last executing test programs: 14.252266524s ago: executing program 0 (id=302): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000340)={0x7, 'bond_slave_0\x00', {}, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) 14.04460289s ago: executing program 5 (id=303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, 0x0) write$ppp(r1, &(0x7f0000000140)='\\n', 0x2) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f00000001c0)='cramfs\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000300000000000004000000080002000500000006000b"], 0x24}}, 0x0) 12.923309318s ago: executing program 0 (id=304): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) dup(r0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) 12.882261154s ago: executing program 5 (id=305): r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c77", 0x6b, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e24], [0x4e20, 0x4e20], 0xb, 0x4, 0x8, 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x20000000}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x11, 0xe, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0xec, 0x5, 0x400, 'syz1\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 12.815081805s ago: executing program 4 (id=307): io_setup(0x6, &(0x7f0000000d80)) 12.672856227s ago: executing program 3 (id=308): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.565926198s ago: executing program 4 (id=309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737", 0x67, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.145575676s ago: executing program 4 (id=311): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000151cf7ffff06000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 12.05697051s ago: executing program 3 (id=312): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0xc0, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffff44, 0x51}}}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x4}}}, @NL80211_ATTR_FRAME={0x8d, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @random="25c67244f305", @from_mac=@broadcast, {0x5, 0x5}}, @random="2b5ac0d4ee069100047c0eb5f626b9bc4ec17bd84fc64102c9b750196e54a5d969c7d880db1bae2c03e297709000955625528ac7477843c99397ee03d21f0e3845e44b08c572252749067d340a3bae7f69f3e4d6a05f26f28eda26152d33e34f2bf949fb499b66741190691a922b6aa98f"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x200041c1}, 0x4008000) 11.953555311s ago: executing program 0 (id=313): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/disk', 0x80900, 0x10a) r5 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0xdfc0, 0x80, 0xfffffffd, 0x40000331, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, 0x0) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 11.927093275s ago: executing program 1 (id=314): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c44", 0x55}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b947238", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18e", 0xcc}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7e", 0x94}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11.61092343s ago: executing program 3 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.250742581s ago: executing program 2 (id=316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000340)={0x7, 'bond_slave_0\x00', {}, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) 10.856166754s ago: executing program 1 (id=317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, 0x0) write$ppp(r1, &(0x7f0000000140)='\\n', 0x2) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f00000001c0)='cramfs\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x2fe041, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000300000000000004000000080002000500000006000b"], 0x24}}, 0x0) 9.673018978s ago: executing program 2 (id=318): r0 = socket(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffd, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x7, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0xfffffffe}}, {0x4}}]}]}, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r7, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r6, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4c000) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x0, 0x3, 0x1, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x59, 0x0, @fd, 0x0, 0x0, 0x0, {0x494}, 0x1}) syz_io_uring_submit(0x0, r9, 0x0) 9.586996556s ago: executing program 1 (id=319): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000400)='vxfs\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) getdents(r0, &(0x7f00000001c0)=""/81, 0x51) 8.98680004s ago: executing program 5 (id=320): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.591110352s ago: executing program 0 (id=321): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000151cf7ffff06000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) r5 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8.430470688s ago: executing program 5 (id=322): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r2, &(0x7f00000002c0)=""/141, 0x8d) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x20a000, 0x0) syz_io_uring_setup(0x1f90, &(0x7f00000003c0)={0x0, 0xa, 0x800, 0x1, 0x2f2, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x80004, 0x4, 0x6, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x800016, 0x0, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x81, 0x234, &(0x7f0000000000)="$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") r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0800050003000000f417c9864f773f0821320e767ee6bcaeed65876d430005d0adf06c46ec1c58adda5a2187e519485f5407843aead258c6a42eced76adb7db54a6e94749562f4315a5b8a8a"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x4, 0x2c, 0x4}}, @void, @void, @void, @val={0x76, 0x6, {0x8f, 0x2, 0x3d, 0x68}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x6c, 0x1}, {0x30}]}]}]]}, 0x74}}, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1200008, &(0x7f0000000340)={[{@none}, {}]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x1, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x634]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_usb_connect(0x0, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009414b"], 0x0) 7.578831472s ago: executing program 4 (id=323): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737", 0x67, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.027448248s ago: executing program 4 (id=324): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000151cf7ffff06000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) r5 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6.980451239s ago: executing program 3 (id=325): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 6.01541638s ago: executing program 2 (id=326): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02", 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 5.818887631s ago: executing program 1 (id=327): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4}, 0xc) 5.148919525s ago: executing program 5 (id=328): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x800) ioctl$int_in(r0, 0x5452, &(0x7f0000006a00)=0x1) fchmod(r0, 0xa0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) io_uring_enter(r3, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 3.085998428s ago: executing program 0 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0xa, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x2, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x7, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x26f3, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x48, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x9ea8, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x4}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x883, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x8, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x40000002}, {0x8001, 0x87, 0x4, 0x1ff, 0x3, 0x4}, {0x6, 0x9c4, 0x8b7f, 0x11, 0x3, 0x7}, {0x8, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x391, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x3b, 0x1ff, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0x1, 0x6}, {0x2, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x1, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x4, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x2009, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x36, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x0, 0x1, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x4}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736b}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0xff, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x710, 0x33, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0xc2e0, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0xb}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x6}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x804, 0x4c, 0x7, 0x0, 0x0, 0x9}, {0x6, 0xdfff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x200, 0x81}, {0x970, 0x100, 0xb3ed, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x1000002, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x6, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x7}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x1, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffffb, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0xe0f3, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0x5, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0xaa7, 0x12c, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8e, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}], 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 1.955992083s ago: