last executing test programs: 1m55.842088122s ago: executing program 2 (id=482): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)=""/149, 0x95}], 0x1, &(0x7f0000000400)=""/120, 0x78}, 0x5}], 0x1, 0x100, &(0x7f00000004c0)) socket$inet6(0xa, 0x6, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x5851, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) capset(&(0x7f0000000000)={0x19980330}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x10000000, 0x2ffffffff}, 0xc) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='+\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="9e7c11705bb466d889f2d865b32a49b714d37f21526581935c2436112304701f8edd6c8b41", @ANYRES64=0x0], 0x20) 1m50.678775208s ago: executing program 2 (id=506): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x4000080) syz_clone(0x4809200, 0x0, 0x85, 0x0, 0x0, 0x0) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x110003, 0x0, [0xfd1, 0x10, 0x7f, 0x81, 0x4, 0x5, 0x8, 0x2]}) 1m50.443591251s ago: executing program 4 (id=509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000002400000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000"], 0xd8}}, 0x0) 1m50.222790477s ago: executing program 4 (id=513): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc000000010902"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}, 0x1, 0x300000000000000}, 0x200c00ca) 1m49.925990556s ago: executing program 2 (id=516): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x1}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x20000000) 1m49.730278553s ago: executing program 2 (id=517): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100080200000018e7036600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m49.600741666s ago: executing program 1 (id=520): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0xeb) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = socket(0x1, 0x803, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0x8000000000000001, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) dup(r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00'], 0x40}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m49.463972084s ago: executing program 0 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000080009000200000014001f0000000b00000000000000000000000001140020000000000000e4ffffff00ffffe00000020500070000000000060002000100000008000a"], 0x5c}}, 0x0) 1m49.415860796s ago: executing program 2 (id=522): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x1, 0xfffffffffffffffc, 0x8, 0x0, 0x3, 0xffffffffffffffff], 0x2, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x400) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x2, 0x5, 0x0, 0xf, 0x9, 0x1, 0x0, 0x3f, 0x7, 0xfc, 0x0, 0x0, 0x1abc0, 0x8, 0x4, 0x6, 0x4, 0x6, '\x00', 0x7, 0x3}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_wait(r6, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000004}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x6, 0xffff, 0x28, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0xe}, 0xf810, 0x7, 0x6, 0x8}}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r7, 0x0, {0x2, 0x1, 0x3}, 0xff}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000), 0x1, &(0x7f0000000400)=[{&(0x7f0000217f28)=""/231, 0xe7}, {&(0x7f00000002c0)=""/115, 0x76}, {0xfffffffffffffffe, 0xfffffffffffffd5b}, {&(0x7f00000004c0)=""/61, 0x43}], 0x4, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="658593de0ba7c63e62f5ef8d331adfb8a6c077c4944648d609265b7dd3eaf91a069f0ee8ec53d9d82996ce6d0ec79a81"], 0x4) syz_clone(0x94484c00, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_init(0x8, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f000000010000007921c107ecb97f8d50357a8e1a9e"], 0x48) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000080)={0x110003, 0x0, [0xfd1, 0x10, 0x7f, 0x81, 0x4, 0x9, 0x8, 0x2]}) 1m49.331142927s ago: executing program 0 (id=523): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0xeb) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) r5 = socket(0x1, 0x803, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0x8000000000000001, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1d) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) dup(r7) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00'], 0x40}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m48.777943273s ago: executing program 1 (id=525): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000380)='net/llc/core\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0xe, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x5, 0x100000}) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000500)=[{{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)}, {&(0x7f0000000440)=""/3, 0x3}], 0x2, &(0x7f00000004c0)=""/51, 0x33}, 0x9}], 0x1, 0x2, 0x0) (async) open(0x0, 0x54b27e, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) io_setup(0x7, 0x0) (async) io_submit(0x0, 0x0, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x800) ioctl$SG_GET_PACK_ID(r7, 0x2287, &(0x7f0000000000)) (async, rerun: 32) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) (async, rerun: 32) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async, rerun: 32) r10 = accept4(r9, 0x0, 0x0, 0x0) (rerun: 32) sendto$packet(r10, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES64=r10, @ANYRES32=r7, @ANYRESHEX=r5], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 1m48.774518723s ago: executing program 4 (id=526): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000000c0)=""/4096, 0x1000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) syz_open_procfs(0x0, 0x0) waitid(0x0, r10, 0x0, 0x8, &(0x7f0000000140)) waitid(0x0, r10, 0x0, 0x8, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x4f29, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xf, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0x2, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1, 0x304, 0x4, 0x2d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x0, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0x8, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0xed37, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x977, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x1, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xbc, 0x792c, 0xa4, 0x8, 0xb1c1, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x3, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x6, 0x7fff, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0x3, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x0, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x10, 0x56c, 0xffff9586, 0xd, 0x9, 0xb}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x7, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x2, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m48.599598747s ago: executing program 1 (id=527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc010000160085020000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000000000000000000000000000000000007", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006018000000000000000000000000000000000000000045780000e400060020"], 0x1dc}}, 0x0) 1m48.475294874s ago: executing program 0 (id=528): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x9, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="439675725635", 0x0, 0x0, 0x20, 0x1, 0x0}) (async) pwrite64(r1, &(0x7f0000000080), 0x0, 0x704840cd) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async, rerun: 64) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000100)={0x80}) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) 1m48.110137596s ago: executing program 1 (id=529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000000000000012fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 1m47.302185485s ago: executing program 0 (id=530): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xdc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000000000fffd0a0000002900", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 1m47.298724075s ago: executing program 4 (id=531): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c8", 0x12}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000040)='netpci0\x00') 1m46.241206269s ago: executing program 1 (id=532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m45.153537212s ago: executing program 4 (id=533): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000084000000000700ff020000000000000000000000000001000000000000000000000000000088000000000800000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef) rt_sigsuspend(0x0, 0x0) pipe(&(0x7f0000000380)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 1m40.042072667s ago: executing program 3 (id=547): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0xff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffff9, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x29, 0x1000}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "a229676d0a38416f6272d9f23ece78628720b60f5a441c934866d71a7e96f8422fc37de0bdffa70766ee6fa38b88c53eb1630e6868ab9d259c14f2aecc8c82c4", 0x15}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x8c) keyctl$update(0x2, r2, &(0x7f0000000600)="6d1f5f5c1df1", 0x6) r4 = gettid() r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r5, 0x29, 0x48, &(0x7f0000000580)=ANY=[@ANYBLOB="3cf700"], 0x8) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r9, &(0x7f0000000280)=""/4096, 0x1000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 1m38.281258415s ago: executing program 3 (id=548): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800056600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m38.172572543s ago: executing program 3 (id=549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m38.029674737s ago: executing program 3 (id=550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000170100000300e5fd01", @ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="34bff96c67e99e4bad13ab3ba1ab0298f553bfd4182a4ee0a8a0e955406cb9deef6046472ffbe504dba73f8913dd9246fe9348a201b9d7322fad16b97ebcd9d9f5b26cce"], 0xfffffffffffffd8c}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a80)="d52498675df27cb6326691c13703691504c73211efdd850d3b507d2235a767b3", 0x20}], 0x1, 0x0, 0x0, 0x24040040}], 0x1, 0x4000000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002000)="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", 0x2000, &(0x7f0000004180)={&(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x29, 0x6, 0x60000800, 0x0, 0x4, 0x8, 0x5, 0x0, 0x0, 0x10, 0x9ec7}}, &(0x7f00000003c0)={0x18, 0x0, 0x154bf43c, {0x4}}, &(0x7f00000004c0)={0x18, 0x0, 0x64d, {0x5}}, &(0x7f0000000500)={0x18, 0x0, 0x9, {0x3}}, &(0x7f0000000580)={0x18, 0x0, 0x9, {0xfffffffa}}, &(0x7f0000000640)={0x28, 0xfffffffffffffffe, 0x42f, {{0x40, 0x7, 0x1}}}, &(0x7f0000000680)={0x60, 0x0, 0x6, {{0x5b95, 0x5, 0x0, 0x100000000, 0x4, 0x0, 0xc71b, 0x3}}}, &(0x7f0000000700)={0x18, 0x0, 0x0, {0xfffffff8}}, &(0x7f0000000740)={0x15, 0x0, 0x3, {'#$$!\x00'}}, &(0x7f0000000780)={0x20, 0xfffffffffffffff5, 0x9, {0x0, 0x6}}, &(0x7f00000007c0)={0x78, 0x0, 0x81, {0x73f4, 0x62415405, 0x0, {0x0, 0x6, 0x6, 0x0, 0x4, 0x2, 0x6, 0x442, 0x400, 0x1000, 0x7, 0x0, 0x0, 0x5, 0x8}}}, &(0x7f0000000840)={0x90, 0x0, 0x800, {0x4, 0x3, 0x1, 0x9a, 0x8, 0x7, {0x5, 0x0, 0x0, 0x9, 0x1, 0x1, 0x8, 0x9, 0x2, 0x1000, 0x7, 0xee00, 0x0, 0x2, 0x3}}}, &(0x7f0000000900)={0x88, 0x0, 0x8000000000000000, [{0x2, 0x401, 0x11, 0x1, 'ecb-camellia-asm\x00'}, {0x0, 0x80000000, 0x4, 0xfffffffb, '+\xad^/'}, {0x4, 0x80000001, 0x9, 0xfa, 'skcipher\x00'}]}, &(0x7f0000000ac0)={0x280, 0x0, 0x400, [{{0x2, 0x2, 0x7, 0xfff, 0x6, 0x58000, {0x6, 0x9, 0x6, 0xe, 0x2b3, 0x5, 0x1, 0x9, 0x10001, 0x6000, 0x1c0000, 0xffffffffffffffff, 0xee01, 0x5, 0x8}}, {0x4, 0x40, 0x0, 0x400000}}, {{0x0, 0x0, 0x400, 0x1ff, 0x59ff, 0x871, {0x5, 0x7, 0x9, 0x8001, 0x9, 0xf, 0x0, 0x4, 0x5b872ad7, 0xa000, 0x6, 0x0, 0x0, 0x8001, 0x7}}, {0x6, 0xf, 0x7, 0xe, 'nilfs2\x00'}}, {{0x0, 0x3, 0x0, 0x3, 0x0, 0x9, {0x6, 0x0, 0x100, 0x7fff, 0x6, 0x4612, 0x10, 0x1, 0x8, 0x1000, 0x1, 0x0, 0x0, 0x5, 0x81f2}}, {0x5, 0x9, 0x0, 0x61579cbb}}, {{0x4, 0x3, 0x6, 0x0, 0x8, 0x9, {0x4, 0x42, 0x1, 0x7, 0x40000000000000, 0x7, 0xfff, 0x2531, 0x38, 0xc000, 0x6, 0xee00, 0x0, 0x9, 0x7}}, {0x1, 0x4, 0x5, 0x8001, '.-$%&'}}]}, &(0x7f0000000e80)={0xa0, 0x0, 0x8, {{0x0, 0x2, 0x2, 0x7, 0x5, 0x400, {0x0, 0x5, 0x4, 0x7, 0x4, 0x80000000, 0x8, 0xe9d1, 0x8001, 0x2000, 0x7, 0x0, 0x0, 0x4, 0x1}}, {0x0, 0x3}}}, &(0x7f0000000f40)={0x20, 0x0, 0x80000000, {0x2, 0x4, 0xfff}}, &(0x7f0000004040)={0x130, 0xffffffffffffffda, 0x0, {0x9, 0x3, 0x0, '\x00', {0x4000, 0xc, 0xfff, 0xffff0000, 0x0, 0x0, 0x6000, '\x00', 0xfffffffffffffffc, 0x0, 0x10, 0x7, {0x2, 0x8}, {0xef2, 0x7}, {0x8000000000000001, 0x3}, {0x100000001, 0xf1a}, 0xc78, 0x2, 0x9, 0x5571}}}}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004ac0)={0x2020}, 0x2020) r6 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000100)="f9", 0x1) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x2, 0x14, 0x380, 0xff81, 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x5c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030000000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350076657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 1m37.434652268s ago: executing program 3 (id=551): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3b, &(0x7f0000000200)=[{&(0x7f0000000080)="020b0700f4670063d53e00e4a17c45c8a780e9bfcc2fb8932cadb8dc4005ac2c383c90afe8de2c10c21b537bdb3d58e8e61eff5a552d11", 0x37}, {0x0}], 0x2}, 0x0) 1m37.301955901s ago: executing program 3 (id=552): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r3, &(0x7f0000000000)=""/57, 0x39) r4 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xf7, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x800, &(0x7f00000002c0)={0xa, 0x0, 0x6, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c081}, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100090000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) 1m36.710326275s ago: executing program 0 (id=553): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3000000000000000000000000700000000830b4be0000001e0000001008911e44833856ee8b25633f47d13d5e4aa00001c000000000000006400000008000000", @ANYRES32], 0x50}}], 0x1, 0x40) 1m36.709340211s ago: executing program 2 (id=554): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r3, &(0x7f0000000000)=""/57, 0x39) r4 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xf7, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x800, &(0x7f00000002c0)={0xa, 0x0, 0x6, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c081}, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100120000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) 1m36.639528951s ago: executing program 1 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000001540)=0x2) setreuid(0xffffffffffffffff, r3) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) r4 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000014c0)={0x3, 0xff}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f00000015c0)={0x0, &(0x7f0000002600)="cb173a47a86938648334f40cf1191571d69282d877eed7b5adf327b3fe8506cd59e1e05a0264361d4a360f8e2a00cc59efe03ca535d3a3e1274e16afd4605fb940d40f687fa65b2f8294212d62612412faccd3f5ebdd21ffd78c47046d7d8b82d376f9dcb67eaba742b9c6a22f63a8dc5e807851242e09fd24a544b2d48c7727b7f8ce8984f8e103fd81a5559ea0ea12ae63db0f89ee18a02d78e42bd5b78b8cf4cb09c7fa37c5a2d41e48e9d0d5e0db8d5c3767c2787450c524a62629eaba803d28ea4b", 0xc4}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001600)=""/4092, 0xffc}, {&(0x7f0000001140)=""/22, 0x16}, {&(0x7f0000002700)=""/66, 0x42}, {&(0x7f00000011c0)=""/224, 0xe0}, {&(0x7f0000002780)=""/229, 0x102}, {&(0x7f00000013c0)=""/116, 0x74}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x8}, 0x40012022) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6000000000000000, 0x3, 0xc, 0x100000000, 0xa, 0xffff, 0x6, 0xffffffff00000001}, &(0x7f0000000140)={0x8, 0x1, 0x80000001, 0x1, 0x8000, 0x80, 0x4, 0x8}, &(0x7f0000001500)={0x2, 0x8, 0x3, 0x0, 0x7, 0x8e, 0x7, 0x4}, &(0x7f0000000280)={r8, r9+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7]}, 0x8}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xefffffff, {0x0, 0x0, 0x0, r7, {0x9, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m36.619983155s ago: executing program 4 (id=556): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000540)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) r2 = socket(0xa, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x27ca, 0x1000, 0x0, 0x40002a}, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYRES16=r5]) 1m36.29003805s ago: executing program 0 (id=557): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x141d41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x480a0}, 0x4000090) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getrandom(&(0x7f0000000040)=""/38, 0x26, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x4000080) syz_clone(0x4809200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x110003, 0x0, [0xfd1, 0x10, 0x7f, 0x81, 0x4, 0x5, 0x8, 0x2]}) 1m9.894594122s ago: executing program 32 (id=557): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x141d41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x480a0}, 0x4000090) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getrandom(&(0x7f0000000040)=""/38, 0x26, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x4000080) syz_clone(0x4809200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x110003, 0x0, [0xfd1, 0x10, 0x7f, 0x81, 0x4, 0x5, 0x8, 0x2]}) 1m9.090423426s ago: executing program 33 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000001540)=0x2) setreuid(0xffffffffffffffff, r3) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) r4 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000014c0)={0x3, 0xff}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f00000015c0)={0x0, &(0x7f0000002600)="cb173a47a86938648334f40cf1191571d69282d877eed7b5adf327b3fe8506cd59e1e05a0264361d4a360f8e2a00cc59efe03ca535d3a3e1274e16afd4605fb940d40f687fa65b2f8294212d62612412faccd3f5ebdd21ffd78c47046d7d8b82d376f9dcb67eaba742b9c6a22f63a8dc5e807851242e09fd24a544b2d48c7727b7f8ce8984f8e103fd81a5559ea0ea12ae63db0f89ee18a02d78e42bd5b78b8cf4cb09c7fa37c5a2d41e48e9d0d5e0db8d5c3767c2787450c524a62629eaba803d28ea4b", 0xc4}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001600)=""/4092, 0xffc}, {&(0x7f0000001140)=""/22, 0x16}, {&(0x7f0000002700)=""/66, 0x42}, {&(0x7f00000011c0)=""/224, 0xe0}, {&(0x7f0000002780)=""/229, 0x102}, {&(0x7f00000013c0)=""/116, 0x74}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x8}, 0x40012022) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6000000000000000, 0x3, 0xc, 0x100000000, 0xa, 0xffff, 0x6, 0xffffffff00000001}, &(0x7f0000000140)={0x8, 0x1, 0x80000001, 0x1, 0x8000, 0x80, 0x4, 0x8}, &(0x7f0000001500)={0x2, 0x8, 0x3, 0x0, 0x7, 0x8e, 0x7, 0x4}, &(0x7f0000000280)={r8, r9+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7]}, 0x8}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xefffffff, {0x0, 0x0, 0x0, r7, {0x9, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m8.94151999s ago: executing program 34 (id=554): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r3, &(0x7f0000000000)=""/57, 0x39) r4 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xf7, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x800, &(0x7f00000002c0)={0xa, 0x0, 0x6, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c081}, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100120000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) 1m8.74082458s ago: executing program 35 (id=552): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r3, &(0x7f0000000000)=""/57, 0x39) r4 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xf7, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x800, &(0x7f00000002c0)={0xa, 0x0, 0x6, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c081}, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100090000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) 