504][ T5869] usb 6-1: USB disconnect, device number 41 [ 1738.800678][T15655] usb 4-1: USB disconnect, device number 16 [ 1739.984242][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 1743.778874][T18135] loop3: detected capacity change from 0 to 512 [ 1743.898666][T18135] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1744.076309][T18135] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.3156: corrupted in-inode xattr: invalid ea_ino [ 1744.166539][T18135] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3156: couldn't read orphan inode 15 (err -117) [ 1744.267322][T18135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1744.411418][T18135] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.3156: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 1744.789710][T17570] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.850853][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3162'. [ 1745.860481][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3162'. [ 1746.025656][T18159] loop3: detected capacity change from 0 to 256 [ 1749.176826][ T9304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1749.189692][ T9304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1749.205904][ T9304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1749.230180][ T9304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1749.245386][ T9304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1751.407149][ T9304] Bluetooth: hci1: command tx timeout [ 1751.928728][T18177] chnl_net:caif_netlink_parms(): no params data found [ 1752.147058][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1752.147153][ T30] audit: type=1326 audit(1754688580.284:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1752.177086][ T30] audit: type=1326 audit(1754688580.284:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1752.200906][ T30] audit: type=1326 audit(1754688580.344:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1752.494401][ T30] audit: type=1326 audit(1754688580.504:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1752.518322][ T30] audit: type=1326 audit(1754688580.524:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1752.544267][ T30] audit: type=1326 audit(1754688580.524:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1752.568337][ T30] audit: type=1326 audit(1754688580.544:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1753.081031][T15656] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1753.325822][T15656] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.336956][T15656] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1753.487269][ T9304] Bluetooth: hci1: command tx timeout [ 1753.494959][T15656] usb 9-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1753.504692][T15656] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1753.513234][T15656] usb 9-1: Product: syz [ 1753.517926][T15656] usb 9-1: Manufacturer: syz [ 1753.522803][T15656] usb 9-1: SerialNumber: syz [ 1753.532343][ T30] audit: type=1326 audit(1754688581.704:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1753.558593][ T30] audit: type=1326 audit(1754688581.704:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.3.3170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1753.600104][T15656] usb 9-1: config 0 descriptor?? [ 1754.554935][T15656] usb 9-1: USB disconnect, device number 20 [ 1754.750462][T18210] loop3: detected capacity change from 0 to 512 [ 1754.860012][T17522] udevd[17522]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1754.935485][T18210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1754.950367][T18210] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1755.034388][T18177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.043127][T18177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.051239][T18177] bridge_slave_0: entered allmulticast mode [ 1755.063751][T18177] bridge_slave_0: entered promiscuous mode [ 1755.245644][T18177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.253894][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.261928][T18177] bridge_slave_1: entered allmulticast mode [ 1755.272269][T18177] bridge_slave_1: entered promiscuous mode [ 1755.333799][T18210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1755.389945][T18210] EXT4-fs (loop3): can't enable nombcache during remount [ 1755.567863][ T9304] Bluetooth: hci1: command tx timeout [ 1755.811331][T17570] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1755.879848][T18177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1755.946885][T18177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1756.165781][ T11] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1756.400794][ T11] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.403983][T18177] team0: Port device team_slave_0 added [ 1756.411979][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1756.526280][ T11] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1756.536892][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1756.545241][ T11] usb 6-1: SerialNumber: syz [ 1756.578684][T18177] team0: Port device