executing program 0 (id=330): syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000740)=@string={0x29, 0x3, "69872b478735e3e26568d0288cdee5b5fa77be139ff304cac06714d08ef70f3d37785da8f9dedf"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 1.661047403s ago: executing program 5 (id=331): r0 = socket(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffd, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x7, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0xfffffffe}}, {0x4}}]}]}, 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r8, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r7, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4c000) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x0, 0x3, 0x1, 0x0, r5}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x59, 0x0, @fd, 0x0, 0x0, 0x0, {0x494}, 0x1}) syz_io_uring_submit(0x0, r10, 0x0) 1.336654111s ago: executing program 3 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.073584549s ago: executing program 2 (id=333): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c44", 0x55}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18e", 0xcc}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7ef306ed29", 0x98}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 688.544048ms ago: executing program 2 (id=334): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000200), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 663.912293ms ago: executing program 3 (id=335): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 297.954948ms ago: executing program 4 (id=336): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) getdents(r0, &(0x7f00000001c0)=""/81, 0x51) 293.230289ms ago: executing program 1 (id=337): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737", 0x67, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 44.26377ms ago: executing program 2 (id=338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 1 (id=339): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) getdents(r0, &(0x7f00000001c0)=""/81, 0x51) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 75.611853][ T5806] cgroup: Unknown subsys name 'net' [ 75.728206][ T5806] cgroup: Unknown subsys name 'cpuset' [ 75.737766][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.225343][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.641091][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.649089][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.657525][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.665105][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.673528][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.681119][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.692109][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.693527][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.702089][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.714838][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.715384][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.722423][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.729920][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.737422][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.744209][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.751539][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.761280][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.771594][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.787528][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.796851][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.806869][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.811787][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.814973][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.822666][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.836013][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.866784][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.879742][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.889721][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.906176][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.918008][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.622531][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 80.758146][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 80.831988][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 80.936631][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 80.977309][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 81.010357][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 81.310759][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.318023][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.325671][ T5821] bridge_slave_0: entered allmulticast mode [ 81.333462][ T5821] bridge_slave_0: entered promiscuous mode [ 81.349405][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.356644][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.363999][ T5822] bridge_slave_0: entered allmulticast mode [ 81.371669][ T5822] bridge_slave_0: entered promiscuous mode [ 81.386906][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.394344][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.401669][ T5842] bridge_slave_0: entered allmulticast mode [ 81.410092][ T5842] bridge_slave_0: entered promiscuous mode [ 81.425921][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.433197][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.440691][ T5821] bridge_slave_1: entered allmulticast mode [ 81.448478][ T5821] bridge_slave_1: entered promiscuous mode [ 81.463808][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.470959][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.478717][ T5822] bridge_slave_1: entered allmulticast mode [ 81.486444][ T5822] bridge_slave_1: entered promiscuous mode [ 81.501480][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.508762][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.516583][ T5842] bridge_slave_1: entered allmulticast mode [ 81.524344][ T5842] bridge_slave_1: entered promiscuous mode [ 81.626489][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.700479][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.721479][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.728770][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.736083][ T5819] bridge_slave_0: entered allmulticast mode [ 81.743884][ T5819] bridge_slave_0: entered promiscuous mode [ 81.754532][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.767143][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.791995][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.804692][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.839868][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.847157][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.854584][ T5819] bridge_slave_1: entered allmulticast mode [ 81.862119][ T5819] bridge_slave_1: entered promiscuous mode [ 81.881784][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.889078][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.896667][ T5820] bridge_slave_0: entered allmulticast mode [ 81.903762][ T5825] Bluetooth: hci2: command tx timeout [ 81.904960][ T5820] bridge_slave_0: entered promiscuous mode [ 81.909361][ T5825] Bluetooth: hci1: command tx timeout [ 81.921105][ T5841] Bluetooth: hci3: command tx timeout [ 81.923125][ T5138] Bluetooth: hci4: command tx timeout [ 81.926820][ T5834] Bluetooth: hci0: command tx timeout [ 81.942498][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.949693][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.957050][ T5823] bridge_slave_0: entered allmulticast mode [ 81.964613][ T5823] bridge_slave_0: entered promiscuous mode [ 81.975672][ T5821] team0: Port device team_slave_0 added [ 81.979468][ T5834] Bluetooth: hci5: command tx timeout [ 82.009213][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.016492][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.024125][ T5820] bridge_slave_1: entered allmulticast mode [ 82.031680][ T5820] bridge_slave_1: entered promiscuous mode [ 82.051639][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.059325][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.066752][ T5823] bridge_slave_1: entered allmulticast mode [ 82.074349][ T5823] bridge_slave_1: entered promiscuous mode [ 82.083622][ T5821] team0: Port device team_slave_1 added [ 82.103925][ T5822] team0: Port device team_slave_0 added [ 82.123770][ T5842] team0: Port device team_slave_0 added [ 82.156318][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.168283][ T5822] team0: Port device team_slave_1 added [ 82.188440][ T5842] team0: Port device team_slave_1 added [ 82.221601][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.245386][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.270473][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.281525][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.288537][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.315122][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.354971][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.380049][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.390358][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.397620][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.423679][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.448648][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.455822][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.482270][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.494970][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.501922][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.528054][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.552480][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.559749][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.585762][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.621877][ T5819] team0: Port device team_slave_0 added [ 82.649552][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.656765][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.682993][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.717632][ T5819] team0: Port device team_slave_1 added [ 82.753291][ T5820] team0: Port device team_slave_0 added [ 82.773496][ T5823] team0: Port device team_slave_0 added [ 82.795504][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.802458][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.828914][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.842732][ T5820] team0: Port device team_slave_1 added [ 82.888031][ T5823] team0: Port device team_slave_1 added [ 82.906639][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.913857][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.940224][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.997744][ T5842] hsr_slave_0: entered promiscuous mode [ 83.005339][ T5842] hsr_slave_1: entered promiscuous mode [ 83.055740][ T5822] hsr_slave_0: entered promiscuous mode [ 83.067416][ T5822] hsr_slave_1: entered promiscuous mode [ 83.073852][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 83.079644][ T5822] Cannot create hsr debugfs directory [ 83.096458][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.103542][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.130607][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.148861][ T5821] hsr_slave_0: entered promiscuous mode [ 83.155372][ T5821] hsr_slave_1: entered promiscuous mode [ 83.161552][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 83.167362][ T5821] Cannot create hsr debugfs directory [ 83.190569][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.198061][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.224208][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.271020][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.278267][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.304417][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.365111][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.372080][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.398177][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.486570][ T5819] hsr_slave_0: entered promiscuous mode [ 83.493265][ T5819] hsr_slave_1: entered promiscuous mode [ 83.499611][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 83.507395][ T5819] Cannot create hsr debugfs directory [ 83.590758][ T5820] hsr_slave_0: entered promiscuous mode [ 83.597846][ T5820] hsr_slave_1: entered promiscuous mode [ 83.605278][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 83.611029][ T5820] Cannot create hsr debugfs directory [ 83.671952][ T5823] hsr_slave_0: entered promiscuous mode [ 83.680935][ T5823] hsr_slave_1: entered promiscuous mode [ 83.687585][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 83.693383][ T5823] Cannot create hsr debugfs directory [ 83.972875][ T5834] Bluetooth: hci0: command tx timeout [ 83.978326][ T5834] Bluetooth: hci1: command tx timeout [ 83.983911][ T5825] Bluetooth: hci3: command tx timeout [ 83.989328][ T5825] Bluetooth: hci4: command tx timeout [ 83.995067][ T5841] Bluetooth: hci2: command tx timeout [ 84.057501][ T5834] Bluetooth: hci5: command tx timeout [ 84.350141][ T5842] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.364616][ T5842] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.375887][ T5842] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.398359][ T5842] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.467518][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.479299][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.498982][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.517802][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.635830][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.654444][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.666680][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.706455][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.772264][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.820629][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.835116][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.847419][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.859954][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.898524][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.962041][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.969324][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.992960][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.005297][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.038663][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.045855][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.079609][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.096370][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.124222][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.218848][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.234478][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.255533][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.262723][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.284038][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.297628][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.325394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.332711][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.348103][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.477067][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.580158][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.615167][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.622296][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.646089][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.688646][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.698361][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.709220][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.716420][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.741186][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.748390][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.796646][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.803854][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.878174][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.007087][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.028750][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.055900][ T5834] Bluetooth: hci3: command tx timeout [ 86.061353][ T5834] Bluetooth: hci0: command tx timeout [ 86.067137][ T5825] Bluetooth: hci1: command tx timeout [ 86.072533][ T5825] Bluetooth: hci4: command tx timeout [ 86.078374][ T5841] Bluetooth: hci2: command tx timeout [ 86.088643][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.097714][ T24] cfg80211: failed to load regulatory.db [ 86.133316][ T5834] Bluetooth: hci5: command tx timeout [ 86.175388][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.182502][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.254571][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.261785][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.344145][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.437713][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.457749][ T5842] veth0_vlan: entered promiscuous mode [ 86.486806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.493983][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.563859][ T5842] veth1_vlan: entered promiscuous mode [ 86.584773][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.591936][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.628114][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.739088][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.808754][ T5842] veth0_macvtap: entered promiscuous mode [ 86.817175][ T5822] veth0_vlan: entered promiscuous mode [ 86.827735][ T5819] veth0_vlan: entered promiscuous mode [ 86.848629][ T5842] veth1_macvtap: entered promiscuous mode [ 86.877487][ T5822] veth1_vlan: entered promiscuous mode [ 86.895764][ T5819] veth1_vlan: entered promiscuous mode [ 86.930230][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.993018][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.120280][ T5819] veth0_macvtap: entered promiscuous mode [ 87.146947][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.157561][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.170530][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.198122][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.208785][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.234659][ T5819] veth1_macvtap: entered promiscuous mode [ 87.242083][ T5822] veth0_macvtap: entered promiscuous mode [ 87.260037][ T5821] veth0_vlan: entered promiscuous mode [ 87.276282][ T5822] veth1_macvtap: entered promiscuous mode [ 87.341483][ T5821] veth1_vlan: entered promiscuous mode [ 