last executing test programs: 19m14.921492868s ago: executing program 1 (id=533): openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x210c80, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004500)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00'], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0xe) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) syz_pidfd_open(r0, 0x0) 19m12.055629602s ago: executing program 1 (id=538): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x108, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0x0, 0x9, 0x9, 0x2, 0xfffffffd, 0x7}}, {0x4}}, {{0x1c, 0x1, {0xf, 0x0, 0xa, 0x9, 0x0, 0x10, 0xd, 0x2}}, {0x8, 0x2, [0x3, 0x0]}}, {{0x1c, 0x1, {0xf, 0xfe, 0xff80, 0x6, 0x0, 0x9, 0x3, 0x5}}, {0xe, 0x2, [0x0, 0x3, 0x3, 0x81, 0x5]}}, {{0x1c, 0x1, {0x0, 0xe, 0x0, 0x8001, 0x3, 0x9, 0x3, 0x5}}, {0xe, 0x2, [0x2, 0x0, 0x0, 0xfff8, 0x1]}}]}]}, 0x108}}, 0x0) 19m10.884959386s ago: executing program 1 (id=541): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x1a, 0x2000051b) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x844) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80) dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 19m10.394408132s ago: executing program 1 (id=543): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x7fffffff, 0x5}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001014000028bd7000fbdbdf255e50b804ba8aa304e6e97f0800"], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x4}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000029"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x13}, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) socket$kcm(0x11, 0x2, 0x300) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) 19m6.731520175s ago: executing program 1 (id=550): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x274) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 19m4.819024459s ago: executing program 1 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x3a}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)='\a', 0x1}], 0x1}, 0x200480d4) 18m49.381177413s ago: executing program 32 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x3a}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)='\a', 0x1}], 0x1}, 0x200480d4) 6m11.158315888s ago: executing program 0 (id=3411): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f", 0xb3}], 0x3, 0x0, 0x0, 0x4000000}], 0x1, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m10.95702252s ago: executing program 0 (id=3413): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair(0x3a, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30008010) 6m5.224571427s ago: executing program 0 (id=3426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f00000002c0), 0x400, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r7 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f0000000440)="64e99d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000003c0)={0x1, 0x9, 0x91, &(0x7f0000000300)=""/145}) syz_open_dev$usbmon(&(0x7f0000000740), 0x0, 0x20402) close_range(r0, 0xffffffffffffffff, 0x0) 6m4.91813557s ago: executing program 0 (id=3429): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m4.833769112s ago: executing program 0 (id=3431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5e81", 0x2}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100"], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x0, 0x0) 6m3.646846115s ago: executing program 0 (id=3434): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair(0x3a, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30008010) 5m46.826730601s ago: executing program 33 (id=3434): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair(0x3a, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30008010) 15.625773638s ago: executing program 3 (id=4668): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815bf2bfe6823e664dc7", 0x89}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec", 0x4a}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac141432"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.440379103s ago: executing program 3 (id=4671): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f1", 0x37}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca6", 0x80}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff1", 0x78}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.833467941s ago: executing program 2 (id=4672): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b", 0x7a}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6", 0x9}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.598831353s ago: executing program 3 (id=4675): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997", 0x3e}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.080712379s ago: executing program 2 (id=4677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 10.116901612s ago: executing program 3 (id=4681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x80000000, 0x0, 0x14, "1b10b9ad00"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xd, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "b9ba"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x4, &(0x7f0000000000)='BBBB') r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40885}, 0x4010010) 9.786810406s ago: executing program 4 (id=4683): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f1", 0x37}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca6", 0x80}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff1", 0x78}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.930207346s ago: executing program 2 (id=4685): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b", 0x7a}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9", 0x5d}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6", 0x9}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.746919268s ago: executing program 4 (id=4686): openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) ftruncate(r3, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000201005) 8.054744526s ago: executing program 2 (id=4687): syz_open_dev$sndpcmc(0x0, 0x1, 0x800) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff9fff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00'}) 7.751131549s ago: executing program 5 (id=4688): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x8040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r0, 0x81000000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304974) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000000701010000000000000000030000050900010073797a3000000000050003002f000000df7c2e2bb087491b59eff764d90fd43b42bd32d295958281877fa8b146fbb56c1b55c0805962568c947c6844f25280572d3e"], 0x28}, 0x1, 0x0, 0x0, 0x50800}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500130008000000050005"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64], 0x1, 0x5f0, &(0x7f0000000c80)="$eJzs3UFvHGcZB/D/rB3HDlLquEkbUCWsIlUIi2RtSyTlApSCLFShShw4W8RJrGzSyt4itwcIiEPFqR+hCPkLII5FyoH2wAFOPRv1iMTdt0UzO7teO4uxnSW7aX4/afZ9Zt6dd595dnY8MytrAzy31pYy/ShF1pbe2inn93ZXW3u7q/d7cZLzSRrJbJKiXPznJF8kD9Od8tVex0D7mM8/mb3z2UefftidK8eaLaa7zy+OW+9k+rnMd3Ot2lGNt/Lk4x3awoUki088HoxAp+efg0tnesETfi4BgElWJFPDls8nF+oT9vI6oHtW3D3HfqY9HHcCAAAA8BS8sJ/97OTiuPMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ0n9+/9FPTV68WKK3u//z9TLUsfPtEfjTgAAAAAAAAAARuDr+9nPTi725jtF9Z3/q9XM5erxK3kv29nIVq5lJ+tpp52tLCeZHxhoZme93d5aPsGaK0PXXHk62wsAAAAAAAAAX1K/zdrB9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJimSq21TT5V48n8Z0ktkkM+XzHib/6MXPskfjTgAAAACeghf2s5+dXOzNd4rqmv+l6rp/Nu/lQdrZTDutbORWdS+ge9Xf2Ntdbe3trt4vp8fH/cG/T5VGNWK69x6Gv/LV6hlzuZ3Nasm1/CLvpJVbaVRrlq728hme12/KnIrv1U6Y2a26Lbf8J3U7GearipzrV6RZ51ZW49LxlTjlu3P0lZbT6N/5uXyKmp/0btGFui23582JrvnKwN730vGVSBZ+/vsbd1sP7t29vb00OZt0RkcrsTpQiZefq0o0q0pc6c+v5cf5WZaymLezlc38MutpZyOLebOK1uv9uXycP75S3z809/b/ymSmfl+6R9HT5fRqte7FbOaneSe3ynd0qpkbuZGVfCevp3noHb4yNO9fd+ru/U6nk8bpjrTf+GYdnEvyo7qdDGVdLw3UdfCYO1/1DS45qNLC6P8eTX+tDsq9542JOzZeOvJXoleJF4+vxB+qHWe79eDe1t31d0/4eq/VbVmBH/YrMV0v7UyNZKPOpNxfFvq5HN47yr4Xh/YtV32X+32Nx/qu9PuOfFJz9JM6U5/DPT7SStX38tC+7npXB/qGnW8BMPEufOvCzNy/5v4+9/Hc7+buzr01+8b5m+dfmcm5v5777nRz6rXGK8Wf8nF+dXD9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnN32+x/cW2+1NrbOHPR+iehJxxEIBJMTjPvIBPy/XW/ff/f69vsffHvz/vqdjTsbD15v3ry5vLx8o3n99mZro34cd5YAwCgdnPSPOxMAAAAAAAAAAAAAAOC/eRr/TjzubQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7c1pYy/ShFlpvXmuX83u5qq5x68cEzZ5MUZfCXJF8kD9OdMl91Tx//Op9/Mnvns48+/fBgrHJK8beVUWzFoVwa/ZxGM97KwHh/PNNwRa90WUyyULcwdv8JAAD//6dHBpI=") rename(0x0, 0x0) 2.56020848s ago: executing program 5 (id=4689): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997", 0x3e}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.54076891s ago: executing program 2 (id=4690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2.181099534s ago: executing program 4 (id=4691): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/160, &(0x7f0000000140)=0xa0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x8007b6, &(0x7f0000000080)={0x0, 0x6273, 0x1000, 0x3, 0x400000}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r1, 0xffffffffffffffff], &(0x7f0000000880)}, 0x94) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7e8}, 0x94) 1.434824363s ago: executing program 5 (id=4692): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29", 0x92}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6", 0x9}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.405491993s ago: executing program 4 (id=4693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x17d, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.219326546s ago: executing program 4 (id=4694): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f1", 0x37}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca6", 0x80}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff1", 0x78}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.180521196s ago: executing program 3 (id=4695): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b", 0x7a}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9", 0x5d}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6", 0x9}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 938.754879ms ago: executing program 5 (id=4696): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000280)={'s526\x00', [0x100, 0x5, 0x2, 0xe, 0xe, 0x7, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfbfffffb, 0x9, 0x3, 0x7ffffffd, 0x89, 0xca9f, 0x200000, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000025140)={0x4000000, 0x29, 0x0, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) r4 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpgrp(r2) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000180)) 938.360759ms ago: executing program 2 (id=4697): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) 797.02775ms ago: executing program 4 (id=4698): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x8040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r0, 0x81000000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304974) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000000701010000000000000000030000050900010073797a3000000000050003002f000000df7c2e2bb087491b59eff764d90fd43b42bd32d295958281877fa8b146fbb56c1b55c0805962568c947c6844f25280572d3e"], 0x28}, 0x1, 0x0, 0x0, 0x50800}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500130008000000050005"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64], 0x1, 0x5f0, &(0x7f0000000c80)="$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") rename(0x0, 0x0) 590.823223ms ago: executing program 5 (id=4699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000380)={0x0, 0xfb, 0xf0, 0x1, 0x6e, "4cc419f27688d35659cbdbd10afd533e", "997529e56db62c7c684fdc81d724b3ded50c2c32532882cde58cf796dcb249fc2f46a468150f7e5df6ce3777069b211e5fa61948330334e8c60a2dfa0615143a3f711ab8b3d50c3f627f2bd79d30592c0c0fd66e1799376156e5a9bf1f5fa4ec089885b1e0dc7e202b9a5d35870c76dd396d8daa178a9139b664eb575bd0f5c2b7108043cc6e3c6a9dbe4dcd6023e30b8fa4c93dbb10fa5055c97dd070d6af72e28b5ce04588ceb4ae3e4d9f0c3e53a867337cb48ae47930be81a5f1762daaa8cafc0c227b3da3976aebc44dcc000d1325cb46f0077068e80919a4"}, 0xf0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="209effffffffaaaaaaaaaabb88a822008100430086dd"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x7, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) membarrier(0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f", 0xdd}, {&(0x7f0000000e40)="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", 0x18b}, {&(0x7f0000000cc0)}, {&(0x7f00000004c0)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9ea0cd4db9af5e29736a345d6b40ed83", 0x9f}], 0x5}, 0x800) 526.713314ms ago: executing program 3 (id=4700): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb", 0x5d}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 5 (id=4701): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/160, &(0x7f0000000140)=0xa0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x8007b6, &(0x7f0000000080)={0x0, 0x6273, 0x1000, 0x3, 0x400000}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r1, 0xffffffffffffffff], &(0x7f0000000880)}, 0x94) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7e8}, 0x94) kernel console output (not intermixed with test programs): ore [ 395.008410][ T8645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 396.271700][ T8656] loop3: detected capacity change from 0 to 1024 [ 404.418093][ T8728] syz.4.743 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 405.794690][ T8740] loop2: detected capacity change from 0 to 1024 [ 408.042128][ T8738] loop0: detected capacity change from 0 to 32768 [ 408.104167][ T8738] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 408.741344][ T8738] XFS (loop0): Ending clean mount [ 408.775704][ T8738] XFS (loop0): Quotacheck needed: Please wait. [ 408.989780][ T8738] XFS (loop0): Quotacheck: Done. [ 409.091138][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.923134][ T8777] loop3: detected capacity change from 0 to 1024 [ 413.997519][ T8805] loop3: detected capacity change from 0 to 64 [ 415.388100][ T8815] loop3: detected capacity change from 0 to 1024 [ 419.706196][ T8822] loop3: detected capacity change from 0 to 32768 [ 419.817919][ T8822] UFO tlock:0xffffc9000284a0d8 [ 419.841448][ T8822] MetaData crosses page boundary!! [ 419.854020][ T8822] lblock = 6300000010, size = -820051968 [ 419.874445][ T8822] CPU: 0 PID: 8822 Comm: syz.3.770 Not tainted syzkaller #0 [ 419.881844][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 419.892043][ T8822] Call Trace: [ 419.895373][ T8822] [ 419.898348][ T8822] dump_stack_lvl+0x18c/0x250 [ 419.903090][ T8822] ? show_regs_print_info+0x20/0x20 [ 419.908346][ T8822] ? load_image+0x420/0x420 [ 419.912901][ T8822] ? folio_unlock+0x118/0x2e0 [ 419.917635][ T8822] __get_metapage+0xaac/0xfa0 [ 419.922369][ T8822] dtSearch+0x591/0x21b0 [ 419.926695][ T8822] jfs_lookup+0x1b1/0x420 [ 419.931075][ T8822] ? jfs_get_parent+0xb0/0xb0 [ 419.935944][ T8822] ? d_alloc_parallel+0x13f6/0x1530 [ 419.941293][ T8822] ? lockdep_softirqs_off+0x430/0x430 [ 419.946713][ T8822] ? d_hash_and_lookup+0x1b0/0x1b0 [ 419.951884][ T8822] ? __init_waitqueue_head+0xa9/0x150 [ 419.957305][ T8822] __lookup_slow+0x2a1/0x400 [ 419.962215][ T8822] ? lookup_one_len+0x2e0/0x2e0 [ 419.967217][ T8822] ? try_to_unlazy+0x34c/0x5a0 [ 419.972037][ T8822] ? down_read+0x1ac/0x2e0 [ 419.976586][ T8822] lookup_slow+0x53/0x70 [ 419.980873][ T8822] link_path_walk+0x990/0xe30 [ 419.985613][ T8822] ? handle_lookup_down+0x130/0x130 [ 419.990891][ T8822] __filename_parentat+0x22a/0x650 [ 419.996145][ T8822] ? verify_lock_unused+0x140/0x140 [ 420.001402][ T8822] ? vfs_path_parent_lookup+0x50/0x50 [ 420.006842][ T8822] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.013175][ T8822] filename_create+0xd9/0x480 [ 420.018004][ T8822] ? kern_path_create+0x50/0x50 [ 420.023089][ T8822] ? __virt_addr_valid+0x18c/0x540 [ 420.028347][ T8822] ? __virt_addr_valid+0x469/0x540 [ 420.033543][ T8822] do_mkdirat+0xa9/0x450 [ 420.037854][ T8822] ? vfs_mkdir+0x440/0x440 [ 420.042438][ T8822] __x64_sys_mkdirat+0x89/0xa0 [ 420.047259][ T8822] do_syscall_64+0x55/0xa0 [ 420.051846][ T8822] ? clear_bhb_loop+0x40/0x90 [ 420.056751][ T8822] ? clear_bhb_loop+0x40/0x90 [ 420.061486][ T8822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.067516][ T8822] RIP: 0033:0x7fccc919bc47 [ 420.072236][ T8822] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.092076][ T8822] RSP: 002b:00007fccca08be58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 420.100553][ T8822] RAX: ffffffffffffffda RBX: 00007fccca08bee0 RCX: 00007fccc919bc47 [ 420.108670][ T8822] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 420.116887][ T8822] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000 [ 420.124919][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 420.133207][ T8822] R13: 00007fccca08bea0 R14: 0000000000000000 R15: 0000000000000000 [ 420.141525][ T8822] [ 420.189334][ T8822] bread failed! [ 420.192907][ T8822] jfs_lookup: dtSearch returned -5 [ 423.773878][ T8870] loop3: detected capacity change from 0 to 1024 [ 429.958212][ T8909] loop0: detected capacity change from 0 to 1024 [ 437.067521][ T8957] loop2: detected capacity change from 0 to 2 [ 437.075804][ T8957] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 437.446056][ T7886] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 440.420672][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.427121][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.785689][ T8989] loop2: detected capacity change from 0 to 64 [ 443.555873][ T9012] loop2: detected capacity change from 0 to 1024 [ 445.428774][ T9017] sctp: failed to load transform for md5: -2 [ 453.678507][ T9082] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 455.389163][ T28] audit: type=1800 audit(1778315714.675:16): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.848" name="file0" dev="overlay" ino=1268 res=0 errno=0 [ 463.888917][ T28] audit: type=1800 audit(1778315723.215:17): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.874" name="file0" dev="overlay" ino=1153 res=0 errno=0 [ 463.974997][ T9180] capability: warning: `syz.4.873' uses 32-bit capabilities (legacy support in use) [ 466.100282][ T9200] process 'syz.4.880' launched './file0' with NULL argv: empty string added [ 467.272900][ T9211] loop3: detected capacity change from 0 to 1024 [ 474.119673][ T8917] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 474.460120][ T8917] usb 4-1: Using ep0 maxpacket: 16 [ 476.298287][ T8917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.328952][ T8917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.355023][ T8917] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 476.364409][ T8917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.415507][ T8917] usb 4-1: config 0 descriptor?? [ 477.082780][ T8917] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 478.091298][ T8917] usb 4-1: USB disconnect, device number 11 [ 481.737774][ T9316] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 490.863905][ T9380] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 493.399160][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 493.440734][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 493.765054][ T9416] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 495.483655][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.957'. [ 498.930277][ T9451] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 501.471815][ T9492] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 501.935295][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.942401][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.395755][ T9539] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 511.556483][ T8917] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 512.627279][ T8917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.646620][ T8917] usb 4-1: config 250 has an invalid interface number: 106 but max is 0 [ 512.655761][ T8917] usb 4-1: config 250 has no interface number 0 [ 512.666893][ T8917] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=45.98 [ 512.676540][ T8917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.699257][ T8917] usb 4-1: Product: syz [ 512.703715][ T8917] usb 4-1: Manufacturer: syz [ 512.714599][ T8917] usb 4-1: SerialNumber: syz [ 512.973136][ T8917] usb 4-1: USB disconnect, device number 12 [ 532.965784][ T9816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1099'. [ 535.226982][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'. [ 540.441969][ T9895] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 563.565203][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.571930][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.205583][T10075] pimreg: left allmulticast mode [ 578.406848][T10218] syz.4.1228 uses obsolete (PF_INET,SOCK_PACKET) [ 578.480159][T10135] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 579.313470][T10135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.341707][T10135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.392776][T10135] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 579.415855][T10135] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 579.434850][T10135] usb 4-1: Manufacturer: syz [ 579.450008][T10135] usb 4-1: config 0 descriptor?? [ 580.666393][T10135] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 580.876409][T10135] usb 4-1: USB disconnect, device number 13 [ 590.916053][T10375] 9pnet_fd: Insufficient options for proto=fd [ 600.939854][T10470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1325'. [ 603.335166][ T49] Bluetooth: (null): Invalid header checksum [ 603.351472][ T49] Bluetooth: (null): Invalid header checksum [ 608.684671][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1336'. [ 610.473326][T10535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.909695][ T5158] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 611.172152][ T5158] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 611.200401][ T5158] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.232592][ T5158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 611.269300][ T5158] usb 4-1: config 0 has no interface number 0 [ 611.275517][ T5158] usb 4-1: config 0 interface 74 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 611.336623][ T5158] usb 4-1: config 0 interface 74 altsetting 0 has an invalid endpoint with address 0xFE, skipping [ 611.381752][ T5158] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 611.409539][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.417711][ T5158] usb 4-1: Product: syz [ 611.448116][ T5158] usb 4-1: Manufacturer: syz [ 611.489364][ T5158] usb 4-1: SerialNumber: syz [ 611.497083][ T5158] usb 4-1: config 0 descriptor?? [ 612.654131][ T5158] cypress_m8 4-1:0.74: HID->COM RS232 Adapter converter detected [ 612.678734][ T5158] cyphidcom ttyUSB0: required endpoint is missing [ 612.723206][ T5158] usb 4-1: USB disconnect, device number 14 [ 612.733718][ T5158] cypress_m8 4-1:0.74: device disconnected [ 612.980073][T10551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1352'. [ 621.067845][T10651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1390'. [ 621.637867][T10658] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1393'. [ 624.736237][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.742996][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.747747][ T7283] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 624.947982][ T7283] usb 4-1: Using ep0 maxpacket: 8 [ 624.963883][ T7283] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.984442][ T7283] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 624.999697][ T7283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.017713][ T7283] usb 4-1: Product: syz [ 625.024454][ T7283] usb 4-1: Manufacturer: syz [ 625.030363][ T7283] usb 4-1: SerialNumber: syz [ 625.042567][ T7283] usb 4-1: config 0 descriptor?? [ 625.324374][ T5823] usb 4-1: USB disconnect, device number 15 [ 627.839491][T10728] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1419'. [ 629.154356][T10728] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.355211][T10728] bridge_slave_0 (unregistering): left allmulticast mode [ 629.362708][T10728] bridge_slave_0 (unregistering): left promiscuous mode [ 629.370499][T10728] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.592259][T10840] syz_tun: entered allmulticast mode [ 641.639529][T10839] syz_tun: left allmulticast mode [ 643.375083][T10864] overlayfs: failed to clone upperpath [ 646.449098][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'. [ 647.092875][T10893] sctp: failed to load transform for md5: -2 [ 658.959299][T11079] sctp: [Deprecated]: syz.4.1548 (pid 11079) Use of int in max_burst socket option deprecated. [ 658.959299][T11079] Use struct sctp_assoc_value instead [ 666.696927][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'. [ 675.274237][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 683.008584][T11323] loop3: detected capacity change from 0 to 1024 [ 686.166711][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.173373][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 731.263924][T11843] ip6gre1: entered promiscuous mode [ 731.795771][T11847] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1832'. [ 743.346787][T11966] cifs: Unknown parameter 'f,' [ 745.457871][T11987] autofs4:pid:11987:autofs_fill_super: called with bogus options [ 748.357162][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.373173][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.563383][T12071] 9pnet_fd: p9_fd_create_tcp (12071): problem connecting socket to 127.0.0.1 [ 763.815111][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 778.016315][T12332] bridge2: entered promiscuous mode [ 778.032639][T12332] bridge2: entered allmulticast mode [ 778.071615][T12332] team0: Port device bridge2 added [ 778.106264][T12335] bridge0: port 3(team0) entered blocking state [ 778.132779][T12335] bridge0: port 3(team0) entered disabled state [ 778.151107][T12335] team0: entered allmulticast mode [ 778.169542][T12335] team_slave_0: entered allmulticast mode [ 778.190341][T12335] team_slave_1: entered allmulticast mode [ 778.228890][T12335] team0: entered promiscuous mode [ 778.249692][T12335] team_slave_0: entered promiscuous mode [ 778.262808][T12335] team_slave_1: entered promiscuous mode [ 778.300168][T12335] bridge0: port 3(team0) entered blocking state [ 778.307136][T12335] bridge0: port 3(team0) entered forwarding state [ 780.190497][T12385] netlink: 'syz.3.1996': attribute type 4 has an invalid length. [ 780.198499][T12385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1996'. [ 780.215803][T12385] .`: renamed from bond0 (while UP) [ 787.648670][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2028'. [ 789.328526][T12482] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2033'. [ 789.365795][T12482] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.830682][T12482] bridge_slave_0 (unregistering): left allmulticast mode [ 789.838194][T12482] bridge_slave_0 (unregistering): left promiscuous mode [ 789.846256][T12482] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.909234][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 795.256744][T12541] overlayfs: failed to clone lowerpath [ 802.837936][T12614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2081'. [ 804.372658][T12636] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 805.156099][T12643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2091'. [ 807.322863][T12660] netlink: 'syz.3.2097': attribute type 12 has an invalid length. [ 808.152425][T12676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2103'. [ 809.300355][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.307171][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.684619][T12695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2112'. [ 810.342599][ T8] IPVS: starting estimator thread 0... [ 811.085704][T12704] IPVS: using max 16 ests per chain, 38400 per kthread [ 814.393955][T12726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2122'. [ 820.083406][T12767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'. [ 820.093498][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2132'. [ 820.292227][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2139'. [ 824.635492][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2150'. [ 828.721798][T12849] netlink: 'syz.2.2164': attribute type 1 has an invalid length. [ 828.796909][T12852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2164'. [ 828.809329][T12852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 828.857845][T12849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 828.881107][T12849] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 828.899607][T12849] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 828.911055][T12849] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 828.930704][T12849] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 828.943408][T12849] bond1: (slave geneve2): making interface the new active one [ 828.969741][T12849] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 832.378769][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2177'. [ 833.072723][T12888] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 833.244368][T12890] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 833.267037][T12890] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 833.378679][T12888] bond1: (slave gretap1): making interface the new active one [ 833.399798][T12888] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 840.076092][T12976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2215'. [ 843.433626][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2226'. [ 843.942849][T13019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2224'. [ 845.049860][T13032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2235'. [ 848.129593][T13081] bridge1: entered promiscuous mode [ 848.135409][T13081] bridge1: entered allmulticast mode [ 848.147462][T13081] team0: Port device bridge1 added [ 848.741057][T13094] trusted_key: encrypted_key: insufficient parameters specified [ 857.847077][T13193] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 857.860026][T13193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 857.876545][T13193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 857.885157][T13193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 857.899856][T13193] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 857.909105][T13193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 857.910862][T13196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2295'. [ 857.958421][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 857.972294][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 857.981762][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 857.994876][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 858.007764][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 858.018047][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 858.459377][T13191] chnl_net:caif_netlink_parms(): no params data found [ 858.605358][T13191] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.613338][T13191] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.621813][T13191] bridge_slave_0: entered allmulticast mode [ 858.630759][T13191] bridge_slave_0: entered promiscuous mode [ 858.644480][T13191] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.652295][T13191] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.661643][T13191] bridge_slave_1: entered allmulticast mode [ 858.669880][T13191] bridge_slave_1: entered promiscuous mode [ 858.743194][T13191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.762985][T13191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.900799][T13191] team0: Port device team_slave_0 added [ 858.915345][T13191] team0: Port