1m8.553971828s ago: executing program 36 (id=556): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000540)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) r2 = socket(0xa, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x27ca, 0x1000, 0x0, 0x40002a}, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYRES16=r5]) 36.751033333s ago: executing program 9 (id=562): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x317a7973, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) 36.495123662s ago: executing program 9 (id=563): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x0}) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x1000000}, {@multicast2}, {@broadcast}, {@dev}, {@private}, {@empty}, {@empty}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x0, 0x1, 0x1, {0x0, 0x1}, {0x65, 0x2}, @period={0x59, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000680)=""/211) r3 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x4, &(0x7f0000000140)=[{0x6, 0x2, 0x1, 0x2b}, {0x5, 0x7, 0x8, 0xffff}, {0x1, 0xff, 0x8, 0x3}, {0xfffc, 0x1, 0x52, 0x6}]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x3c, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {0x8, 0x2}, [], {0x4, 0x3}}, 0x24, 0x2) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffffb7000040"]) 33.481627231s ago: executing program 7 (id=560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) socket(0x21, 0x4, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=@ipv6_newrule={0x38, 0x20, 0x615, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x14, 0x4, 0x10, 0x0, 0x0, 0x1, 0x10011}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e24}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) 33.338076941s ago: executing program 6 (id=559): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) 32.958123533s ago: executing program 7 (id=564): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) close(0x3) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084ff9000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 32.265379731s ago: executing program 5 (id=558): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f2, 0xdb3b, 0x60, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20000023896) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012abd700000000025081f0000140008"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044000) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 32.09620317s ago: executing program 8 (id=561): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0xffe4, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x4f29, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xf, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0x2, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1, 0x304, 0x4, 0x2d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x0, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0x8, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0xed37, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x977, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x1, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xbc, 0x792c, 0xa4, 0x8, 0xb1c1, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x3, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x6, 0x7fff, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0x3, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x0, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x10, 0x56c, 0xffff9586, 0xd, 0x9, 0xb}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x7, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x2, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0xffff0018) r5 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) io_uring_enter(r5, 0x2df0, 0x0, 0x0, 0x0, 0x0) 31.945206469s ago: executing program 7 (id=565): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)={[{0x2d, 'cpu'}]}, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa8d1104c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a77a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a62670000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000700)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)="ad", 0x1}, {&(0x7f0000000300)="9cd77a8798eb8a4112121bb0393d0c585438243429de98c2ebe8065e345aca571eaecc7d411f8ec62b5b0e3318d5364954dd14412856d70a8d1c1cc9f2d71c59feccf878556e94890544bdff13", 0x4d}, {&(0x7f0000000440)="d401fa57aca1e4acff6f577ac1fed386b1cea62921582882836bff9ad6e88013abdc28bb0aa45fe80224cb8d7aba6f1793316526fd680c7f335e9fff6ae75ae358da4b4fa4d3d484da4e7a0bed073fcffd4e7eb48dfbb42eb5dcb5abb84b9d029b106344ce9801131fc78821b48f5ebf949f7e4dea1b6e76c3c00694fdf1b9c3ef761c94b5e36abf787e63d943510aeda024e6e89f49e4df54211fedd764f71432a4e49cd79ffb8fa37ea4b800e0888cbe5d", 0xb2}, {&(0x7f0000000500)="ebda7bcdb39825d71d7db665a883e4f7a5b2db16838df6f3139cdc9a62e1905b041bf79af972129709c4ed94e7740e1b393d8757374565f4520794f164177440ba3052531945c8ebceac8c4bfd07c3d33f59fc82d5e002a41c961eba998209fd1537d50efec7ba4a3e0aeede8b717f8d636ead1ea8d43f313bc08075deb0cdb5286b43d62918cac2eb1a5ac2197edc794c0d5620bb394e1800e409bd3109169acc", 0xa1}, {&(0x7f00000005c0)="6c92169b9a5befb4ed9632071d171b5ae5422e1a477e40c8b4b7ac23c4b9e6c2b95195c12940db6ac956f1d5b08eb710abdde6a84a95d3aa66d83d49d3a50975475443e4214e9836a545c15007cf62fcafc2ed82529cf7282a768f5ae0a33ae79a6ac694b923967ad71e1d0dea9044aa897ae8eeee539b32814a9929d9ce4caed3b21d6a0fb2212c1b", 0x89}, {&(0x7f0000000380)="aa0e54534b13c92fa99a0b9b20a26650a4b2e8a0983a4885218e6a9439288fea5574b32109dec1bc581b4863c684a0ae5d806b0f9e86193fb174eb56deceabe795d723bd155dfb141495289dab08b29e1b29", 0x52}], 0x6}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000001a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYBLOB="07030f"], 0xa) r7 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'sit0\x00', @local}) socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r7, r1}) shutdown(r7, 0x0) 22.882096094s ago: executing program 7 (id=566): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x90}, 0x1, 0x0, 0xf5ffffffffffffff}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 22.82423604s ago: executing program 6 (id=567): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x101a02, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)="7f", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r4, 0x0}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r8 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = eventfd2(0x400000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000880)={0x1, r10}) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000040)={0x3, r10}) close_range(r0, 0xffffffffffffffff, 0x0) 20.832572088s ago: executing program 37 (id=563): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x0}) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x1000000}, {@multicast2}, {@broadcast}, {@dev}, {@private}, {@empty}, {@empty}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x0, 0x1, 0x1, {0x0, 0x1}, {0x65, 0x2}, @period={0x59, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000680)=""/211) r3 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x4, &(0x7f0000000140)=[{0x6, 0x2, 0x1, 0x2b}, {0x5, 0x7, 0x8, 0xffff}, {0x1, 0xff, 0x8, 0x3}, {0xfffc, 0x1, 0x52, 0x6}]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x3c, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {0x8, 0x2}, [], {0x4, 0x3}}, 0x24, 0x2) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffffb7000040"]) 19.951143328s ago: executing program 7 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000100001002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYRES32=r0], 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_emit_ethernet(0xda, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x7, 0x88, 0x0, @empty, @mcast2, {[@srh], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) ioctl$FIONCLEX(r1, 0x5450) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) clock_nanosleep(0xa, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb) r4 = getpid() syz_pidfd_open(r4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x0, 0x80, 'syz1\x00'}, 0x5, 0x40, 0x1, r4, 0x0, 0x8, 'syz1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000002700), 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000300)=0x9, 0x0, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10012, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000540)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x4, 0x0, 0x1, 'queue1\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, 0x0, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e23, 0x396, @empty}, 0x1c) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r7, &(0x7f00000010c0)=""/4098, 0x1002) 16.730182773s ago: executing program 38 (id=558): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f2, 0xdb3b, 0x60, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20000023896) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012abd700000000025081f0000140008"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044000) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 16.015087252s ago: executing program 39 (id=561): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0xffe4, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x4f29, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x2, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x5, 0xe72, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xf, 0xe, 0x9}, {0x9, 0x3, 0x2, 0x5, 0x4, 0x64}, {0x10000, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0x2, 0x1}, {0x1000, 0x8000, 0x2df6, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x2}, {0xd28, 0xb1, 0x5, 0x2, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x1}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1, 0x304, 0x4, 0x2d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x8, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x343, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x0, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0xee, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb2, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x2, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0xa, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0x8, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x9, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0x0, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0xed37, 0x1, 0x7, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xec55, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcb, 0x0, 0xe0}, {0x0, 0x3, 0x0, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x88ff}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0x7, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7fffffff, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x5, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0x6, 0x0, 0x0, 0x7, 0x400000, 0xfffffffc}, {0x1, 0x3, 0x81, 0xff, 0x4, 0x4}, {0x3, 0x8a8, 0x8, 0x977, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0xffffffff, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x1, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0xc2, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xbc, 0x792c, 0xa4, 0x8, 0xb1c1, 0x3}, {0x800, 0x27, 0x0, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x401, 0x9, 0xe, 0xfffffff9}, {0x5, 0x3, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x6, 0x7fff, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0x3, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x0, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x10, 0x56c, 0xffff9586, 0xd, 0x9, 0xb}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x7, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x8854, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x2, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x5d0ea327, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x3, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0xffff0018) r5 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) io_uring_enter(r5, 0x2df0, 0x0, 0x0, 0x0, 0x0) 15.564548784s ago: executing program 7 (id=572): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xdc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000000000fffd0a0000002900", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 6.844352109s ago: executing program 40 (id=567): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x101a02, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)="7f", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r4, 0x0}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r8 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = eventfd2(0x400000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000880)={0x1, r10}) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000040)={0x3, r10}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 41 (id=572): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xdc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000000000fffd0a0000002900", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ] usb 5-1: Product: syz [ 162.846137][ T24] usb 5-1: Manufacturer: syz [ 162.858093][ T24] usb 5-1: SerialNumber: syz [ 162.880411][ T24] usb 5-1: config 0 descriptor?? [ 162.892832][ T24] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 162.909086][ T24] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 162.928956][ T24] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 162.982122][ T6906] netlink: 104 bytes leftover after parsing attributes in process `syz.1.308'. [ 163.172274][ T10] usb 5-1: USB disconnect, device number 20 [ 163.656030][ T6894] usblp0: removed [ 163.990108][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 164.021227][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 164.066337][ T975] usb 3-1: USB disconnect, device number 12 [ 164.566419][ T975] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 164.722848][ T975] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 164.734147][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.759125][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.802221][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 164.830200][ T975] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 164.839428][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.852544][ T975] usb 3-1: config 0 descriptor?? [ 165.159457][ T6945] program syz.3.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.461244][ T975] hid-picolcd 0003:04D8:C002.0004: item fetching failed at offset 3/7 [ 165.489838][ T975] hid-picolcd 0003:04D8:C002.0004: device report parse failed [ 165.531782][ T975] hid-picolcd 0003:04D8:C002.0004: probe with driver hid-picolcd failed with error -22 [ 165.986537][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 166.076340][ T975] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 166.176414][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 166.186714][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.212618][ T5972] usb 3-1: USB disconnect, device number 13 [ 166.230688][ T5895] usb 4-1: config 0 has no interfaces? [ 166.255160][ T5895] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 166.327550][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 166.397375][ T5895] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 166.410922][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.431908][ T5895] usb 4-1: Product: syz [ 166.434562][ T975] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 166.454970][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.463385][ T5895] usb 4-1: Manufacturer: syz [ 166.464126][ T975] usb 1-1: Product: syz [ 166.468381][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 166.474131][ T975] usb 1-1: Manufacturer: syz [ 166.480397][ T5895] usb 4-1: SerialNumber: syz [ 166.495799][ T975] usb 1-1: SerialNumber: syz [ 166.505830][ T5895] usb 4-1: config 0 descriptor?? [ 166.592458][ T975] usb 1-1: config 0 descriptor?? [ 166.620554][ T975] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 166.650952][ T975] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 166.716441][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 166.734551][ T6962] netlink: 52 bytes leftover after parsing attributes in process `syz.1.326'. [ 166.750096][ T6952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.323'. [ 166.761917][ T5895] usb 4-1: USB disconnect, device number 13 [ 166.795958][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.892327][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 166.958467][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.011565][ T24] usb 5-1: Product: syz [ 167.026490][ T5896] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 167.040457][ T24] usb 5-1: Manufacturer: syz [ 167.056075][ T24] usb 5-1: SerialNumber: syz [ 167.107422][ T24] usb 5-1: config 0 descriptor?? [ 167.133825][ T24] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 167.170262][ T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 167.180255][ T5896] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 167.189914][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.241311][ T5896] usb 2-1: config 0 descriptor?? [ 167.289837][ T5972] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 167.367401][ T5896] gspca_main: spca508-2.14.0 probing 8086:0110 [ 167.447629][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 167.502143][ T5972] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 167.527947][ T5972] usb 3-1: config 0 has no interface number 0 [ 167.566537][ T5972] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 167.626630][ T5972] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 167.702526][ T5972] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 167.723838][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.748025][ T5972] usb 3-1: Product: syz [ 167.757894][ T5972] usb 3-1: Manufacturer: syz [ 167.770096][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 167.786090][ T5972] usb 3-1: SerialNumber: syz [ 167.850426][ T5972] usb 3-1: config 0 descriptor?? [ 168.077042][ T5896] gspca_spca508: reg_read err -110 [ 168.083631][ T5896] gspca_spca508: reg_read err -32 [ 168.093486][ T5896] gspca_spca508: reg_read err -32 [ 168.100137][ T5896] gspca_spca508: reg_read err -32 [ 168.111478][ T5896] gspca_spca508: reg write: error -32 [ 168.121628][ T5896] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 168.312243][ T5972] radio-si470x 3-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 168.320048][ T5972] radio-si470x 3-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 168.533924][ T5896] usb 2-1: USB disconnect, device number 19 [ 168.539495][ T5972] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 168.889555][ T5972] radio-si470x 3-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 168.976200][ T5972] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 169.118261][ T5972] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 169.161423][ T5972] usb 3-1: USB disconnect, device number 14 [ 169.426518][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 169.580407][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 169.609438][ T10] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.636121][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.666823][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 169.686398][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.700487][ T5972] usb 1-1: USB disconnect, device number 16 [ 169.737229][ T10] usb 2-1: config 0 descriptor?? [ 169.915420][ T5895] usb 5-1: USB disconnect, device number 21 [ 170.105326][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.338'. [ 170.122291][ T6993] netlink: 'syz.4.338': attribute type 2 has an invalid length. [ 170.131379][ T6993] netlink: 248 bytes leftover after parsing attributes in process `syz.4.338'. [ 170.170404][ T10] uclogic 0003:5543:0781.0005: ignoring exceeding usage max [ 