last executing test programs: 23m4.07910902s ago: executing program 0 (id=805): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000002180)=0xd, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) rmdir(0x0) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) 23m3.217544682s ago: executing program 0 (id=807): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 22m58.761778197s ago: executing program 0 (id=815): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) 22m57.182805131s ago: executing program 0 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x0) 22m52.474265127s ago: executing program 0 (id=824): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r4 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, 0x0, &(0x7f00000000c0)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010141}}}]}, 0x34}}, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) unshare(0x2000400) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x5c, 0x90, 0xae, 0x40, 0xb95, 0x2790, 0xa9a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb6, 0x3, 0x90, 0x2, [{{0x9, 0x4, 0x84, 0x1e, 0x0, 0xff, 0x2e, 0xc4}}]}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x101, &(0x7f00000009c0)=@string={0x101, 0x3, "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"}}]}) 22m44.328929355s ago: executing program 0 (id=834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) pipe2(&(0x7f00000011c0), 0x800) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xf000, 0xd, 0xf7, 0x4, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0x1000, 0xdddd0000, 0xd, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x3}, {0x3000, 0xa002, 0x19, 0x8, 0x29, 0xf, 0xf5, 0x7, 0xf4, 0x6, 0x4, 0x10}, {0x8080000, 0xe000, 0xc, 0xc, 0x1e, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0x30000, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x5, 0x8, 0x0, 0xc}, {0x166672000, 0x8080000, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0xb000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x9, 0x9801, 0x1000, [0x9, 0x8001, 0x1003, 0xd378]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22m29.112087651s ago: executing program 32 (id=834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) pipe2(&(0x7f00000011c0), 0x800) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xf000, 0xd, 0xf7, 0x4, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0x1000, 0xdddd0000, 0xd, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x3}, {0x3000, 0xa002, 0x19, 0x8, 0x29, 0xf, 0xf5, 0x7, 0xf4, 0x6, 0x4, 0x10}, {0x8080000, 0xe000, 0xc, 0xc, 0x1e, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0x30000, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x5, 0x8, 0x0, 0xc}, {0x166672000, 0x8080000, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0xb000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x9, 0x9801, 0x1000, [0x9, 0x8001, 0x1003, 0xd378]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m27.749607856s ago: executing program 3 (id=1245): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000002180)=0xd, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) 18m26.883103418s ago: executing program 3 (id=1247): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) syz_open_dev$cec(0x0, 0x0, 0xc4c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2000000000002, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x990a23, 0x1}) 18m26.433258541s ago: executing program 3 (id=1249): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f0000000300), 0x3e, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff70) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x3d06, 0x400, 0x2, 0x154}, &(0x7f0000000140), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000700)={0x0}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) fadvise64(r1, 0x4, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000280)=0x26) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x20) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') 18m22.619229771s ago: executing program 3 (id=1253): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = epoll_create1(0x80000) memfd_create(&(0x7f0000000900)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\'u\xa4\x00_\xaf8\xdf-J?V=\xf3\xb4\xac\x179\x9f\x04\x100\x9f\xd4\xd6\x8d\xde\xc2Z\x17H\v\xeb_ug\xb1\x90_}\x9f\xa05D\xa8\xce#h`\x1c\x98\xa8\x0e\x86\xda&i)R1\xb7\xf5\n\x87\xd9z6\xc4\x9c1\xf3E-{1V\xe4\x99[\xe1\x85\x83??e\xae\x8a\xb2\xf8\x14z\xd3T/9\x00g\xba\x13x0}\xf6\xeb\xaeT\xa9\xe18\x06\xd8GwS\xc7\x85u\xc4\xa1\x9e\xf1\xc0\x8b\xd1\x14j\x88\x99\xfe\xeb\x83\x13]\r\xb7\xbf\x9cSL\xe3i\xc3\xfe\r\xf7%\x92,\xef\xf2\xc1\xb5\xb0\x16\x17W\xbc\x14\xc3\x05\xcdnY\x9a2\xa8U\x13\x869\xc5\xb6\xa3\x00\x86\xb9\xb0\x91\x83\x8an\xc5\x9a\xaeML\x91\xa0r\v\xbd\x8d\xf4\xa6\xc7E\xf8\x8bC0s\x99jO\x9dc\xefa\x85\x9a\xb1\x90\x01-\xb0L\x82\xe9\x03\xc2\xae', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close(0x3) capset(0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001340)={0x53, 0xffffffffffffffff, 0x6, 0x5, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)='B\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x60000006}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2000}) 18m21.039118554s ago: executing program 3 (id=1256): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x480501, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) munmap(&(0x7f00005f8000/0x2000)=nil, 0x2000) mremap(&(0x7f0000b2e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000842000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') syz_fuse_handle_req(r5, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r5, 0xffffffffffffffff, 0x1) 18m17.25515944s ago: executing program 3 (id=1260): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) socket$inet(0xa, 0x801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x3) 18m0.746915959s ago: executing program 33 (id=1260): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) socket$inet(0xa, 0x801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x3) 14m9.032784865s ago: executing program 1 (id=1568): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r1, 0x4, 0x4, &(0x7f0000000840), 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 14m8.674951186s ago: executing program 1 (id=1570): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 14m7.392050637s ago: executing program 1 (id=1571): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r0, &(0x7f0000000040)={0x7e}, &(0x7f0000000140), 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x14, 0x40018020, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x3c000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) syz_open_procfs(0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x7) accept$netrom(r5, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) 14m2.723326912s ago: executing program 1 (id=1576): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) io_uring_setup(0x3ef, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f0000000080), 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 13m56.197820856s ago: executing program 1 (id=1584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x645d, {"2ac78e02ff04856af9fb71f0d3fe13be", "3d684d00005fad27a639f8524c40f977", "ffff00ff000800"}, 0x3, 0x5}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x60a02, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x3) 13m51.325067791s ago: executing program 1 (id=1589): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x102) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) 13m35.600447951s ago: executing program 34 (id=1589): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x102) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) 11m20.418722108s ago: executing program 4 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1005}, 0x20000040) 11m18.307771619s ago: executing program 4 (id=1851): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) set_mempolicy(0x4000, &(0x7f0000000300)=0x8, 0x1e7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0x0, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 11m14.453990782s ago: executing program 4 (id=1858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x0) 11m12.337193221s ago: executing program 4 (id=1863): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000440)={r5, 0xfff}, 0x8) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0x20, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x2, 0x4, 0x3, 0x100, 0xffff, 0x1, 0x4e23, 0x4e24}}}}}}}}}, 0x0) 11m10.032211364s ago: executing program 4 (id=1870): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="190f0000000000000077b57f1bd2c0af2d0ba3929d11056951f2470aaa91512256e00f27c202f495be730b63b8fd4a00867f45cd91dccd7503abd200aee7276e2f3518e9add2d417f20f3be87ec84acee75e6876aa9942cce27e7f6ecfb18eb6de33edcbf720ce", 0x67) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') modify_ldt$write(0x1, &(0x7f00000000c0)={0x7, 0x1002, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r4, 0x80000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 11m5.081197454s ago: executing program 4 (id=1871): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e0c010320"], 0xf) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000780)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ftruncate(0xffffffffffffffff, 0x80079a0) 10m49.260403154s ago: executing program 35 (id=1871): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e0c010320"], 0xf) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000780)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ftruncate(0xffffffffffffffff, 0x80079a0) 2m36.404840205s ago: executing program 2 (id=2766): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb80", 0x4c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x20, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000001080)="f6f6dca1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc19088", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m35.05180518s ago: executing program 2 (id=2767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) openat$sequencer(0xffffffffffffff9c, 0x0, 0x5c0202, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) 2m34.283945208s ago: executing program 2 (id=2768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x1ad72f7) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) accept4(r3, 0x0, 0x0, 0x80000) 2m31.798316059s ago: executing program 2 (id=2778): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r3 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, 0x0, &(0x7f00000000c0)) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010141}}}]}, 0x34}}, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) unshare(0x2000400) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e"}, 0x3d) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x5c, 0x90, 0xae, 0x40, 0xb95, 0x2790, 0xa9a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb6, 0x3, 0x90, 0x2, [{{0x9, 0x4, 0x84, 0x1e, 0x0, 0xff, 0x2e, 0xc4}}]}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x101, &(0x7f00000009c0)=@string={0x101, 0x3, "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"}}]}) 2m28.378552606s ago: executing program 2 (id=2794): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb80", 0x4c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x20, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000001080)="f6f6dca1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc19088", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m28.055185882s ago: executing program 2 (id=2796): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x81}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) getsockopt$rose(r1, 0x104, 0x1, 0x0, 0x0) 2m12.833903598s ago: executing program 36 (id=2796): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x81}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) getsockopt$rose(r1, 0x104, 0x1, 0x0, 0x0) 1m3.912408686s ago: executing program 5 (id=2981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x2, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) connect$bt_rfcomm(r1, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000001080)=0xdb1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x100010, 0xffffffffffffffff, 0xd925000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfe30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FIONREAD(r3, 0x5453, 0xfffffffffffffffe) r4 = socket(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, 0x0, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x3c}}, 0x44080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) 59.757489938s ago: executing program 5 (id=2990): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 59.036723657s ago: executing program 5 (id=2994): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 50.278142833s ago: executing program 8 (id=3008): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x220801, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 47.127475583s ago: executing program 8 (id=3015): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x4, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1001}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 45.834356538s ago: executing program 8 (id=3017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000680)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x20000, 0x100000000, 0x4}}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 45.398437403s ago: executing program 5 (id=3020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 45.252119824s ago: executing program 8 (id=3021): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 45.053602305s ago: executing program 5 (id=3023): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpgrp(0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 42.669603056s ago: executing program 8 (id=3025): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x4, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1001}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 41.444029755s ago: executing program 8 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91", 0x3) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)=0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x4}, {0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}, {0x4}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) syz_io_uring_submit(r6, r9, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000240)={0x77359400}, 0x1, 0x40}) 41.432335893s ago: executing program 5 (id=3028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x9, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 26.32581061s ago: executing program 37 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91", 0x3) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)=0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x4}, {0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}, {0x4}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) syz_io_uring_submit(r6, r9, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000240)={0x77359400}, 0x1, 0x40}) 26.183506212s ago: executing program 38 (id=3028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x9, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 9.932767304s ago: executing program 6 (id=3076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000440)={r5, 0xfff}, 