device team_slave_1 added [ 859.018646][T13191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.056944][T13191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.150183][T13191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.205077][T13191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.228325][T13191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.283710][T13191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.312946][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'. [ 859.402245][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 859.426695][T13227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2303'. [ 859.546133][T13191] hsr_slave_0: entered promiscuous mode [ 859.561474][T13191] hsr_slave_1: entered promiscuous mode [ 859.582935][T13191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.600214][T13191] Cannot create hsr debugfs directory [ 859.746094][T12303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.770086][T12303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 859.946606][T12303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.975704][T12303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 860.060406][ T5786] Bluetooth: hci4: command tx timeout [ 860.162582][T12303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.193611][T12303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 860.525536][T12303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.645198][T12303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 862.139959][ T5786] Bluetooth: hci4: command tx timeout [ 862.716746][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2322'. [ 863.056284][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2322'. [ 864.146140][T13191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 864.182255][T13191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 864.219688][ T5786] Bluetooth: hci4: command tx timeout [ 864.246156][T13191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 864.270106][T13191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 864.732747][T12303] hsr_slave_0: left promiscuous mode [ 864.779265][T12303] hsr_slave_1: left promiscuous mode [ 864.835294][T12303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.853019][T12303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.890713][T12303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.898311][T12303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.926860][T12303] bridge_slave_1: left allmulticast mode [ 864.936528][T12303] bridge_slave_1: left promiscuous mode [ 864.949766][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.065543][T12303] veth1_macvtap: left promiscuous mode [ 865.076198][T12303] veth0_macvtap: left promiscuous mode [ 865.088735][T12303] veth1_vlan: left promiscuous mode [ 865.102807][T12303] veth0_vlan: left promiscuous mode [ 865.415234][T12303] bond1 (unregistering): (slave geneve2): Releasing active interface [ 865.622015][T12303] bond1 (unregistering): Released all slaves [ 866.302418][ T5786] Bluetooth: hci4: command tx timeout [ 866.416829][T12303] team0 (unregistering): Port device team_slave_1 removed [ 866.476184][T12303] team0 (unregistering): Port device team_slave_0 removed [ 866.537544][T12303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.605671][T12303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.010330][T12303] bond0 (unregistering): Released all slaves [ 867.124130][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2334'. [ 867.234576][T13191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.307565][T13191] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.356673][T12293] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.364102][T12293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.413738][T12293] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.421444][T12293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.775868][T13191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.834166][T13191] veth0_vlan: entered promiscuous mode [ 867.848757][T13191] veth1_vlan: entered promiscuous mode [ 867.888515][T13191] veth0_macvtap: entered promiscuous mode [ 867.901399][T13191] veth1_macvtap: entered promiscuous mode [ 867.926101][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.936985][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.947735][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.959152][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.969336][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.980292][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.992335][T13191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.009500][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.024123][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.041106][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.051893][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.062737][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.074569][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.085852][T13191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.101410][T13191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.111119][T13191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.120378][T13191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.130272][T13191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.215698][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.239274][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.297712][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.309914][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.464675][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.471973][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.129999][T13193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 872.140678][T13193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 872.154298][T13193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 872.175926][T13193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 872.185411][T13193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 872.194991][T13193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 872.418446][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.602488][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.762880][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.886571][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.245852][T13388] chnl_net:caif_netlink_parms(): no params data found [ 875.086322][ T5786] Bluetooth: hci3: command tx timeout [ 875.093015][ T28] audit: type=1326 audit(1778318713.143:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.239478][ T28] audit: type=1326 audit(1778318713.143:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.318384][ T28] audit: type=1326 audit(1778318713.203:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.378943][ T28] audit: type=1326 audit(1778318713.203:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.427713][ T28] audit: type=1326 audit(1778318713.203:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.499903][ T28] audit: type=1326 audit(1778318713.203:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.536317][ T28] audit: type=1326 audit(1778318713.203:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.644803][ T28] audit: type=1326 audit(1778318713.203:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.758259][ T28] audit: type=1326 audit(1778318713.203:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.848667][ T28] audit: type=1326 audit(1778318713.203:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.4.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb8bd99cdd9 code=0x7ffc0000 [ 875.874275][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.891127][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.911439][T13388] bridge_slave_0: entered allmulticast mode [ 875.920484][T13449] kernel profiling enabled (shift: 9) [ 875.949367][T13388] bridge_slave_0: entered promiscuous mode [ 875.970084][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.977408][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.998439][T13388] bridge_slave_1: entered allmulticast mode [ 876.018622][T13388] bridge_slave_1: entered promiscuous mode [ 876.225193][T13388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.370161][T13388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.772915][T13467] macsec1: entered promiscuous mode [ 876.784243][T13467] macsec1: entered allmulticast mode [ 876.817775][T13388] team0: Port device team_slave_0 added [ 876.849878][T13388] team0: Port device team_slave_1 added [ 877.108213][ T5786] Bluetooth: hci3: command tx timeout [ 877.157002][ T49] bond1: (slave gretap1): Releasing active interface [ 877.305576][T13388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.333863][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.403635][T13388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.441660][T13388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.468290][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.514982][T13388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.737863][T13388] hsr_slave_0: entered promiscuous mode [ 877.770602][T13388] hsr_slave_1: entered promiscuous mode [ 877.786607][T13388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 877.805076][T13388] Cannot create hsr debugfs directory [ 878.156567][ T49] hsr_slave_0: left promiscuous mode [ 878.175971][ T49] hsr_slave_1: left promiscuous mode [ 878.198478][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.216439][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.233496][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.257828][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.276808][ T49] bridge_slave_1: left allmulticast mode [ 878.290836][ T49] bridge_slave_1: left promiscuous mode [ 878.306987][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.323204][ T49] bridge_slave_0: left allmulticast mode [ 878.355968][ T49] bridge_slave_0: left promiscuous mode [ 878.364062][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.480661][ T49] vlan0: left allmulticast mode [ 878.506367][ T49] veth0_vlan: left allmulticast mode [ 878.526637][ T49] vlan0: left promiscuous mode [ 878.589301][ T49] veth1_macvtap: left promiscuous mode [ 878.595052][ T49] veth0_macvtap: left promiscuous mode [ 878.614270][ T49] veth1_vlan: left promiscuous mode [ 878.638831][ T49] veth0_vlan: left promiscuous mode [ 879.065364][ T49] bond1 (unregistering): Released all slaves [ 879.192315][ T5786] Bluetooth: hci3: command tx timeout [ 880.526294][ T49] team0 (unregistering): Port device team_slave_1 removed [ 880.619739][ T49] team0 (unregistering): Port device team_slave_0 removed [ 880.684010][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.879536][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.270621][ T5786] Bluetooth: hci3: command tx timeout [ 881.819191][ T49] bond0 (unregistering): Released all slaves [ 883.658760][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2393'. [ 884.673138][ T49] IPVS: stop unused estimator thread 0... [ 885.600164][T13388] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 885.613567][T13388] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 885.633040][T13388] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 885.656231][T13388] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 885.904681][T13388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.110366][T13388] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.183322][T12299] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.190705][T12299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.238044][T10135] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 886.242195][T12299] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.254317][T12299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.607085][T10135] usb 3-1: Using ep0 maxpacket: 32 [ 886.619681][T10135] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 886.640515][T10135] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 886.664181][T10135] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 886.684348][T10135] usb 3-1: Product: syz [ 886.696384][T10135] usb 3-1: Manufacturer: syz [ 886.712667][T10135] usb 3-1: SerialNumber: syz [ 886.736848][T10135] usb 3-1: config 0 descriptor?? [ 886.751836][T13586] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 887.031669][T13388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.262777][T13388] veth0_vlan: entered promiscuous mode [ 887.307445][T13388] veth1_vlan: entered promiscuous mode [ 887.613656][T13388] veth0_macvtap: entered promiscuous mode [ 887.707756][T13388] veth1_macvtap: entered promiscuous mode [ 887.774593][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.792112][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.803769][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.815604][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.825680][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.853265][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.878682][T13388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.019469][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.053951][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.075819][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.107027][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.121355][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.147530][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.185355][T13388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.258770][T13388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.287008][T13388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.311389][T13388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.340794][T13388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.641053][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.689146][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.787592][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.795765][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.038410][ T7283] usb 3-1: USB disconnect, device number 9 [ 890.447859][T13657] lo speed is unknown, defaulting to 1000 [ 890.453963][T13657] lo speed is unknown, defaulting to 1000 [ 890.464319][T13657] lo speed is unknown, defaulting to 1000 [ 890.477829][T13657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 890.494685][T13657] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 890.529898][T13657] lo speed is unknown, defaulting to 1000 [ 890.539029][T13657] lo speed is unknown, defaulting to 1000 [ 890.546953][T13657] lo speed is unknown, defaulting to 1000 [ 890.554317][T13657] lo speed is unknown, defaulting to 1000 [ 890.612092][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 892.603826][T13722] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2438'. [ 893.310393][T13739] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2442'. [ 894.302203][T13764] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2447'. [ 895.138854][T13780] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2452'. [ 896.942938][T13797] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2458'. [ 897.682503][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 897.709294][T13806] No such timeout policy "syz1" [ 899.586974][T13829] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2465'. [ 899.927066][T13840] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2468'. [ 900.852523][T13863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2476'. [ 901.807956][T13870] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2478'. [ 902.889926][T13890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2486'. [ 903.710145][T13900] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2490'. [ 905.659165][T13193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 905.670503][T13193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 