170.179971][ T10] uclogic 0003:5543:0781.0005: unbalanced collection at end of report description [ 170.190376][ T10] uclogic 0003:5543:0781.0005: parse failed [ 170.197863][ T10] uclogic 0003:5543:0781.0005: probe with driver uclogic failed with error -22 [ 170.226472][ T5896] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 170.256792][ T5972] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 170.388566][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.397748][ T5972] usb 4-1: device descriptor read/64, error -71 [ 170.408235][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.436968][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.456415][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.466864][ T5896] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 170.478864][ T10] usb 2-1: USB disconnect, device number 20 [ 170.484273][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.524329][ T5896] usb 1-1: config 0 descriptor?? [ 170.525043][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.341'. [ 170.551650][ T7000] gretap0: entered promiscuous mode [ 170.562302][ T7000] gretap0: left promiscuous mode [ 170.647821][ T5972] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 170.751934][ T5896] usb 1-1: string descriptor 0 read error: -71 [ 170.765248][ T6989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.772711][ T5896] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 170.787799][ T5972] usb 4-1: device descriptor read/64, error -71 [ 170.794756][ T5896] usb 1-1: USB disconnect, device number 17 [ 170.826857][ T975] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 170.860266][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.869821][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.946641][ T5972] usb usb4-port1: attempt power cycle [ 171.002771][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 171.021981][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.040420][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.053967][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.071662][ T975] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 171.086640][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 171.094359][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.102989][ T975] usb 3-1: Product: syz [ 171.108307][ T975] usb 3-1: Manufacturer: syz [ 171.113053][ T975] usb 3-1: SerialNumber: syz [ 171.130054][ T975] usb 3-1: config 0 descriptor?? [ 171.179484][ T975] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 171.192948][ T975] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -8) [ 171.260635][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 171.270926][ T975] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 171.279858][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.296347][ T5972] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 171.304115][ T10] usb 5-1: Product: syz [ 171.309166][ T10] usb 5-1: Manufacturer: syz [ 171.313901][ T10] usb 5-1: SerialNumber: syz [ 171.329854][ T5972] usb 4-1: device descriptor read/8, error -71 [ 171.352953][ T975] usb 3-1: USB disconnect, device number 15 [ 171.375895][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 171.417381][ T5921] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 171.442215][ T7017] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71) [ 171.566467][ T5972] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 171.612316][ T5972] usb 4-1: device descriptor read/8, error -71 [ 171.631659][ T5895] usb 5-1: USB disconnect, device number 22 [ 171.700257][ T5896] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 171.741874][ T5972] usb usb4-port1: unable to enumerate USB device [ 171.847621][ T5896] usb 2-1: device descriptor read/64, error -71 [ 172.096376][ T5896] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 172.239421][ T5896] usb 2-1: device descriptor read/64, error -71 [ 172.368075][ T5896] usb usb2-port1: attempt power cycle [ 172.519099][ T5921] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 172.647011][ T5921] ath9k_htc: Failed to initialize the device [ 172.659131][ T5895] usb 5-1: ath9k_htc: USB layer deinitialized [ 172.706637][ T5899] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 172.726441][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 172.757351][ T5896] usb 2-1: device descriptor read/8, error -71 [ 172.764713][ T7036] vlan2: entered allmulticast mode [ 172.773203][ T7036] bond0: entered allmulticast mode [ 172.779992][ T7036] bond_slave_0: entered allmulticast mode [ 172.785913][ T7036] bond_slave_1: entered allmulticast mode [ 172.925898][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.934665][ T5899] usb 3-1: not running at top speed; connect to a high speed hub [ 172.950418][ T5899] usb 3-1: config 106 has an invalid interface number: 33 but max is 0 [ 172.965016][ T5899] usb 3-1: config 106 has no interface number 0 [ 172.991969][ T5899] usb 3-1: config 106 interface 33 has no altsetting 0 [ 173.033740][ T5899] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 9.b9 [ 173.046445][ T5972] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 173.046483][ T5895] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 173.061730][ T5896] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 173.096853][ T5896] usb 2-1: device descriptor read/8, error -71 [ 173.114280][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.138166][ T5899] usb 3-1: Product: syz [ 173.142401][ T5899] usb 3-1: Manufacturer: syz [ 173.168570][ T5899] usb 3-1: SerialNumber: syz [ 173.217889][ T5972] usb 1-1: Using ep0 maxpacket: 32 [ 173.239964][ T5896] usb usb2-port1: unable to enumerate USB device [ 173.240683][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.255978][ T5972] usb 1-1: config 5 has an invalid interface number: 4 but max is 0 [ 173.264920][ T5972] usb 1-1: config 5 has no interface number 0 [ 173.274867][ T5972] usb 1-1: config 5 interface 4 has no altsetting 0 [ 173.286324][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 173.293943][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.308640][ T5972] usb 1-1: New USB device found, idVendor=1199, idProduct=6809, bcdDevice=61.47 [ 173.318032][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.321962][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.343706][ T5972] usb 1-1: Product: syz [ 173.349292][ T5972] usb 1-1: Manufacturer: syz [ 173.354143][ T5895] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 173.354184][ T5972] usb 1-1: SerialNumber: syz [ 173.378606][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.426470][ T5899] ums-sddr55 3-1:106.33: USB Mass Storage device detected [ 173.440627][ T5895] usb 5-1: config 0 descriptor?? [ 173.459305][ T5899] ums-sddr55 3-1:106.33: Quirks match for vid 07c4 pid a103: 8 [ 173.698134][ T5899] usb 3-1: USB disconnect, device number 16 [ 173.711529][ T5896] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 173.938798][ T5895] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 174.085738][ T5896] usb 4-1: config 0 has no interfaces? [ 174.102353][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.118666][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.139960][ T5896] usb 4-1: Product: syz [ 174.145793][ T5896] usb 4-1: Manufacturer: syz [ 174.163606][ T5895] corsair 0003:1B1C:1B02.0006: Read invalid backlight brightness: ad. [ 174.221846][ T5896] usb 4-1: SerialNumber: syz [ 174.285391][ T5896] usb 4-1: config 0 descriptor?? [ 174.478950][ T5895] usb 5-1: USB disconnect, device number 23 [ 174.577400][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.586774][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.886528][ T5921] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 175.048795][ T5921] usb 3-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 175.060021][ T5921] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 175.071734][ T5921] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 175.081474][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.112019][ T5921] usb 3-1: config 0 descriptor?? [ 175.562985][ T5972] sierra 1-1:5.4: Sierra USB modem converter detected [ 175.600678][ T7069] FAULT_INJECTION: forcing a failure. [ 175.600678][ T7069] name failslab, interval 1, probability 0, space 0, times 0 [ 175.644301][ T5895] usb 3-1: USB disconnect, device number 17 [ 175.667363][ T5972] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 175.746321][ T5972] usb 1-1: USB disconnect, device number 18 [ 175.768128][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.1.363 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 175.768160][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.768171][ T7069] Call Trace: [ 175.768177][ T7069] [ 175.768183][ T7069] dump_stack_lvl+0x241/0x360 [ 175.768213][ T7069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.768235][ T7069] ? __pfx__printk+0x10/0x10 [ 175.768260][ T7069] ? __pfx___might_resched+0x10/0x10 [ 175.768283][ T7069] should_fail_ex+0x424/0x570 [ 175.768312][ T7069] should_failslab+0xac/0x100 [ 175.768334][ T7069] __kmalloc_cache_noprof+0x73/0x370 [ 175.768355][ T7069] ? tcf_action_init_1+0x1e9/0x900 [ 175.768374][ T7069] tcf_action_init_1+0x1e9/0x900 [ 175.768396][ T7069] ? __pfx_tcf_action_init_1+0x10/0x10 [ 175.768411][ T7069] ? _raw_read_unlock+0x28/0x50 [ 175.768432][ T7069] ? tc_action_load_ops+0x247/0x530 [ 175.768462][ T7069] ? __nla_parse+0x40/0x60 [ 175.768481][ T7069] tcf_action_init+0x2e9/0xae0 [ 175.768506][ T7069] ? __pfx_tcf_action_init+0x10/0x10 [ 175.768540][ T7069] ? __kernel_text_address+0xd/0x40 [ 175.768554][ T7069] ? unwind_get_return_address+0x4d/0x90 [ 175.768574][ T7069] ? arch_stack_walk+0xff/0x150 [ 175.768613][ T7069] ? stack_depot_save_flags+0x44/0x940 [ 175.768637][ T7069] tcf_exts_validate_ex+0x245/0x530 [ 175.768657][ T7069] ? __sock_sendmsg+0x221/0x270 [ 175.768674][ T7069] ? ____sys_sendmsg+0x523/0x860 [ 175.768691][ T7069] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 175.768731][ T7069] tcf_exts_validate+0x42/0x60 [ 175.768752][ T7069] fw_set_parms+0x181/0x8d0 [ 175.768774][ T7069] ? __pfx_fw_set_parms+0x10/0x10 [ 175.768798][ T7069] fw_change+0x72f/0xd50 [ 175.768821][ T7069] ? __pfx_fw_change+0x10/0x10 [ 175.768845][ T7069] ? __pfx_fw_change+0x10/0x10 [ 175.768861][ T7069] tc_new_tfilter+0x112f/0x1a90 [ 175.768903][ T7069] ? __pfx_tc_new_tfilter+0x10/0x10 [ 175.768934][ T7069] ? __lock_acquire+0xad5/0xd80 [ 175.768966][ T7069] ? __pfx_tc_new_tfilter+0x10/0x10 [ 175.768988][ T7069] rtnetlink_rcv_msg+0x80f/0xd70 [ 175.769006][ T7069] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 175.769028][ T7069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.769053][ T7069] ? ref_tracker_free+0x63e/0x7e0 [ 175.769073][ T7069] netlink_rcv_skb+0x208/0x480 [ 175.769103][ T7069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.769123][ T7069] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.769155][ T7069] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.769175][ T7069] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.769195][ T7069] netlink_unicast+0x7f8/0x9a0 [ 175.769219][ T7069] ? __pfx_netlink_unicast+0x10/0x10 [ 175.769237][ T7069] ? skb_put+0x114/0x1f0 [ 175.769262][ T7069] netlink_sendmsg+0x8c3/0xcd0 [ 175.769290][ T7069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.769313][ T7069] ? aa_sock_msg_perm+0x91/0x160 [ 175.769337][ T7069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.769355][ T7069] __sock_sendmsg+0x221/0x270 [ 175.769376][ T7069] ____sys_sendmsg+0x523/0x860 [ 175.769397][ T7069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.769409][ T7069] ? __fget_files+0x2a/0x420 [ 175.769425][ T7069] ? __fget_files+0x2a/0x420 [ 175.769445][ T7069] __sys_sendmsg+0x271/0x360 [ 175.769463][ T7069] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.769512][ T7069] ? __secure_computing+0xef/0x2f0 [ 175.769538][ T7069] do_syscall_64+0xf3/0x230 [ 175.769554][ T7069] ? clear_bhb_loop+0x45/0xa0 [ 175.769572][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.769587][ T7069] RIP: 0033:0x7f91c278d169 [ 175.769600][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.769613][ T7069] RSP: 002b:00007f91c359e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.769630][ T7069] RAX: ffffffffffffffda RBX: 00007f91c29a5fa0 RCX: 00007f91c278d169 [ 175.769641][ T7069] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000005 [ 175.769651][ T7069] RBP: 00007f91c359e090 R08: 0000000000000000 R09: 0000000000000000 [ 175.769660][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.769670][ T7069] R13: 0000000000000000 R14: 00007f91c29a5fa0 R15: 00007f91c2acfa28 [ 175.769692][ T7069] [ 176.258951][ T5972] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 176.287049][ T5972] sierra 1-1:5.4: device disconnected [ 176.646508][ T5972] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 176.816416][ T5972] usb 1-1: Using ep0 maxpacket: 8 [ 176.831726][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 176.846159][ T5972] usb 1-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.865006][ T5972] usb 1-1: config 1 interface 0 has no altsetting 0 [ 176.884238][ T5972] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 176.911242][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.925655][ T5972] usb 1-1: Product: syz [ 176.932438][ T5972] usb 1-1: Manufacturer: syz [ 176.940306][ T5972] usb 1-1: SerialNumber: syz [ 177.199322][ T5972] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11 [ 177.233916][ T5972] usb 1-1: USB disconnect, device number 19 [ 177.297038][ T7081] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 177.613036][ T7081] bond1: entered promiscuous mode [ 177.634531][ T5895] usb 4-1: USB disconnect, device number 18 [ 177.671115][ T7081] bond1: entered allmulticast mode [ 177.779486][ T7082] bond1: (slave geneve2): making interface the new active one [ 177.796053][ T7082] geneve2: entered promiscuous mode [ 177.818431][ T7082] geneve2: entered allmulticast mode [ 177.841660][ T7082] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 178.085987][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'. [ 178.213004][ T7100] gretap0: entered promiscuous mode [ 178.290021][ T7100] gretap0: left promiscuous mode [ 178.366558][ T5972] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 178.517214][ T5972] usb 1-1: Using ep0 maxpacket: 32 [ 178.541899][ T5972] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 178.637193][ T5972] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.669527][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.713406][ T5972] usb 1-1: Product: syz [ 178.743432][ T5972] usb 1-1: Manufacturer: syz [ 178.759984][ T5972] usb 1-1: SerialNumber: syz [ 178.880723][ T5972] usb 1-1: config 0 descriptor?? [ 178.918467][ T7102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.960831][ T5972] hub 1-1:0.0: bad descriptor, ignoring hub [ 179.007088][ T7113] netlink: 'syz.4.381': attribute type 13 has an invalid length. [ 179.025144][ T5972] hub 1-1:0.0: probe with driver hub failed with error -5 [ 179.047606][ T7113] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 179.075391][ T7113] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 179.123830][ T7113] gretap1: entered promiscuous mode [ 179.139880][ T7113] gretap1: entered allmulticast mode [ 179.255625][ T7115] netlink: 'syz.1.380': attribute type 13 has an invalid length. [ 179.360154][ T7115] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 179.585082][ T7115] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 179.665775][ T7115] gretap2: entered promiscuous mode [ 179.715081][ T7115] gretap2: entered allmulticast mode [ 179.721273][ T5972] usb 1-1: USB disconnect, device number 20 [ 182.005856][ T7156] netlink: 68 bytes leftover after parsing attributes in process `syz.4.393'. [ 182.476675][ T5972] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 182.576938][ T7169] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 182.671417][ T5972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.709662][ T5972] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 182.741651][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.768583][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 182.779414][ T5972] usb 1-1: config 0 descriptor?? [ 182.803650][ T5972] pwc: Askey VC010 type 2 USB webcam detected. [ 182.948605][ T10] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 182.975810][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 182.992323][ T7150] fuse: Unknown parameter 'fdß0x0000000000000003' [ 182.999378][ T10] usb 3-1: can't read configurations, error -61 [ 183.207096][ T5972] pwc: recv_control_msg error -32 req 02 val 2b00 [ 183.214815][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 183.240882][ T5972] pwc: recv_control_msg error -32 req 02 val 2700 [ 183.280556][ T5972] pwc: recv_control_msg error -32 req 02 val 2c00 [ 183.305424][ T5972] pwc: recv_control_msg error -32 req 04 val 1000 [ 183.336946][ T5972] pwc: recv_control_msg error -32 req 04 val 1300 [ 183.356434][ T5972] pwc: recv_control_msg error -32 req 04 val 1400 [ 183.364993][ T5972] pwc: recv_control_msg error -32 req 02 val 2000 [ 183.374715][ T5972] pwc: recv_control_msg error -32 req 02 val 2100 [ 183.383193][ T5972] pwc: recv_control_msg error -32 req 04 val 1500 [ 183.392992][ T5972] pwc: recv_control_msg error -32 req 02 val 2500 [ 183.402100][ T5972] pwc: recv_control_msg error -32 req 02 val 2400 [ 183.409669][ T5972] pwc: recv_control_msg error -32 req 02 val 2600 [ 183.416772][ T10] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 183.432183][ T5972] pwc: recv_control_msg error -32 req 02 val 2900 [ 183.440795][ T5972] pwc: recv_control_msg error -32 req 02 val 2800 [ 183.447644][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.458210][ T10] usb 3-1: can't read configurations, error -61 [ 183.466014][ T10] usb usb3-port1: attempt power cycle [ 183.667663][ T5972] pwc: recv_control_msg error -71 req 04 val 1200 [ 183.682743][ T5972] pwc: Registered as video103. [ 183.712636][ T5972] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 183.778017][ T5972] usb 1-1: USB disconnect, device number 21 [ 183.816441][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 183.877356][ T10] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 183.889393][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.897172][ T10] usb 3-1: can't read configurations, error -61 [ 184.047523][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 184.097691][ T7195] netlink: 68 bytes leftover after parsing attributes in process `syz.3.406'. [ 184.110116][ T10] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 184.128259][ T7195] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 184.187637][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.266887][ T10] usb 3-1: can't read configurations, error -61 [ 184.301964][ T10] usb usb3-port1: unable to enumerate USB device [ 184.916427][ T7209] FAULT_INJECTION: forcing a failure. [ 184.916427][ T7209] name failslab, interval 1, probability 0, space 0, times 0 [ 184.933943][ T7213] netlink: 228 bytes leftover after parsing attributes in process `syz.1.411'. [ 184.956690][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.0.410 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 184.956723][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.956737][ T7209] Call Trace: [ 184.956746][ T7209] [ 184.956756][ T7209] dump_stack_lvl+0x241/0x360 [ 184.956795][ T7209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.956826][ T7209] ? __pfx__printk+0x10/0x10 [ 184.956861][ T7209] ? __pfx___might_resched+0x10/0x10 [ 184.956894][ T7209] should_fail_ex+0x424/0x570 [ 184.956933][ T7209] should_failslab+0xac/0x100 [ 184.956964][ T7209] __kmalloc_cache_noprof+0x73/0x370 [ 184.956992][ T7209] ? tcf_exts_init_ex+0xeb/0x6d0 [ 184.957023][ T7209] tcf_exts_init_ex+0xeb/0x6d0 [ 184.957051][ T7209] ? __kmalloc_cache_noprof+0x236/0x370 [ 184.957094][ T7209] fw_change+0x6a9/0xd50 [ 184.957128][ T7209] ? __pfx_fw_change+0x10/0x10 [ 184.957165][ T7209] ? __pfx_fw_change+0x10/0x10 [ 184.957188][ T7209] tc_new_tfilter+0x112f/0x1a90 [ 184.957257][ T7209] ? __pfx_tc_new_tfilter+0x10/0x10 [ 184.957301][ T7209] ? __lock_acquire+0xad5/0xd80 [ 184.957347][ T7209] ? __pfx_tc_new_tfilter+0x10/0x10 [ 184.957379][ T7209] rtnetlink_rcv_msg+0x80f/0xd70 [ 184.957404][ T7209] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 184.957436][ T7209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.957472][ T7209] ? ref_tracker_free+0x63e/0x7e0 [ 184.957502][ T7209] netlink_rcv_skb+0x208/0x480 [ 184.957528][ T7209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.957557][ T7209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.957603][ T7209] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.957632][ T7209] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.957660][ T7209] netlink_unicast+0x7f8/0x9a0 [ 184.957693][ T7209] ? __pfx_netlink_unicast+0x10/0x10 [ 184.957717][ T7209] ? skb_put+0x114/0x1f0 [ 184.957751][ T7209] netlink_sendmsg+0x8c3/0xcd0 [ 184.957793][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.957825][ T7209] ? aa_sock_msg_perm+0x91/0x160 [ 184.957859][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.957885][ T7209] __sock_sendmsg+0x221/0x270 [ 184.957914][ T7209] ____sys_sendmsg+0x523/0x860 [ 184.957944][ T7209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.957962][ T7209] ? __fget_files+0x2a/0x420 [ 184.957986][ T7209] ? __fget_files+0x2a/0x420 [ 184.958015][ T7209] __sys_sendmsg+0x271/0x360 [ 184.958042][ T7209] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.958113][ T7209] ? __secure_computing+0xef/0x2f0 [ 184.958151][ T7209] do_syscall_64+0xf3/0x230 [ 184.958174][ T7209] ? clear_bhb_loop+0x45/0xa0 [ 184.958199][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.958231][ T7209] RIP: 0033:0x7f4b0c98d169 [ 184.958250][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.958268][ T7209] RSP: 002b:00007f4b0d787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.958291][ T7209] RAX: ffffffffffffffda RBX: 00007f4b0cba5fa0 RCX: 00007f4b0c98d169 [ 184.958307][ T7209] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000005 [ 184.958320][ T7209] RBP: 00007f4b0d787090 R08: 0000000000000000 R09: 0000000000000000 [ 184.958333][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.958344][ T7209] R13: 0000000000000000 R14: 00007f4b0cba5fa0 R15: 00007f4b0cccfa28 [ 184.958376][ T7209] [ 184.962082][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.412'. [ 185.599107][ T7225] netlink: 'syz.1.413': attribute type 30 has an invalid length. [ 185.650089][ T7225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.413'. [ 185.703926][ T7228] netlink: 'syz.4.415': attribute type 10 has an invalid length. [ 185.713455][ T7225] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 185.733834][ T7228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.415'. [ 185.741935][ T7225] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 185.770237][ T7228] team0: entered promiscuous mode [ 185.780329][ T7228] team_slave_0: entered promiscuous mode [ 185.806573][ T7228] team_slave_1: entered promiscuous mode [ 185.812564][ T7228] team0: entered allmulticast mode [ 185.821310][ T7228] team_slave_0: entered allmulticast mode [ 185.829741][ T7228] team_slave_1: entered allmulticast mode [ 185.839895][ T7228] bridge0: port 3(team0) entered blocking state [ 185.861890][ T7228] bridge0: port 3(team0) entered disabled state [ 185.901745][ T7228] bridge0: port 3(team0) entered blocking state [ 185.909206][ T7228] bridge0: port 3(team0) entered forwarding state [ 185.946281][ T7237] loop2: detected capacity change from 0 to 7 [ 185.964430][ T7237] Dev loop2: unable to read RDB block 7 [ 185.976881][ T7237] loop2: unable to read partition table [ 186.036881][ T7237] loop2: partition table beyond EOD, truncated [ 186.078152][ T7237] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.615269][ T7255] input: syz0 as /devices/virtual/input/input13 [ 186.704447][ T7255] netlink: 'syz.0.422': attribute type 7 has an invalid length. [ 188.016363][ T5895] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 188.189990][ T5895] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 188.226356][ T5895] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 188.271809][ T5895] usb 1-1: config 220 has no interface number 2 [ 188.288723][ T5895] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 188.326386][ T5895] usb 1-1: config 220 interface 0 has no altsetting 0 [ 188.350069][ T5895] usb 1-1: config 220 interface 76 has no altsetting 0 [ 188.376638][ T5895] usb 1-1: config 220 interface 1 has no altsetting 0 [ 188.389744][ T5895] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 188.406638][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.442179][ T5895] usb 1-1: Product: syz [ 188.460142][ T5895] usb 1-1: Manufacturer: syz [ 188.469071][ T5895] usb 1-1: SerialNumber: syz [ 188.589222][ T5896] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 188.673864][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 188.683834][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 188.695543][ T7302] netlink: 'syz.3.441': attribute type 15 has an invalid length. [ 188.790049][ T5896] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.887990][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.906388][ T5896] usb 2-1: Product: syz [ 188.917534][ T5896] usb 2-1: Manufacturer: syz [ 188.922372][ T5896] usb 2-1: SerialNumber: syz [ 189.084811][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 189.158830][ T5896] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 189.189460][ T1211] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.270426][ T7312] loop2: detected capacity change from 0 to 7 [ 189.280544][ T7312] Dev loop2: unable to read RDB block 7 [ 189.287090][ T7312] loop2: unable to read partition table [ 189.293291][ T7312] loop2: partition table beyond EOD, truncated [ 189.312698][ T7312] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.648562][ T5899] usb 2-1: USB disconnect, device number 25 [ 189.964490][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 190.176487][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 190.207605][ T5896] usb 3-1: config 0 has no interfaces? [ 190.214819][ T5896] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 190.243014][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.267555][ T5896] usb 3-1: config 0 descriptor?? [ 190.436481][ T1211] usb 2-1: Service connection timeout for: 256 [ 190.443054][ T1211] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 190.455262][ T1211] ath9k_htc: Failed to initialize the device [ 190.488657][ T5896] usb 3-1: USB disconnect, device number 22 [ 190.513585][ T5899] usb 2-1: ath9k_htc: USB layer deinitialized [ 190.919640][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 191.111242][ T24] usb 5-1: config 0 has no interfaces? [ 191.136394][ T5899] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 191.232521][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.246303][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.254701][ T24] usb 5-1: Product: syz [ 191.263525][ T24] usb 5-1: Manufacturer: syz [ 191.268752][ T24] usb 5-1: SerialNumber: syz [ 191.298419][ T24] usb 5-1: config 0 descriptor?? [ 191.344896][ T5899] usb 2-1: config 0 has no interfaces? [ 191.364508][ T5899] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.384523][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.405195][ T5899] usb 2-1: Product: syz [ 191.413925][ T5899] usb 2-1: Manufacturer: syz [ 191.419310][ T5899] usb 2-1: SerialNumber: syz [ 191.438148][ T5899] usb 2-1: config 0 descriptor?? [ 191.966876][ T5899] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 192.306718][ T5899] usb 3-1: config 0 has no interfaces? [ 192.326356][ T5899] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 192.337655][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.345814][ T5899] usb 3-1: Product: syz [ 192.354226][ T5899] usb 3-1: Manufacturer: syz [ 192.571155][ T5899] usb 3-1: SerialNumber: syz [ 192.912506][ T5895] usb 1-1: selecting invalid altsetting 0 [ 192.924654][ T5899] usb 3-1: config 0 descriptor?? [ 192.938911][ T5895] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 192.998441][ T5895] usb 1-1: No valid video chain found. [ 193.104088][ T5895] usb 1-1: selecting invalid altsetting 0 [ 193.115899][ T5895] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 193.132789][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 193.300056][ T7354] netlink: 'syz.3.455': attribute type 13 has an invalid length. [ 193.377068][ T5895] usb 1-1: USB disconnect, device number 22 [ 193.378770][ T7354] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 193.408989][ T7354] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 193.435063][ T7354] gretap4: entered promiscuous mode [ 193.445242][ T7354] gretap4: entered allmulticast mode [ 194.259726][ T5972] usb 5-1: USB disconnect, device number 24 [ 194.416330][ T5895] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 194.678856][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.701588][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.786279][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.844132][ T5896] usb 2-1: USB disconnect, device number 26 [ 194.906940][ T5895] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.935269][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.983095][ T5895] usb 4-1: config 0 descriptor?? [ 195.465726][ T5895] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.503770][ T5895] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.552081][ T7387] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 195.663813][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.458'. [ 195.673384][ T7387] bond2: entered promiscuous mode [ 195.693744][ T7387] bond2: entered allmulticast mode [ 195.704751][ T7387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.730170][ T5895] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.748457][ T5895] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.773498][ T5895] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.828489][ T5895] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.849176][ T7364] team0: entered promiscuous mode [ 195.854336][ T7364] team_slave_0: entered promiscuous mode [ 195.860609][ T7364] team_slave_1: entered promiscuous mode [ 195.867894][ T7364] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 195.876140][ T7364] team0: left promiscuous mode [ 195.881595][ T7364] team_slave_0: left promiscuous mode [ 195.926561][ T7364] team_slave_1: left promiscuous mode [ 195.954509][ T5895] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 196.176561][ T5895] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 196.338896][ T10] usb 4-1: USB disconnect, device number 19 [ 196.498795][ T5921] usb 3-1: USB disconnect, device number 23 [ 196.642123][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.464'. [ 196.952982][ T7399] loop8: detected capacity change from 0 to 1 [ 197.002718][ T7401] buffer_io_error: 7 callbacks suppressed [ 197.002741][ T7401] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.023834][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.036760][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.051296][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.065449][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.084807][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.094195][ T7399] ldm_validate_partition_table(): Disk read failed. [ 197.101793][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.116029][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.178285][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.209482][ T7399] Buffer I/O error on dev loop8, logical block 0, async page read [ 197.232856][ T7399] Dev loop8: unable to read RDB block 0 [ 197.259871][ T7399] loop8: unable to read partition table [ 197.292860][ T7399] loop8: partition table beyond EOD, truncated [ 197.322674][ T7399] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 198.236469][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 198.406478][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 198.426195][ T7436] netlink: 'syz.2.478': attribute type 30 has an invalid length. [ 198.431378][ T5895] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 198.434565][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.478'. [ 198.453709][ T5895] usb 2-1: config 0 has no interface number 0 [ 198.454204][ T7436] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 198.470872][ T7436] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 198.474992][ T5895] usb 2-1: config 0 interface 195 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 198.506333][ T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 198.523381][ T5895] usb 2-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 198.550277][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.558435][ T5895] usb 2-1: Product: syz [ 198.562689][ T5895] usb 2-1: Manufacturer: syz [ 198.596331][ T5895] usb 2-1: SerialNumber: syz [ 198.604199][ T5895] usb 2-1: config 0 descriptor?? [ 198.669222][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.695962][ T10] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 198.720154][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.746069][ T10] usb 1-1: config 0 descriptor?? [ 198.880937][ T5895] usb 2-1: USB disconnect, device number 27 [ 199.206829][ T10] pantherlord 0003:0E8F:0003.0008: item fetching failed at offset 3/5 [ 199.260032][ T10] pantherlord 0003:0E8F:0003.0008: parse failed [ 199.267107][ T10] pantherlord 0003:0E8F:0003.0008: probe with driver pantherlord failed with error -22 [ 199.480992][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.487424][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.513253][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 199.846890][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 199.935073][ T5921] usb 1-1: USB disconnect, device number 23 [ 200.094141][ T10] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 200.113410][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.235068][ T10] usb 3-1: config 0 descriptor?? [ 200.428975][ T10] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 200.498394][ T7474] program syz.1.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.510775][ T10] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 200.724440][ T7479] FAULT_INJECTION: forcing a failure. [ 200.724440][ T7479] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 200.751623][ T7479] CPU: 0 UID: 0 PID: 7479 Comm: syz.3.487 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 200.751654][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.751667][ T7479] Call Trace: [ 200.751675][ T7479] [ 200.751684][ T7479] dump_stack_lvl+0x241/0x360 [ 200.751723][ T7479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.751751][ T7479] ? __pfx__printk+0x10/0x10 [ 200.751792][ T7479] should_fail_ex+0x424/0x570 [ 200.751831][ T7479] _copy_from_user+0x2d/0xb0 [ 200.751861][ T7479] copy_msghdr_from_user+0xb3/0x580 [ 200.751891][ T7479] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 200.751910][ T7479] ? __fget_files+0x2a/0x420 [ 200.751928][ T7479] ? __fget_files+0x2a/0x420 [ 200.751960][ T7479] __sys_sendmsg+0x20a/0x360 [ 200.751980][ T7479] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.752038][ T7479] ? do_syscall_64+0xb6/0x230 [ 200.752059][ T7479] do_syscall_64+0xf3/0x230 [ 200.752076][ T7479] ? clear_bhb_loop+0x45/0xa0 [ 200.752096][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.752112][ T7479] RIP: 0033:0x7f09c4f8d169 [ 200.752127][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.752142][ T7479] RSP: 002b:00007f09c5e45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.752160][ T7479] RAX: ffffffffffffffda RBX: 00007f09c51a5fa0 RCX: 00007f09c4f8d169 [ 200.752173][ T7479] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 200.752183][ T7479] RBP: 00007f09c5e45090 R08: 0000000000000000 R09: 0000000000000000 [ 200.752194][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.752203][ T7479] R13: 0000000000000000 R14: 00007f09c51a5fa0 R15: 00007f09c52cfa28 [ 200.752228][ T7479] [ 201.372140][ T7485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.601071][ T7494] netlink: 'syz.1.493': attribute type 30 has an invalid length. [ 201.618271][ T7494] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.627673][ T7494] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.636546][ T7494] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.645293][ T7494] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.802851][ T5921] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 201.831830][ T7494] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.841352][ T7494] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.850367][ T7494] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.860399][ T7494] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.002386][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 202.017981][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9986, setting to 1024 [ 202.063363][ T5921] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 202.072896][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.095339][ T5921] usb 1-1: Product: syz [ 202.105763][ T5921] usb 1-1: Manufacturer: syz [ 202.137092][ T5921] usb 1-1: SerialNumber: syz [ 202.154646][ T5921] usb 1-1: config 0 descriptor?? [ 202.171908][ T7492] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.192161][ T5921] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 202.205934][ T5921] usb 1-1: No valid video chain found. [ 202.392121][ T5921] usb 1-1: USB disconnect, device number 24 [ 203.147214][ T7503] netlink: 104 bytes leftover after parsing attributes in process `syz.3.494'. [ 203.182368][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.495'. [ 203.617184][ T7514] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.716697][ T5921] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 203.743538][ T7514] capability: warning: `syz.1.500' uses deprecated v2 capabilities in a way that may be insecure [ 203.763926][ T7514] loop9: detected capacity change from 0 to 7 [ 203.787609][ T7514] Dev loop9: unable to read RDB block 7 [ 203.795812][ T7514] loop9: unable to read partition table [ 203.815200][ T7514] loop9: partition table beyond EOD, truncated [ 203.823129][ T7514] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.889748][ T5921] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 203.933817][ T5921] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 203.959758][ T5921] usb 4-1: config 220 interface 0 has no altsetting 0 [ 203.978049][ T5921] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 204.000786][ T7521] loop2: detected capacity change from 0 to 7 [ 204.012924][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.041719][ T5921] usb 4-1: Product: syz [ 204.044124][ T7521] Dev loop2: unable to read RDB block 7 [ 204.051265][ T5921] usb 4-1: Manufacturer: syz [ 204.057615][ T5921] usb 4-1: SerialNumber: syz [ 204.078296][ T7521] loop2: unable to read partition table [ 204.097393][ T7521] loop2: partition table beyond EOD, truncated [ 204.114883][ T7521] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.336392][ T5921] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 204.374100][ T5921] usb 4-1: No valid video chain found. [ 204.382718][ T5921] usb 4-1: USB disconnect, device number 20 [ 204.488390][ T5895] usb 3-1: USB disconnect, device number 24 [ 205.001232][ T7540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.049240][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'. [ 205.245243][ T7552] fuse: Bad value for 'rootmode' [ 205.276358][ T1211] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 205.354713][ T7558] tipc: Can't bind to reserved service type 0 [ 205.456491][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 205.463930][ T1211] usb 5-1: config 0 has no interfaces? [ 205.469966][ T1211] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 205.516548][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.566753][ T1211] usb 5-1: config 0 descriptor?? [ 205.707541][ T7571] program syz.3.