87.376012][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.406893][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.432373][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.460159][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.480403][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.485493][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.508731][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.518530][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.556618][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.567154][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.615359][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.626729][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.668060][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.676275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.687025][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.697196][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.729197][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.819313][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.827345][ T5821] veth0_macvtap: entered promiscuous mode [ 87.917087][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.918085][ T5821] veth1_macvtap: entered promiscuous mode [ 87.949166][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.986390][ T5820] veth0_vlan: entered promiscuous mode [ 88.028613][ T5823] veth0_vlan: entered promiscuous mode [ 88.057189][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.065126][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.074309][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.081794][ T5820] veth1_vlan: entered promiscuous mode [ 88.108090][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.130178][ T5823] veth1_vlan: entered promiscuous mode [ 88.135987][ T5834] Bluetooth: hci1: command tx timeout [ 88.141412][ T5834] Bluetooth: hci3: command tx timeout [ 88.150379][ T5825] Bluetooth: hci0: command tx timeout [ 88.155897][ T5841] Bluetooth: hci4: command tx timeout [ 88.155929][ T5138] Bluetooth: hci2: command tx timeout [ 88.180212][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.189466][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.189871][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.200497][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.222409][ T5138] Bluetooth: hci5: command tx timeout [ 88.242967][ T5926] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 88.247549][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.260088][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.270067][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.277503][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.414699][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 88.445986][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 88.458913][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.470533][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.473919][ T5820] veth0_macvtap: entered promiscuous mode [ 88.483743][ T5926] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 88.522792][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.590915][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.667140][ T5926] usb 6-1: Product: syz [ 88.671351][ T5926] usb 6-1: Manufacturer: syz [ 88.688724][ T5926] usb 6-1: SerialNumber: syz [ 88.691910][ T5820] veth1_macvtap: entered promiscuous mode [ 88.705871][ T5926] usb 6-1: config 0 descriptor?? [ 88.729565][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.739558][ T5926] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 88.749316][ T5823] veth0_macvtap: entered promiscuous mode [ 88.808476][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.830416][ T5926] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 88.847674][ T5823] veth1_macvtap: entered promiscuous mode [ 88.922607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.012606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.152597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.268438][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.536275][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.631941][ T5926] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 89.637790][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.715319][ T5985] process 'syz.2.3' launched './file2' with NULL argv: empty string added [ 89.728320][ T5985] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 89.937546][ T5989] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.8'. [ 90.583318][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.898879][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.908016][ T5926] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 90.934389][ T5988] Zero length message leads to an empty skb [ 90.987753][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.033096][ T5926] em28xx 6-1:0.0: board has no eeprom [ 91.041294][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.052234][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.176714][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.196823][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.622661][ T5926] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 91.623299][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630686][ T5926] em28xx 6-1:0.0: dvb set to bulk mode. [ 91.680569][ T5909] em28xx 6-1:0.0: Binding DVB extension [ 91.851572][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.866081][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.899429][ T5926] usb 6-1: USB disconnect, device number 2 [ 91.913983][ T5909] em28xx 6-1:0.0: Registering input extension [ 91.916727][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.981393][ T5926] em28xx 6-1:0.0: Disconnecting em28xx [ 92.014922][ T5926] em28xx 6-1:0.0: Closing input extension [ 92.289068][ T5926] em28xx 6-1:0.0: Freeing device [ 92.532512][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.603268][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.628913][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 92.662712][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.672478][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.895752][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.950184][ T6009] warning: `syz.5.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.059291][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.108066][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.625329][ T6013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.402679][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.562847][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 95.578600][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.619898][ T5926] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 95.665725][ T5926] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 95.712737][ T5926] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.767472][ T5926] usb 4-1: config 1 interface 0 has no altsetting 0 [ 95.799210][ T5926] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 95.836125][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.870177][ T5926] usb 4-1: Product: syz [ 95.889116][ T5926] usb 4-1: Manufacturer: syz [ 95.915972][ T5926] usb 4-1: SerialNumber: syz [ 95.956747][ T6028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.386651][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 96.598656][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.661942][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.902687][ T5172] bcm5974 4-1:1.0: could not read from device [ 97.342590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.452591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.473722][ T5172] bcm5974 4-1:1.0: could not read from device [ 97.496902][ T5926] bcm5974 4-1:1.0: could not read from device [ 97.615597][ T5926] input: failed to attach handler mousedev to device input6, error: -5 [ 97.683168][ T5172] bcm5974 4-1:1.0: could not read from device [ 97.704816][ T5926] usb 4-1: USB disconnect, device number 2 [ 98.347899][ T6046] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 101.311904][ T6071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.807114][ T6067] syz.2.26 (6067) used greatest stack depth: 17472 bytes left [ 102.833529][ T6083] loop2: detected capacity change from 0 to 32768 [ 102.907644][ T6083] read_mapping_page failed! [ 102.912311][ T6083] ERROR: (device loop2): txCommit: [ 102.912311][ T6083] [ 103.103210][ T5821] ERROR: (device loop2): diFree: numfree > numinos [ 103.103210][ T5821] [ 104.054879][ T6091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.253525][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.446547][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.105584][ T6116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.599011][ T6123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.487777][ T6131] loop0: detected capacity change from 0 to 4096 [ 109.604112][ T6136] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 109.912802][ T6140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.569313][ T6136] 9p: Bad value for 'wfdno' [ 116.428930][ T6193] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.58'. [ 118.885558][ T6206] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.60'. [ 119.742847][ T6205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.585448][ T6220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.410324][ T6244] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 124.618074][ T6268] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 126.508519][ T6280] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.83'. [ 127.416276][ T6285] loop2: detected capacity change from 0 to 32768 [ 127.515471][ T6285] read_mapping_page failed! [ 127.520008][ T6285] ERROR: (device loop2): txCommit: [ 127.520008][ T6285] [ 127.565325][ T5821] ERROR: (device loop2): diFree: numfree > numinos [ 127.565325][ T5821] [ 127.962594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.327200][ T6301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.602752][ T6321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 131.609469][ T6321] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.629352][ T6321] vhci_hcd vhci_hcd.0: Device attached [ 131.738574][ T6327] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 131.799848][ T6325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'. [ 131.883530][ T5893] usb 36-1: SetAddress Request (2) to port 0 [ 132.138911][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.146932][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.183680][ T5893] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 133.903260][ T6339] loop3: detected capacity change from 0 to 32768 [ 134.115421][ T6339] read_mapping_page failed! [ 134.119936][ T6339] ERROR: (device loop3): txCommit: [ 134.119936][ T6339] [ 134.247638][ T6342] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.97'. [ 134.346216][ T6323] vhci_hcd: connection reset by peer [ 134.353239][ T3459] vhci_hcd vhci_hcd.1: stop threads [ 134.379569][ T3459] vhci_hcd vhci_hcd.1: release socket [ 134.417111][ T3459] vhci_hcd vhci_hcd.1: disconnect device [ 134.514506][ T5822] ERROR: (device loop3): diFree: numfree > numinos [ 134.514506][ T5822] [ 135.899898][ T6362] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.101'. [ 136.386294][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.103'. [ 137.252985][ T5893] usb 36-1: device descriptor read/8, error -110 [ 137.674308][ T5893] usb usb36-port1: attempt power cycle [ 138.303592][ T5893] usb usb36-port1: unable to enumerate USB device [ 139.346936][ T6386] tipc: Started in network mode [ 139.362298][ T6386] tipc: Node identity 3640a5ce62e2, cluster identity 4711 [ 139.380055][ T6388] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 139.437008][ T6386] tipc: Enabled bearer , priority 0 [ 139.464715][ T6386] syzkaller0: entered promiscuous mode [ 139.837618][ T6386] syzkaller0: entered allmulticast mode [ 139.902857][ T6392] loop1: detected capacity change from 0 to 256 [ 140.013190][ T6386] tipc: Resetting bearer [ 140.037197][ T6392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 140.080680][ T6384] tipc: Resetting bearer [ 140.429696][ T6395] exFAT-fs (loop1): start_clu is invalid cluster(0x0) [ 140.437935][ T31] audit: type=1800 audit(1774470771.398:2): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="file1" dev="loop1" ino=1048610 res=0 errno=0 [ 140.492940][ T6384] tipc: Disabling bearer [ 140.572806][ T5893] tipc: Node number set to 1419945422 [ 140.854408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 141.215379][ T6410] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 141.307634][ T6412] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 143.472773][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'. [ 143.505749][ T6420] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 143.512311][ T6420] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.586260][ T6420] vhci_hcd vhci_hcd.0: Device attached [ 144.192133][ T6433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.542745][ T5909] usb 34-1: SetAddress Request (2) to port 0 [ 144.548862][ T5909] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 146.742339][ T6421] vhci_hcd: connection reset by peer [ 146.829182][ T49] vhci_hcd vhci_hcd.0: stop threads [ 146.962659][ T49] vhci_hcd vhci_hcd.0: release socket [ 146.968219][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 147.070778][ T6447] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 147.156789][ T6447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.227620][ T6450] erspan0: entered allmulticast mode [ 147.309339][ T6450] bond1: (slave erspan0): making interface the new active one [ 147.394139][ T6450] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 147.785901][ T6458] loop0: detected capacity change from 0 to 256 [ 147.959214][ T6458] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 148.337513][ T6464] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 148.588296][ T31] audit: type=1800 audit(1774470779.298:3): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.127" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 149.149279][ T6472] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 149.733158][ T5909] usb 34-1: device descriptor read/8, error -110 [ 150.223793][ T5909] usb usb34-port1: attempt power cycle [ 150.232276][ T6480] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 150.729060][ T6487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.872661][ T5909] usb usb34-port1: unable to enumerate USB device [ 151.493317][ T6495] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 154.088022][ T6511] loop2: detected capacity change from 0 to 256 [ 154.198573][ T6511] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 154.599463][ T6513] exFAT-fs (loop2): start_clu is invalid cluster(0x0) [ 154.609068][ T31] audit: type=1800 audit(1774470785.558:4): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.142" name="file1" dev="loop2" ino=1048612 res=0 errno=0 [ 157.768200][ T6541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.665081][ T6528] loop3: detected capacity change from 0 to 32768 [ 159.025669][ T6528] read_mapping_page failed! [ 159.030429][ T6528] ERROR: (device loop3): txCommit: [ 159.030429][ T6528] [ 159.708044][ T5822] ERROR: (device loop3): diFree: numfree > numinos [ 159.708044][ T5822] [ 160.172961][ T6559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.741696][ T6569] loop3: detected capacity change from 0 to 256 [ 161.235379][ T6569] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 161.708442][ T6571] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 162.067372][ T31] audit: type=1800 audit(1774470792.668:5): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.156" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 162.771860][ T6577] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 163.794493][ T791] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 164.060064][ T791] usb 1-1: Using ep0 maxpacket: 16 [ 164.115362][ T6594] erspan0: left allmulticast mode [ 164.251484][ T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.262267][ T791] usb 1-1: config 0 has no interfaces? [ 164.269452][ T6594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.289253][ T791] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 164.352711][ T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.399011][ T791] usb 1-1: config 0 descriptor?? [ 164.879848][ T6596] input: syz1 as /devices/virtual/input/input7 [ 166.155691][ T5909] usb 1-1: USB disconnect, device number 2 [ 166.808910][ T6619] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.171'. [ 168.501757][ T6628] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 168.508328][ T6628] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 168.532959][ T6628] vhci_hcd vhci_hcd.0: Device attached [ 168.777667][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.167'. [ 168.873003][ T6008] usb 42-1: SetAddress Request (2) to port 0 [ 168.887386][ T6008] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 170.381682][ T6644] fuse: Bad value for 'fd' [ 170.948066][ T6651] syzkaller0: entered promiscuous mode [ 170.987990][ T6651] syzkaller0: entered allmulticast mode [ 171.303406][ T6629] vhci_hcd: connection reset by peer [ 171.328386][ T63] vhci_hcd vhci_hcd.4: stop threads [ 171.335915][ T63] vhci_hcd vhci_hcd.4: release socket [ 171.381895][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 171.590996][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 172.132493][ T6668] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 173.645441][ T6682] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 173.995229][ T6008] usb 42-1: device descriptor read/8, error -110 [ 174.450623][ T6008] usb usb42-port1: attempt power cycle [ 174.853277][ T6691] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.190'. [ 175.133617][ T6008] usb usb42-port1: unable to enumerate USB device [ 175.518577][ T6693] loop5: detected capacity change from 0 to 4096 [ 177.977919][ T6696] loop1: detected capacity change from 0 to 32768 [ 179.232881][ T6707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.303288][ T6695] read_mapping_page failed! [ 179.307820][ T6695] ERROR: (device loop1): txCommit: [ 179.307820][ T6695] [ 179.412657][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.636513][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 179.656238][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.685670][ T30] usb 1-1: config 0 has no interfaces? [ 179.711885][ T30] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 179.772606][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.883339][ T30] usb 1-1: config 0 descriptor?? [ 179.915650][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.022933][ T5819] ERROR: (device loop1): diFree: numfree > numinos [ 180.022933][ T5819] [ 180.152790][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 180.175232][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.227282][ T5893] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.263433][ T6727] input: syz1 as /devices/virtual/input/input8 [ 180.340409][ T5893] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 180.368794][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.470185][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 180.507264][ T24] usb 1-1: USB disconnect, device number 3 [ 180.554702][ T6730] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 180.561232][ T6730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 180.617334][ T6730] vhci_hcd vhci_hcd.0: Device attached [ 180.645933][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.197'. [ 