905.683906][T13193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 905.693442][T13193] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 905.702875][T13193] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 905.711138][T13193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 905.806417][T13918] lo speed is unknown, defaulting to 1000 [ 906.271097][T13918] chnl_net:caif_netlink_parms(): no params data found [ 906.649105][T13918] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.683270][T13918] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.692666][T13918] bridge_slave_0: entered allmulticast mode [ 906.707169][T13918] bridge_slave_0: entered promiscuous mode [ 906.719584][T13918] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.726953][T13918] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.736010][T13918] bridge_slave_1: entered allmulticast mode [ 906.753284][T13918] bridge_slave_1: entered promiscuous mode [ 906.802370][T13918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.817103][T13918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.889036][T13918] team0: Port device team_slave_0 added [ 906.908055][T13918] team0: Port device team_slave_1 added [ 906.962661][T13918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.979854][T13918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.014802][T13918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.037031][T13918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.057611][T13918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.094392][T13918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.182527][T13918] hsr_slave_0: entered promiscuous mode [ 907.196191][T13918] hsr_slave_1: entered promiscuous mode [ 907.671230][T13918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.745712][T13193] Bluetooth: hci1: command tx timeout [ 907.949189][T13918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.654707][T13918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.968804][T13918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.672319][T13918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 909.709507][T13918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 909.730341][T13918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 909.744685][T13918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 909.824428][T13193] Bluetooth: hci1: command tx timeout [ 909.943873][T13918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.981510][T13918] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.009785][T12299] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.017327][T12299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.029179][T12299] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.036461][T12299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.585264][T13918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.700985][T13918] veth0_vlan: entered promiscuous mode [ 910.747023][T13918] veth1_vlan: entered promiscuous mode [ 910.835186][T13918] veth0_macvtap: entered promiscuous mode [ 910.873027][T13918] veth1_macvtap: entered promiscuous mode [ 910.923833][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.937180][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.956657][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.990352][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.001350][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.017459][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.027954][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.039736][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.063166][T13918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.086812][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.103041][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.115973][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.127560][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.137743][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.148561][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.159129][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.171160][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.183132][T13918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.199240][T13918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.227926][T13918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.242540][T13918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.252936][T13918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.448575][T12293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.468843][T12293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.569441][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.581033][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.661500][T14005] fuse: Bad value for 'fd' [ 912.321717][T13193] Bluetooth: hci1: command tx timeout [ 914.374422][T13193] Bluetooth: hci1: command tx timeout [ 922.446636][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2575'. [ 922.531970][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2575'. [ 923.642915][ T5823] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 923.847634][ T5823] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 923.868578][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.910646][ T5823] usb 1-1: config 0 has no interface number 0 [ 923.923092][ T5823] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x1C, skipping [ 923.942323][ T5823] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 923.972848][ T5823] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 924.006771][ T5823] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 924.022988][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.038921][ T5823] usb 1-1: Product: syz [ 924.044428][ T5823] usb 1-1: Manufacturer: syz [ 924.049095][ T5823] usb 1-1: SerialNumber: syz [ 924.073771][ T5823] usb 1-1: config 0 descriptor?? [ 924.082043][T14145] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.101606][ T5823] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 924.327528][T10135] usb 1-1: USB disconnect, device number 13 [ 925.643054][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 925.643097][ T28] audit: type=1326 audit(1778318763.668:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 926.402674][ T28] audit: type=1326 audit(1778318763.668:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 926.480509][ T28] audit: type=1326 audit(1778318763.678:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 926.507847][ T28] audit: type=1326 audit(1778318763.678:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 926.589394][ T28] audit: type=1326 audit(1778318763.678:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 926.969159][ T28] audit: type=1326 audit(1778318763.688:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaf235d60e code=0x7ffc0000 [ 927.158261][ T28] audit: type=1326 audit(1778318763.688:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 927.647586][ T28] audit: type=1326 audit(1778318763.688:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 927.794737][ T28] audit: type=1326 audit(1778318763.698:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 927.819544][ T28] audit: type=1326 audit(1778318763.698:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.3.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf239cdd9 code=0x7ffc0000 [ 929.108623][T14215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2603'. [ 929.265111][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2606'. [ 929.287193][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2606'. [ 929.316784][T14221] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2606'. [ 929.346240][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2606'. [ 929.669587][T14238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2614'. [ 929.682359][T13910] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 929.882147][T13910] usb 1-1: Using ep0 maxpacket: 8 [ 930.109984][T13910] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 930.119224][T13910] usb 1-1: config 0 has no interface number 1 [ 930.125803][T13910] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 930.137753][T13910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 930.148115][T14252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2621'. [ 930.160625][T13910] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 930.172292][T13910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.180397][T13910] usb 1-1: Product: syz [ 930.187220][T13910] usb 1-1: Manufacturer: syz [ 930.194073][T13910] usb 1-1: SerialNumber: syz [ 930.284128][T14252] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2621'. [ 930.383268][T13910] usb 1-1: config 0 descriptor?? [ 930.691450][T13910] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 930.882784][T13910] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 930.915307][ T2321] pvrusb2: Failed to submit write-control URB status=-2 [ 930.960118][T13910] usb 1-1: USB disconnect, device number 14 [ 931.011175][ T2321] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 931.042166][ T2321] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 931.151288][T14262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2625'. [ 931.571309][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2631'. [ 931.586197][ T5823] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 931.780096][T14283] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 931.787044][ T5823] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 931.813871][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.822474][ T5823] usb 4-1: Product: syz [ 931.826696][ T5823] usb 4-1: Manufacturer: syz [ 931.832390][ T5823] usb 4-1: SerialNumber: syz [ 931.855322][ T5823] usb 4-1: config 0 descriptor?? [ 931.921362][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.928276][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.090931][ T5823] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 932.694696][ T5823] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 932.823755][T14315] netlink: 'syz.0.2646': attribute type 5 has an invalid length. [ 932.936929][ T5823] usb 4-1: USB disconnect, device number 16 [ 936.016380][T14355] __nla_validate_parse: 6 callbacks suppressed [ 936.016428][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 936.294117][T14355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2663'. [ 939.469506][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 939.485794][T14381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2673'. [ 940.905199][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 940.976430][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2679'. [ 940.996784][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2679'. [ 942.117993][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2682'. [ 942.129555][T14405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2682'. [ 943.201141][T13193] Bluetooth: hci1: Malformed LE Event: 0x02 [ 944.031862][T14435] batadv_slave_1: entered promiscuous mode [ 944.249109][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'. [ 944.624138][T14428] batadv_slave_1: left promiscuous mode [ 944.757095][T14438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2693'. [ 947.191099][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2702'. [ 947.545197][T14466] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2703'. [ 950.497357][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2714'. [ 952.134475][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 952.148638][T14504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2716'. [ 953.051272][T14521] Bluetooth: MGMT ver 1.22 [ 953.597641][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'. [ 953.629951][T14531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2727'. [ 953.678389][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2725'. [ 955.201443][T14537] 9pnet_fd: p9_fd_create_tcp (14537): problem connecting socket to 127.0.0.1 [ 956.367990][T14549] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2733'. [ 957.278360][T13193] Bluetooth: hci1: command tx timeout [ 958.769475][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'. [ 958.802900][T14565] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2737'. [ 959.024069][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 960.727453][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2747'. [ 962.105717][T14609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2753'. [ 963.913330][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'. [ 965.162098][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'. [ 965.398590][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2764'. [ 965.482016][T14612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 966.478201][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2770'. [ 967.486540][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2773'. [ 968.841243][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 969.157094][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2783'. [ 971.434461][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2793'. [ 971.955244][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2797'. [ 972.349431][T14745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2802'. [ 972.548750][T14753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2806'. [ 973.358192][T14767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2812'. [ 973.840187][T14773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2815'. [ 974.833193][T14795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2824'. [ 975.765503][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2826'. [ 975.910873][ T5158] IPVS: starting estimator thread 0... [ 976.047855][T14803] IPVS: using max 17 ests per chain, 40800 per kthread [ 977.266135][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 977.594685][T14840] io-wq is not configured for unbound workers [ 977.962634][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 978.941008][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 979.857019][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2868'. [ 979.861270][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'. [ 980.490191][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 980.490214][ T28] audit: type=1326 audit(1778318818.524:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.0.2866" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d879cdd9 code=0x7ffc0000 [ 980.522283][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.936011][ T28] audit: type=1326 audit(1778318818.524:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.0.2866" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d879cdd9 code=0x7ffc0000 [ 980.960717][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.130095][ T28] audit: type=1326 audit(1778318818.705:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.0.2866" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87d879cdd9 code=0x7ffc0000 [ 981.154949][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.231969][ T28] audit: type=1326 audit(1778318818.895:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.0.2866" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d879cdd9 code=0x7ffc0000 [ 981.256673][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.263755][ T28] audit: type=1326 audit(1778318818.895:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.0.2866" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d879cdd9 code=0x7ffc0000 [ 981.288064][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.092826][T14933] overlayfs: failed to clone upperpath [ 984.340714][T14968] capability: warning: `syz.0.2897' uses deprecated v2 capabilities in a way that may be insecure [ 985.664881][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 990.062115][T13193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 