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.795490][ T1211] usb 5-1: USB disconnect, device number 25 [ 205.887155][ T7576] x_tables: duplicate underflow at hook 4 [ 206.750650][ T7597] netlink: 228 bytes leftover after parsing attributes in process `syz.1.527'. [ 207.887325][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 210.438348][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 210.438370][ T30] audit: type=1326 audit(1743601757.572:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5feb8d169 code=0x0 [ 211.836708][ T7627] program syz.3.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.049271][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 212.056392][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 212.062541][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 212.070005][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 212.076100][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 214.320545][ T7649] FAULT_INJECTION: forcing a failure. [ 214.320545][ T7649] name failslab, interval 1, probability 0, space 0, times 0 [ 214.359928][ T7649] CPU: 1 UID: 0 PID: 7649 Comm: syz.3.544 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 214.359962][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.359974][ T7649] Call Trace: [ 214.359983][ T7649] [ 214.359992][ T7649] dump_stack_lvl+0x241/0x360 [ 214.360031][ T7649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.360062][ T7649] ? __pfx__printk+0x10/0x10 [ 214.360096][ T7649] ? __pfx___might_resched+0x10/0x10 [ 214.360126][ T7649] should_fail_ex+0x424/0x570 [ 214.360165][ T7649] should_failslab+0xac/0x100 [ 214.360197][ T7649] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 214.360228][ T7649] ? __alloc_skb+0x1c2/0x480 [ 214.360262][ T7649] __alloc_skb+0x1c2/0x480 [ 214.360298][ T7649] ? __pfx___alloc_skb+0x10/0x10 [ 214.360331][ T7649] ? netlink_autobind+0xd6/0x2f0 [ 214.360357][ T7649] ? netlink_autobind+0x2b0/0x2f0 [ 214.360389][ T7649] netlink_sendmsg+0x638/0xcd0 [ 214.360429][ T7649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.360461][ T7649] ? aa_sock_msg_perm+0x91/0x160 [ 214.360495][ T7649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.360520][ T7649] __sock_sendmsg+0x221/0x270 [ 214.360550][ T7649] ____sys_sendmsg+0x523/0x860 [ 214.360580][ T7649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.360597][ T7649] ? __fget_files+0x2a/0x420 [ 214.360620][ T7649] ? __fget_files+0x2a/0x420 [ 214.360649][ T7649] __sys_sendmsg+0x271/0x360 [ 214.360675][ T7649] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.360759][ T7649] ? do_syscall_64+0xb6/0x230 [ 214.360785][ T7649] do_syscall_64+0xf3/0x230 [ 214.360807][ T7649] ? clear_bhb_loop+0x45/0xa0 [ 214.360833][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.360854][ T7649] RIP: 0033:0x7f09c4f8d169 [ 214.360872][ T7649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.360890][ T7649] RSP: 002b:00007f09c5e45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.360913][ T7649] RAX: ffffffffffffffda RBX: 00007f09c51a5fa0 RCX: 00007f09c4f8d169 [ 214.360928][ T7649] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 214.360942][ T7649] RBP: 00007f09c5e45090 R08: 0000000000000000 R09: 0000000000000000 [ 214.360955][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.360967][ T7649] R13: 0000000000000000 R14: 00007f09c51a5fa0 R15: 00007f09c52cfa28 [ 214.360999][ T7649] [ 214.767609][ T7653] program syz.3.545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.396427][ T5896] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 215.546381][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 215.561125][ T5896] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 215.572193][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.589152][ T5896] usb 4-1: config 0 descriptor?? [ 215.600943][ T5896] gspca_main: sunplus-2.14.0 probing 041e:400b [ 215.873627][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.892625][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.910751][ T7659] warning: `syz.3.547' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.118095][ T5896] gspca_sunplus: reg_w_riv err -110 [ 216.123652][ T5896] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 216.357781][ T5896] usb 4-1: USB disconnect, device number 21 [ 217.509641][ T7665] usb usb1: usbfs: process 7665 (syz.3.550) did not claim interface 0 before use [ 218.049182][ T7670] loop8: detected capacity change from 0 to 1 [ 218.056191][ T7670] buffer_io_error: 3 callbacks suppressed [ 218.066925][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.074952][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.092118][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.106366][ T7671] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.120965][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.132871][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.146422][ T7670] ldm_validate_partition_table(): Disk read failed. [ 218.153434][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.167703][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.175797][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.188242][ T7670] Buffer I/O error on dev loop8, logical block 0, async page read [ 218.199871][ T7670] Dev loop8: unable to read RDB block 0 [ 218.205923][ T7670] loop8: unable to read partition table [ 218.218094][ T7670] loop8: partition table beyond EOD, truncated [ 218.226954][ T7670] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 218.916160][ T7684] program syz.4.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.316226][ C0] sched: DL replenish lagged too much [ 248.361795][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.418210][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.436426][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.444825][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.454291][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.644006][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.662770][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.671557][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.682638][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.691152][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.853831][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.871799][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.880718][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.921432][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.929674][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.081645][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.105716][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.124959][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.133770][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.145312][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 249.281652][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.296868][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.316741][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.324961][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.334270][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.516511][ T5845] Bluetooth: hci2: command tx timeout [ 250.756827][ T5845] Bluetooth: hci5: command tx timeout [ 251.077515][ T5845] Bluetooth: hci6: command tx timeout [ 251.236565][ T5845] Bluetooth: hci7: command tx timeout [ 251.396901][ T5845] Bluetooth: hci4: command tx timeout [ 252.596610][ T5845] Bluetooth: hci2: command tx timeout [ 252.840225][ T5845] Bluetooth: hci5: command tx timeout [ 253.166882][ T5845] Bluetooth: hci6: command tx timeout [ 253.316549][ T5845] Bluetooth: hci7: command tx timeout [ 253.476443][ T5845] Bluetooth: hci4: command tx timeout [ 254.676625][ T5845] Bluetooth: hci2: command tx timeout [ 254.916415][ T5845] Bluetooth: hci5: command tx timeout [ 255.236326][ T5845] Bluetooth: hci6: command tx timeout [ 255.396633][ T5845] Bluetooth: hci7: command tx timeout [ 255.556559][ T5845] Bluetooth: hci4: command tx timeout [ 256.772640][ T5845] Bluetooth: hci2: command tx timeout [ 256.996609][ T5845] Bluetooth: hci5: command tx timeout [ 257.330193][ T5845] Bluetooth: hci6: command tx timeout [ 257.463984][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 257.487210][ T5845] Bluetooth: hci7: command tx timeout [ 257.646918][ T5845] Bluetooth: hci4: command tx timeout [ 257.802228][ T7707] chnl_net:caif_netlink_parms(): no params data found [ 258.141136][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 258.304927][ T7703] chnl_net:caif_netlink_parms(): no params data found [ 258.625095][ T7698] chnl_net:caif_netlink_parms(): no params data found [ 258.894500][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.908348][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.915875][ T7705] bridge_slave_0: entered allmulticast mode [ 258.931010][ T7705] bridge_slave_0: entered promiscuous mode [ 259.026056][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.033333][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.053096][ T7707] bridge_slave_0: entered allmulticast mode [ 259.066448][ T7707] bridge_slave_0: entered promiscuous mode [ 259.093304][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.111518][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.124527][ T7707] bridge_slave_1: entered allmulticast mode [ 259.137681][ T7707] bridge_slave_1: entered promiscuous mode [ 259.145203][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.161123][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.175200][ T7705] bridge_slave_1: entered allmulticast mode [ 259.189298][ T7705] bridge_slave_1: entered promiscuous mode [ 259.948325][ T7707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.986262][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.995621][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.014131][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.030581][ T7701] bridge_slave_0: entered allmulticast mode [ 260.049076][ T7701] bridge_slave_0: entered promiscuous mode [ 260.079268][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.091631][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.102758][ T7701] bridge_slave_1: entered allmulticast mode [ 260.120417][ T7701] bridge_slave_1: entered promiscuous mode [ 260.136987][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.144168][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.161115][ T7703] bridge_slave_0: entered allmulticast mode [ 260.179773][ T7703] bridge_slave_0: entered promiscuous mode [ 260.259084][ T7707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.278778][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.415708][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.433217][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.444333][ T7703] bridge_slave_1: entered allmulticast mode [ 260.459225][ T7703] bridge_slave_1: entered promiscuous mode [ 260.955824][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.963571][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.122387][ T7705] team0: Port device team_slave_0 added [ 261.141712][ T7705] team0: Port device team_slave_1 added [ 261.255202][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.272298][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.285220][ T7698] bridge_slave_0: entered allmulticast mode [ 261.300435][ T7698] bridge_slave_0: entered promiscuous mode [ 261.319562][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.433406][ T7703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.465086][ T7707] team0: Port device team_slave_0 added [ 261.814002][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.825295][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.839751][ T7698] bridge_slave_1: entered allmulticast mode [ 261.856882][ T7698] bridge_slave_1: entered promiscuous mode [ 261.879290][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.974107][ T7703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.081337][ T7707] team0: Port device team_slave_1 added [ 262.159907][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.176246][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.213174][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.562755][ T7703] team0: Port device team_slave_0 added [ 262.839398][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.884700][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.054165][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.160173][ T7698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.254927][ T7698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.372779][ T7701] team0: Port device team_slave_0 added [ 263.415505][ T7701] team0: Port device team_slave_1 added [ 263.473388][ T7703] team0: Port device team_slave_1 added [ 263.952061][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.974689][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.011682][ T7707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.666895][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.673905][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.709252][ T7707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.127887][ T7698] team0: Port device team_slave_0 added [ 265.221455][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.233953][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.271893][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.287352][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.294363][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.343691][ T7703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.478712][ T7698] team0: Port device team_slave_1 added [ 265.485481][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.493299][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.528237][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.552924][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.572067][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.609147][ T7703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.029920][ T7705] hsr_slave_0: entered promiscuous mode [ 266.041382][ T7705] hsr_slave_1: entered promiscuous mode [ 266.065096][ T7705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.078909][ T7705] Cannot create hsr debugfs directory [ 266.312023][ T7707] hsr_slave_0: entered promiscuous mode [ 266.326981][ T7707] hsr_slave_1: entered promiscuous mode [ 266.333495][ T7707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.351417][ T7707] Cannot create hsr debugfs directory [ 266.373250][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.389094][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.423379][ T7698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.515046][ T7703] hsr_slave_0: entered promiscuous mode [ 266.527598][ T7703] hsr_slave_1: entered promiscuous mode [ 266.535910][ T7703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.551586][ T7703] Cannot create hsr debugfs directory [ 266.572915][ T7701] hsr_slave_0: entered promiscuous mode [ 266.594539][ T7701] hsr_slave_1: entered promiscuous mode [ 266.606337][ T7701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.613955][ T7701] Cannot create hsr debugfs directory [ 266.634403][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.649268][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.703899][ T7698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.019055][ T7698] hsr_slave_0: entered promiscuous mode [ 268.026100][ T7698] hsr_slave_1: entered promiscuous mode [ 268.043898][ T7698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.060202][ T7698] Cannot create hsr debugfs directory [ 269.388488][ T7707] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 269.476070][ T7707] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 269.509864][ T7707] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 269.567065][ T7707] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 269.726512][ T7703] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 269.781337][ T7703] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 269.852445][ T7703] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 269.895025][ T7703] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 270.144693][ T7701] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.236320][ T7701] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.286056][ T7701] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 270.385364][ T7701] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 270.643143][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.698713][ T7705] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 270.802132][ T7705] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 270.837499][ T7705] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 270.938508][ T7705] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 271.024551][ T7707] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.180969][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.188203][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.239040][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.246383][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.538581][ T7698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.618256][ T7698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.664645][ T7703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.773898][ T7698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.835044][ T7698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.013616][ T7707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.077906][ T7707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.204161][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.294244][ T7703] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.522942][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.530274][ T7689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.573245][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.650463][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.657698][ T7689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.750201][ T7707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.771651][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.778910][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.883976][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.891338][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.166119][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.345736][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.405913][ T7707] veth0_vlan: entered promiscuous mode [ 273.522628][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.563988][ T7707] veth1_vlan: entered promiscuous mode [ 273.620709][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.712616][ T7703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.740569][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.748140][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.825195][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.832916][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.860340][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.867689][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.961749][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.969681][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.133887][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.270934][ T7707] veth0_macvtap: entered promiscuous mode [ 274.400534][ T7703] veth0_vlan: entered promiscuous mode [ 274.541495][ T7707] veth1_macvtap: entered promiscuous mode [ 274.708310][ T7703] veth1_vlan: entered promiscuous mode [ 274.760777][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.785861][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.796912][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.819326][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.844528][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.871044][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.884531][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.900917][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.914760][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.943300][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.963632][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.018967][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.038748][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.060919][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.081410][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.103559][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.120208][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.135817][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.155688][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.177645][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.200140][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.218080][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.225897][ T7701] veth0_vlan: entered promiscuous mode [ 275.284055][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.321470][ T7707] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.343644][ T7707] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.356909][ T7707] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.375929][ T7707] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.446239][ T7701] veth1_vlan: entered promiscuous mode [ 275.583066][ T7703] veth0_macvtap: entered promiscuous mode [ 275.614080][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.689315][ T7703] veth1_macvtap: entered promiscuous mode [ 275.872421][ T7701] veth0_macvtap: entered promiscuous mode [ 275.974114][ T7698] veth0_vlan: entered promiscuous mode [ 276.013544][ T7701] veth1_macvtap: entered promiscuous mode [ 276.074896][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.095803][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.107239][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.140629][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.161596][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.176560][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.193800][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.209310][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.227230][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.246237][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.256128][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.283064][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.314998][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.335580][ T7698] veth1_vlan: entered promiscuous mode [ 276.426049][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.450077][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.468296][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.486249][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.500247][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.520380][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.543388][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.559339][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.578132][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.596284][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.620715][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.635047][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.654797][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.702801][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.762288][ T7705] veth0_vlan: entered promiscuous mode [ 276.774689][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.805831][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.835633][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.860757][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.875182][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.896665][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.926242][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.936122][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.961909][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.976681][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.995976][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.021445][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.039434][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.064054][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.081157][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.099338][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.129987][ T7703] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.160629][ T7703] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.179994][ T7703] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.198265][ T7703] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.312403][ T7705] veth1_vlan: entered promiscuous mode [ 277.333404][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.357491][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.382655][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.398763][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.432790][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.448501][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.464408][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.477949][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.501780][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.515017][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.545291][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.569649][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.587325][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.606270][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.628421][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.730502][ T7701] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.740854][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.756525][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.781833][ T7701] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.793664][ T7701] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.819952][ T7701] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.894109][ T7698] veth0_macvtap: entered promiscuous mode [ 278.075103][ T7698] veth1_macvtap: entered promiscuous mode [ 278.253688][ T7705] veth0_macvtap: entered promiscuous mode [ 278.459421][ T7705] veth1_macvtap: entered promiscuous mode [ 278.510114][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.576063][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.626446][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.664967][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.707265][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.754630][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.801893][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.849064][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.881375][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.903309][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.915282][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.959179][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.003950][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.028612][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.048491][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.072476][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.091382][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.260566][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.300902][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.318875][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.340680][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.354108][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.372212][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.388823][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.424434][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.438043][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.454705][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.468230][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.491403][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.507745][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.534291][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.551852][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.572542][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.593629][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.611215][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.648103][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.748522][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.762301][ T7698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.799529][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.815719][ T7698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.825688][ T7698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.842909][ T7698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.874165][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.914103][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.931279][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.950879][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.972124][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.989982][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.010216][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.033689][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.050077][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.065297][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.080390][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.098445][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.120709][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.143290][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.161170][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.176852][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.196272][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.222450][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.245027][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.331127][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.352633][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.369266][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.401895][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.415612][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.434573][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.447492][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.469863][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.487621][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.515489][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.528669][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.547750][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.564380][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.581348][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.604231][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.623280][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.641882][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.655940][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.678399][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.735625][ T7705] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.769691][ T7705] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.789513][ T7705] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.806679][ T7705] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.834569][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.886295][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.016899][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.091384][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.502778][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.570463][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.813276][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.889250][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.143420][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.231475][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.324736][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.395015][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.188042][ T7793] netlink: 308 bytes leftover after parsing attributes in process `syz.7.569'. [ 306.057251][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.136446][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.148891][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.157111][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.165475][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.644028][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.660865][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.670644][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.687415][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.695745][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.231773][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.242502][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.257275][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.281205][ T5843] Bluetooth: hci0: command tx timeout [ 308.290352][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.299877][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.877300][ T5845] Bluetooth: hci1: command tx timeout [ 310.357208][ T5845] Bluetooth: hci0: command tx timeout [ 310.515101][ T5845] Bluetooth: hci3: command tx timeout [ 310.978243][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.998293][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.036496][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.047542][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.055382][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.966614][ T5845] Bluetooth: hci1: command tx timeout [ 312.156631][ T7807] chnl_net:caif_netlink_parms(): no params data found [ 312.441065][ T5845] Bluetooth: hci0: command tx timeout [ 312.596713][ T5845] Bluetooth: hci3: command tx timeout [ 312.624934][ T7813] chnl_net:caif_netlink_parms(): no params data found [ 312.843958][ T7816] chnl_net:caif_netlink_parms(): no params data found [ 313.076527][ T5845] Bluetooth: hci2: command tx timeout [ 313.444797][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.467255][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.500181][ T7807] bridge_slave_0: entered allmulticast mode [ 313.518636][ T7807] bridge_slave_0: entered promiscuous mode [ 313.700965][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.720025][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.738521][ T7807] bridge_slave_1: entered allmulticast mode [ 313.761942][ T7807] bridge_slave_1: entered promiscuous mode [ 313.863540][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.884791][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.905035][ T7813] bridge_slave_0: entered allmulticast mode [ 313.928414][ T7813] bridge_slave_0: entered promiscuous mode [ 314.040547][ T5845] Bluetooth: hci1: command tx timeout [ 314.189778][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.209103][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.226421][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.233773][ T7813] bridge_slave_1: entered allmulticast mode [ 314.261019][ T7813] bridge_slave_1: entered promiscuous mode [ 314.517046][ T5845] Bluetooth: hci0: command tx timeout [ 314.543528][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.678505][ T5845] Bluetooth: hci3: command tx timeout [ 314.925617][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.949912][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.970180][ T7816] bridge_slave_0: entered allmulticast mode [ 314.988464][ T7816] bridge_slave_0: entered promiscuous mode [ 315.013671][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 315.157863][ T5849] Bluetooth: hci2: command tx timeout [ 315.183660][ T7807] team0: Port device team_slave_0 added [ 315.412038][ T7813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.487625][ T7813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.556708][ T7816] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.563989][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.627991][ T7816] bridge_slave_1: entered allmulticast mode [ 315.668477][ T7816] bridge_slave_1: entered promiscuous mode [ 315.755382][ T7807] team0: Port device team_slave_1 added [ 316.117361][ T5849] Bluetooth: hci1: command tx timeout [ 316.625536][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.636923][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.657741][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.678518][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.687803][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.756456][ T5849] Bluetooth: hci3: command tx timeout [ 316.894981][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.914618][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.991951][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.020172][ T7813] team0: Port device team_slave_0 added [ 317.065879][ T7816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.241216][ T5849] Bluetooth: hci2: command tx timeout [ 317.333301][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.346287][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.391232][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.447763][ T7813] team0: Port device team_slave_1 added [ 317.554500][ T7816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.994183][ T7816] team0: Port device team_slave_0 added [ 318.364659][ T7807] hsr_slave_0: entered promiscuous mode [ 318.397196][ T7807] hsr_slave_1: entered promiscuous mode [ 318.414759][ T7807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.426531][ T7807] Cannot create hsr debugfs directory [ 318.435534][ T7816] team0: Port device team_slave_1 added [ 318.629324][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.646385][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.653747][ T7820] bridge_slave_0: entered allmulticast mode [ 318.674787][ T7820] bridge_slave_0: entered promiscuous mode [ 318.715495][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.735750][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.744840][ T7820] bridge_slave_1: entered allmulticast mode [ 318.767262][ T5849] Bluetooth: hci7: command tx timeout [ 318.780338][ T7820] bridge_slave_1: entered promiscuous mode [ 318.809161][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.826218][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.875710][ T7813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.313029][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.325698][ T5849] Bluetooth: hci2: command tx timeout [ 319.336599][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.383316][ T7813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.415369][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.432214][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.475020][ T7816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.509078][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.524972][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.562600][ T7816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.641918][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.671573][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.574649][ T7813] hsr_slave_0: entered promiscuous mode [ 320.593395][ T7813] hsr_slave_1: entered promiscuous mode [ 320.607357][ T7813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.614975][ T7813] Cannot create hsr debugfs directory [ 320.659210][ T7816] hsr_slave_0: entered promiscuous mode [ 320.676817][ T7816] hsr_slave_1: entered promiscuous mode [ 320.683760][ T7816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.716355][ T7816] Cannot create hsr debugfs directory [ 320.761487][ T7820] team0: Port device team_slave_0 added [ 320.798425][ T7820] team0: Port device team_slave_1 added [ 320.851353][ T5849] Bluetooth: hci7: command tx timeout [ 321.892773][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.911647][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.954740][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.992135][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.013025][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.059706][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.365215][ T7807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.390493][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.398608][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.916921][ T5849] Bluetooth: hci7: command tx timeout [ 322.948852][ T7846] chnl_net:caif_netlink_parms(): no params data found [ 322.973441][ T7820] hsr_slave_0: entered promiscuous mode [ 323.007338][ T7820] hsr_slave_1: entered promiscuous mode [ 323.026422][ T7820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.034045][ T7820] Cannot create hsr debugfs directory [ 324.304257][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.317223][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.344304][ T7846] bridge_slave_0: entered allmulticast mode [ 324.358533][ T7846] bridge_slave_0: entered promiscuous mode [ 324.379715][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.396345][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.404074][ T7846] bridge_slave_1: entered allmulticast mode [ 324.436404][ T7846] bridge_slave_1: entered promiscuous mode [ 324.669031][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.707213][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.996671][ T5849] Bluetooth: hci7: command tx timeout [ 325.031049][ T7846] team0: Port device team_slave_0 added [ 325.061225][ T7846] team0: Port device team_slave_1 added [ 325.261381][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.280807][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.336259][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.369098][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.376108][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.420733][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.698067][ T7846] hsr_slave_0: entered promiscuous mode [ 325.705893][ T7846] hsr_slave_1: entered promiscuous mode [ 325.725273][ T7846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.737671][ T7846] Cannot create hsr debugfs directory [ 358.437357][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.446773][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.454785][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 358.463884][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 358.471822][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.178311][ T7860] chnl_net:caif_netlink_parms(): no params data found [ 359.642877][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.666353][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.673724][ T7860] bridge_slave_0: entered allmulticast mode [ 359.741851][ T7860] bridge_slave_0: entered promiscuous mode [ 359.778071][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.808426][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.816044][ T7860] bridge_slave_1: entered allmulticast mode [ 359.889490][ T7860] bridge_slave_1: entered promiscuous mode [ 360.232600][ T7860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.310578][ T7860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.516714][ T5845] Bluetooth: hci6: command tx timeout [ 360.702488][ T7860] team0: Port device team_slave_0 added [ 360.749368][ T7860] team0: Port device team_slave_1 added [ 361.104593][ T5849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 361.113504][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 361.124164][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.133083][ T5849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 361.149038][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 361.168053][ T5849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 361.226774][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.346888][ T5845] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 361.356735][ T5845] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 361.375700][ T5845] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 361.389100][ T5845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 361.410430][ T5845] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 361.418683][ T7860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.638738][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.645745][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.694547][ T7860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.134890][ T7860] hsr_slave_0: entered promiscuous mode [ 362.154046][ T7860] hsr_slave_1: entered promiscuous mode [ 362.182802][ T7860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.200454][ T7860] Cannot create hsr debugfs directory [ 362.597094][ T5845] Bluetooth: hci6: command tx timeout [ 363.245011][ T5845] Bluetooth: hci8: command tx timeout [ 363.470729][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 363.485368][ T5845] Bluetooth: hci9: command tx timeout [ 363.775698][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 364.182990][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.208330][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.215738][ T7870] bridge_slave_0: entered allmulticast mode [ 364.243418][ T7870] bridge_slave_0: entered promiscuous mode [ 364.297662][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.305042][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.331783][ T7870] bridge_slave_1: entered allmulticast mode [ 364.357603][ T7870] bridge_slave_1: entered promiscuous mode [ 364.694664][ T5845] Bluetooth: hci6: command tx timeout [ 364.819582][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.914619][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.936837][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.944690][ T7872] bridge_slave_0: entered allmulticast mode [ 364.968714][ T7872] bridge_slave_0: entered promiscuous mode [ 364.998787][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.005981][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.036500][ T7872] bridge_slave_1: entered allmulticast mode [ 365.056443][ T7872] bridge_slave_1: entered promiscuous mode [ 365.072378][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.316760][ T5845] Bluetooth: hci8: command tx timeout [ 365.546991][ T7870] team0: Port device team_slave_0 added [ 365.557745][ T5845] Bluetooth: hci9: command tx timeout [ 365.579632][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.637393][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.659741][ T7870] team0: Port device team_slave_1 added [ 366.050746][ T7872] team0: Port device team_slave_0 added [ 366.240853][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.256202][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.299394][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.347401][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.354416][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.405779][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.459305][ T7872] team0: Port device team_slave_1 added [ 366.757361][ T5845] Bluetooth: hci6: command tx timeout [ 366.903538][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.946199][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.992092][ T7872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.048976][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.055989][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.107163][ T7872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.165336][ T7870] hsr_slave_0: entered promiscuous mode [ 367.173540][ T7870] hsr_slave_1: entered promiscuous mode [ 367.197900][ T7870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.205538][ T7870] Cannot create hsr debugfs directory [ 367.397379][ T5845] Bluetooth: hci8: command tx timeout [ 367.647335][ T5845] Bluetooth: hci9: command tx timeout [ 367.684288][ T7872] hsr_slave_0: entered promiscuous mode [ 367.697666][ T7872] hsr_slave_1: entered promiscuous mode [ 367.727214][ T7872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.734857][ T7872] Cannot create hsr debugfs directory [ 369.478947][ T5845] Bluetooth: hci8: command tx timeout [ 369.717251][ T5845] Bluetooth: hci9: command tx timeout [ 370.052199][ T5845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 370.063130][ T5845] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 370.073026][ T5845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 370.082490][ T5845] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 370.091383][ T5845] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 370.798482][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 371.320393][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.346609][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.354385][ T7889] bridge_slave_0: entered allmulticast mode [ 371.378869][ T7889] bridge_slave_0: entered promiscuous mode [ 371.396119][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.404648][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.442480][ T7889] bridge_slave_1: entered allmulticast mode [ 371.466802][ T7889] bridge_slave_1: entered promiscuous mode [ 371.693624][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.721100][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.025739][ T7889] team0: Port device team_slave_0 added [ 372.068588][ T7889] team0: Port device team_slave_1 added [ 372.206970][ T5845] Bluetooth: hci10: command tx timeout [ 372.268913][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.275960][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.330099][ T7889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.382582][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.396432][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.468014][ T7889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.754157][ T7889] hsr_slave_0: entered promiscuous mode [ 372.781128][ T7889] hsr_slave_1: entered promiscuous mode [ 372.797632][ T7889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.805284][ T7889] Cannot create hsr debugfs directory [ 374.276820][ T5153] Bluetooth: hci10: command tx timeout [ 375.642490][ T5153] Bluetooth: hci5: command 0x0406 tx timeout [ 375.649117][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 376.357130][ T5849] Bluetooth: hci10: command tx timeout [ 376.566052][ T5845] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 376.579123][ T5845] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 376.587841][ T5845] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 376.600216][ T5845] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 376.610544][ T5845] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 377.347974][ T7900] chnl_net:caif_netlink_parms(): no params data found [ 377.907256][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.914485][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.931944][ T7900] bridge_slave_0: entered allmulticast mode [ 377.976803][ T7900] bridge_slave_0: entered promiscuous mode [ 378.008040][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.026471][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.033959][ T7900] bridge_slave_1: entered allmulticast mode [ 378.098007][ T7900] bridge_slave_1: entered promiscuous mode [ 378.315770][ T7900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.350680][ T7900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.437108][ T5845] Bluetooth: hci10: command tx timeout [ 378.664415][ T7900] team0: Port device team_slave_0 added [ 378.691691][ T5845] Bluetooth: hci11: command tx timeout [ 378.712132][ T7900] team0: Port device team_slave_1 added [ 378.907125][ T7900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.914223][ T7900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.964888][ T7900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.003296][ T7900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.043398][ T7900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.085240][ T7900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.430410][ T7900] hsr_slave_0: entered promiscuous mode [ 379.447912][ T7900] hsr_slave_1: entered promiscuous mode [ 379.474713][ T7900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.490663][ T7900] Cannot create hsr debugfs directory [ 380.757522][ T5845] Bluetooth: hci11: command tx timeout [ 382.837046][ T5845] Bluetooth: hci11: command tx timeout [ 383.828244][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.834664][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.917042][ T5845] Bluetooth: hci11: command tx timeout [ 407.487302][ T31] INFO: task syz-executor:5859 blocked for more than 143 seconds. [ 407.495189][ T31] Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 [ 407.543831][ T31] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 407.570138][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.635325][ T31] task:syz-executor state:D stack:20696 pid:5859 tgid:5859 ppid:1 task_flags:0x40054c flags:0x00004006 [ 407.750407][ T31] Call Trace: [ 407.753768][ T31] [ 407.827450][ T31] __schedule+0x1b88/0x5240 [ 407.832072][ T31] ? schedule+0x163/0x360 [ 407.910491][ T31] ? __pfx___schedule+0x10/0x10 [ 407.915470][ T31] ? schedule+0x90/0x360 [ 407.966893][ T31] ? schedule+0x90/0x360 [ 407.971233][ T31] schedule+0x163/0x360 [ 407.975448][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 408.056429][ T31] schedule_preempt_disabled+0x13/0x30 [ 408.107928][ T31] __mutex_lock+0x805/0x10c0 [ 408.112624][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 408.176216][ T31] ? rcu_barrier+0x4c/0x530 [ 408.180855][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 408.185919][ T31] ? __mutex_unlock_slowpath+0x7f9/0x800 [ 408.286414][ T31] ? do_group_exit+0x207/0x2c0 [ 408.326206][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.332298][ T31] rcu_barrier+0x4c/0x530 [ 408.382484][ T31] netdev_run_todo+0x380/0xf30 [ 408.417278][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 408.422704][ T31] ? netdev_state_change+0xa9/0x1a0 [ 408.487788][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 408.493536][ T31] ? kfree+0x198/0x430 [ 408.543684][ T31] ? tun_chr_close+0x105/0x1b0 [ 408.572109][ T31] tun_chr_close+0x137/0x1b0 [ 408.586276][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 408.591506][ T31] __fput+0x3e9/0x9f0 [ 408.595556][ T31] task_work_run+0x251/0x310 [ 408.684717][ T31] ? __pfx_task_work_run+0x10/0x10 [ 408.696226][ T31] ? do_exit+0xa0c/0x28c0 [ 408.700767][ T31] ? do_exit+0xa0c/0x28c0 [ 408.757605][ T31] do_exit+0xa11/0x28c0 [ 408.761878][ T31] ? do_raw_spin_lock+0x151/0x370 [ 408.796208][ T31] ? __pfx_do_exit+0x10/0x10 [ 408.800903][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 408.877415][ T31] do_group_exit+0x207/0x2c0 [ 408.882121][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.946261][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 408.952059][ T31] get_signal+0x1696/0x1730 [ 408.992634][ T31] ? __pfx_get_signal+0x10/0x10 [ 409.015290][ T31] ? do_sys_openat2+0x165/0x1d0 [ 409.056748][ T31] arch_do_signal_or_restart+0x98/0x840 [ 409.062488][ T31] ? __pfx_path_umount+0x10/0x10 [ 409.097852][ T31] ? kmem_cache_free+0x197/0x410 [ 409.106444][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 409.153703][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 409.186192][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 409.191831][ T31] do_syscall_64+0x100/0x230 [ 409.236200][ T31] ? clear_bhb_loop+0x45/0xa0 [ 409.240978][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.286203][ T31] RIP: 0033:0x7f4b0c98ca61 [ 409.290697][ T31] RSP: 002b:00007f4b0cccec50 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 409.354560][ T31] RAX: 0000000000000003 RBX: 00007f4b0ca0e08c RCX: 00007f4b0c98ca61 [ 409.416477][ T31] RDX: 0000000000090800 RSI: 00007f4b0cccfe00 RDI: 00000000ffffff9c [ 409.443089][ T31] RBP: 00007f4b0cccfdec R08: 0000000000000000 R09: 0000000000000000 [ 409.490402][ T31] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f4b0cccfe00 [ 409.527192][ T31] R13: 00007f4b0ca0e08c R14: 0000000000035779 R15: 00007f4b0cccfe40 [ 409.535273][ T31] [ 409.578580][ T31] INFO: task syz-executor:5860 blocked for more than 145 seconds. [ 409.601775][ T31] Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 [ 409.628115][ T31] Blocked by coredump. [ 409.632776][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.657544][ T31] task:syz-executor state:D stack:20840 pid:5860 tgid:5860 ppid:1 task_flags:0x40054c flags:0x00004006 [ 409.676498][ T31] Call Trace: [ 409.679839][ T31] [ 409.682800][ T31] __schedule+0x1b88/0x5240 [ 409.704963][ T31] ? schedule+0x163/0x360 [ 409.710737][ T31] ? __pfx___schedule+0x10/0x10 [ 409.715685][ T31] ? schedule+0x90/0x360 [ 409.746213][ T31] ? schedule+0x90/0x360 [ 409.750548][ T31] schedule+0x163/0x360 [ 409.754751][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 409.775172][ T31] schedule_preempt_disabled+0x13/0x30 [ 409.789884][ T31] __mutex_lock+0x805/0x10c0 [ 409.794577][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 409.819362][ T31] ? rcu_barrier+0x4c/0x530 [ 409.823965][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 409.850883][ T31] ? __mutex_unlock_slowpath+0x79a/0x800 [ 409.866245][ T31] ? do_group_exit+0x207/0x2c0 [ 409.871108][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 409.894462][ T31] rcu_barrier+0x4c/0x530 [ 409.899813][ T31] netdev_run_todo+0x380/0xf30 [ 409.904857][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 409.929386][ T31] ? netdev_state_change+0xa9/0x1a0 [ 409.941240][ T31] ? __pfx_netdev_state_change+0x10/0x10 [ 409.965871][ T31] ? kfree+0x198/0x430 [ 409.976519][ T31] ? tun_chr_close+0x105/0x1b0 [ 409.981377][ T31] tun_chr_close+0x137/0x1b0 [ 409.986014][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 410.012278][ T31] __fput+0x3e9/0x9f0 [ 410.026459][ T31] task_work_run+0x251/0x310 [ 410.031179][ T31] ? __pfx_task_work_run+0x10/0x10 [ 410.063055][ T31] ? do_exit+0xa0c/0x28c0 [ 410.086679][ T31] ? do_exit+0xa0c/0x28c0 [ 410.091169][ T31] do_exit+0xa11/0x28c0 [ 410.095388][ T31] ? do_raw_spin_lock+0x151/0x370 [ 410.113194][ T31] ? __pfx_do_exit+0x10/0x10 [ 410.118988][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 410.124461][ T31] do_group_exit+0x207/0x2c0 [ 410.156246][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.161581][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 410.176628][ T31] get_signal+0x1696/0x1730 [ 410.181231][ T31] ? __pfx_get_signal+0x10/0x10 [ 410.206464][ T31] arch_do_signal_or_restart+0x98/0x840 [ 410.212217][ T31] ? kmem_cache_free+0x312/0x410 [ 410.245775][ T31] ? fput_close_sync+0x1ef/0x270 [ 410.251821][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 410.266491][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 410.272295][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 410.300990][ T31] do_syscall_64+0x100/0x230 [ 410.305669][ T31] ? clear_bhb_loop+0x45/0xa0 [ 410.323117][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.336286][ T31] RIP: 0033:0x7fc5feb8bb7c [ 410.359244][ T31] RSP: 002b:00007fc5feecfd80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.388665][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fc5feb8bb7c [ 410.410766][ T31] RDX: 0000000000000030 RSI: 00007fc5feecfe40 RDI: 00000000000000f9 [ 410.426641][ T31] RBP: 00007fc5feecfdec R08: 0000000000000000 R09: 0079746972756365 [ 410.434689][ T31] R10: 00007fc5fed797e0 R11: 0000000000000246 R12: 0000000000000062 [ 410.473403][ T31] R13: 000055558358c590 R14: 000000000003627c R15: 00007fc5feecfe40 [ 410.498538][ T31] [ 410.501780][ T31] [ 410.501780][ T31] Showing all locks held in the system: [ 410.607436][ T31] 3 locks held by kworker/u8:0/12: [ 410.612682][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 410.663077][ T31] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 410.692151][ T31] #2: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 410.719163][ T31] 1 lock held by khungtaskd/31: [ 410.724079][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 410.754508][ T31] 2 locks held by kworker/u8:2/36: [ 410.766171][ T31] 3 locks held by kworker/1:1/47: [ 410.771257][ T31] #0: ffff88803253a948 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 410.801422][ T31] #1: ffffc90000b87c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 410.876589][ T31] #2: ffff88805fcb4890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xc00 [ 410.904760][ T31] 2 locks held by kworker/0:2/975: [ 410.910701][ T31] 4 locks held by kworker/u8:6/1097: [ 410.916029][ T31] #0: ffff8880318ca148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 410.970296][ T31] #1: ffffc90003e3fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 411.000274][ T31] #2: ffff8880614cd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x112/0xcb0 [ 411.026517][ T31] #3: ffff88805fcb5278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x121/0xcb0 [ 411.054308][ T31] 2 locks held by getty/5605: [ 411.072502][ T31] #0: ffff88814d90d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 411.099044][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 411.126566][ T31] 1 lock held by syz-executor/5859: [ 411.131930][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.157375][ T31] 1 lock held by syz-executor/5860: [ 411.176745][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.214598][ T31] 4 locks held by kworker/1:5/5897: [ 411.222433][ T31] #0: ffff88804b9bdd48 ((wq_completion)wg-kex-wg0#20){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 411.246950][ T31] #1: ffffc9000460fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 411.322175][ T31] #2: ffff8880387dd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x151/0xd60 [ 411.374312][ T31] #3: ffff88802739a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x711/0xd60 [ 411.396183][ T31] 3 locks held by kworker/1:6/5899: [ 411.401565][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 411.434817][ T31] #1: ffffc9000462fc60 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 411.476167][ T31] #2: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.506000][ T31] 2 locks held by kworker/0:6/5921: [ 411.511961][ T31] 2 locks held by kworker/0:7/5971: [ 411.526467][ T31] 3 locks held by kworker/0:8/5972: [ 411.531736][ T31] 1 lock held by syz.3.552/7669: [ 411.578314][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.605841][ T31] 1 lock held by syz.2.554/7674: [ 411.611672][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.636778][ T31] 1 lock held by syz.1.555/7677: [ 411.641803][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.681325][ T31] 1 lock held by syz-executor/7703: [ 411.696284][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.721749][ T31] 1 lock held by syz-executor/7705: [ 411.736177][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.756197][ T31] 2 locks held by kworker/0:11/7747: [ 411.762522][ T31] 1 lock held by syz.9.563/7757: [ 411.798178][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.826678][ T31] 1 lock held by syz.5.558/7774: [ 411.831698][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.856876][ T31] 1 lock held by syz.8.561/7773: [ 411.861877][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.896211][ T31] 2 locks held by kworker/0:12/7777: [ 411.901574][ T31] 2 locks held by syz.6.567/7785: [ 411.930231][ T31] #0: ffffffff900ef690 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 411.957111][ T31] #1: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 411.971257][ T31] 3 locks held by kworker/0:13/7791: [ 411.986341][ T31] 1 lock held by syz.7.572/7799: [ 411.991340][ T31] #0: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 412.035552][ T31] 7 locks held by syz-executor/7807: [ 412.046468][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 412.055467][ T31] #1: ffff888024d7c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 412.096670][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 412.116684][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 412.146570][ T31] #4: ffff88805fd290e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 412.173729][ T31] #5: ffff88805fd2a250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 412.205642][ T31] #6: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 412.225802][ T31] 6 locks held by kworker/0:16/7808: [ 412.245856][ T31] 2 locks held by kworker/0:17/7809: [ 412.254210][ T31] 3 locks held by kworker/0:18/7810: [ 412.276845][ T31] 4 locks held by syz-executor/7813: [ 412.282213][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 412.315371][ T31] #1: ffff888045569488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 412.335034][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 412.355292][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 412.386211][ T31] 4 locks held by syz-executor/7816: [ 412.416431][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 412.425541][ T31] #1: ffff888039d86088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 412.454597][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 412.481985][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 412.518146][ T31] 4 locks held by syz-executor/7820: [ 412.523550][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 412.546389][ T31] #1: ffff88803f78e888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 412.566509][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 412.603187][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 412.632470][ T31] 4 locks held by syz-executor/7846: [ 412.646192][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 412.655361][ T31] #1: ffff888047f6e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 412.682374][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 412.711549][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 412.739039][ T31] 4 locks held by syz-executor/7860: [ 412.744428][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 412.771617][ T31] #1: ffff888095083488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 412.802562][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 412.832600][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 412.858064][ T31] 4 locks held by syz-executor/7870: [ 412.863447][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 412.893300][ T31] #1: ffff88804072f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 412.919798][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 412.946204][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 412.976551][ T31] 4 locks held by syz-executor/7872: [ 412.981914][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 413.016191][ T31] #1: ffff888042153488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 413.026070][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 413.070393][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 413.096521][ T31] 4 locks held by syz-executor/7889: [ 413.101877][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 413.133873][ T31] #1: ffff88803f89a088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 413.154285][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 413.179591][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 413.212097][ T31] 4 locks held by syz-executor/7900: [ 413.226175][ T31] #0: ffff888035da4420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 413.235187][ T31] #1: ffff88802459e888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 413.267991][ T31] #2: ffff88802749bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 413.298902][ T31] #3: ffffffff8f995748 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 413.335961][ T31] [ 413.339226][ T31] ============================================= [ 413.339226][ T31] [ 413.356209][ T31] NMI backtrace for cpu 1 [ 413.356238][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 413.356281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.356302][ T31] Call Trace: [ 413.356316][ T31] [ 413.356331][ T31] dump_stack_lvl+0x241/0x360 [ 413.356392][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.356444][ T31] ? __pfx__printk+0x10/0x10 [ 413.356520][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 413.356583][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 413.356627][ T31] ? _printk+0xd5/0x120 [ 413.356677][ T31] ? __wake_up_klogd+0xcc/0x110 [ 413.356716][ T31] ? __pfx__printk+0x10/0x10 [ 413.356748][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 413.356772][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 413.356805][ T31] watchdog+0x1058/0x10a0 [ 413.356829][ T31] ? watchdog+0x1ea/0x10a0 [ 413.356855][ T31] ? __pfx_watchdog+0x10/0x10 [ 413.356877][ T31] kthread+0x7b7/0x940 [ 413.356908][ T31] ? __pfx_watchdog+0x10/0x10 [ 413.356930][ T31] ? __pfx_kthread+0x10/0x10 [ 413.356956][ T31] ? __pfx_kthread+0x10/0x10 [ 413.356982][ T31] ? __pfx_kthread+0x10/0x10 [ 413.357010][ T31] ? __pfx_kthread+0x10/0x10 [ 413.357038][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.357066][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 413.357092][ T31] ? __pfx_kthread+0x10/0x10 [ 413.357123][ T31] ret_from_fork+0x4b/0x80 [ 413.357144][ T31] ? __pfx_kthread+0x10/0x10 [ 413.357172][ T31] ret_from_fork_asm+0x1a/0x30 [ 413.357208][ T31] [ 413.357216][ T31] Sending NMI from CPU 1 to CPUs 0: [ 413.531360][ C0] NMI backtrace for cpu 0 [ 413.531378][ C0] CPU: 0 UID: 0 PID: 7747 Comm: kworker/0:11 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 413.531400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.531413][ C0] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 413.531444][ C0] RIP: 0010:lock_acquire+0x152/0x2f0 [ 413.531465][ C0] Code: ff ff ff 65 0f c1 05 7d bd c9 11 83 f8 01 0f 85 f9 00 00 00 48 c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 <0f> 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 48 [ 413.531480][ C0] RSP: 0018:ffffc90000006568 EFLAGS: 00000046 [ 413.531494][ C0] RAX: 0000000000000001 RBX: ffffffff8ed3dfe0 RCX: 4dc0d85fae7d8400 [ 413.531507][ C0] RDX: 0000000000000000 RSI: ffffffff8e4fa0ec RDI: ffffffff8ca1ab00 [ 413.531519][ C0] RBP: ffffffff93687020 R08: 0000000000000000 R09: 0000000000000000 [ 413.531530][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 413.531540][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 413.531551][ C0] FS: 0000000000000000(0000) GS:ffff888124f99000(0000) knlGS:0000000000000000 [ 413.531565][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.531577][ C0] CR2: 00002000001f5000 CR3: 0000000066ff4000 CR4: 00000000003526f0 [ 413.531592][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.531603][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.531613][ C0] Call Trace: [ 413.531620][ C0] [ 413.531632][ C0] ? __unwind_start+0xf8/0x740 [ 413.531653][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 413.531673][ C0] unwind_next_frame+0xd5/0x23b0 [ 413.531693][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 413.531718][ C0] ? get_stack_info_noinstr+0x47/0x130 [ 413.531740][ C0] ? __unwind_start+0xf8/0x740 [ 413.531764][ C0] __unwind_start+0x59a/0x740 [ 413.531786][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 413.531812][ C0] arch_stack_walk+0xe7/0x150 [ 413.531844][ C0] ? __unwind_start+0xf8/0x740 [ 413.531867][ C0] stack_trace_save+0x11a/0x1d0 [ 413.531892][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 413.531916][ C0] ? __lock_acquire+0xad5/0xd80 [ 413.531934][ C0] ? do_raw_spin_lock+0x151/0x370 [ 413.531959][ C0] kasan_save_track+0x3f/0x80 [ 413.532006][ C0] __kasan_kmalloc+0x9d/0xb0 [ 413.532026][ C0] __kmalloc_cache_noprof+0x236/0x370 [ 413.532050][ C0] ? kmem_cache_free+0x16e/0x410 [ 413.532074][ C0] ? nf_conntrack_free+0x2fd/0x390 [ 413.532098][ C0] kmem_cache_free+0x16e/0x410 [ 413.532120][ C0] ? nf_conntrack_free+0x2ee/0x390 [ 413.532140][ C0] ? nf_conntrack_free+0x2fd/0x390 [ 413.532163][ C0] nf_conntrack_free+0x2fd/0x390 [ 413.532185][ C0] nf_conntrack_in+0xb56/0x18c0 [ 413.532220][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 413.532249][ C0] ? ipt_do_table+0x314/0x1870 [ 413.532268][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 413.532289][ C0] ? ipv4_conntrack_defrag+0x2a5/0x5a0 [ 413.532314][ C0] ? ipv4_conntrack_local+0x123/0x210 [ 413.532336][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 413.532357][ C0] nf_hook_slow+0xc8/0x220 [ 413.532375][ C0] ? __pfx_dst_output+0x10/0x10 [ 413.532400][ C0] nf_hook+0x2c9/0x460 [ 413.532424][ C0] ? nf_hook+0xa0/0x460 [ 413.532445][ C0] ? __pfx_nf_hook+0x10/0x10 [ 413.532468][ C0] ? __pfx_dst_output+0x10/0x10 [ 413.532495][ C0] ? ip_fast_csum+0x1f4/0x2b0 [ 413.532517][ C0] __ip_local_out+0x50f/0x610 [ 413.532539][ C0] ? __pfx_dst_output+0x10/0x10 [ 413.532564][ C0] ip_local_out+0x26/0x70 [ 413.532587][ C0] synproxy_send_client_synack+0x8ea/0xf70 [ 413.532614][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 413.532636][ C0] ? nft_redir_ipv6_destroy+0x8/0x40 [ 413.532657][ C0] ? synproxy_pernet+0x45/0x280 [ 413.532682][ C0] nft_synproxy_eval_v4+0x3cc/0x610 [ 413.532730][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 413.532753][ C0] ? nf_conntrack_in+0xb56/0x18c0 [ 413.532776][ C0] ? nf_ip_checksum+0x13a/0x500 [ 413.532801][ C0] nft_synproxy_do_eval+0x36a/0xa90 [ 413.532835][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 413.532869][ C0] nft_do_chain+0x4b2/0x1db0 [ 413.532899][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 413.532921][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 413.532957][ C0] nft_do_chain_inet+0x41f/0x6b0 [ 413.532981][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 413.533003][ C0] ? ipt_do_table+0x314/0x1870 [ 413.533029][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 413.533050][ C0] nf_hook_slow+0xc8/0x220 [ 413.533071][ C0] NF_HOOK+0x29b/0x450 [ 413.533091][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 413.533112][ C0] ? NF_HOOK+0x9e/0x450 [ 413.533129][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 413.533148][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 413.533172][ C0] ? ip_rcv_finish+0x409/0x560 [ 413.533193][ C0] NF_HOOK+0x3a0/0x450 [ 413.533212][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 413.533231][ C0] ? NF_HOOK+0x9e/0x450 [ 413.533248][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 413.533265][ C0] ? ip_rcv_core+0x80c/0xd20 [ 413.533285][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 413.533308][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 413.533327][ C0] __netif_receive_skb+0x2c9/0x670 [ 413.533351][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 413.533381][ C0] process_backlog+0x664/0x15c0 [ 413.533406][ C0] ? process_backlog+0x33d/0x15c0 [ 413.533431][ C0] ? __pfx_process_backlog+0x10/0x10 [ 413.533458][ C0] __napi_poll+0xcb/0x480 [ 413.533480][ C0] net_rx_action+0x89d/0x1240 [ 413.533512][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 413.533534][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 413.533571][ C0] handle_softirqs+0x2d6/0x9b0 [ 413.533592][ C0] ? do_softirq+0x11f/0x1e0 [ 413.533609][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 413.533631][ C0] do_softirq+0x11f/0x1e0 [ 413.533646][ C0] [ 413.533652][ C0] [ 413.533658][ C0] ? __pfx_do_softirq+0x10/0x10 [ 413.533677][ C0] ? wg_packet_encrypt_worker+0x1760/0x1810 [ 413.533703][ C0] ? lockdep_softirqs_on+0x144/0x1d0 [ 413.533721][ C0] __local_bh_enable_ip+0x1be/0x200 [ 413.533738][ C0] ? wg_packet_encrypt_worker+0x1760/0x1810 [ 413.533763][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 413.533786][ C0] wg_packet_encrypt_worker+0x1760/0x1810 [ 413.533830][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 413.533855][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 413.533879][ C0] ? do_raw_spin_lock+0x151/0x370 [ 413.533953][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 413.533971][ C0] process_scheduled_works+0xac3/0x18e0 [ 413.534004][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 413.534027][ C0] ? assign_work+0x367/0x3d0 [ 413.534048][ C0] worker_thread+0x870/0xd50 [ 413.534076][ C0] ? __kthread_parkme+0x1a8/0x200 [ 413.534098][ C0] ? __pfx_worker_thread+0x10/0x10 [ 413.534118][ C0] kthread+0x7b7/0x940 [ 413.534142][ C0] ? __pfx_worker_thread+0x10/0x10 [ 413.534162][ C0] ? __pfx_kthread+0x10/0x10 [ 413.534183][ C0] ? __pfx_kthread+0x10/0x10 [ 413.534205][ C0] ? __pfx_kthread+0x10/0x10 [ 413.534228][ C0] ? __pfx_kthread+0x10/0x10 [ 413.534250][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.534272][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 413.534287][ C0] ? __pfx_kthread+0x10/0x10 [ 413.534311][ C0] ret_from_fork+0x4b/0x80 [ 413.534328][ C0] ? __pfx_kthread+0x10/0x10 [ 413.534351][ C0] ret_from_fork_asm+0x1a/0x30 [ 413.534375][ C0] [ 414.432180][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 414.439161][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 414.450658][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.460756][ T31] Call Trace: [ 414.464061][ T31] [ 414.467056][ T31] dump_stack_lvl+0x241/0x360 [ 414.471815][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.477057][ T31] ? __pfx__printk+0x10/0x10 [ 414.481743][ T31] ? vscnprintf+0x5d/0x90 [ 414.486126][ T31] panic+0x349/0x880 [ 414.490055][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 414.495469][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 414.501693][ T31] ? __pfx_panic+0x10/0x10 [ 414.506179][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 414.511595][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 414.517002][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 414.523195][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 414.529407][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 414.535604][ T31] watchdog+0x1097/0x10a0 [ 414.539969][ T31] ? watchdog+0x1ea/0x10a0 [ 414.544421][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.549134][ T31] kthread+0x7b7/0x940 [ 414.553241][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.557953][ T31] ? __pfx_kthread+0x10/0x10 [ 414.562577][ T31] ? __pfx_kthread+0x10/0x10 [ 414.567202][ T31] ? __pfx_kthread+0x10/0x10 [ 414.571827][ T31] ? __pfx_kthread+0x10/0x10 [ 414.576454][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.581687][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 414.586919][ T31] ? __pfx_kthread+0x10/0x10 [ 414.591550][ T31] ret_from_fork+0x4b/0x80 [ 414.596090][ T31] ? __pfx_kthread+0x10/0x10 [ 414.600756][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.605566][ T31] [ 414.608882][ T31] Kernel Offset: disabled [ 414.613210][ T31] Rebooting in 86400 seconds..