team_slave_1 added [ 1756.886382][ T11] usb 6-1: 0:2 : does not exist [ 1757.091601][ T11] usb 6-1: USB disconnect, device number 42 [ 1757.190997][T18177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.198538][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1757.225916][T18177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.378685][T17522] udevd[17522]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1757.667356][ T9304] Bluetooth: hci1: command tx timeout [ 1757.751978][T18177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.759980][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1757.787165][T18177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1759.651546][T18177] hsr_slave_0: entered promiscuous mode [ 1759.662458][T18177] hsr_slave_1: entered promiscuous mode [ 1759.671878][T18177] debugfs: 'hsr0' already exists in 'hsr' [ 1759.678201][T18177] Cannot create hsr debugfs directory [ 1760.388834][T18246] loop5: detected capacity change from 0 to 2048 [ 1760.572864][T15655] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1760.894631][T15655] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.907628][T15655] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1760.970131][T15655] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1760.980141][T15655] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.989104][T15655] usb 9-1: Product: syz [ 1760.993667][T15655] usb 9-1: Manufacturer: syz [ 1760.998688][T15655] usb 9-1: SerialNumber: syz [ 1761.139107][T15655] cdc_mbim 9-1:1.0: skipping garbage [ 1761.382954][T18251] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1762.070448][T18251] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1762.201090][T15655] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1762.301684][T15655] wwan wwan0: port wwan0mbim0 attached [ 1762.366264][T18262] loop5: detected capacity change from 0 to 512 [ 1762.467615][T15655] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 82:fb:05:7c:de:f0 [ 1762.494426][T18262] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3187: casefold flag without casefold feature [ 1762.541113][T15655] usb 9-1: USB disconnect, device number 21 [ 1762.550151][T15655] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1762.658164][T18262] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3187: couldn't read orphan inode 15 (err -117) [ 1762.762185][T15655] wwan wwan0: port wwan0mbim0 disconnected [ 1762.876338][T18262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1763.672865][T18177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1763.824330][T18177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1763.972280][T18177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1763.976938][ T30] audit: type=1326 audit(1754688592.134:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.072959][ T3737] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1764.118242][T12201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1764.137894][T18177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1764.156479][ T30] audit: type=1326 audit(1754688592.234:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.180450][ T30] audit: type=1326 audit(1754688592.234:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.207485][ T30] audit: type=1326 audit(1754688592.244:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.231085][ T30] audit: type=1326 audit(1754688592.244:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.254759][ T30] audit: type=1326 audit(1754688592.264:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.278614][ T30] audit: type=1326 audit(1754688592.274:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.304409][ T30] audit: type=1326 audit(1754688592.274:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.329665][ T30] audit: type=1326 audit(1754688592.294:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1764.353560][ T30] audit: type=1326 audit(1754688592.524:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.8.3192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1767.229451][T18177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.556824][T18177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.644868][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.652543][T15943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.784153][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.792091][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.056018][ T9304] Bluetooth: hci3: command 0x0406 tx timeout [ 1768.870690][T18300] ===================================================== [ 1768.878865][T18300] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1768.887804][T18300] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1768.894087][T18300] do_xdp_generic+0xd52/0x1690 [ 1768.899302][T18300] tun_get_user+0x45be/0x6ca0 [ 1768.904606][T18300] tun_chr_write_iter+0x3e9/0x5c0 [ 1768.910256][T18300] vfs_write+0xb4b/0x1580 [ 1768.915005][T18300] __ia32_sys_write+0x1f9/0x4d0 [ 1768.920530][T18300] ia32_sys_call+0x35bc/0x4310 [ 1768.925709][T18300] __do_fast_syscall_32+0xb0/0x150 [ 