990.074108][T13193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 990.087552][T13193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 990.113050][T13193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 990.122881][T13193] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 990.134227][T13193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 990.269395][T12301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.683523][T12301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.984175][T12301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.514479][T12301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.890085][T13193] Bluetooth: hci0: command tx timeout [ 993.032438][T15041] chnl_net:caif_netlink_parms(): no params data found [ 993.331312][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.339074][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.387842][ T2321] pvrusb2: request_firmware fatal error with code=-110 [ 993.409588][ T2321] pvrusb2: Failure uploading firmware1 [ 993.416385][ T2321] pvrusb2: Device initialization was not successful. [ 993.423386][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 993.434583][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 993.457454][ T2321] pvrusb2: Failed to submit write-control URB status=-19 [ 993.458397][T13910] pvrusb2: Device being rendered inoperable [ 993.465448][ T2321] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 993.505084][ T2321] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 993.683403][T15041] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.718587][T15041] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.749563][T15041] bridge_slave_0: entered allmulticast mode [ 993.770836][T15041] bridge_slave_0: entered promiscuous mode [ 993.885201][T15041] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.902123][T15041] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.934386][T15041] bridge_slave_1: entered allmulticast mode [ 993.946832][T15041] bridge_slave_1: entered promiscuous mode [ 993.975730][T15080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2938'. [ 994.023724][ T5854] IPVS: starting estimator thread 0... [ 994.135620][T15087] IPVS: using max 20 ests per chain, 48000 per kthread [ 994.258465][T15041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.300591][T15041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.712507][T15041] team0: Port device team_slave_0 added [ 994.811248][T15041] team0: Port device team_slave_1 added [ 994.925142][ T5786] Bluetooth: hci0: command tx timeout [ 994.985198][T15041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.025395][T15041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.117729][T15041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.289929][T15041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.170080][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 996.209424][T15041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.349817][T15041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.632136][T15041] hsr_slave_0: entered promiscuous mode [ 996.686713][T15041] hsr_slave_1: entered promiscuous mode [ 996.735558][T15041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.743479][T15041] Cannot create hsr debugfs directory [ 997.004917][T13193] Bluetooth: hci0: command tx timeout [ 997.201105][T12301] hsr_slave_0: left promiscuous mode [ 997.228476][T12301] hsr_slave_1: left promiscuous mode [ 997.265077][T12301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.272843][T12301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.322266][T12301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.349296][T12301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.371746][T12301] team0: left allmulticast mode [ 997.384792][T12301] team_slave_0: left allmulticast mode [ 997.391121][T12301] team_slave_1: left allmulticast mode [ 997.434783][T12301] team0: left promiscuous mode [ 997.439732][T12301] team_slave_0: left promiscuous mode [ 997.463773][T12301] team_slave_1: left promiscuous mode [ 997.487238][T12301] bridge0: port 3(team0) entered disabled state [ 997.507980][T12301] bridge_slave_1: left allmulticast mode [ 997.524084][T12301] bridge_slave_1: left promiscuous mode [ 997.535306][T12301] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.614412][T12301] veth1_macvtap: left promiscuous mode [ 997.633229][T12301] veth0_macvtap: left promiscuous mode [ 997.645100][T12301] veth1_vlan: left promiscuous mode [ 997.655013][T12301] veth0_vlan: left promiscuous mode [ 998.067809][T12301] team0 (unregistering): Port device bridge2 removed [ 999.094687][T13193] Bluetooth: hci0: command tx timeout [ 1000.113032][ T5142] udevd[5142]: worker [13541] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1000.160692][T12301] team0 (unregistering): Port device team_slave_1 removed [ 1000.230005][T12301] team0 (unregistering): Port device team_slave_0 removed [ 1000.330863][T12301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.433245][T12301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.106257][T12301] bond0 (unregistering): Released all slaves [ 1001.285342][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 1001.852608][T15168] bridge0: port 3(geneve1) entered blocking state [ 1001.860384][T15168] bridge0: port 3(geneve1) entered disabled state [ 1001.870273][T15168] geneve1: entered allmulticast mode [ 1001.887964][T15168] geneve1: entered promiscuous mode [ 1001.896944][T15168] bridge0: port 3(geneve1) entered blocking state [ 1001.903529][T15168] bridge0: port 3(geneve1) entered forwarding state [ 1003.486821][T15041] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1003.516709][T15041] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1003.560573][T15041] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1003.636607][T15041] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1003.963440][T15041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.037833][T15041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.073746][T12301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.081870][T12301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.112135][T12301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.119495][T12301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.707237][T15041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.506844][T15267] bridge0: port 3(geneve1) entered blocking state [ 1006.514327][T15267] bridge0: port 3(geneve1) entered disabled state [ 1006.521903][T15267] geneve1: entered allmulticast mode [ 1006.532660][T15267] geneve1: entered promiscuous mode [ 1006.541319][T15267] bridge0: port 3(geneve1) entered blocking state [ 1006.548056][T15267] bridge0: port 3(geneve1) entered forwarding state [ 1007.010774][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2982'. [ 1007.506475][T15041] veth0_vlan: entered promiscuous mode [ 1007.550154][T15041] veth1_vlan: entered promiscuous mode [ 1007.638467][T15041] veth0_macvtap: entered promiscuous mode [ 1007.686614][T15041] veth1_macvtap: entered promiscuous mode [ 1007.731379][T15041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.763504][T15041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.787319][T15041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.803483][T15041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.833299][T15041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.854688][T15041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.867841][T15041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.879001][T15041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.899655][T15041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.944433][T15041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.979354][T15041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.011958][T15041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.036124][T15041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.051515][T15041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.073479][T15041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.101581][T15041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.128941][T15041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.170741][T15041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.217482][T15041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.264643][T15041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.293157][T15041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.316030][T15041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.540930][T12299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.578831][T12299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.660902][T12299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.681873][T12299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.772413][T13193] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 1009.936801][T15332] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 1009.936801][T15332] program syz.4.3000 not setting count and/or reply_len properly [ 1011.071558][T15360] netlink: 'syz.3.3011': attribute type 29 has an invalid length. [ 1011.113582][T15360] netlink: 'syz.3.3011': attribute type 29 has an invalid length. [ 1011.130608][T15360] netlink: 'syz.3.3011': attribute type 29 has an invalid length. [ 1011.415459][T15373] kAFS: No cell specified [ 1016.457120][T15510] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1017.674695][T15519] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3066'. [ 1027.828567][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3127'. [ 1029.448719][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'. [ 1031.093309][T15716] warning: `syz.4.3143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1032.494728][T13193] Bluetooth: hci1: command 0x0406 tx timeout [ 1032.538242][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3147'. [ 1033.316771][T15732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3150'. [ 1035.162912][T15763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3160'. [ 1036.389377][T15786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3170'. [ 1036.812524][T15808] netlink: 'syz.2.3181': attribute type 10 has an invalid length. [ 1036.860941][T15808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.888167][T15808] bond0: (slave team0): Enslaving as an active interface with an up link [ 1037.190883][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1038.067252][T15841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1038.578374][T15878] netlink: 'syz.3.3213': attribute type 10 has an invalid length. [ 1038.639565][T15878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.678095][T15878] bond0: (slave team0): Enslaving as an active interface with an up link [ 1038.886243][T15879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3214'. [ 1039.202440][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1039.750460][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3230'. [ 1039.773926][T15911] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1039.932692][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 1040.524311][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1040.536681][T15944] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1040.627035][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3246'. [ 1041.010068][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1041.233163][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1041.280337][ T23] usb 5-1: config 86 has an invalid interface number: 155 but max is 3 [ 1041.288965][ T23] usb 5-1: config 86 contains an unexpected descriptor of type 0x1, skipping [ 1041.308891][ T23] usb 5-1: config 86 has an invalid interface number: 176 but max is 3 [ 1041.333868][ T23] usb 5-1: config 86 has an invalid interface number: 90 but max is 3 [ 1041.349145][ T23] usb 5-1: config 86 has an invalid interface number: 219 but max is 3 [ 1041.363175][ T23] usb 5-1: config 86 contains an unexpected descriptor of type 0x2, skipping [ 1041.377912][ T23] usb 5-1: config 86 has no interface number 0 [ 1041.385564][ T23] usb 5-1: config 86 has no interface number 1 [ 1041.409933][ T23] usb 5-1: config 86 has no interface number 2 [ 1041.417012][ T23] usb 5-1: config 86 has no interface number 3 [ 1041.424065][T15969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3254'. [ 1041.440557][ T23] usb 5-1: config 86 interface 155 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1041.457296][T15969] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1041.464292][ T23] usb 5-1: config 86 interface 155 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 1041.481862][ T23] usb 5-1: config 86 interface 155 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1041.486050][ T5823] IPVS: starting estimator thread 0... [ 1041.503490][ T23] usb 5-1: config 86 interface 176 altsetting 23 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1041.532505][ T23] usb 5-1: config 86 interface 176 altsetting 23 has a duplicate endpoint with address 0x6, skipping [ 1041.559117][ T23] usb 5-1: config 86 interface 176 altsetting 23 has a duplicate endpoint with address 0x9, skipping [ 1041.584446][ T23] usb 5-1: config 86 interface 176 altsetting 23 has an invalid endpoint with address 0x80, skipping [ 1041.609848][T15979] IPVS: using max 18 ests per chain, 43200 per kthread [ 1041.627498][ T23] usb 5-1: config 86 interface 90 altsetting 209 has a duplicate endpoint with address 0x9, skipping [ 1041.642745][ T23] usb 5-1: config 86 interface 219 altsetting 43 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1041.654423][ T23] usb 5-1: config 86 interface 219 altsetting 43 has a duplicate endpoint with address 0x6, skipping [ 1041.679794][ T23] usb 5-1: config 86 interface 219 altsetting 43 has a duplicate endpoint with address 0x5, skipping [ 1041.709807][ T23] usb 5-1: config 86 interface 219 altsetting 43 endpoint 0xC has invalid wMaxPacketSize 0 [ 1041.729940][ T23] usb 5-1: config 86 interface 155 has no altsetting 0 [ 1041.736984][ T23] usb 5-1: config 86 interface 176 has no altsetting 0 [ 1041.745531][ T23] usb 5-1: config 86 interface 90 has no altsetting 0 [ 1041.760136][ T23] usb 5-1: config 86 interface 219 has no altsetting 0 [ 1041.772981][ T23] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=be.7c [ 1041.788354][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.808613][ T23] usb 5-1: Product: syz [ 1041.813511][ T23] usb 5-1: Manufacturer: syz [ 1041.818454][ T23] usb 5-1: SerialNumber: syz [ 1042.289985][ T23] usb 5-1: USB disconnect, device number 2 [ 1042.319239][T13539] udevd[13539]: setting owner of /dev/bus/usb/005/002 to uid=0, gid=0 failed: No such file or directory [ 1042.764552][T16012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3270'. [ 1043.059222][T16025] netlink: 'syz.2.3275': attribute type 10 has an invalid length. [ 1043.236142][T16033] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3280'. [ 1044.223805][T16058] netlink: 'syz.2.3288': attribute type 10 has an invalid length. [ 1045.065970][T16085] netlink: 'syz.3.3298': attribute type 10 has an invalid length. [ 1052.018744][ T5854] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1052.259263][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 1052.271963][ T5854] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1052.293210][ T5854] usb 5-1: config 2 has an invalid interface number: 216 but max is 0 [ 1052.308757][ T5854] usb 5-1: config 2 has no interface number 0 [ 1052.318772][ T5854] usb 5-1: config 2 interface 216 has no altsetting 0 [ 1052.330454][ T5854] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=66.58 [ 1052.340078][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.360035][ T5854] usb 5-1: Product: syz [ 1052.364272][ T5854] usb 5-1: Manufacturer: syz [ 1052.375917][ T5854] usb 5-1: SerialNumber: syz [ 1052.645255][T16201] fuse: Bad value