0x8) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0x20, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x2, 0x4, 0x3, 0x100, 0xffff, 0x1, 0x4e23, 0x4e24}}}}}}}}}, 0x0) 8.037163801s ago: executing program 6 (id=3079): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb80", 0x4c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x20, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000001080)="f6f6dca1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc19088", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, 0x0, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.790199689s ago: executing program 7 (id=3082): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, 0x0, 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 5.64282065s ago: executing program 7 (id=3083): syz_emit_ethernet(0x36, &(0x7f0000000a40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socket$nl_route(0x10, 0x3, 0x0) 4.498452215s ago: executing program 7 (id=3084): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}, @struct={0x4}]}}, &(0x7f0000001fc0)=""/4115, 0x3a, 0x1013, 0x1}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000009000), 0x4) keyctl$search(0xa, 0x0, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab08653904030401c50900000009c5000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5248ad423c469"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[], 0x0, 0x4d, 0x0, 0x1}, 0x28) 2.49472325s ago: executing program 6 (id=3085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000440)={r5, 0xfff}, 0x8) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0x20, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x2, 0x4, 0x3, 0x100, 0xffff, 0x1, 0x4e23, 0x4e24}}}}}}}}}, 0x0) 2.417007575s ago: executing program 7 (id=3086): socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket(0x2b, 0x1, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000810) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="6f73780e2f295ec252bb00d1b5bdd6"]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 1.097424036s ago: executing program 6 (id=3087): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000c4c0000000c0a01030000000000000000010000000800044000000000090001"], 0xd0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 871.340651ms ago: executing program 6 (id=3088): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) get_robust_list(0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000c14010026bd7000fbdbdf2508003d00050000000800110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) 870.610591ms ago: executing program 7 (id=3089): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x46, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 258.737631ms ago: executing program 7 (id=3090): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) unshare(0x22020600) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, r6, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) listen(r7, 0x0) sync_file_range(r1, 0x2, 0x56, 0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 6 (id=3091): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb80", 0x4c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x20, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000001080)="f6f6dca1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc19088", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, 0x0, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ] loop2: detected capacity change from 0 to 2048 [ 1085.462699][T12086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1085.473639][T12086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1085.481186][T12086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1085.604291][T12841] UDF-fs: bad mount option "umask=00000000000000040003W§ÿóV„X"Žµ™2000" or missing value [ 1085.769453][T12750] syz_tun (unregistering): left allmulticast mode [ 1085.891102][T12750] syz_tun (unregistering): left promiscuous mode [ 1085.944506][T12750] bridge0: port 3(syz_tun) entered disabled state [ 1086.325471][T12848] lo speed is unknown, defaulting to 1000 [ 1088.604257][T12086] Bluetooth: hci1: command tx timeout [ 1088.884507][T12862] overlayfs: missing 'workdir' [ 1090.633400][T12086] Bluetooth: hci1: command tx timeout [ 1091.059657][T12848] chnl_net:caif_netlink_parms(): no params data found [ 1092.706583][T12086] Bluetooth: hci1: command tx timeout [ 1093.033118][T12848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.040853][T12848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.084947][T12848] bridge_slave_0: entered allmulticast mode [ 1093.123436][T12848] bridge_slave_0: entered promiscuous mode [ 1093.426377][T12848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.436094][T12848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.446717][T12848] bridge_slave_1: entered allmulticast mode [ 1093.523544][T12848] bridge_slave_1: entered promiscuous mode [ 1093.745405][T12848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.857654][T12848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.143671][T12848] team0: Port device team_slave_0 added [ 1094.185026][T12848] team0: Port device team_slave_1 added [ 1095.403519][T12086] Bluetooth: hci1: command tx timeout [ 1095.686835][T12848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.723392][T12848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.749352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.880099][T12848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.954480][T12848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.961599][T12848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.073476][T12848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.560780][T12848] hsr_slave_0: entered promiscuous mode [ 1096.633959][T12848] hsr_slave_1: entered promiscuous mode [ 1096.664534][T12848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.672178][T12848] Cannot create hsr debugfs directory [ 1096.830421][T12900] 0x000000020000-0x000100020000 : "" [ 1096.863513][T12900] mtd: partition "" is out of reach -- disabled [ 1096.977026][T12900] ftl_cs: FTL header not found. [ 1098.872420][T12848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1099.018595][T12848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1099.108731][T12848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1099.200840][T12848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1100.270091][T12848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.406163][T12848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.457534][ T9376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.464827][ T9376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.127483][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.134709][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.475326][T12848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1103.557675][T12848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.962499][T12848] veth0_vlan: entered promiscuous mode [ 1105.323378][ T2132] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1105.931768][T12848] veth1_vlan: entered promiscuous mode [ 1105.975794][ T2132] usb 5-1: Using ep0 maxpacket: 16 [ 1106.002724][ T2132] usb 5-1: too many configurations: 14, using maximum allowed: 8 [ 1106.075719][ T2132] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1106.104920][ T2132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.130965][ T2132] usb 5-1: Product: syz [ 1106.138970][ T2132] usb 5-1: Manufacturer: syz [ 1106.144421][ T2132] usb 5-1: SerialNumber: syz [ 1106.178930][ T2132] usb 5-1: config 0 descriptor?? [ 1106.181174][T12848] veth0_macvtap: entered promiscuous mode [ 1106.272137][T12848] veth1_macvtap: entered promiscuous mode [ 1106.346390][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.399455][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.446702][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.489837][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.539384][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.610446][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.668799][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.731291][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.821394][T12848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.865337][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.878793][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.891106][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.903463][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.915053][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.926846][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.937021][T12848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.952992][T12848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.984074][T12848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.998468][T12848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.007510][T12848] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.017499][T12848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.029059][T12848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.042013][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.088375][ T8] usb 5-1: USB disconnect, device number 13 [ 1108.103970][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.384803][ T318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.578671][ T318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.702424][T12986] netlink: 'syz.4.1643': attribute type 10 has an invalid length. [ 1110.796070][T13001] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1648'. [ 1110.814504][T13001] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1648'. [ 1111.623714][ T5851] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1112.119949][ T2132] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1112.313424][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 1112.537545][ T2132] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1112.622343][ T2132] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1112.761837][ T2132] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1112.898019][ T2132] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1112.990728][ T2132] usb 5-1: Product: syz [ 1113.088680][ T2132] usb 5-1: Manufacturer: syz [ 1113.094929][ T2132] usb 5-1: SerialNumber: syz [ 1113.218447][ T2132] usb 5-1: config 0 descriptor?? [ 1114.097867][ T5851] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 1114.298025][ T2132] usb 5-1: can't set config #0, error -71 [ 1114.347188][ T2132] usb 5-1: USB disconnect, device number 14 [ 1114.357574][ T5851] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1114.413302][ T5851] usb 3-1: can't read configurations, error -71 [ 1115.907754][T13047] netlink: 'syz.5.1661': attribute type 49 has an invalid length. [ 1116.110260][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.117192][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.048655][T13060] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1662'. [ 1119.335390][T12086] Bluetooth: hci1: command tx timeout [ 1124.376205][T13161] netlink: 'syz.4.1673': attribute type 49 has an invalid length. [ 1124.474591][T13160] 0x000000020000-0x000100020000 : "" [ 1124.480168][T13160] mtd: partition "" is out of reach -- disabled [ 1124.946485][T13160] ftl_cs: FTL header not found. [ 1125.855703][T13179] affs: No valid root block on device nullb0 [ 1128.078324][T13200] fuse: Bad value for 'fd' [ 1128.832728][T13205] netlink: 'syz.4.1683': attribute type 49 has an invalid length. [ 1130.176491][T13217] affs: No valid root block on device nullb0 [ 1130.525340][T13211] bridge1: entered promiscuous mode [ 1130.530713][T13211] bridge1: entered allmulticast mode [ 1130.541203][T13211] team0: Port device bridge1 added [ 1130.590901][T13211] bridge2: entered allmulticast mode [ 1130.893593][ T2132] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1131.160728][ T2132] usb 3-1: device descriptor read/64, error -71 [ 1133.348213][ T2132] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1134.654790][T13244] netlink: 'syz.6.1694': attribute type 49 has an invalid length. [ 1136.639013][T13248] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1696'. [ 1136.689021][T13248] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1696'. [ 1137.322717][T13254] affs: No valid root block on device nullb0 [ 1138.964409][ T9012] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1139.060669][T13274] netlink: 'syz.6.1705': attribute type 49 has an invalid length. [ 1139.811951][ T9012] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1140.193607][ T5851] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1140.383569][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 1140.732706][ T9012] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1140.763689][ T5851] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 1140.796960][ T5851] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1140.813313][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.833398][ T5851] usb 6-1: Product: syz [ 1140.850957][ T5851] usb 6-1: Manufacturer: syz [ 1140.857549][ T9012] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1140.877096][ T5851] usb 6-1: SerialNumber: syz [ 1140.897595][ T9012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1140.929330][ T5851] usb 6-1: config 0 descriptor?? [ 1140.988806][ T9012] usb 3-1: SerialNumber: syz [ 1141.060339][ T9012] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1141.120631][ T9012] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1141.155472][T13281] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1706'. [ 1141.191183][ T9012] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1141.228852][ T9012] scsi host1: usb-storage 3-1:1.0 [ 1141.287999][ T9012] usb 3-1: USB disconnect, device number 26 [ 1141.319288][T13281] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1706'. [ 1142.397483][ T9012] usb 6-1: USB disconnect, device number 8 [ 1144.581100][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 1144.590225][T13304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1710'. [ 1146.627744][T13317] netlink: 'syz.5.1716': attribute type 1 has an invalid length. [ 1146.776108][T13317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1146.893953][T13321] bond1: (slave geneve2): making interface the new active one [ 1146.935321][T13321] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1146.944847][T13318] bridge0: port 3(syz_tun) entered blocking state [ 1146.963331][T13318] bridge0: port 3(syz_tun) entered disabled state [ 1146.972923][T13318] syz_tun: entered allmulticast mode [ 1147.059161][T13318] syz_tun: entered promiscuous mode [ 1147.161560][T13318] bridge0: port 3(syz_tun) entered blocking state [ 1147.168295][T13318] bridge0: port 3(syz_tun) entered forwarding state [ 1147.297173][T13325] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1717'. [ 1147.328654][T13326] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1717'. [ 1149.089874][T13343] affs: No valid root block on device nullb0 [ 1150.415670][ T5851] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1150.735295][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1150.797100][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1150.899726][ T5851] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1151.043362][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1151.072206][ T5851] usb 7-1: SerialNumber: syz [ 1151.116795][T13355] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1727'. [ 1151.150504][ T5851] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 1151.171521][T13356] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1727'. [ 1151.253681][ T5851] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1151.400271][ T5851] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1151.482571][ T5851] scsi host1: usb-storage 7-1:1.0 [ 1151.568206][ T5851] usb 7-1: USB disconnect, device number 2 [ 1156.094187][T13392] vivid-007: disconnect [ 1156.586970][T13389] vivid-007: reconnect [ 1160.777707][T13414] affs: No valid root block on device nullb0 [ 1161.288367][T13420] netlink: 'syz.6.1746': attribute type 10 has an invalid length. [ 1161.999393][T13420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.007933][T13420] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1162.873983][T13435] netlink: 'syz.6.1749': attribute type 16 has an invalid length. [ 1162.882586][T13435] netlink: 'syz.6.1749': attribute type 17 has an invalid length. [ 1163.624753][T13435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1167.503413][ T9012] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1168.109594][T13464] mmap: syz.4.1757 (13464) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1168.313419][ T9012] usb 6-1: Using ep0 maxpacket: 16 [ 1168.332588][ T9012] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 1168.382886][ T9012] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1168.423007][ T9012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.460538][ T9012] usb 6-1: Product: syz [ 1168.473284][ T9012] usb 6-1: Manufacturer: syz [ 1168.477934][ T9012] usb 6-1: SerialNumber: syz [ 1168.550827][ T9012] usb 6-1: config 0 descriptor?? [ 1168.564868][T13467] netlink: 'syz.2.1758': attribute type 10 has an invalid length. [ 1169.838024][T13473] hpfs: Bad magic ... probably not HPFS [ 1170.034174][ T9012] usb 6-1: USB disconnect, device number 9 [ 1170.330271][T13479] vivid-007: disconnect [ 1170.817705][T13475] vivid-007: reconnect [ 1175.889028][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'. [ 1175.954942][T13504] netlink: 'syz.5.1767': attribute type 10 has an invalid length. [ 1176.012662][T12086] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1177.465705][T13020] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1177.515437][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.521980][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.637647][ T8] IPVS: starting estimator thread 0... [ 1177.763756][T13531] IPVS: using max 16 ests per chain, 38400 per kthread [ 1178.433915][T13020] usb 6-1: Using ep0 maxpacket: 16 [ 1178.885107][T13020] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 1178.998379][T13020] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1179.023568][T13020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.031651][T13020] usb 6-1: Product: syz [ 1179.053785][T13020] usb 6-1: Manufacturer: syz [ 1179.058609][T13020] usb 6-1: SerialNumber: syz [ 1179.109445][T13020] usb 6-1: config 0 descriptor?? [ 1179.426908][ T23] usb 6-1: USB disconnect, device number 10 [ 1179.585769][T13541] affs: No valid root block on device nullb0 [ 1181.255466][T13552] netlink: 'syz.6.1778': attribute type 10 has an invalid length. [ 1182.456239][T13119] wlan1: Trigger new scan to find an IBSS to join [ 1187.429118][ T3519] wlan1: Trigger new scan to find an IBSS to join [ 1187.738280][T13604] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1792'. [ 1188.856515][ T49] wlan1: Creating new IBSS network, BSSID 96:a9:fb:cc:5c:f4 [ 1188.979992][T13614] netlink: 'syz.2.1795': attribute type 49 has an invalid length. [ 1189.055758][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1791'. [ 1190.332392][T13624] hpfs: Bad magic ... probably not HPFS [ 1194.494174][T13642] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1194.552841][T13642] bridge0: port 3(syz_tun) entered disabled state [ 1194.559598][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.561449][T13638] vivid-007: disconnect [ 1194.567119][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.026500][T13635] vivid-007: reconnect [ 1197.679542][T13677] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1814'. [ 1197.703814][T13677] bridge0: port 3(syz_tun) entered disabled state [ 1197.710791][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.718548][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.498661][T13682] comedi comedi4: bad chanlist[0]=0x00000101 chan=257 range length=2 [ 1202.252581][T13699] autofs4:pid:13699:autofs_fill_super: called with bogus options [ 1203.819350][T13708] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1824'. [ 1204.306766][T13712] vivid-007: disconnect [ 1204.616890][T13709] vivid-007: reconnect [ 1206.620826][T13726] netlink: 'syz.4.1827': attribute type 10 has an invalid length. [ 1207.195388][T13731] bridge0: port 3(syz_tun) entered blocking state [ 1207.202612][T13731] bridge0: port 3(syz_tun) entered disabled state [ 1207.210039][T13731] syz_tun: entered allmulticast mode [ 1207.225848][T13731] syz_tun: entered promiscuous mode [ 1207.234311][T13731] bridge0: port 3(syz_tun) entered blocking state [ 1207.241001][T13731] bridge0: port 3(syz_tun) entered forwarding state [ 1216.783024][T13782] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1833'. [ 1217.869408][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'. [ 1218.913968][T12878] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1222.781967][T13837] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1853'. [ 1222.794528][T13837] bridge0: port 3(syz_tun) entered disabled state [ 1222.801262][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.808759][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.725760][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 1234.490067][T13907] netlink: 'syz.6.1873': attribute type 49 has an invalid length. [ 1234.612325][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 1235.375798][T13912] netlink: 'syz.4.1871': attribute type 10 has an invalid length. [ 1239.193540][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.199917][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.206786][ T9012] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1239.291847][ T3519] wlan1: Trigger new scan to find an IBSS to join [ 1241.480854][T13123] wlan1: Creating new IBSS network, BSSID 4e:4c:0c:e2:b5:f5 [ 1243.928562][T13947] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1888'. [ 1247.593272][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 1249.172572][T13909] syz_tun (unregistering): left allmulticast mode [ 1249.211255][T13909] syz_tun (unregistering): left promiscuous mode [ 1249.413238][T13909] bridge0: port 3(syz_tun) entered disabled state [ 1251.721293][T12878] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1251.744969][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1251.765238][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1251.773927][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1251.786362][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1251.798729][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1251.806619][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1251.992942][T13974] lo speed is unknown, defaulting to 1000 [ 1253.905455][T12086] Bluetooth: hci2: command tx timeout [ 1254.970449][T13974] chnl_net:caif_netlink_parms(): no params data found [ 1255.183388][ T9012] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1255.404778][ T9012] usb 7-1: Using ep0 maxpacket: 32 [ 1255.418374][ T9012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.463854][ T9012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.515012][ T9012] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1255.543341][ T9012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.627041][ T9012] usb 7-1: config 0 descriptor?? [ 1255.655555][ T9012] hub 7-1:0.0: USB hub found [ 1255.882121][ T9012] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1255.983631][T12086] Bluetooth: hci2: command tx timeout [ 1256.515708][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 1256.806077][T13974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.857974][ T9012] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 1256.858621][T13974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.979311][T13974] bridge_slave_0: entered allmulticast mode [ 1257.036798][T13974] bridge_slave_0: entered promiscuous mode [ 1258.354108][T12086] Bluetooth: hci2: command tx timeout [ 1258.461639][ T9012] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 1258.536535][T13974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.631939][T13974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.696815][T13974] bridge_slave_1: entered allmulticast mode [ 1258.727269][T13974] bridge_slave_1: entered promiscuous mode [ 1260.122918][ T9012] usb 7-1: USB disconnect, device number 3 [ 1260.471002][T12086] Bluetooth: hci2: command tx timeout [ 1260.890403][T13974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.266189][T13974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.866147][T13974] team0: Port device team_slave_0 added [ 1263.623225][T13974] team0: Port device team_slave_1 added [ 1264.610373][T13974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.624614][T13974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.703507][T13974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.770411][T13974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.802611][T13974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.834771][T13974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.121470][T13125] hsr_slave_0: left promiscuous mode [ 1266.921107][T13125] hsr_slave_1: left promiscuous mode [ 1267.004856][T13125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.135555][T13125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.194530][T13125] bridge_slave_1: left allmulticast mode [ 1267.200215][T13125] bridge_slave_1: left promiscuous mode [ 1267.313710][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.483939][T13125] bridge_slave_0: left allmulticast mode [ 1267.489635][T13125] bridge_slave_0: left promiscuous mode [ 1267.573559][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.551260][T13115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1271.967357][T13125] team0 (unregistering): Port device team_slave_1 removed [ 1272.298565][T13125] team0 (unregistering): Port device team_slave_0 removed [ 1272.673503][T13125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.894604][T13125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.921073][T13125] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1274.226170][T13125] bond0 (unregistering): Released all slaves [ 1274.421726][T13974] hsr_slave_0: entered promiscuous mode [ 1274.428749][T13974] hsr_slave_1: entered promiscuous mode [ 1274.456082][T13974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.484746][T13974] Cannot create hsr debugfs directory [ 1274.537983][T14092] netlink: 'syz.5.1911': attribute type 49 has an invalid length. [ 1275.297230][T13125] IPVS: stop unused estimator thread 0... [ 1275.493274][ T2132] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1275.593015][T14117] hpfs: Bad magic ... probably not HPFS [ 1275.614036][T13974] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1275.651976][T13974] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1275.677918][T13974] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1275.695344][ T2132] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1275.705962][T13974] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1275.743305][ T2132] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1275.806253][ T2132] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1275.844319][ T2132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1275.865645][ T2132] usb 6-1: SerialNumber: syz [ 1275.900776][ T2132] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1275.929482][ T2132] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1275.996247][ T2132] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1276.358460][ T2132] scsi host1: usb-storage 6-1:1.0 [ 1276.477883][T13974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.607224][T13974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.690562][ T9376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.697774][ T9376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.758062][ T9376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.765249][ T9376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.745488][ T2132] usb 6-1: USB disconnect, device number 12 [ 1278.479076][T13974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.387833][T14164] netlink: 'syz.5.1927': attribute type 49 has an invalid length. [ 1281.448999][T14165] syzkaller0: entered promiscuous mode [ 1281.623226][T14165] syzkaller0: entered allmulticast mode [ 1282.224492][T13974] veth0_vlan: entered promiscuous mode [ 1282.328166][T13974] veth1_vlan: entered promiscuous mode [ 1282.525553][T13974] veth0_macvtap: entered promiscuous mode [ 1282.683775][T13974] veth1_macvtap: entered promiscuous mode [ 1282.887243][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.113454][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.153896][T14190] vivid-007: disconnect [ 1283.493430][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.527302][T14188] vivid-007: reconnect [ 1283.532315][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.542803][T13115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1283.573422][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.678369][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.756490][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.844523][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.929855][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.955624][T14196] siw: device registration error -23 [ 1283.993901][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.094324][T13974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.219821][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.367124][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.413405][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.497963][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.549869][T14202] binder: BINDER_SET_CONTEXT_MGR already set [ 1285.583540][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.623353][T14202] binder: 14201:14202 ioctl 4018620d 200000000040 returned -16 [ 1285.734485][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.803427][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.913209][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.923097][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.877947][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.445816][T13974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1288.603858][T13974] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.612617][T13974] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.708653][T13974] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.793319][T13974] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.644255][T13129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.786965][T13129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.977274][ T9376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.049655][ T9376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.476447][T14249] netlink: 'syz.2.1938': attribute type 49 has an invalid length. [ 1295.562633][T14254] siw: device registration error -23 [ 1297.301658][T14275] fscrypt: Error allocating hmac(sha512): -2 [ 1301.459728][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.471344][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.725400][T14309] netlink: 'syz.2.1956': attribute type 49 has an invalid length. [ 1302.920250][T13113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1306.725048][T14352] syzkaller0: entered promiscuous mode [ 1306.730738][T14352] syzkaller0: entered allmulticast mode [ 1308.868010][T14371] hpfs: Bad magic ... probably not HPFS [ 1313.680818][T14406] bridge0: port 3(syz_tun) entered blocking state [ 1313.688589][T14406] bridge0: port 3(syz_tun) entered disabled state [ 1313.699325][T14406] syz_tun: entered allmulticast mode [ 1313.713488][T14406] syz_tun: entered promiscuous mode [ 1313.727337][T14406] bridge0: port 3(syz_tun) entered blocking state [ 1313.734130][T14406] bridge0: port 3(syz_tun) entered forwarding state [ 1314.586526][T14411] Illegal XDP return value 4294967274 on prog (id 66) dev N/A, expect packet loss! [ 1318.360755][T14436] 0x000000020000-0x000100020000 : "" [ 1318.391258][T14436] mtd: partition "" is out of reach -- disabled [ 1318.458458][T14436] ftl_cs: FTL header not found. [ 1318.571168][T13113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1320.988725][T14451] block device autoloading is deprecated and will be removed. [ 1321.022922][T14451] syz.7.1985: attempt to access beyond end of device [ 1321.022922][T14451] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1322.401304][T12878] wlan1: Trigger new scan to find an IBSS to join [ 1324.997609][T14494] vivid-007: disconnect [ 1325.026139][T14492] vivid-007: reconnect [ 1326.084483][T13123] wlan1: Trigger new scan to find an IBSS to join [ 1328.993210][T13020] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1329.205595][T13125] wlan1: Creating new IBSS network, BSSID 62:3b:69:9f:9d:d7 [ 1329.223484][T13020] usb 3-1: device descriptor read/64, error -71 [ 1329.513582][T13020] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1329.775435][T13020] usb 3-1: device descriptor read/64, error -71 [ 1329.978877][T13020] usb usb3-port1: attempt power cycle [ 1330.613732][T13020] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1332.154204][T13020] usb 3-1: device descriptor read/8, error -71 [ 1332.483396][T13020] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1332.630017][T13020] usb 3-1: device descriptor read/8, error -71 [ 1332.863754][T13020] usb usb3-port1: unable to enumerate USB device [ 1332.987417][T14547] vivid-007: disconnect [ 1332.995594][T14546] vivid-007: reconnect [ 1338.063846][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1341.437003][T14602] Bluetooth: hci1: command 0x0406 tx timeout [ 1342.063382][ T3519] wlan1: Trigger new scan to find an IBSS to join [ 1346.193948][ T9376] wlan1: Creating new IBSS network, BSSID 8a:83:ba:8c:87:7e [ 1348.876067][T14677] syz.5.2028: attempt to access beyond end of device [ 1348.876067][T14677] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1351.126595][T14703] fuse: Unknown parameter 'group_i00000000000000000000' [ 1353.048042][ T49] wlan1: Trigger new scan to find an IBSS to join [ 1356.716420][T14749] syz.6.2042: attempt to access beyond end of device [ 1356.716420][T14749] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1356.854115][T14748] 0x000000020000-0x000100020000 : "" [ 1356.859506][T14748] mtd: partition "" is out of reach -- disabled [ 1356.938221][T14748] ftl_cs: FTL header not found. [ 1357.202291][T13113] wlan1: Trigger new scan to find an IBSS to join [ 1359.216747][ T9376] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1359.231791][ T49] wlan1: Creating new IBSS network, BSSID 46:18:d3:1a:21:b2 [ 1361.243360][ T5851] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1361.268079][T14793] bridge1: entered promiscuous mode [ 1361.273501][T14793] bridge1: entered allmulticast mode [ 1361.854126][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.860521][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.213247][ T5851] usb 7-1: device descriptor read/64, error -71 [ 1363.623566][ T5851] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1363.794881][ T5851] usb 7-1: device descriptor read/64, error -71 [ 1364.059281][ T5851] usb usb7-port1: attempt power cycle [ 1364.584527][ T5851] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1364.865610][ T5851] usb 7-1: device not accepting address 6, error -71 [ 1365.873382][ T5851] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1365.923984][ T5851] usb 7-1: Using ep0 maxpacket: 8 [ 1365.945244][ T5851] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1366.034583][ T5851] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1366.084308][ T5851] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1366.102286][ T5851] usb 7-1: Product: syz [ 1366.284591][ T5851] usb 7-1: Manufacturer: syz [ 1366.409268][ T5851] usb 7-1: SerialNumber: syz [ 1366.508445][T14833] fscrypt: Error allocating hmac(sha512): -2 [ 1366.878090][ T5851] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 1366.894258][ T5851] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1366.902256][ T5851] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1366.910759][ T5851] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1367.075730][ T5851] usb 7-1: palm_os_3_probe - error -71 getting bytes available request [ 1367.303441][ T5851] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 1367.456428][T14853] syz.2.2063: attempt to access beyond end of device [ 1367.456428][T14853] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1367.807692][ T5851] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1367.842993][ T5851] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1367.871120][ T5851] usb 7-1: USB disconnect, device number 7 [ 1367.889143][ T5851] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1368.018325][ T5851] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1368.071681][ T5851] visor 7-1:1.0: device disconnected [ 1368.740481][T14864] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2068'. [ 1368.782903][T14864] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2068'. [ 1370.653864][T13021] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1370.684966][T14889] fscrypt: Error allocating hmac(sha512): -2 [ 1370.974938][T13021] usb 7-1: Using ep0 maxpacket: 16 [ 1370.991403][T13021] usb 7-1: too many configurations: 14, using maximum allowed: 8 [ 1371.022450][T13021] usb 7-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1371.032367][T13021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.040982][T13021] usb 7-1: Product: syz [ 1371.045737][T13021] usb 7-1: Manufacturer: syz [ 1371.050403][T13021] usb 7-1: SerialNumber: syz [ 1371.074701][T13021] usb 7-1: config 0 descriptor?? [ 1371.151808][T14901] 0x000000020000-0x000100020000 : "" [ 1371.175794][T14901] mtd: partition "" is out of reach -- disabled [ 1371.257266][T14901] ftl_cs: FTL header not found. [ 1373.053613][T14910] syz.7.2075 (14910) used greatest stack depth: 17136 bytes left [ 1373.187794][T13021] usb 7-1: USB disconnect, device number 8 [ 1375.527112][T14602] Bluetooth: hci2: command 0x0406 tx timeout [ 1375.668352][T14945] binder: 14943:14945 ioctl 4018620d 0 returned -22 [ 1379.233465][ T2132] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1379.433373][ T2132] usb 3-1: device descriptor read/64, error -71 [ 1379.723335][ T2132] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1379.800027][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1381.419300][ T2132] usb 3-1: device descriptor read/64, error -71 [ 1381.533427][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1381.553876][ T8] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 1381.568779][ T2132] usb usb3-port1: attempt power cycle [ 1381.607851][ T8] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1381.632175][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.653248][ T8] usb 6-1: Product: syz [ 1381.657514][ T8] usb 6-1: Manufacturer: syz [ 1381.662157][ T8] usb 6-1: SerialNumber: syz [ 1381.686066][ T8] usb 6-1: config 0 descriptor?? [ 1382.043445][ T2132] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1382.309078][ T2132] usb 3-1: device not accepting address 33, error -71 [ 1384.225926][T13021] usb 6-1: USB disconnect, device number 13 [ 1386.099352][T15002] syz.7.2093: attempt to access beyond end of device [ 1386.099352][T15002] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1389.210777][ T3519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1391.133353][ T23] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1391.343415][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1391.351746][ T23] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 1391.367892][T13125] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1391.490856][ T23] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1391.517217][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.525572][ T23] usb 6-1: Product: syz [ 1391.529788][ T23] usb 6-1: Manufacturer: syz [ 1391.534511][ T23] usb 6-1: SerialNumber: syz [ 1391.591804][ T23] usb 6-1: config 0 descriptor?? [ 1393.807922][ T2132] usb 6-1: USB disconnect, device number 14 [ 1398.103006][T15073] syz.5.2118: attempt to access beyond end of device [ 1398.103006][T15073] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1401.023554][ T2132] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1401.345597][ T2132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.397931][ T2132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.483500][ T2132] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1401.528206][ T2132] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1401.538100][ T2132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.582714][ T2132] usb 6-1: config 0 descriptor?? [ 1403.057937][ T2132] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1403.232545][ T2132] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1403.382084][ T2132] usb 6-1: USB disconnect, device number 15 [ 1403.788183][T15105] fido_id[15105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1407.428377][T15124] syz.5.2133: attempt to access beyond end of device [ 1407.428377][T15124] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1413.201539][T15133] syz.2.2135 (15133): drop_caches: 2 [ 1414.136425][T15160] netlink: 'syz.6.2145': attribute type 49 has an invalid length. [ 1420.848834][T13113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1422.564080][T15205] syz.2.2156: attempt to access beyond end of device [ 1422.564080][T15205] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1424.813666][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.994371][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.124299][T13115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1426.187029][T15232] hpfs: Bad magic ... probably not HPFS [ 1429.150777][T15246] fuse: Bad value for 'fd' [ 1430.663989][T15263] syz.2.2173: attempt to access beyond end of device [ 1430.663989][T15263] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1436.232336][T15299] netlink: 'syz.2.2185': attribute type 49 has an invalid length. [ 1436.285767][T15300] fuse: Bad value for 'rootmode' [ 1437.289753][T15311] syz.6.2190: attempt to access beyond end of device [ 1437.289753][T15311] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1439.321438][T15321] hpfs: Bad magic ... probably not HPFS [ 1441.137297][T15340] netlink: 'syz.6.2200': attribute type 49 has an invalid length. [ 1441.283190][ T2132] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1441.481837][ T2132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.539059][ T2132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.578166][ T2132] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1441.593565][ T2132] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1441.602787][ T2132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.620283][ T2132] usb 3-1: config 0 descriptor?? [ 1442.096649][ T2132] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1442.259860][ T2132] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1442.704295][T13021] usb 3-1: USB disconnect, device number 35 [ 1442.947972][T15352] fido_id[15352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1443.383953][T15364] hpfs: Bad magic ... probably not HPFS [ 1443.802996][T15366] fuse: Bad value for 'group_id' [ 1444.031014][T15369] netlink: 'syz.6.2209': attribute type 49 has an invalid length. [ 1444.290786][T15376] Cannot find del_set index 2 as target [ 1444.733346][ T2132] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1444.996828][ T2132] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1445.015171][ T2132] usb 3-1: config 182 has an invalid interface number: 132 but max is 0 [ 1445.041599][ T2132] usb 3-1: config 182 has no interface number 0 [ 1445.078532][ T2132] usb 3-1: config 182 interface 132 has no altsetting 0 [ 1445.121466][ T2132] usb 3-1: string descriptor 0 read error: -22 [ 1445.133632][ T2132] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 1445.134502][T15395] fuse: Bad value for 'group_id' [ 1445.149101][ T2132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.463273][T15407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2224'. [ 1448.898341][T15418] fuse: Bad value for 'fd' [ 1449.031136][ T23] usb 3-1: USB disconnect, device number 36 [ 1450.474115][T15426] hpfs: Bad magic ... probably not HPFS [ 1452.639199][ T3519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1456.227573][T15460] Cannot find del_set index 2 as target [ 1457.250381][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1459.190503][T15479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2244'. [ 1460.920887][T15486] fscrypt: Error allocating hmac(sha512): -2 [ 1461.300266][T15496] syz.7.2248: attempt to access beyond end of device [ 1461.300266][T15496] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1464.994809][T15532] fuse: Unknown parameter 'user_i00000000000000000000' [ 1465.131881][T15534] fuse: Bad value for 'fd' [ 1466.289699][T15542] syz.7.2263: attempt to access beyond end of device [ 1466.289699][T15542] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1467.065700][T15548] vivid-007: disconnect [ 1467.771029][T15546] vivid-007: reconnect [ 1469.070571][T15564] fuse: Unknown parameter 'user_i00000000000000000000' [ 1472.613721][T15602] fuse: Unknown parameter 'user_id00000000000000000000' [ 1472.625846][T15599] Cannot find del_set index 2 as target [ 1473.093505][ T5851] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1473.783494][T15608] netlink: 'syz.6.2285': attribute type 49 has an invalid length. [ 