1768.931197][T18300] do_fast_syscall_32+0x38/0x80 [ 1768.936459][T18300] do_SYSENTER_32+0x1f/0x30 [ 1768.941358][T18300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1768.948211][T18300] [ 1768.950635][T18300] Uninit was created at: [ 1768.955176][T18300] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1768.962717][T18300] kmalloc_reserve+0x22f/0x4b0 [ 1768.967955][T18300] __alloc_skb+0x347/0x7d0 [ 1768.972790][T18300] alloc_skb_with_frags+0xc5/0xa60 [ 1768.978666][T18300] sock_alloc_send_pskb+0xad8/0xc70 [ 1768.984138][T18300] tun_get_user+0x113f/0x6ca0 [ 1768.989222][T18300] tun_chr_write_iter+0x3e9/0x5c0 [ 1768.994642][T18300] vfs_write+0xb4b/0x1580 [ 1768.999744][T18300] __ia32_sys_write+0x1f9/0x4d0 [ 1769.005005][T18300] ia32_sys_call+0x35bc/0x4310 [ 1769.010208][T18300] __do_fast_syscall_32+0xb0/0x150 [ 1769.015868][T18300] do_fast_syscall_32+0x38/0x80 [ 1769.021192][T18300] do_SYSENTER_32+0x1f/0x30 [ 1769.026103][T18300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1769.033200][T18300] [ 1769.035770][T18300] CPU: 1 UID: 0 PID: 18300 Comm: syz.9.3198 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) [ 1769.049852][T18300] Tainted: [W]=WARN [ 1769.053784][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1769.064698][T18300] ===================================================== [ 1769.072038][T18300] Disabling lock debugging due to kernel taint [ 1769.078779][T18300] Kernel panic - not syncing: kmsan.panic set ... [ 1769.085401][T18300] CPU: 1 UID: 0 PID: 18300 Comm: syz.9.3198 Tainted: G B W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) [ 1769.099217][T18300] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1769.104478][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1769.114974][T18300] Call Trace: [ 1769.118367][T18300] [ 1769.121675][T18300] __dump_stack+0x26/0x30 [ 1769.126275][T18300] dump_stack_lvl+0x53/0x270 [ 1769.131203][T18300] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1769.137309][T18300] dump_stack+0x1e/0x25 [ 1769.141940][T18300] vpanic+0x361/0xc50 [ 1769.146222][T18300] panic+0x15d/0x160 [ 1769.150538][T18300] kmsan_report+0x31c/0x320 [ 1769.155317][T18300] ? __msan_warning+0x1b/0x30 [ 1769.160262][T18300] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1769.166354][T18300] ? do_xdp_generic+0xd52/0x1690 [ 1769.171559][T18300] ? tun_get_user+0x45be/0x6ca0 [ 1769.177035][T18300] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1769.182830][T18300] ? vfs_write+0xb4b/0x1580 [ 1769.187614][T18300] ? __ia32_sys_write+0x1f9/0x4d0 [ 1769.193914][T18300] ? ia32_sys_call+0x35bc/0x4310 [ 1769.199416][T18300] ? __do_fast_syscall_32+0xb0/0x150 [ 1769.205457][T18300] ? do_fast_syscall_32+0x38/0x80 [ 1769.211325][T18300] ? do_SYSENTER_32+0x1f/0x30 [ 1769.216454][T18300] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1769.223171][T18300] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1769.229200][T18300] ? ___bpf_prog_run+0xea65/0xeba0 [ 1769.234532][T18300] ? __bpf_prog_run32+0xc2/0xf0 [ 1769.239558][T18300] ? kmsan_get_metadata+0xfb/0x160 [ 1769.244932][T18300] __msan_warning+0x1b/0x30 [ 1769.267230][T18300] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1769.273482][T18300] do_xdp_generic+0xd52/0x1690 [ 1769.278519][T18300] ? tun_get_user+0x40a1/0x6ca0 [ 1769.284008][T18300] ? filter_irq_stacks+0x49/0x190 [ 1769.289819][T18300] ? kmsan_get_metadata+0xfb/0x160 [ 1769.295356][T18300] ? tun_get_user+0x453a/0x6ca0 [ 1769.300787][T18300] tun_get_user+0x45be/0x6ca0 [ 1769.305862][T18300] ? stack_depot_save_flags+0x35/0x7b0 [ 1769.311606][T18300] ? kmsan_get_metadata+0xfb/0x160 [ 1769.317089][T18300] ? kmsan_get_metadata+0xfb/0x160 [ 1769.322443][T18300] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1769.329231][T18300] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1769.335725][T18300] tun_chr_write_iter+0x3e9/0x5c0 [ 1769.341196][T18300] vfs_write+0xb4b/0x1580 [ 1769.345747][T18300] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1769.351699][T18300] __ia32_sys_write+0x1f9/0x4d0 [ 1769.356807][T18300] ia32_sys_call+0x35bc/0x4310 [ 1769.361889][T18300] __do_fast_syscall_32+0xb0/0x150 [ 1769.367393][T18300] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1769.373656][T18300] do_fast_syscall_32+0x38/0x80 [ 1769.378923][T18300] do_SYSENTER_32+0x1f/0x30 [ 1769.384013][T18300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1769.390830][T18300] RIP: 0023:0xf7f02539 [ 1769.395039][T18300] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1769.415360][T18300] RSP: 002b:00000000f5426520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1769.424561][T18300] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000300 [ 1769.432959][T18300] RDX: 000000000000fdef RSI: 00000000f7394ff4 RDI: 0000000000000000 [ 1769.441255][T18300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1769.449576][T18300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1769.457693][T18300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1769.466093][T18300] [ 1769.470097][T18300] Kernel Offset: disabled [ 1769.474826][T18300] Rebooting in 86400 seconds..