for 'fd' [ 1052.740284][ T5854] legousbtower 5-1:2.216: interrupt endpoints not found [ 1052.868272][ T5854] usb 5-1: USB disconnect, device number 3 [ 1054.357652][T16216] netlink: 'syz.4.3352': attribute type 10 has an invalid length. [ 1054.406373][T16216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.445170][T16216] bond0: (slave team0): Enslaving as an active interface with an up link [ 1054.762806][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.859287][ T2321] pvrusb2: request_firmware fatal error with code=-110 [ 1054.866356][ T2321] pvrusb2: Failure uploading firmware1 [ 1054.888481][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.950170][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1054.970149][ T2321] pvrusb2: Device initialization was not successful. [ 1054.977009][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1055.099794][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1055.238082][T13910] pvrusb2: Device being rendered inoperable [ 1061.506643][T16227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.515884][T16227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.091793][T16227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.126810][T16227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.515708][T16227] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.524892][T16227] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.539815][T16227] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.551013][T16227] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.347181][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1066.561486][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1066.589678][ T8] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 1066.617367][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.670373][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1068.274816][T16307] netlink: 'syz.2.3381': attribute type 10 has an invalid length. [ 1070.046981][ T8] gspca_nw80x: reg_w err -71 [ 1070.052012][ T8] nw80x: probe of 5-1:16.0 failed with error -71 [ 1070.061271][ T8] usb 5-1: USB disconnect, device number 4 [ 1070.385995][T16332] netlink: 'syz.0.3390': attribute type 10 has an invalid length. [ 1071.645020][T16332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.680301][T16332] bond0: (slave team0): Enslaving as an active interface with an up link [ 1076.897512][T16370] netlink: 'syz.0.3404': attribute type 10 has an invalid length. [ 1078.981016][T16393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1083.732150][T16427] netlink: 'syz.4.3417': attribute type 10 has an invalid length. [ 1085.551799][T16453] netlink: 'syz.4.3432': attribute type 10 has an invalid length. [ 1086.274731][ T8917] IPVS: starting estimator thread 0... [ 1087.373534][T16470] IPVS: using max 18 ests per chain, 43200 per kthread [ 1088.401715][T16479] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1088.411047][T16479] netlink: 'syz.2.3439': attribute type 2 has an invalid length. [ 1088.420557][T16479] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 1088.429207][T16479] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 1088.437353][T16479] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 1094.989607][T16485] netlink: 'syz.2.3443': attribute type 10 has an invalid length. [ 1104.490840][T13193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1104.502621][T13193] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1104.511668][T13193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1104.522717][T13193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1104.530956][T13193] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1104.538990][T13193] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1105.561282][T12303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.791965][ T5786] Bluetooth: hci2: command tx timeout [ 1107.756642][T12303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.000146][T12303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.692386][T12303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.014630][ T5786] Bluetooth: hci2: command tx timeout [ 1109.044957][T16549] chnl_net:caif_netlink_parms(): no params data found [ 1110.568971][T16549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.598376][T16549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.622571][T16549] bridge_slave_0: entered allmulticast mode [ 1110.652264][T16549] bridge_slave_0: entered promiscuous mode [ 1110.772888][T16549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.798396][T16549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.836263][T16549] bridge_slave_1: entered allmulticast mode [ 1110.884997][T16549] bridge_slave_1: entered promiscuous mode [ 1111.237810][ T5786] Bluetooth: hci2: command tx timeout [ 1111.475610][T16549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.557097][T16549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.465189][T13193] Bluetooth: hci2: command tx timeout [ 1113.788860][T16549] team0: Port device team_slave_0 added [ 1113.865136][T16549] team0: Port device team_slave_1 added [ 1115.374506][T16549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.382198][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.045650][T16649] overlayfs: failed to clone upperpath [ 1116.069523][T13193] Bluetooth: hci0: command 0x0406 tx timeout [ 1116.371676][T16549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.457461][T16549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.486522][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.641947][T16549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.263525][T16549] hsr_slave_0: entered promiscuous mode [ 1118.282934][T16549] hsr_slave_1: entered promiscuous mode [ 1118.300880][T16549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1118.308571][T16549] Cannot create hsr debugfs directory [ 1118.870620][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.882586][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.191190][T12303] hsr_slave_0: left promiscuous mode [ 1120.513531][T12303] hsr_slave_1: left promiscuous mode [ 1121.850512][ T5786] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 1121.856706][T12303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.859888][ T5786] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 1122.130476][T12303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.156627][T12303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.165706][T12303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.187699][T12303] bridge_slave_1: left allmulticast mode [ 1122.221145][T12303] bridge_slave_1: left promiscuous mode [ 1122.229919][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.253223][T12303] bridge_slave_0: left allmulticast mode [ 1122.262492][T12303] bridge_slave_0: left promiscuous mode [ 1122.269121][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.301686][T12303] veth1_macvtap: left promiscuous mode [ 1122.307265][T12303] veth0_macvtap: left promiscuous mode [ 1122.318623][T12303] veth1_vlan: left promiscuous mode [ 1122.323962][T12303] veth0_vlan: left promiscuous mode [ 1126.211189][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1126.222362][ T5786] Bluetooth: hci1: Injecting HCI hardware error event [ 1126.233315][ T5786] Bluetooth: hci1: hardware error 0x00 [ 1126.715196][T12303] team0 (unregistering): Port device team_slave_1 removed [ 1126.771654][T12303] team0 (unregistering): Port device team_slave_0 removed [ 1126.832350][T12303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.897323][T12303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.376113][T12303] bond0 (unregistering): (slave team0): Releasing backup interface [ 1127.428998][T12303] bond0 (unregistering): Released all slaves [ 1128.481483][T16549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1128.517881][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1128.612617][T16549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1128.733896][T16549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1128.833410][T16549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1129.618026][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3509'. [ 1129.646586][T12303] IPVS: stop unused estimator thread 0... [ 1129.942630][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3509'. [ 1129.959571][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3509'. [ 1129.987804][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3509'. [ 1131.599342][T16549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.710625][T16549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.777843][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.785232][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.879819][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.887461][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.411240][T16549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.049276][T16818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1136.746342][T16549] veth0_vlan: entered promiscuous mode [ 1136.828309][T16549] veth1_vlan: entered promiscuous mode [ 1136.957164][T16549] veth0_macvtap: entered promiscuous mode [ 1136.996807][T16549] veth1_macvtap: entered promiscuous mode [ 1137.033916][T16840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1137.066430][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.108295][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.162399][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.190444][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.212654][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.276532][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.307751][T16549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.350705][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.430026][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.469910][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.650362][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.939165][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.225400][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.274399][T16549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.404384][T16549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.453590][T16549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.486598][T16549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.508061][T16549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.991092][T12303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.010088][T12303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.108018][T16876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3544'. [ 1139.120996][T12283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.160229][T12283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.308284][T16885] netlink: zone id is out of range [ 1139.314216][T16885] netlink: set zone limit has 4 unknown bytes [ 1139.950654][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1140.188073][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1140.323663][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.482119][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1140.576630][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1140.662600][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.721210][ T8] usb 5-1: config 0 descriptor?? [ 1140.898179][T16915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1141.260888][ T8] HID 045e:07da: Invalid code 65791 type 1 [ 1141.301117][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000B/input/input6 [ 1141.927661][ T8] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1142.068420][ T8] usb 5-1: USB disconnect, device number 5 [ 1142.189576][T16929] fido_id[16929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1142.644852][T16948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3566'. [ 1142.840828][T16956] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1142.960238][T16956] overlayfs: failed to look up (tracing) for ino (-66) [ 1144.740257][T16977] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1144.963334][T16985] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3576'. [ 1146.905823][T17032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3588'. [ 1147.565198][T17060] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1147.609411][T17060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1147.792222][T17070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3598'. [ 1149.384112][T17114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1158.683082][ T8917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1158.875748][ T8917] usb 5-1: device descriptor read/64, error -71 [ 1159.195950][ T8917] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1159.473866][ T8917] usb 5-1: device descriptor read/64, error -71 [ 1159.612796][ T8917] usb usb5-port1: attempt power cycle [ 1171.593506][T17407] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1172.590610][T17433] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1176.553260][T17494] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1183.215704][T17617] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1184.418588][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.427731][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.459017][T17664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1188.482897][T17695] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1192.307152][T17813] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3813'. [ 1192.452917][T17816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1192.810196][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3815'. [ 1195.373272][T17850] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1195.897217][T17853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1197.173058][T17876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3835'. [ 1197.655946][T17890] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3840'. [ 1197.707761][T17893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3841'. [ 1199.950951][T17893] bridge0: port 3(geneve1) entered disabled state [ 1199.957630][T17893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.964882][T17893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.338005][T17893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.384668][T17893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.858221][T17893] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.867488][T17893] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.876749][T17893] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.886220][T17893] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.058819][T17928] Falling back ldisc for ttyS3. [ 1201.224488][T17933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3853'. [ 1203.562504][T17964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1205.397215][T17995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1208.922238][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'. [ 1210.843937][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3916'. [ 1217.326398][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 1222.176935][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1228.383416][T18275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3962'. [ 1235.579302][T18338] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1235.972488][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1246.319232][T14003] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1246.565227][T14003] usb 5-1: Using ep0 maxpacket: 16 [ 1248.226547][T14003] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1248.242742][T14003] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1248.252777][T14003] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1248.266976][T14003] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1248.320887][T14003] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1248.358548][T14003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.392624][T12299] hsr_slave_0: left promiscuous mode [ 1248.414451][T14003] usb 5-1: Product: syz [ 1248.418700][T14003] usb 5-1: Manufacturer: syz [ 1248.456517][T14003] usb 5-1: SerialNumber: syz [ 1248.467303][T12299] hsr_slave_1: left promiscuous mode [ 1248.478841][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.506998][T12299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.536004][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.548821][T12299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.559938][T12299] bridge_slave_1: left allmulticast mode [ 1248.574617][T12299] bridge_slave_1: left promiscuous mode [ 1248.603750][T12299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.637481][T12299] bridge_slave_0: left allmulticast mode [ 1248.663876][T12299] bridge_slave_0: left promiscuous mode [ 1248.688814][T12299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.756041][T14003] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1248.820116][T14003] usb 5-1: USB disconnect, device number 9 [ 1248.848224][T14003] usblp0: removed [ 1248.874573][T12299] vlan0: left allmulticast mode [ 1248.891087][T12299] veth0_vlan: left allmulticast mode [ 1248.906790][T12299] vlan0: left promiscuous mode [ 1248.920952][T12299] veth1_macvtap: left promiscuous mode [ 1248.933366][T12299] veth0_macvtap: left promiscuous mode [ 1249.015734][T12299] veth1_vlan: left promiscuous mode [ 1249.087524][T12299] veth0_vlan: left promiscuous mode [ 1250.053805][T12299] team0 (unregistering): Port device bridge1 removed [ 1250.073591][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1250.080088][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.366037][T12299] bond1 (unregistering): Released all slaves [ 1251.174523][T12299] team0 (unregistering): Port device team_slave_1 removed [ 1251.245183][T12299] team0 (unregistering): Port device team_slave_0 removed [ 1251.308027][T12299] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.370982][T12299] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.838227][T12299] .