180.673072][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 180.681198][ T5893] usb 6-1: config 0 descriptor?? [ 180.692959][ T30] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 180.711802][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.736078][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.746845][ T30] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 180.771559][ T30] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.919118][ T30] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 180.938702][ T30] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 180.969709][ T30] usb 3-1: Manufacturer: syz [ 180.994845][ T6008] usb 42-1: SetAddress Request (6) to port 0 [ 180.999721][ T30] usb 3-1: config 0 descriptor?? [ 181.001174][ T6008] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 181.027847][ T24] usb 6-1: USB disconnect, device number 3 [ 181.442208][ T6746] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 182.100446][ T30] rc_core: IR keymap rc-hauppauge not found [ 182.111608][ T30] Registered IR keymap rc-empty [ 182.117173][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.175022][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.214216][ T30] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 182.268494][ T30] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 182.369773][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.441978][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.624718][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.796232][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.894824][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.972812][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.005000][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.082668][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.122673][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.252748][ T30] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 183.286010][ T30] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 183.316689][ T30] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 183.410334][ T30] usb 3-1: USB disconnect, device number 2 [ 184.685029][ T6731] vhci_hcd: connection reset by peer [ 184.696244][ T753] vhci_hcd vhci_hcd.4: stop threads [ 184.718779][ T753] vhci_hcd vhci_hcd.4: release socket [ 184.758146][ T753] vhci_hcd vhci_hcd.4: disconnect device [ 185.321476][ T6764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.813189][ T6768] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 186.803804][ T6008] usb 42-1: device descriptor read/8, error -110 [ 187.183004][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.212'. [ 187.363105][ T6008] usb usb42-port1: attempt power cycle [ 187.934062][ T6008] usb usb42-port1: unable to enumerate USB device [ 189.368829][ T6793] loop1: detected capacity change from 0 to 32768 [ 189.416773][ T6793] read_mapping_page failed! [ 189.421292][ T6793] ERROR: (device loop1): txCommit: [ 189.421292][ T6793] [ 189.471184][ T5819] ERROR: (device loop1): diFree: numfree > numinos [ 189.471184][ T5819] [ 189.922694][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 190.133519][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 190.365399][ T5909] usb 2-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 191.026548][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.039400][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.049322][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.059213][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.074546][ T5909] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.083964][ T5909] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.091950][ T5909] usb 2-1: Manufacturer: syz [ 191.252064][ T5909] usb 2-1: config 0 descriptor?? [ 191.742600][ T5909] rc_core: IR keymap rc-hauppauge not found [ 191.750871][ T5909] Registered IR keymap rc-empty [ 191.775301][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.387178][ T6807] 9p: Bad value for 'wfdno' [ 192.394955][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.446073][ T5909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 192.501142][ T5909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 192.578430][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.624213][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.672775][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.795054][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.874893][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.961145][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 193.044807][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 193.082950][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 193.313595][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 193.643461][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.650009][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.113973][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 194.199750][ T5909] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 194.227976][ T5909] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 194.277532][ T5909] usb 2-1: USB disconnect, device number 2 [ 195.003462][ T6839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.257531][ T6849] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 195.264078][ T6849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 195.507962][ T6849] vhci_hcd vhci_hcd.0: Device attached [ 195.537425][ T6849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.221'. [ 195.556440][ T6853] loop0: detected capacity change from 0 to 256 [ 195.693466][ T6853] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 195.780260][ T6853] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 195.806639][ T6008] usb 44-1: SetAddress Request (2) to port 0 [ 195.813713][ T31] audit: type=1800 audit(1774470826.738:6): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.233" name="file1" dev="loop0" ino=1048614 res=0 errno=0 [ 195.835520][ T6008] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 196.698614][ T6863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.202000][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 197.216359][ T6865] bond0: entered promiscuous mode [ 197.221375][ T6865] bond_slave_0: entered promiscuous mode [ 197.227170][ T6865] bond_slave_1: entered promiscuous mode [ 197.234497][ T6865] gretap0: entered promiscuous mode [ 197.240847][ T6865] hsr1: entered promiscuous mode [ 198.679087][ T6850] vhci_hcd: connection reset by peer [ 198.687116][ T83] vhci_hcd vhci_hcd.5: stop threads [ 198.693991][ T83] vhci_hcd vhci_hcd.5: release socket [ 198.725029][ T83] vhci_hcd vhci_hcd.5: disconnect device [ 198.742635][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 198.949495][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 199.005805][ T5893] usb 2-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 199.033143][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.078530][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.123158][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.166939][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.203361][ T5893] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 199.217434][ T5893] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.427198][ T5893] usb 2-1: Manufacturer: syz [ 199.451861][ T5893] usb 2-1: config 0 descriptor?? [ 199.682745][ T5909] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 200.372674][ T5893] rc_core: IR keymap rc-hauppauge not found [ 200.383245][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 200.384975][ T5893] Registered IR keymap rc-empty [ 200.410768][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.428930][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.820401][ T5909] usb 5-1: config 0 has no interfaces? [ 200.826234][ T6885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.854923][ T5909] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 200.868859][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.890607][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.904246][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 200.930652][ T5909] usb 5-1: config 0 descriptor?? [ 200.935952][ T6008] usb 44-1: device descriptor read/8, error -110 [ 201.023426][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 201.295246][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.403482][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.432696][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.456681][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.498901][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.514067][ T6008] usb usb44-port1: attempt power cycle [ 201.523891][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.557250][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.624527][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.673302][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.722649][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.737677][ T6900] loop1: detected capacity change from 0 to 256 [ 201.788648][ T6900] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 201.801104][ T5893] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 201.844636][ T5893] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 201.860262][ T6900] exFAT-fs (loop1): start_clu is invalid cluster(0x0) [ 201.891379][ T31] audit: type=1800 audit(1774470832.828:7): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.246" name="file1" dev="loop1" ino=1048615 res=0 errno=0 [ 202.089227][ T6904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.164149][ T6008] usb usb44-port1: unable to enumerate