` (unregistering): Released all slaves [ 1253.858196][T12299] IPVS: stop unused estimator thread 0... [ 1257.085326][T18510] pim6reg: entered allmulticast mode [ 1257.861240][T18518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4030'. [ 1258.460314][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4035'. [ 1260.644220][T18552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4044'. [ 1262.306049][T18587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4056'. [ 1262.589265][T18587] bridge0: port 3(geneve1) entered disabled state [ 1262.595927][T18587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.603259][T18587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.123732][T18598] loop5: detected capacity change from 0 to 1024 [ 1263.268849][T18587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.332010][T18587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.659269][T18587] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.669396][T18587] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.678802][T18587] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.687824][T18587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.049372][T18627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1267.953816][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4080'. [ 1268.138631][T18665] loop4: detected capacity change from 0 to 1024 [ 1269.964825][T18693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4092'. [ 1270.520898][T18693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.529016][T18693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.191764][T18693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.257211][T18693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.678557][T18693] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.687521][T18693] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.697103][T18693] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.706693][T18693] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.565721][T18748] loop4: detected capacity change from 0 to 1024 [ 1273.386421][T18752] fuse: Bad value for 'fd' [ 1273.395723][T18750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4109'. [ 1274.099896][T18775] syzkaller0: entered promiscuous mode [ 1274.106692][T18775] syzkaller0: entered allmulticast mode [ 1274.608635][T18786] loop4: detected capacity change from 0 to 1024 [ 1276.718321][T18788] fuse: Bad value for 'fd' [ 1276.897287][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4123'. [ 1277.286185][T18810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4129'. [ 1278.074639][T18820] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1278.778064][T18825] fuse: Bad value for 'fd' [ 1278.902997][T18829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4134'. [ 1279.777491][T18860] loop5: detected capacity change from 0 to 1024 [ 1281.463787][T18861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4146'. [ 1281.759389][T18869] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1283.159357][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1284.115564][T18910] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1285.294617][T18922] pim6reg: entered allmulticast mode [ 1285.547484][T18927] loop4: detected capacity change from 0 to 1024 [ 1287.245079][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4165'. [ 1288.418189][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4177'. [ 1289.400380][T13193] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1291.085712][T18993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4180'. [ 1291.887905][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1294.570643][T13193] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 1295.046246][T19038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4197'. [ 1296.956776][T19047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1296.958247][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4200'. [ 1298.773315][T19069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4206'. [ 1298.822438][T19069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4206'. [ 1299.113170][T19079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4208'. [ 1299.549222][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4210'. [ 1300.546187][T19104] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1301.713071][T19114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4216'. [ 1301.764162][T19114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4216'. [ 1301.768057][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4217'. [ 1302.101091][T19126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4220'. [ 1302.508058][T19136] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1303.302030][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'. [ 1304.603359][T19158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4228'. [ 1304.623526][T19158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4228'. [ 1305.022472][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1306.954791][T19194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4239'. [ 1307.020232][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4239'. [ 1307.119814][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1308.099306][T19214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4242'. [ 1308.133174][T19215] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1309.466746][T19235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4249'. [ 1309.477158][T19235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4249'. [ 1309.771410][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1313.663735][T13193] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1314.256133][T19270] loop5: detected capacity change from 0 to 1024 [ 1315.042692][T19275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1315.084762][T19275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1315.340579][T19285] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1315.540009][T13193] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1316.018398][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1316.032221][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1316.999104][T19317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4273'. [ 1317.021848][T19317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4273'. [ 1317.225629][T19326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4275'. [ 1317.337501][T13193] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 1318.840634][T19352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4283'. [ 1318.864452][T19352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4283'. [ 1318.925253][T19354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4285'. [ 1319.049706][T19363] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1320.266669][T19373] IPVS: Error connecting to the multicast addr [ 1321.011344][T13193] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1321.288011][T19400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4296'. [ 1321.298879][T19400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4296'. [ 1321.456307][T19403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1322.475387][T19417] loop4: detected capacity change from 0 to 1024 [ 1324.000013][T13193] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 1324.475424][T19448] overlayfs: failed to clone upperpath [ 1324.677359][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4313'. [ 1324.944187][T19454] loop4: detected capacity change from 0 to 1024 [ 1326.479464][T19482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4323'. [ 1328.296054][T19516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4333'. [ 1328.773047][T19534] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4337'. [ 1328.830593][T19534] loop5: detected capacity change from 0 to 1024 [ 1330.136826][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 1331.141041][T19551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4344'. [ 1331.689460][T19570] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4347'. [ 1331.752139][T19570] loop5: detected capacity change from 0 to 1024 [ 1333.112124][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4352'. [ 1333.971966][T19594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4354'. [ 1334.390448][T19607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4359'. [ 1334.447689][T19607] loop4: detected capacity change from 0 to 1024 [ 1335.916256][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4362'. [ 1337.758351][T19651] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1339.185401][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1340.032611][T19675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1342.233601][T19696] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1342.493123][T19707] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1343.695611][T19714] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4386'. [ 1343.780873][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4385'. [ 1345.445367][T19747] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1345.568579][T19758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4397'. [ 1345.837299][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4395'. [ 1347.388515][T19780] syzkaller0: entered promiscuous mode [ 1347.394216][T19780] syzkaller0: entered allmulticast mode [ 1347.737100][T19788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1348.098005][T19793] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1349.321460][T19813] syzkaller0: entered promiscuous mode [ 1349.359333][T19813] syzkaller0: entered allmulticast mode [ 1349.512495][T19818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4417'. [ 1349.602352][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4414'. [ 1353.233286][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4430'. [ 1355.306260][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1356.575536][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 1356.634695][T19929] loop4: detected capacity change from 0 to 1024 [ 1358.572378][T19946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4449'. [ 1359.852769][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1359.959063][T19974] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1360.874465][T19979] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1363.753726][T20020] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1364.692324][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4467'. [ 1364.809777][ T5786] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1367.461460][T20069] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1368.554859][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4478'. [ 1368.575180][T20073] loop5: detected capacity change from 0 to 1024 [ 1372.856955][T20138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4492'. [ 1375.467875][T20176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1378.504384][T20236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1379.332379][T20274] loop4: detected capacity change from 0 to 1024 [ 1380.468640][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4526'. [ 1381.391540][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1381.400445][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1382.226048][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1383.048279][T20355] loop4: detected capacity change from 0 to 1024 [ 1385.036230][T20366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4545'. [ 1385.412016][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4549'. [ 1385.491732][T20383] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1388.124412][T20417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1390.838557][T20451] loop4: detected capacity change from 0 to 1024 [ 1391.657166][T20459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4568'. [ 1392.058754][T20464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1394.153493][T20481] IPVS: Error connecting to the multicast addr [ 1396.727075][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4580'. [ 1398.988076][T20522] fuse: Bad value for 'group_id' [ 1399.415959][T20532] loop5: detected capacity change from 0 to 1024 [ 1401.183424][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4593'. [ 1402.138195][T20557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1402.483184][T20569] fuse: Bad value for 'group_id' [ 1402.613382][T16236] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1402.807705][T16236] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 1402.841129][T16236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.893583][T16236] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1402.958237][T16236] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1403.018413][T16236] usb 5-1: Product: syz [ 1403.046379][T16236] usb 5-1: Manufacturer: syz [ 1403.079376][T16236] usb 5-1: SerialNumber: syz [ 1403.290025][T16236] usb 5-1: config 0 descriptor?? [ 1403.346528][T20564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1403.487105][T16236] usb 5-1: selecting invalid altsetting 0 [ 1403.640643][T20564] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 1403.668940][ T5854] usb 5-1: USB disconnect, device number 10 [ 1403.925030][T20577] udevd[20577]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1404.234244][T20584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1404.259031][T20584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1404.268294][T20584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1404.277499][T20584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1404.288200][T20584] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1404.383845][T20580] loop5: detected capacity change from 0 to 1024 [ 1404.438859][T20584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1404.670606][T20587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4602'. [ 1405.606625][T20582] chnl_net:caif_netlink_parms(): no params data found [ 1406.049248][T20582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.523972][T20584] Bluetooth: hci3: command tx timeout [ 1407.536361][T20582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.546832][T20582] bridge_slave_0: entered allmulticast mode [ 1407.599154][T20582] bridge_slave_0: entered promiscuous mode [ 1407.622239][T20582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.655350][T20582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.663063][T20582] bridge_slave_1: entered allmulticast mode [ 1407.674881][T20582] bridge_slave_1: entered promiscuous mode [ 1407.676238][T20627] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1407.842533][T20582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.857146][T20582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.907836][T20582] team0: Port device team_slave_0 added [ 1407.919574][T20582] team0: Port device team_slave_1 added [ 1407.951490][T20582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.985166][T20582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.011852][T20582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.029261][T20582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.037101][T20582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.064157][T20582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.227916][T20631] loop5: detected capacity change from 0 to 1024 [ 1409.177551][T20582] hsr_slave_0: entered promiscuous mode [ 1409.189505][T20582] hsr_slave_1: entered promiscuous mode [ 1409.239334][T20582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1409.274896][T20582] Cannot create hsr debugfs directory [ 1409.677269][T20584] Bluetooth: hci3: command tx timeout [ 1410.454663][T20658] block device autoloading is deprecated and will be removed. [ 1411.899809][T20668] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1412.090845][T20584] Bluetooth: hci3: command tx timeout [ 1412.264552][T20672] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1412.590036][T20582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1412.613243][T20582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1412.639734][T20582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1412.652046][T20582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1412.807940][T20582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.837224][T20582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.871180][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.878622][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.940238][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.947623][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.464799][T20584] Bluetooth: hci3: command tx timeout [ 1414.779282][T20582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.048674][T20582] veth0_vlan: entered promiscuous mode [ 1415.068991][T20582] veth1_vlan: entered promiscuous mode [ 1415.479815][T20719] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1415.929774][T20582] veth0_macvtap: entered promiscuous mode [ 1415.959237][T20582] veth1_macvtap: entered promiscuous mode [ 1416.032056][T20582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.058044][T20725] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1416.079124][T20582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.219217][T20582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.228789][T20582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.239129][T20582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.248826][T20582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.514321][T12283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.566233][T12283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.998018][T20443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.183490][T20443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.441409][T20777] netlink: 'syz.2.4644': attribute type 4 has an invalid length. [ 1423.539755][T20780] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1424.528675][T20788] loop5: detected capacity change from 0 to 1024 [ 1430.248695][T20818] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1431.936863][T20831] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1433.894058][T20867] loop5: detected capacity change from 0 to 1024 [ 1435.933677][T20873] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1438.137842][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4678'. [ 1438.433814][T20907] loop5: detected capacity change from 0 to 1024 [ 1440.153125][T20917] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1440.493862][T20928] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1444.275443][T20941] loop5: detected capacity change from 0 to 1024 [ 1447.046787][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.053283][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.497598][T20976] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1448.910567][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4699'. [ 1449.663274][T20991] ------------[ cut here ]------------ [ 1449.668860][T20991] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 1449.681866][T20991] WARNING: CPU: 1 PID: 20991 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 1449.691147][T20991] Modules linked in: [ 1449.695169][T20991] CPU: 1 PID: 20991 Comm: syz.2.4697 Not tainted syzkaller #0 [ 1449.702977][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1449.713497][T20991] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 1449.719487][T20991] Code: f8 eb 59 e8 48 93 d8 f8 c6 05 51 30 c7 05 01 b9 10 00 00 00 48 c7 c7 00 6b c7 8b 4c 89 f6 48 c7 c2 80 6b c7 8b e8 a6 49 a2 f8 <0f> 0b e9 86 f0 ff ff e8 1a 93 d8 f8 eb 24 e8 13 93 d8 f8 c6 05 eb [ 1449.739588][T20991] RSP: 0018:ffffc900045bed40 EFLAGS: 00010246 [ 1449.745732][T20991] RAX: b034a85d8b98f600 RBX: ffff88805db58400 RCX: 0000000000080000 [ 1449.753848][T20991] RDX: ffffc90014882000 RSI: 0000000000004a3b RDI: 0000000000004a3c [ 1449.762019][T20991] RBP: ffffc900045beef8 R08: ffffc900045be947 R09: 1ffff920008b7d28 [ 1449.770133][T20991] R10: dffffc0000000000 R11: fffff520008b7d29 R12: ffff88805dafd400 [ 1449.778892][T20991] R13: ffff88805dafd4e8 R14: 0000000000000020 R15: ffff88807d489dc0 [ 1449.787204][T20991] FS: 00007f64951b46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1449.796791][T20991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1449.804087][T20991] CR2: 0000001b32f18ff8 CR3: 00000000656f1000 CR4: 00000000003506e0 [ 1449.812299][T20991] Call Trace: [ 1449.815660][T20991] [ 1449.818628][T20991] ? tc_new_tfilter+0x8f7/0x17c0 [ 1449.823757][T20991] ? u32_get+0x370/0x370 [ 1449.828579][T20991] ? u32_get+0x370/0x370 [ 1449.832895][T20991] tc_new_tfilter+0x11f9/0x17c0 [ 1449.838140][T20991] ? tcf_proto_signal_destroying+0x240/0x240 [ 1449.844199][T20991] ? rcu_read_unlock+0x8c/0xa0 [ 1449.849797][T20991] ? tcf_proto_signal_destroying+0x240/0x240 [ 1449.856057][T20991] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1449.861638][T20991] ? tcf_proto_signal_destroying+0x240/0x240 [ 1449.867883][T20991] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 1449.872926][T20991] ? lockdep_hardirqs_on+0x98/0x150 [ 1449.878419][T20991] ? rtnetlink_bind+0x80/0x80 [ 1449.883157][T20991] ? preempt_schedule_common+0x82/0xc0 [ 1449.888717][T20991] ? preempt_schedule+0xc0/0xd0 [ 1449.893710][T20991] ? schedule_preempt_disabled+0x20/0x20 [ 1449.899413][T20991] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1449.905454][T20991] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1449.911652][T20991] ? lock_chain_count+0x20/0x20 [ 1449.916644][T20991] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1449.922634][T20991] ? lockdep_hardirqs_on+0x98/0x150 [ 1449.927891][T20991] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1449.934327][T20991] ? _raw_spin_unlock+0x40/0x40 [ 1449.939326][T20991] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 1449.946226][T20991] netlink_rcv_skb+0x241/0x4d0 [ 1449.951186][T20991] ? rtnetlink_bind+0x80/0x80 [ 1449.956006][T20991] ? netlink_ack+0x1180/0x1180 [ 1449.960936][T20991] ? __lock_acquire+0x7d40/0x7d40 [ 1449.966122][T20991] ? __rcu_read_unlock+0x7c/0xd0 [ 1449.971126][T20991] ? netlink_deliver_tap+0x2e/0x1b0 [ 1449.976601][T20991] netlink_unicast+0x751/0x8d0 [ 1449.981454][T20991] netlink_sendmsg+0x8d0/0xbf0 [ 1449.986618][T20991] ? lockdep_hardirqs_on+0x98/0x150 [ 1449.992068][T20991] ? netlink_getsockopt+0x590/0x590 [ 1449.997468][T20991] ? netlink_getsockopt+0x590/0x590 [ 1450.002856][T20991] ? netlink_getsockopt+0x590/0x590 [ 1450.008175][T20991] ____sys_sendmsg+0x5ba/0x960 [ 1450.013009][T20991] ? __asan_memset+0x22/0x40 [ 1450.017832][T20991] ? __sys_sendmsg_sock+0x30/0x30 [ 1450.022909][T20991] ? __import_iovec+0x5f2/0x850 [ 1450.028112][T20991] ? import_iovec+0x73/0xa0 [ 1450.032859][T20991] ___sys_sendmsg+0x2a6/0x360 [ 1450.037614][T20991] ? __sys_sendmsg+0x2a0/0x2a0 [ 1450.042551][T20991] ? __sys_sendmmsg+0x29e/0x510 [ 1450.047962][T20991] __sys_sendmmsg+0x2ca/0x510 [ 1450.052828][T20991] ? __ia32_sys_sendmsg+0x90/0x90 [ 1450.057915][T20991] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1450.063978][T20991] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1450.070160][T20991] ? lock_chain_count+0x20/0x20 [ 1450.075084][T20991] __x64_sys_sendmmsg+0xa0/0xb0 [ 1450.080001][T20991] do_syscall_64+0x55/0xa0 [ 1450.084697][T20991] ? clear_bhb_loop+0x40/0x90 [ 1450.089533][T20991] ? clear_bhb_loop+0x40/0x90 [ 1450.094393][T20991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1450.100384][T20991] RIP: 0033:0x7f6496f9cdd9 [ 1450.104942][T20991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.125209][T20991] RSP: 002b:00007f64951b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1450.133708][T20991] RAX: ffffffffffffffda RBX: 00007f6497216180 RCX: 00007f6496f9cdd9 [ 1450.141818][T20991] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 1450.150028][T20991] RBP: 00007f6497032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1450.158546][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.166722][T20991] R13: 00007f6497216218 R14: 00007f6497216180 R15: 00007ffe56ea3ba8 [ 1450.174773][T20991] [ 1450.177909][T20991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1450.185234][T20991] CPU: 1 PID: 20991 Comm: syz.2.4697 Not tainted syzkaller #0 [ 1450.192909][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1450.203024][T20991] Call Trace: [ 1450.206339][T20991] [ 1450.209309][T20991] dump_stack_lvl+0x18c/0x250 [ 1450.214040][T20991] ? show_regs_print_info+0x20/0x20 [ 1450.219293][T20991] ? load_image+0x420/0x420 [ 1450.223866][T20991] panic+0x2dc/0x730 [ 1450.227817][T20991] ? bpf_jit_dump+0xd0/0xd0 [ 1450.232385][T20991] __warn+0x2e0/0x470 [ 1450.236492][T20991] ? u32_change+0x1c5a/0x24f0 [ 1450.241234][T20991] ? u32_change+0x1c5a/0x24f0 [ 1450.245974][T20991] report_bug+0x2be/0x4f0 [ 1450.250383][T20991] ? u32_change+0x1c5a/0x24f0 [ 1450.255112][T20991] ? u32_change+0x1c5a/0x24f0 [ 1450.259836][T20991] ? u32_change+0x1c5c/0x24f0 [ 1450.264994][T20991] handle_bug+0xcf/0x120 [ 1450.269276][T20991] exc_invalid_op+0x1a/0x50 [ 1450.273842][T20991] asm_exc_invalid_op+0x1a/0x20 [ 1450.278750][T20991] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 1450.284170][T20991] Code: f8 eb 59 e8 48 93 d8 f8 c6 05 51 30 c7 05 01 b9 10 00 00 00 48 c7 c7 00 6b c7 8b 4c 89 f6 48 c7 c2 80 6b c7 8b e8 a6 49 a2 f8 <0f> 0b e9 86 f0 ff ff e8 1a 93 d8 f8 eb 24 e8 13 93 d8 f8 c6 05 eb [ 1450.303911][T20991] RSP: 0018:ffffc900045bed40 EFLAGS: 00010246 [ 1450.310024][T20991] RAX: b034a85d8b98f600 RBX: ffff88805db58400 RCX: 0000000000080000 [ 1450.318031][T20991] RDX: ffffc90014882000 RSI: 0000000000004a3b RDI: 0000000000004a3c [ 1450.326054][T20991] RBP: ffffc900045beef8 R08: ffffc900045be947 R09: 1ffff920008b7d28 [ 1450.334077][T20991] R10: dffffc0000000000 R11: fffff520008b7d29 R12: ffff88805dafd400 [ 1450.342106][T20991] R13: ffff88805dafd4e8 R14: 0000000000000020 R15: ffff88807d489dc0 [ 1450.350325][T20991] ? tc_new_tfilter+0x8f7/0x17c0 [ 1450.355425][T20991] ? u32_get+0x370/0x370 [ 1450.359911][T20991] ? u32_get+0x370/0x370 [ 1450.364205][T20991] tc_new_tfilter+0x11f9/0x17c0 [ 1450.369225][T20991] ? tcf_proto_signal_destroying+0x240/0x240 [ 1450.375527][T20991] ? rcu_read_unlock+0x8c/0xa0 [ 1450.380523][T20991] ? tcf_proto_signal_destroying+0x240/0x240 [ 1450.386731][T20991] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1450.391973][T20991] ? tcf_proto_signal_destroying+0x240/0x240 [ 1450.398262][T20991] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 1450.403351][T20991] ? lockdep_hardirqs_on+0x98/0x150 [ 1450.408681][T20991] ? rtnetlink_bind+0x80/0x80 [ 1450.413487][T20991] ? preempt_schedule_common+0x82/0xc0 [ 1450.418988][T20991] ? preempt_schedule+0xc0/0xd0 [ 1450.423884][T20991] ? schedule_preempt_disabled+0x20/0x20 [ 1450.429898][T20991] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1450.435939][T20991] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1450.442054][T20991] ? lock_chain_count+0x20/0x20 [ 1450.447213][T20991] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1450.453368][T20991] ? lockdep_hardirqs_on+0x98/0x150 [ 1450.458788][T20991] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1450.464902][T20991] ? _raw_spin_unlock+0x40/0x40 [ 1450.469893][T20991] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 1450.476642][T20991] netlink_rcv_skb+0x241/0x4d0 [ 1450.481453][T20991] ? rtnetlink_bind+0x80/0x80 [ 1450.486172][T20991] ? netlink_ack+0x1180/0x1180 [ 1450.490996][T20991] ? __lock_acquire+0x7d40/0x7d40 [ 1450.496187][T20991] ? __rcu_read_unlock+0x7c/0xd0 [ 1450.501173][T20991] ? netlink_deliver_tap+0x2e/0x1b0 [ 1450.506513][T20991] netlink_unicast+0x751/0x8d0 [ 1450.511722][T20991] netlink_sendmsg+0x8d0/0xbf0 [ 1450.516677][T20991] ? lockdep_hardirqs_on+0x98/0x150 [ 1450.522092][T20991] ? netlink_getsockopt+0x590/0x590 [ 1450.527364][T20991] ? netlink_getsockopt+0x590/0x590 [ 1450.532701][T20991] ? netlink_getsockopt+0x590/0x590 [ 1450.538155][T20991] ____sys_sendmsg+0x5ba/0x960 [ 1450.543069][T20991] ? __asan_memset+0x22/0x40 [ 1450.547799][T20991] ? __sys_sendmsg_sock+0x30/0x30 [ 1450.553046][T20991] ? __import_iovec+0x5f2/0x850 [ 1450.558048][T20991] ? import_iovec+0x73/0xa0 [ 1450.562879][T20991] ___sys_sendmsg+0x2a6/0x360 [ 1450.567696][T20991] ? __sys_sendmsg+0x2a0/0x2a0 [ 1450.572579][T20991] ? __sys_sendmmsg+0x29e/0x510 [ 1450.577471][T20991] __sys_sendmmsg+0x2ca/0x510 [ 1450.582201][T20991] ? __ia32_sys_sendmsg+0x90/0x90 [ 1450.587309][T20991] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1450.593531][T20991] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1450.599990][T20991] ? lock_chain_count+0x20/0x20 [ 1450.605063][T20991] __x64_sys_sendmmsg+0xa0/0xb0 [ 1450.609959][T20991] do_syscall_64+0x55/0xa0 [ 1450.614501][T20991] ? clear_bhb_loop+0x40/0x90 [ 1450.619309][T20991] ? clear_bhb_loop+0x40/0x90 [ 1450.624127][T20991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1450.630134][T20991] RIP: 0033:0x7f6496f9cdd9 [ 1450.634588][T20991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.654848][T20991] RSP: 002b:00007f64951b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1450.663787][T20991] RAX: ffffffffffffffda RBX: 00007f6497216180 RCX: 00007f6496f9cdd9 [ 1450.671883][T20991] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 1450.679894][T20991] RBP: 00007f6497032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1450.687916][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.696099][T20991] R13: 00007f6497216218 R14: 00007f6497216180 R15: 00007ffe56ea3ba8 [ 1450.704296][T20991] [ 1450.707894][T20991] Kernel Offset: disabled [ 1450.712231][T20991] Rebooting in 86400 seconds..