USB device [ 202.181134][ T5893] usb 2-1: USB disconnect, device number 3 [ 202.370824][ T5926] usb 5-1: USB disconnect, device number 2 [ 202.467382][ T6910] loop1: detected capacity change from 0 to 256 [ 202.541601][ T6910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 202.958859][ T6916] exFAT-fs (loop1): start_clu is invalid cluster(0x0) [ 202.990327][ T31] audit: type=1800 audit(1774470833.918:8): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.248" name="file1" dev="loop1" ino=1048616 res=0 errno=0 [ 203.981015][ T5824] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 204.322862][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 204.485263][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.584651][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.290344][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.365383][ T5824] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 205.402584][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.525764][ T5824] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 205.586567][ T5824] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 205.625395][ T5824] usb 1-1: Manufacturer: syz [ 205.727450][ T5824] usb 1-1: config 0 descriptor?? [ 205.959072][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 205.965261][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 205.971397][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 205.977620][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 205.991112][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 205.997866][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 206.575823][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 206.772783][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 207.402580][ T5824] rc_core: IR keymap rc-hauppauge not found [ 207.408577][ T5824] Registered IR keymap rc-empty [ 208.035328][ T5893] usb 6-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 208.578985][ T6948] loop0: detected capacity change from 0 to 32768 [ 208.675459][ T6948] read_mapping_page failed! [ 208.680051][ T6948] ERROR: (device loop0): txCommit: [ 208.680051][ T6948] [ 208.908318][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.921809][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.973828][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.993942][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 209.012654][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.032575][ T5893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.042225][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.058433][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 209.105420][ T5820] ERROR: (device loop0): diFree: numfree > numinos [ 209.105420][ T5820] [ 209.117525][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.145171][ T5893] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.158599][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.194815][ T5893] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.222712][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.232577][ T5893] usb 6-1: Manufacturer: syz [ 209.262658][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.305323][ T5893] usb 6-1: config 0 descriptor?? [ 209.342664][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.351897][ T5893] usb 6-1: can't set config #0, error -71 [ 209.384302][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.433409][ T5893] usb 6-1: USB disconnect, device number 4 [ 209.456751][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.672728][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.702658][ T6969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.742720][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.783336][ T5824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.828393][ T5824] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 210.025952][ T5824] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.059074][ T5824] usb 1-1: USB disconnect, device number 4 [ 214.577339][ T7015] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 214.639478][ T7012] loop5: detected capacity change from 0 to 8 [ 215.243696][ T7012] SQUASHFS error: xz decompression failed, data probably corrupt [ 215.251559][ T7012] SQUASHFS error: Failed to read block 0x108: -5 [ 216.028722][ T7012] SQUASHFS error: Unable to read metadata cache entry [106] [ 216.112447][ T7012] SQUASHFS error: Unable to read inode 0x11f [ 216.256362][ T7012] cgroup: none used incorrectly [ 216.285606][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.279'. [ 216.376835][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.279'. [ 217.089411][ T6008] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 217.284343][ T6008] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 217.312636][ T6008] usb 6-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 217.342839][ T6008] usb 6-1: config 0 has no interface number 0 [ 217.545817][ T6008] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.723651][ T7028] bridge1: entered promiscuous mode [ 217.728941][ T7028] bridge1: entered allmulticast mode [ 218.348143][ T6008] usb 6-1: string descriptor 0 read error: -71 [ 218.392758][ T6008] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 218.401792][ T6008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.523966][ T6008] usb 6-1: config 0 descriptor?? [ 218.590471][ T6008] usb 6-1: can't set config #0, error -71 [ 218.627422][ T6008] usb 6-1: USB disconnect, device number 5 [ 221.482047][ T7063] fuse: Bad value for 'fd' [ 221.728580][ T7068] loop1: detected capacity change from 0 to 8 [ 221.780620][ T7068] SQUASHFS error: xz decompression failed, data probably corrupt [ 221.800092][ T7068] SQUASHFS error: Failed to read block 0x108: -5 [ 222.044468][ T7068] SQUASHFS error: Unable to read metadata cache entry [106] [ 222.872581][ T7068] SQUASHFS error: Unable to read inode 0x11f [ 222.953365][ T7068] cgroup: none used incorrectly [ 222.981155][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 223.053052][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 223.282722][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 223.372656][ T791] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 223.466333][ T5893] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 223.484849][ T5893] usb 2-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 223.557188][ T5893] usb 2-1: config 0 has no interface number 0 [ 223.598251][ T5893] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.614201][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 223.634308][ T791] usb 3-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 223.680524][ T5893] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 223.699904][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.740290][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.761292][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.799687][ T5893] usb 2-1: Product: syz [ 223.806642][ T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 223.842785][ T5893] usb 2-1: Manufacturer: syz [ 223.873266][ T5893] usb 2-1: SerialNumber: syz [ 223.882584][ T791] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.938856][ T791] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.094494][ T791] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.095099][ T5893] usb 2-1: config 0 descriptor?? [ 224.172479][ T791] usb 3-1: Manufacturer: syz [ 224.550972][ T791] usb 3-1: config 0 descriptor?? [ 224.580994][ T5926] usb 2-1: USB disconnect, device number 4 [ 225.015516][ T791] rc_core: IR keymap rc-hauppauge not found [ 225.031345][ T791] Registered IR keymap rc-empty [ 225.047361][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.114492][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.164776][ T791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 225.190719][ T791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 225.482758][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.526861][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.573087][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.606384][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.657316][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.702963][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.764672][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.843017][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.022639][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.082657][ T791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.144786][ T791] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.198980][ T791] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.284822][ T791] usb 3-1: USB disconnect, device number 3 [ 226.383326][ T7117] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 229.733549][ T7144] loop5: detected capacity change from 0 to 8 [ 229.756045][ T7144] SQUASHFS error: xz decompression failed, data probably corrupt [ 229.862610][ T7144] SQUASHFS error: Failed to read block 0x108: -5 [ 229.888882][ T7144] SQUASHFS error: Unable to read metadata cache entry [106] [ 229.952599][ T7144] SQUASHFS error: Unable to read inode 0x11f [ 230.059738][ T7143] cgroup: none used incorrectly [ 230.133995][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.322'. [ 230.235313][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.322'. [ 230.477524][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 230.656594][ T5893] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 230.744222][ T5893] usb 6-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 230.781844][ T5893] usb 6-1: config 0 has no interface number 0 [ 230.805707][ T5893] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.881142][ T5893] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 230.891233][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.895438][ T7148] fuse: Bad value for 'fd' [ 231.116446][ T5893] usb 6-1: Product: syz [ 231.120641][ T5893] usb 6-1: Manufacturer: syz [ 231.222155][ T5893] usb 6-1: SerialNumber: syz [ 231.665920][ T5893] usb 6-1: config 0 descriptor?? [ 231.877613][ T6008] usb 6-1: USB disconnect, device number 6 [ 232.228511][ T7161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.282847][ T7164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.327'. [ 237.183097][ T7188] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 237.189636][ T7188] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 237.248942][ T7188] vhci_hcd vhci_hcd.0: Device attached [ 237.276971][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 237.684585][ T791] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 237.703633][ T6008] usb 34-1: SetAddress Request (6) to port 0 [ 237.714660][ T6008] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 237.904304][ T791] usb 4-1: Using ep0 maxpacket: 32 [ 237.937723][ T791] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 237.962667][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.027119][ T791] usb 4-1: config 0 descriptor?? [ 238.100405][ T791] as10x_usb: device has been detected [ 238.122805][ T791] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 238.249161][ T7195] ------------[ cut here ]------------ [ 238.254704][ T7195] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 238.254720][ T7195] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#1: syz.3.335/7195 [ 238.270520][ T7195] Modules linked in: [ 238.274450][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.3.335 Not tainted syzkaller #0 PREEMPT(full) [ 238.283686][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.293937][ T7195] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 238.299458][ T7195] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 a1 61 04 00 75 13 48 8d 3d 1c b7 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 238.319127][ T7195] RSP: 0018:ffffc900025efa20 EFLAGS: 00010246 [ 238.325787][ T7195] RAX: 0000000000000000 RBX: 1ffff920004bdf5c RCX: 0000000000080000 [ 238.333796][ T7195] RDX: ffffc90005bf3000 RSI: ffffffff8bcce0c0 RDI: ffffffff9014fc10 [ 238.342329][ T7195] RBP: ffffc900025efbd8 R08: ffffffff9011e6c3 R09: 1ffffffff2023cd8 [ 238.350745][ T7195] R10: dffffc0000000000 R11: fffffbfff2023cd9 R12: ffff888024c3eb60 [ 238.358754][ T7195] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.366767][ T7195] FS: 00007f9d557f66c0(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 238.376092][ T7195] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.382816][ T7195] CR2: 0000001b30a1eff8 CR3: 000000002a5e2000 CR4: 0000000000350ef0 [ 238.390784][ T7195] Call Trace: [ 238.394072][ T7195] [ 238.396992][ T7195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.402669][ T7195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.408301][ T7195] ? __mutex_lock+0x319/0x1300 [ 238.413097][ T7195] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 238.418732][ T7195] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 238.425179][ T7195] ? __pfx___mutex_lock+0x10/0x10 [ 238.430209][ T7195] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 238.435894][ T7195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.442429][ T7195] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.447887][ T7195] as102_dvb_dmx_start_feed+0x70/0x290 [ 238.453384][ T7195] dmx_section_feed_start_filtering+0x518/0x6c0 [ 238.459625][ T7195] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 238.465211][ T7195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.470850][ T7195] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 238.476350][ T7195] dvb_demux_do_ioctl+0x470/0x540 [ 238.481386][ T7195] dvb_usercopy+0x199/0x2e0 [ 238.485919][ T7195] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 238.491469][ T7195] ? __pfx_dvb_usercopy+0x10/0x10 [ 238.496614][ T7195] ? __fget_files+0x3a0/0x420 [ 238.501288][ T7195] ? __fget_files+0x2a/0x420 [ 238.505891][ T7195] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 238.511164][ T7195] dvb_demux_ioctl+0x29/0x40 [ 238.515776][ T7195] __se_sys_ioctl+0xfc/0x170 [ 238.520356][ T7195] do_syscall_64+0x14d/0xf80 [ 238.524975][ T7195] ? trace_irq_disable+0x3b/0x150 [ 238.529991][ T7195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.536091][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.542797][ T7195] RIP: 0033:0x7f9d5759c799 [ 238.547199][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.566990][ T7195] RSP: 002b:00007f9d557f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.575420][ T7195] RAX: ffffffffffffffda RBX: 00007f9d57815fa0 RCX: 00007f9d5759c799 [ 238.583417][ T7195] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 238.591367][ T7195] RBP: 00007f9d57632c99 R08: 0000000000000000 R09: 0000000000000000 [ 238.599338][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.607306][ T7195] R13: 00007f9d57816038 R14: 00007f9d57815fa0 R15: 00007ffcad8f5208 [ 238.615933][ T7195] [ 238.618935][ T7195] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.626190][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.3.335 Not tainted syzkaller #0 PREEMPT(full) [ 238.635359][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.645567][ T7195] Call Trace: [ 238.648822][ T7195] [ 238.651727][ T7195] vpanic+0x56c/0xa60 [ 238.655701][ T7195] ? __pfx__printk+0x10/0x10 [ 238.660288][ T7195] ? __pfx_vpanic+0x10/0x10 [ 238.664785][ T7195] ? is_bpf_text_address+0x292/0x2b0 [ 238.670053][ T7195] ? is_bpf_text_address+0x26/0x2b0 [ 238.675234][ T7195] panic+0xc5/0xd0 [ 238.678953][ T7195] ? __pfx_panic+0x10/0x10 [ 238.683360][ T7195] __warn+0x315/0x4f0 [ 238.687330][ T7195] ? __mutex_lock+0x10a4/0x1300 [ 238.692174][ T7195] ? __mutex_lock+0x10a4/0x1300 [ 238.697023][ T7195] __report_bug+0x29a/0x540 [ 238.701506][ T7195] ? rcu_is_watching+0x15/0xb0 [ 238.706258][ T7195] ? __mutex_lock+0x10a4/0x1300 [ 238.711113][ T7195] ? __pfx___report_bug+0x10/0x10 [ 238.716124][ T7195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.721737][ T7195] ? __lock_acquire+0x6b5/0x2cf0 [ 238.726683][ T7195] report_bug_entry+0x19a/0x290 [ 238.731514][ T7195] ? __mutex_lock+0x10ab/0x1300 [ 238.736356][ T7195] ? __mutex_lock+0x10b0/0x1300 [ 238.741191][ T7195] handle_bug+0xce/0x200 [ 238.745421][ T7195] exc_invalid_op+0x1a/0x50 [ 238.749912][ T7195] asm_exc_invalid_op+0x1a/0x20 [ 238.754745][ T7195] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 238.760187][ T7195] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 a1 61 04 00 75 13 48 8d 3d 1c b7 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 238.779769][ T7195] RSP: 0018:ffffc900025efa20 EFLAGS: 00010246 [ 238.785819][ T7195] RAX: 0000000000000000 RBX: 1ffff920004bdf5c RCX: 0000000000080000 [ 238.793766][ T7195] RDX: ffffc90005bf3000 RSI: ffffffff8bcce0c0 RDI: ffffffff9014fc10 [ 238.801715][ T7195] RBP: ffffc900025efbd8 R08: ffffffff9011e6c3 R09: 1ffffffff2023cd8 [ 238.809663][ T7195] R10: dffffc0000000000 R11: fffffbfff2023cd9 R12: ffff888024c3eb60 [ 238.817612][ T7195] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.825570][ T7195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.831192][ T7195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.836804][ T7195] ? __mutex_lock+0x319/0x1300 [ 238.841553][ T7195] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 238.847166][ T7195] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 238.853563][ T7195] ? __pfx___mutex_lock+0x10/0x10 [ 238.858572][ T7195] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 238.864190][ T7195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.870153][ T7195] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.875161][ T7195] as102_dvb_dmx_start_feed+0x70/0x290 [ 238.880607][ T7195] dmx_section_feed_start_filtering+0x518/0x6c0 [ 238.886829][ T7195] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 238.892366][ T7195] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.897979][ T7195] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 238.903428][ T7195] dvb_demux_do_ioctl+0x470/0x540 [ 238.908442][ T7195] dvb_usercopy+0x199/0x2e0 [ 238.912928][ T7195] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 238.918462][ T7195] ? __pfx_dvb_usercopy+0x10/0x10 [ 238.923475][ T7195] ? __fget_files+0x3a0/0x420 [ 238.928141][ T7195] ? __fget_files+0x2a/0x420 [ 238.932718][ T7195] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 238.937987][ T7195] dvb_demux_ioctl+0x29/0x40 [ 238.942564][ T7195] __se_sys_ioctl+0xfc/0x170 [ 238.947140][ T7195] do_syscall_64+0x14d/0xf80 [ 238.951713][ T7195] ? trace_irq_disable+0x3b/0x150 [ 238.956746][ T7195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.962798][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.968668][ T7195] RIP: 0033:0x7f9d5759c799 [ 238.973061][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.992645][ T7195] RSP: 002b:00007f9d557f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.001038][ T7195] RAX: ffffffffffffffda RBX: 00007f9d57815fa0 RCX: 00007f9d5759c799 [ 239.008989][ T7195] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 239.016939][ T7195] RBP: 00007f9d57632c99 R08: 0000000000000000 R09: 0000000000000000 [ 239.024895][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.032856][ T7195] R13: 00007f9d57816038 R14: 00007f9d57815fa0 R15: 00007ffcad8f5208 [ 239.040816][ T7195] [ 239.044168][ T7195] Kernel Offset: disabled [ 239.048477][ T7195] Rebooting in 86400 seconds..