1474.208342][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1474.303681][ T5851] usb 6-1: config 182 has an invalid interface number: 132 but max is 0 [ 1474.335485][ T5851] usb 6-1: config 182 has no interface number 0 [ 1474.341931][ T5851] usb 6-1: config 182 interface 132 has no altsetting 0 [ 1474.651037][ T5851] usb 6-1: string descriptor 0 read error: -22 [ 1474.741876][ T5851] usb 6-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 1474.934592][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.926757][ T5851] usb 6-1: USB disconnect, device number 16 [ 1475.982218][T15634] fuse: Bad value for 'fd' [ 1476.351046][T15640] fuse: Bad value for 'fd' [ 1476.396075][T15641] vivid-007: disconnect [ 1477.528174][T15637] vivid-007: reconnect [ 1477.623862][T15648] netlink: 'syz.6.2296': attribute type 49 has an invalid length. [ 1480.818575][T15669] fuse: Unknown parameter 'user_id00000000000000000000' [ 1482.558276][T15682] fuse: Unknown parameter 'grou00000000000000000000' [ 1483.740523][T15690] vivid-007: disconnect [ 1484.237926][T15684] vivid-007: reconnect [ 1486.173624][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.180741][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.217140][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1488.578667][T15714] fuse: Unknown parameter 'grou00000000000000000000' [ 1491.062291][T13110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1491.163303][T15623] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1491.410395][T15623] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1491.440116][T15623] usb 6-1: config 182 has an invalid interface number: 132 but max is 0 [ 1491.459093][T15623] usb 6-1: config 182 has no interface number 0 [ 1491.469255][T15623] usb 6-1: config 182 interface 132 has no altsetting 0 [ 1491.493992][T15623] usb 6-1: string descriptor 0 read error: -22 [ 1491.514500][T15623] usb 6-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 1491.553130][T15623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.095358][T15623] usb 6-1: can't set config #182, error -71 [ 1492.110404][T15623] usb 6-1: USB disconnect, device number 17 [ 1492.715578][T15741] vivid-007: disconnect [ 1493.508514][T15738] vivid-007: reconnect [ 1493.663832][T15751] fuse: Unknown parameter 'grou00000000000000000000' [ 1494.757380][T15757] hpfs: Bad magic ... probably not HPFS [ 1496.243655][T15769] Cannot find del_set index 2 as target [ 1496.840443][T15778] binder: 15777:15778 ioctl 4018620d 0 returned -22 [ 1497.490857][T15783] fuse: Unknown parameter 'group_i00000000000000000000' [ 1497.878160][T15790] vivid-007: disconnect [ 1498.136447][T15785] vivid-007: reconnect [ 1498.945124][T15799] syz.2.2341: attempt to access beyond end of device [ 1498.945124][T15799] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1499.326947][T15798] fuse: Bad value for 'fd' [ 1501.414551][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2345'. [ 1502.370162][T15824] binder: 15820:15824 ioctl 4018620d 0 returned -22 [ 1502.560980][T15832] Cannot find del_set index 2 as target [ 1503.234781][T15839] fuse: Unknown parameter '0x0000000000000003' [ 1503.798947][T15846] syz.5.2354: attempt to access beyond end of device [ 1503.798947][T15846] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1504.451443][T15841] syz.7.2353 (15841): drop_caches: 2 [ 1505.262535][T15856] siw: device registration error -23 [ 1506.553381][T15861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2358'. [ 1507.301241][T15868] fuse: Bad value for 'fd' [ 1507.533283][ T5824] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1507.615717][T15870] fuse: Unknown parameter '0xffffffffffffffff' [ 1507.756293][ T5824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1507.783364][ T5824] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1507.842745][ T5824] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1507.884461][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1507.935468][ T5824] usb 6-1: SerialNumber: syz [ 1508.134397][ T5824] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1508.186051][ T5824] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1508.975648][ T5824] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1510.145946][T15885] fscrypt: Error allocating hmac(sha512): -2 [ 1510.703339][ T5824] usb 6-1: USB disconnect, device number 18 [ 1512.963248][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2368'. [ 1515.338856][T15926] fscrypt: Error allocating hmac(sha512): -2 [ 1517.825585][T13110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1519.175167][T15953] syz.7.2380: attempt to access beyond end of device [ 1519.175167][T15953] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1519.929293][T15941] syz.2.2378 (15941): drop_caches: 2 [ 1521.501558][T15968] fscrypt: Error allocating hmac(sha512): -2 [ 1522.558230][T13113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1524.105573][T16003] syz.5.2394: attempt to access beyond end of device [ 1524.105573][T16003] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1525.433836][T16012] fscrypt: Error allocating hmac(sha512): -2 [ 1527.539937][T16036] fuse: Bad value for 'fd' [ 1529.432897][T16049] fscrypt: Error allocating hmac(sha512): -2 [ 1531.098268][T16064] fuse: Bad value for 'fd' [ 1531.226499][ T2132] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1532.183145][ T2132] usb 6-1: Using ep0 maxpacket: 16 [ 1532.199512][ T2132] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 1532.235603][ T2132] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1532.260602][ T2132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.281512][ T2132] usb 6-1: Product: syz [ 1532.288174][ T2132] usb 6-1: Manufacturer: syz [ 1532.292984][ T2132] usb 6-1: SerialNumber: syz [ 1532.310634][ T2132] usb 6-1: config 0 descriptor?? [ 1532.560005][T16081] vivid-007: disconnect [ 1532.566374][T16080] vivid-007: reconnect [ 1536.147836][ T23] usb 6-1: USB disconnect, device number 19 [ 1537.544658][T16096] fscrypt: Error allocating hmac(sha512): -2 [ 1537.943754][ T23] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1538.210359][T16109] fuse: Unknown parameter 'fd0x0000000000000003' [ 1538.257928][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1538.283252][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1538.360294][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1538.373405][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1538.381641][ T23] usb 6-1: SerialNumber: syz [ 1538.458375][ T23] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1538.465633][ T23] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1538.492003][ T23] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1539.048816][T16116] fuse: Bad value for 'fd' [ 1540.357567][ T8] usb 6-1: USB disconnect, device number 20 [ 1548.875430][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1548.883297][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.928765][ T9376] wlan1: Trigger new scan to find an IBSS to join [ 1549.961184][T12878] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1551.457399][ T9376] wlan1: Creating new IBSS network, BSSID d2:b7:23:58:52:1c [ 1552.514402][T16189] netlink: 'syz.5.2442': attribute type 1 has an invalid length. [ 1552.522950][T16189] netlink: 'syz.5.2442': attribute type 2 has an invalid length. [ 1554.514049][T12878] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1561.014534][T16223] fuse: Bad value for 'fd' [ 1561.440291][T16226] syz.5.2451 (16226): drop_caches: 2 [ 1563.365239][T16237] syz.5.2454: attempt to access beyond end of device [ 1563.365239][T16237] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1564.522605][T16244] vivid-007: disconnect [ 1564.913777][T16238] vivid-007: reconnect [ 1568.570324][T16277] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1569.322279][T16280] syz.6.2466: attempt to access beyond end of device [ 1569.322279][T16280] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1572.830958][T13123] wlan1: Trigger new scan to find an IBSS to join [ 1573.102209][T16301] syz.5.2471 (16301): drop_caches: 2 [ 1575.460873][T16312] input: syz1 as /devices/virtual/input/input23 [ 1575.469631][T16312] input: failed to attach handler leds to device input23, error: -6 [ 1576.797295][T16316] syz.7.2478: attempt to access beyond end of device [ 1576.797295][T16316] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1578.320876][T16325] syz.6.2474 (16325): drop_caches: 2 [ 1579.488448][T13115] wlan1: Trigger new scan to find an IBSS to join [ 1580.730984][T16333] syz.5.2482 (16333): drop_caches: 2 [ 1582.693238][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1582.883489][T13106] wlan1: Creating new IBSS network, BSSID 82:b6:bb:8f:07:4b [ 1582.895848][T16348] fuse: Bad value for 'fd' [ 1585.863683][T13115] wlan1: Trigger new scan to find an IBSS to join [ 1586.446927][T16380] fuse: Unknown parameter 'group_i00000000000000000000' [ 1588.649951][T16398] vivid-007: disconnect [ 1589.167981][T16395] vivid-007: reconnect [ 1590.568339][T13123] wlan1: Trigger new scan to find an IBSS to join [ 1590.821434][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'. [ 1591.329740][T13113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1592.293182][T16204] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1592.553201][T16204] usb 3-1: Using ep0 maxpacket: 16 [ 1592.570253][T16204] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 1592.867398][T16204] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1592.880110][T16204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.889219][T16204] usb 3-1: Product: syz [ 1592.893769][T16204] usb 3-1: Manufacturer: syz [ 1592.899046][T16204] usb 3-1: SerialNumber: syz [ 1592.910008][T16204] usb 3-1: config 0 descriptor?? [ 1594.486452][T13129] wlan1: Trigger new scan to find an IBSS to join [ 1595.549398][ T5824] usb 3-1: USB disconnect, device number 37 [ 1595.839025][T13129] wlan1: Creating new IBSS network, BSSID 8a:f4:49:6f:30:43 [ 1595.848385][T16434] syz.6.2513: attempt to access beyond end of device [ 1595.848385][T16434] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1596.498635][T16439] vivid-007: disconnect [ 1596.532059][T16435] vivid-007: reconnect [ 1598.545613][T16452] fuse: Unknown parameter 'group_id00000000000000000000' [ 1600.183519][T15623] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1600.273330][T16464] syz.6.2523: attempt to access beyond end of device [ 1600.273330][T16464] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1600.682742][T15623] usb 6-1: Using ep0 maxpacket: 16 [ 1600.745834][T15623] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 1600.873857][T15623] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1600.923364][T15623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.971938][T15623] usb 6-1: Product: syz [ 1600.989764][T15623] usb 6-1: Manufacturer: syz [ 1601.010365][T15623] usb 6-1: SerialNumber: syz [ 1601.040047][T15623] usb 6-1: config 0 descriptor?? [ 1601.048089][T16467] input: syz1 as /devices/virtual/input/input24 [ 1602.270940][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 1602.413680][ T5824] usb 6-1: USB disconnect, device number 21 [ 1604.697154][T16500] fuse: Bad value for 'rootmode' [ 1604.919678][T16503] vivid-007: disconnect [ 1605.492535][T16501] vivid-007: reconnect [ 1606.973157][ T23] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1607.194118][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1607.206060][ T23] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 1607.240374][ T23] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1607.249841][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.258362][ T23] usb 6-1: Product: syz [ 1607.262907][ T23] usb 6-1: Manufacturer: syz [ 1607.267838][ T23] usb 6-1: SerialNumber: syz [ 1607.506334][ T23] usb 6-1: config 0 descriptor?? [ 1607.608587][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.615092][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.093722][T16204] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1609.275819][T16204] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1609.287118][T16204] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1609.298312][T16204] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1609.310809][T16204] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1609.436754][ T23] usb 6-1: USB disconnect, device number 22 [ 1609.443087][T16204] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1609.531065][T16204] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1609.571713][T16204] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1609.607082][T16204] usb 3-1: Product: syz [ 1609.620715][T16204] usb 3-1: Manufacturer: syz [ 1609.648419][T16204] cdc_wdm 3-1:1.0: skipping garbage [ 1609.675339][T16204] cdc_wdm 3-1:1.0: skipping garbage [ 1609.720225][T16204] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1609.756868][T16204] cdc_wdm 3-1:1.0: Unknown control protocol [ 1609.885070][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.891928][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1609.898220][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.904863][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1609.911316][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.917952][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1609.924271][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.930880][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1609.937176][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.943782][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1609.950061][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.956669][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1609.962949][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.969683][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1609.976008][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.982640][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1609.989632][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1609.996264][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1610.002677][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1610.009289][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1610.016432][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1610.027010][T16204] usb 3-1: USB disconnect, device number 38 [ 1610.110964][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'. [ 1610.674362][T16531] syz.7.2536 (16531): drop_caches: 2 [ 1613.169671][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1615.171151][T13110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1617.628869][T16572] syz.5.2551: attempt to access beyond end of device [ 1617.628869][T16572] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1622.377093][T16596] lo speed is unknown, defaulting to 1000 [ 1622.578750][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1622.597640][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1622.607705][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1622.618955][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1622.644649][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1622.656705][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1623.758429][ T5772] syz_tun (unregistering): left allmulticast mode [ 1623.938171][ T5772] syz_tun (unregistering): left promiscuous mode [ 1623.945713][ T5772] bridge0: port 3(syz_tun) entered disabled state [ 1624.815007][ T5789] Bluetooth: hci4: command tx timeout [ 1624.824061][T13113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1625.514597][T16621] input: syz1 as /devices/virtual/input/input25 [ 1626.834587][T13115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1627.194000][ T5789] Bluetooth: hci4: command tx timeout [ 1627.673350][T16598] lo speed is unknown, defaulting to 1000 [ 1628.605359][T16628] syz.6.2566 (16628): drop_caches: 2 [ 1629.293092][ T5789] Bluetooth: hci4: command tx timeout [ 1631.300280][T16598] chnl_net:caif_netlink_parms(): no params data found [ 1631.343572][ T5789] Bluetooth: hci4: command tx timeout [ 1631.703939][T16598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.729295][T16598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.767126][T16598] bridge_slave_0: entered allmulticast mode [ 1631.801812][T16598] bridge_slave_0: entered promiscuous mode [ 1631.841147][T16598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.873805][T16598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.484666][T16598] bridge_slave_1: entered allmulticast mode [ 1632.539027][T16598] bridge_slave_1: entered promiscuous mode [ 1632.696063][T16598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.709176][T16598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.750231][T16598] team0: Port device team_slave_0 added [ 1632.790166][T16598] team0: Port device team_slave_1 added [ 1633.307883][T16598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.433336][T16598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.579333][T16598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.670134][T16598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.741760][T16598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.546585][T16598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.776873][T16598] hsr_slave_0: entered promiscuous mode [ 1635.845773][T16598] hsr_slave_1: entered promiscuous mode [ 1636.046611][T16598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1636.085139][T16598] Cannot create hsr debugfs directory [ 1638.127532][T16598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.531354][T16598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.015758][T16705] lo speed is unknown, defaulting to 1000 [ 1640.174279][T16709] fuse: Bad value for 'fd' [ 1640.362421][T16598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.616021][T16598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.891165][T16707] syz.6.2585 (16707): drop_caches: 2 [ 1641.632468][T16598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1641.809102][T16598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1641.925360][T16598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1641.965475][T16598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1642.660946][T16598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1642.688755][T16726] fuse: Bad value for 'fd' [ 1642.878590][T16598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.943222][T16728] binder: 16727:16728 ioctl c0306201 0 returned -14 [ 1643.325847][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.333106][T13110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.531601][T16732] fuse: Bad value for 'fd' [ 1643.626126][T13123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.633512][T13123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.142155][ T3519] wlan1: Trigger new scan to find an IBSS to join [ 1647.314050][T16598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.404698][ T3519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1647.987763][T16598] veth0_vlan: entered promiscuous mode [ 1648.150681][T16598] veth1_vlan: entered promiscuous mode [ 1648.369512][T16598] veth0_macvtap: entered promiscuous mode [ 1648.438546][T16598] veth1_macvtap: entered promiscuous mode [ 1648.494461][T16772] fuse: Bad value for 'fd' [ 1648.559280][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.624907][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.703150][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.761795][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.813115][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.898296][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.939286][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.973302][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.003272][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.028392][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.039272][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.050035][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.062050][T16598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.206181][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.293201][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.349775][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.413260][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.453622][T16787] fuse: Bad value for 'fd' [ 1649.493504][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.533173][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.578551][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.640488][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.662593][T16789] binder: 16788:16789 ioctl c0306201 0 returned -14 [ 1649.681063][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.722231][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.742836][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.866518][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.950694][T16598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1650.039160][T16598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.063211][T16598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.091978][T16598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.106371][T16598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.357763][T16796] fuse: Bad value for 'fd' [ 1650.501584][T12878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.577006][T12878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.766817][T12878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.829555][T12878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.126920][T12878] wlan1: Trigger new scan to find an IBSS to join [ 1652.792151][T16813] vivid-007: disconnect [ 1652.975701][T16811] vivid-007: reconnect [ 1653.663750][T16818] Bluetooth: MGMT ver 1.22 [ 1656.295479][T13115] wlan1: Trigger new scan to find an IBSS to join [ 1656.383788][T16834] fuse: Invalid rootmode [ 1656.876446][T16842] syz.2.2627: attempt to access beyond end of device [ 1656.876446][T16842] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1657.103630][T16821] wlan1: Trigger new scan to find an IBSS to join [ 1657.582199][T13127] wlan1: Creating new IBSS network, BSSID 4a:fa:a3:27:e5:9e [ 1658.160493][T16849] vivid-007: disconnect [ 1658.547823][T16847] vivid-007: reconnect [ 1658.724061][T13113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1659.254615][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1660.406765][T16864] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1661.441379][ T9376] wlan1: Trigger new scan to find an IBSS to join [ 1662.043386][T16869] syz.7.2633 (16869): drop_caches: 2 [ 1663.096442][T13127] wlan1: Creating new IBSS network, BSSID da:d7:5a:86:7f:2f [ 1663.425071][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2638'. [ 1663.493669][T16883] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2638'. [ 1663.851269][T16892] vivid-007: disconnect [ 1664.346095][T16889] vivid-007: reconnect [ 1665.978544][ T23] kernel read not supported for file /dsp1 (pid: 23 comm: kworker/1:0) [ 1667.490002][T16909] fuse: Invalid rootmode [ 1669.029118][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.048117][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.141352][T16937] vivid-007: disconnect [ 1672.059520][T16930] vivid-007: reconnect [ 1673.163218][T16950] fuse: Bad value for 'rootmode' [ 1673.991026][T16954] syz.5.2657 (16954): drop_caches: 2 [ 1675.107901][ T49] wlan1: Trigger new scan to find an IBSS to join [ 1676.486018][T16971] syz.6.2662: attempt to access beyond end of device [ 1676.486018][T16971] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1678.697913][T16982] fuse: Bad value for 'rootmode' [ 1679.023235][T13113] wlan1: Trigger new scan to find an IBSS to join [ 1679.104533][T13125] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1679.835388][T17000] syz.2.2670 (17000): drop_caches: 2 [ 1679.999549][T16994] syz.5.2669 (16994): drop_caches: 2 [ 1680.730391][ T11] wlan1: Creating new IBSS network, BSSID 82:a7:40:43:da:f9 [ 1681.248456][T17009] syz.7.2674: attempt to access beyond end of device [ 1681.248456][T17009] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1683.114514][T13113] wlan1: Trigger new scan to find an IBSS to join [ 1683.520447][T17015] fuse: Bad value for 'rootmode' [ 1685.356372][T17025] syz.6.2681 (17025): drop_caches: 2 [ 1686.118716][T17029] syz.6.2683 (17029): drop_caches: 2 [ 1688.324719][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1691.764300][T17063] vivid-007: disconnect [ 1692.208851][T13125] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1692.274896][T17060] vivid-007: reconnect [ 1693.040764][T17070] syz.2.2691: attempt to access beyond end of device [ 1693.040764][T17070] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1693.117458][T13113] wlan1: Trigger new scan to find an IBSS to join [ 1693.131560][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1693.256598][T17074] fuse: Unknown parameter 'use00000000000000000000' [ 1694.140903][ T5789] Bluetooth: hci4: link tx timeout [ 1694.146762][ T5789] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1694.527360][T13127] wlan1: Creating new IBSS network, BSSID c6:0e:14:50:32:be [ 1694.995708][T17080] syzkaller0: entered promiscuous mode [ 1695.033208][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1695.101247][T17080] syzkaller0: entered allmulticast mode [ 1696.472394][T17082] Bluetooth: hci4: command 0x0406 tx timeout [ 1699.023271][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1702.073367][ T9376] wlan1: Trigger new scan to find an IBSS to join [ 1702.911587][T17094] lo speed is unknown, defaulting to 1000 [ 1703.116122][T13123] wlan1: Creating new IBSS network, BSSID b2:23:93:0e:20:ff [ 1703.237904][T17114] fuse: Unknown parameter 'use00000000000000000000' [ 1707.774666][T17130] syz.5.2709: attempt to access beyond end of device [ 1707.774666][T17130] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1708.822899][T17139] syz.2.2711 (17139): drop_caches: 2 [ 1708.892087][T17141] fuse: Unknown parameter 'use00000000000000000000' [ 1709.161539][ T9376] wlan1: Trigger new scan to find an IBSS to join [ 1710.827942][T13123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1711.436115][T17146] syz.2.2713 (17146): drop_caches: 2 [ 1714.783157][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1714.789792][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1715.152761][T17177] syz.6.2725: attempt to access beyond end of device [ 1715.152761][T17177] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1716.317033][T13123] wlan1: Creating new IBSS network, BSSID f2:83:ba:1c:62:e6 [ 1716.462177][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2727'. [ 1716.471781][T17181] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2727'. [ 1716.481771][T17181] tc_dump_action: action bad kind [ 1718.697099][T17199] fuse: Bad value for 'fd' [ 1718.884293][T17201] fuse: Bad value for 'fd' [ 1719.044538][T16821] wlan1: Trigger new scan to find an IBSS to join [ 1720.151711][T13110] wlan1: Creating new IBSS network, BSSID 26:ce:9d:96:dd:31 [ 1720.473329][T13020] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1720.708462][T13020] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1720.773222][T13020] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1720.914326][T13020] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1720.991819][T13020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1721.016998][T13020] usb 3-1: SerialNumber: syz [ 1721.072703][T13020] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1721.114326][T13020] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1721.166309][T13020] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1721.188595][T17221] usb usb8: usbfs: process 17221 (syz.7.2736) did not claim interface 0 before use [ 1721.262084][T13020] scsi host1: usb-storage 3-1:1.0 [ 1722.922462][T13020] usb 3-1: USB disconnect, device number 39 [ 1723.050889][T17229] 9pnet_fd: Insufficient options for proto=fd [ 1723.475235][T13123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1723.648015][T17231] syz.6.2739 (17231): drop_caches: 2 [ 1725.367284][T13110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1725.469419][T17241] fuse: Unknown parameter 'user_i00000000000000000000' [ 1729.540806][T13020] kernel write not supported for file /dsp1 (pid: 13020 comm: kworker/1:4) [ 1730.000664][T17258] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 1730.491279][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.497852][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.662515][T17261] autofs4:pid:17261:autofs_fill_super: called with bogus options [ 1731.125920][T17263] syz.5.2750 (17263): drop_caches: 2 [ 1733.184465][T17277] fuse: Unknown parameter 'user_id00000000000000000000' [ 1734.248706][T17283] syz.2.2747 (17283): drop_caches: 2 [ 1734.849367][T17289] usb usb8: usbfs: process 17289 (syz.5.2757) did not claim interface 0 before use [ 1736.453856][T17297] fuse: Bad value for 'fd' [ 1736.523205][ T9012] kernel write not supported for file /dsp1 (pid: 9012 comm: kworker/1:3) [ 1738.670894][T17306] fuse: Unknown parameter 'user_id00000000000000000000' [ 1740.945181][T17318] hpfs: Bad magic ... probably not HPFS [ 1742.287492][T13110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1743.504585][T17331] netem: change failed [ 1743.777531][T17337] fuse: Unknown parameter 'user_id00000000000000000000' [ 1744.642312][T17347] netlink: 'syz.7.2773': attribute type 2 has an invalid length. [ 1744.651000][T17347] netlink: 'syz.7.2773': attribute type 1 has an invalid length. [ 1745.412680][T17357] Cannot find del_set index 2 as target [ 1746.383555][T13125] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1746.532367][T17368] fuse: Bad value for 'fd' [ 1746.873529][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1747.019922][T17382] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2787'. [ 1747.058365][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1747.076332][ T8] usb 3-1: config 182 has an invalid interface number: 132 but max is 0 [ 1747.092798][ T8] usb 3-1: config 182 has no interface number 0 [ 1747.101282][ T8] usb 3-1: config 182 interface 132 has no altsetting 0 [ 1747.110388][ T8] usb 3-1: string descriptor 0 read error: -22 [ 1747.117863][ T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 1747.127453][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.459566][ T2132] usb 3-1: USB disconnect, device number 40 [ 1748.520038][T17399] fuse: Bad value for 'fd' [ 1749.785497][ T28] audit: type=1326 audit(1772053230.741:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.2.2796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f947159c629 code=0x0 [ 1750.623593][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1753.864759][T17449] fuse: Bad value for 'fd' [ 1754.819421][T17457] syz.7.2807 (17457): drop_caches: 2 [ 1756.159966][T13110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1756.336712][ T5789] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 1757.130364][ T9376] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1760.058542][T17500] syz.7.2820 (17500): drop_caches: 2 [ 1764.637272][T17542] Cannot find del_set index 2 as target [ 1766.404726][T17082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1766.436222][T17082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1766.463365][T17082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1766.493237][T17082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1766.520898][T17082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1766.529370][T17082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1766.872635][T17550] lo speed is unknown, defaulting to 1000 [ 1767.216840][T17557] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1767.259477][T17557] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1767.301464][T17557] overlayfs: failed to get uuid (356/file1, err=-13); falling back to uuid=null. [ 1768.624676][T17082] Bluetooth: hci0: command tx timeout [ 1769.099186][T17550] chnl_net:caif_netlink_parms(): no params data found [ 1769.445206][T17580] 9pnet_fd: Insufficient options for proto=fd [ 1770.753167][T17082] Bluetooth: hci0: command tx timeout [ 1770.912810][T17550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.938921][T17550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.984755][T17550] bridge_slave_0: entered allmulticast mode [ 1771.034660][T17550] bridge_slave_0: entered promiscuous mode [ 1771.078583][T17550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.146414][T17550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.193329][T17550] bridge_slave_1: entered allmulticast mode [ 1771.317104][T17590] syz.7.2847: attempt to access beyond end of device [ 1771.317104][T17590] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1771.522773][T17550] bridge_slave_1: entered promiscuous mode [ 1771.956474][T17550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1772.086415][T17550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1772.406092][T17550] team0: Port device team_slave_0 added [ 1772.607513][T17550] team0: Port device team_slave_1 added [ 1772.793558][T17082] Bluetooth: hci0: command tx timeout [ 1773.137941][T17594] Cannot find del_set index 2 as target [ 1773.222157][T17550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1773.290183][T17550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.454532][T17550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.551504][T17550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1773.568074][T17550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.620358][T17550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1773.719602][ T9376] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1774.048581][T17550] hsr_slave_0: entered promiscuous mode [ 1774.086004][T17550] hsr_slave_1: entered promiscuous mode [ 1774.109628][T17550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1774.129913][T17550] Cannot create hsr debugfs directory [ 1775.463229][T17082] Bluetooth: hci0: command tx timeout [ 1776.131796][T13110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.379566][T13110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.425343][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1778.579827][T17625] syz.6.2856: attempt to access beyond end of device [ 1778.579827][T17625] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1779.133650][T13110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.737716][T13110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.867014][T17550] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1781.002449][T17550] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1781.049556][T17550] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1781.658565][T17550] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1783.143469][T13123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1784.429067][T17550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.090891][T17550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.336432][ T9376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.343715][ T9376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.574959][T17691] vivid-007: ================= START STATUS ================= [ 1786.583034][T17691] vivid-007: Enable Output Cropping: true [ 1786.590030][T17691] vivid-007: Enable Output Composing: true [ 1786.596641][T17691] vivid-007: Enable Output Scaler: true [ 1786.602972][T17691] vivid-007: Tx RGB Quantization Range: Automatic [ 1786.609612][T17691] vivid-007: Transmit Mode: HDMI [ 1786.615521][T17691] vivid-007: Display Present: true inactive [ 1786.640981][T17691] vivid-007: Hotplug Present: 0x00000001 [ 1786.647731][T17691] vivid-007: RxSense Present: 0x00000001 [ 1786.654933][T17691] vivid-007: EDID Present: 0x00000001 [ 1786.660905][T17691] vivid-007: ================== END STATUS ================== [ 1787.343016][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1787.432674][ T9376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.439930][ T9376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.911410][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.918553][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.977370][T13110] hsr_slave_0: left promiscuous mode [ 1794.125951][T13110] hsr_slave_1: left promiscuous mode [ 1794.337941][T13110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.577172][T13110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1794.585535][T13110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.593224][T13110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1794.683825][T13110] bridge_slave_1: left allmulticast mode [ 1794.741450][T13110] bridge_slave_1: left promiscuous mode [ 1794.807918][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.917620][T13110] bridge_slave_0: left allmulticast mode [ 1794.963951][T13110] bridge_slave_0: left promiscuous mode [ 1795.033301][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.390155][T13110] veth1_macvtap: left promiscuous mode [ 1795.415599][T13110] veth0_macvtap: left promiscuous mode [ 1795.481167][T13110] veth1_vlan: left promiscuous mode [ 1795.531476][T13110] veth0_vlan: left promiscuous mode [ 1798.432997][ T28] audit: type=1326 audit(1772053279.461:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.5.2897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82cd39c629 code=0x0 [ 1800.202512][T17781] syz.5.2899 (17781): drop_caches: 2 [ 1802.290013][ T28] audit: type=1326 audit(1772053283.131:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17787 comm="syz.5.2901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82cd39c629 code=0x0 [ 1803.832641][T13110] team0 (unregistering): Port device team_slave_1 removed [ 1804.116538][T13110] team0 (unregistering): Port device team_slave_0 removed [ 1804.337698][T13110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1804.553642][T13110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.928688][T17802] input: syz1 as /devices/virtual/input/input26 [ 1806.986723][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1808.569201][T13110] bond0 (unregistering): Released all slaves [ 1808.891562][T17550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.173950][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1810.530295][T17835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2911'. [ 1810.834688][T17550] veth0_vlan: entered promiscuous mode [ 1810.909638][T17550] veth1_vlan: entered promiscuous mode [ 1811.160997][T17550] veth0_macvtap: entered promiscuous mode [ 1811.233305][T17550] veth1_macvtap: entered promiscuous mode [ 1811.328172][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.362062][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.401544][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.435174][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.473177][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.495539][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.538568][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.591024][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.620564][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.644169][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.662843][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.707584][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.843552][T17550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1812.246939][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.319336][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.413637][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.478687][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.550482][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.607528][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.648236][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.694135][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.752290][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.785620][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.811608][T17550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.078471][T17550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.533566][T17867] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1814.171187][T17550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.185139][T17082] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 1814.186257][T17082] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 1814.194614][T17082] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1814.358503][T17550] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.403078][T17550] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.432343][T17550] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.469227][T17550] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.580944][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1816.281441][T17874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1816.879286][T13115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.917240][T13115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1817.052193][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.096631][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.333206][ T5841] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1820.347931][T17945] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1820.523195][ T5841] usb 9-1: Using ep0 maxpacket: 8 [ 1820.546247][ T5841] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1820.590541][ T5841] usb 9-1: config 7 has an invalid interface number: 58 but max is 0 [ 1820.629323][ T5841] usb 9-1: config 7 has no interface number 0 [ 1820.658103][ T5841] usb 9-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid maxpacket 12346, setting to 64 [ 1820.674823][ T5841] usb 9-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1820.691206][ T5841] usb 9-1: config 7 interface 58 has no altsetting 0 [ 1820.705799][ T5841] usb 9-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 1820.749563][ T5841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.780457][ T5841] usb 9-1: Product: syz [ 1820.789751][ T5841] usb 9-1: Manufacturer: syz [ 1820.800084][ T5841] usb 9-1: SerialNumber: syz [ 1821.029356][T12878] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1821.123649][ T5841] usb 9-1: USB disconnect, device number 2 [ 1821.809720][T17967] netlink: 'syz.8.2937': attribute type 1 has an invalid length. [ 1823.072082][T17988] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.127440][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2944'. [ 1823.443477][ T9012] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1823.802519][T17997] input: syz1 as /devices/virtual/input/input27 [ 1823.848160][ T9012] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.921879][T17988] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.992380][ T9012] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1824.006403][ T9012] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1824.031539][ T9012] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1824.040869][ T9012] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1824.057314][ T9012] usb 9-1: Product: syz [ 1824.061638][ T9012] usb 9-1: Manufacturer: syz [ 1824.083759][ T9012] usb 9-1: SerialNumber: syz [ 1824.113834][ T9012] usb 9-1: config 0 descriptor?? [ 1824.242096][ T9012] snd-usb-audio: probe of 9-1:0.0 failed with error -22 [ 1824.272156][T17805] udevd[17805]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1824.385922][T17988] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.671274][T17988] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.979468][T18023] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1825.606463][T17988] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.708134][T17988] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.777832][T17988] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.800364][T17988] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.818839][ T5851] usb 9-1: USB disconnect, device number 3 [ 1825.913696][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2957'. [ 1826.795955][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2960'. [ 1826.813767][T18045] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.822929][T18045] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.831164][T18045] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.839531][T18045] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.939489][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2960'. [ 1827.663992][T18044] delete_channel: no stack [ 1829.599977][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2971'. [ 1829.646481][T18088] syz.7.2970 (18088): drop_caches: 2 [ 1835.070247][T18160] fuse: Bad value for 'fd' [ 1837.381374][T18176] syz.6.2991 uses obsolete (PF_INET,SOCK_PACKET) [ 1838.231433][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1841.873367][T13123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1844.315246][T18231] syz.6.3000 (18231): drop_caches: 2 [ 1844.873292][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3002'. [ 1846.673717][T13123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1846.838735][T18267] fuse: Bad value for 'fd' [ 1847.176039][ T23] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1847.444702][ T23] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1847.487600][ T23] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1847.554924][ T23] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.616203][ T23] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1847.646555][ T23] usb 9-1: config 1 has no interface number 0 [ 1847.811315][ T23] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1847.820818][ T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.689505][ T23] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1848.909067][ T23] snd_usb_pod 9-1:1.1: endpoint not available, using fallback values [ 1849.088286][ T23] snd_usb_pod 9-1:1.1: invalid control EP [ 1849.114141][ T23] snd_usb_pod 9-1:1.1: cannot start listening: -22 [ 1849.172540][ T23] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1849.233583][ T23] snd_usb_pod: probe of 9-1:1.1 failed with error -22 [ 1849.261004][T18286] syz.6.3011 (18286): drop_caches: 2 [ 1849.309857][ T23] usb 9-1: USB disconnect, device number 4 [ 1849.320384][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3013'. [ 1852.059039][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1854.021795][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.028650][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.172149][T18326] syz.5.3023 (18326): drop_caches: 2 [ 1856.563143][T16797] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1856.793017][T16797] usb 9-1: Using ep0 maxpacket: 16 [ 1856.816719][T16797] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1856.877469][T16797] usb 9-1: config 0 has no interface number 0 [ 1856.915145][T16797] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1856.975869][T16797] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.021407][T16797] usb 9-1: Product: syz [ 1857.042979][T16797] usb 9-1: Manufacturer: syz [ 1859.833013][T16797] usb 9-1: SerialNumber: syz [ 1859.841877][T16797] usb 9-1: config 0 descriptor?? [ 1859.870373][T16797] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1860.403492][T16797] gspca_spca1528: reg_w err -110 [ 1860.463139][T16797] spca1528: probe of 9-1:0.1 failed with error -110 [ 1860.651366][T18384] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3033'. [ 1860.713523][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3033'. [ 1860.722484][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3033'. [ 1865.940307][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3028'. [ 1867.456234][T18432] netlink: 'syz.7.3044': attribute type 10 has an invalid length. [ 1867.488198][T18432] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1869.331244][T13021] usb 9-1: USB disconnect, device number 5 [ 1869.361620][T13110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1870.572585][T13110] wlan1: Trigger new scan to find an IBSS to join [ 1871.287809][T18456] syz.6.3049 (18456): drop_caches: 2 [ 1874.063763][T16920] wlan1: Trigger new scan to find an IBSS to join [ 1874.695393][T12086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1874.745255][T12086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1874.756098][T12086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1874.768923][T12086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1874.777670][T12086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1874.824787][T18504] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1874.833670][T12086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1874.856123][T18504] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1874.890480][T18504] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1874.898275][T12086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1874.907066][T12086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1874.914776][T18504] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1876.182831][T13110] wlan1: Creating new IBSS network, BSSID da:48:1b:84:7a:3d [ 1876.262564][T18495] lo speed is unknown, defaulting to 1000 [ 1876.429643][ T11] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1876.440567][ T11] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.665902][ T11] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1876.689926][ T11] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.754006][T18526] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3058'. [ 1876.781382][T18482] lo speed is unknown, defaulting to 1000 [ 1877.225600][T17082] Bluetooth: hci5: command tx timeout [ 1877.235127][T17082] Bluetooth: hci4: command tx timeout [ 1877.540431][ T11] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1877.581321][ T11] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.810734][ T11] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1877.853114][ T11] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.866897][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1877.949492][T18495] chnl_net:caif_netlink_parms(): no params data found [ 1878.547026][T18539] syz.6.3061 (18539): drop_caches: 2 [ 1878.785233][T18495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.975703][T18495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.983563][T18495] bridge_slave_0: entered allmulticast mode [ 1879.000554][T18495] bridge_slave_0: entered promiscuous mode [ 1879.012778][T18495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1879.024873][T18495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.264271][T17082] Bluetooth: hci5: command tx timeout [ 1879.272183][ T5789] Bluetooth: hci4: command tx timeout [ 1879.851144][T18495] bridge_slave_1: entered allmulticast mode [ 1879.894731][T18495] bridge_slave_1: entered promiscuous mode [ 1880.090173][T18571] fuse: Bad value for 'fd' [ 1880.140429][T18495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1880.247836][T18495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1880.722148][T18495] team0: Port device team_slave_0 added [ 1880.778454][T18495] team0: Port device team_slave_1 added [ 1880.893578][T18482] chnl_net:caif_netlink_parms(): no params data found [ 1881.312554][T18495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1881.343439][ T5789] Bluetooth: hci4: command tx timeout [ 1881.349030][T17082] Bluetooth: hci5: command tx timeout [ 1881.354638][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1881.523223][T18495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1881.973795][T18495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1881.980836][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1882.055672][T18495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1882.970092][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.000646][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.031194][T18482] bridge_slave_0: entered allmulticast mode [ 1883.205466][T18482] bridge_slave_0: entered promiscuous mode [ 1883.234613][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.241782][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.423480][ T5789] Bluetooth: hci4: command tx timeout [ 1883.429047][T17082] Bluetooth: hci5: command tx timeout [ 1883.525407][T18482] bridge_slave_1: entered allmulticast mode [ 1883.546410][T18482] bridge_slave_1: entered promiscuous mode [ 1885.349717][T18495] hsr_slave_0: entered promiscuous mode [ 1885.396819][T18495] hsr_slave_1: entered promiscuous mode [ 1885.437931][T18495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1885.487785][T18495] Cannot create hsr debugfs directory [ 1885.766243][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1885.817750][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.849533][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1887.264817][T18482] team0: Port device team_slave_0 added [ 1887.324135][T18482] team0: Port device team_slave_1 added [ 1887.804766][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.812183][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.955710][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1888.003653][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1888.135202][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1888.161863][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.269885][ T11] hsr_slave_0: left promiscuous mode [ 1888.283846][ T11] hsr_slave_1: left promiscuous mode [ 1888.299928][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1888.326189][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1888.344162][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1888.351668][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1888.366562][ T11] bridge_slave_1: left allmulticast mode [ 1888.497328][ T11] bridge_slave_1: left promiscuous mode [ 1888.546898][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.588883][ T11] bridge_slave_0: left allmulticast mode [ 1888.605934][ T11] bridge_slave_0: left promiscuous mode [ 1888.629492][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.895288][ T11] veth1_macvtap: left promiscuous mode [ 1888.912990][ T11] veth0_macvtap: left promiscuous mode [ 1888.960976][ T11] veth1_vlan: left promiscuous mode [ 1888.967022][ T11] veth0_vlan: left promiscuous mode [ 1892.736093][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1892.812563][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1893.553392][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1893.668076][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.208518][ T11] bond0 (unregistering): Released all slaves [ 1894.540121][T18482] hsr_slave_0: entered promiscuous mode [ 1894.593410][T18482] hsr_slave_1: entered promiscuous mode [ 1894.613046][T18482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1894.620715][T18482] Cannot create hsr debugfs directory [ 1895.307461][T18495] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1895.514101][T18495] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1895.543300][T18495] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1895.564915][T18495] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1895.894979][T18482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.252412][T18482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.710258][T18482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.025033][T18482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.089807][T18701] xt_socket: unknown flags 0x4 [ 1897.169263][T18495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1897.236074][T18495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.277147][T13129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.284403][T13129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1897.406229][T13127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.413867][T13127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.668613][T18482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1897.746134][T18482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1897.855093][T18482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1897.906207][T18482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1898.340618][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1898.422680][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1898.496203][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.503484][T13110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1898.585676][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.592978][T13110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1898.728970][T18495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1898.975733][T18482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1899.037338][T18482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1899.900340][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1899.958345][T18495] veth0_vlan: entered promiscuous mode [ 1900.021757][T18495] veth1_vlan: entered promiscuous mode [ 1900.135204][T18482] veth0_vlan: entered promiscuous mode [ 1900.164080][T18495] veth0_macvtap: entered promiscuous mode [ 1900.196066][T18482] veth1_vlan: entered promiscuous mode [ 1900.216391][T18495] veth1_macvtap: entered promiscuous mode [ 1900.279203][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.300583][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.311097][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.331138][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.341430][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.353558][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.372200][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.384702][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.397606][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.408762][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.419067][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.430408][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.442557][T18495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1900.472583][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1900.485600][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.509591][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1900.529254][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.539460][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1900.555092][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.569436][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1900.580351][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.600447][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1900.630264][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.648998][T18495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1900.662335][T18495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.677026][T18495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1900.728305][T18495] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.738001][T18495] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.747566][T18495] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.757166][T18495] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.782654][T18482] veth0_macvtap: entered promiscuous mode [ 1900.809002][T18482] veth1_macvtap: entered promiscuous mode [ 1900.899915][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.935915][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.948765][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.959482][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.970089][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1900.981083][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.991387][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.003191][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.014217][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.044717][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.061835][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.072595][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.092678][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.117958][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.133807][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.183870][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.209054][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.219498][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.231026][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.241703][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.253071][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.263740][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.274548][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.284779][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.298384][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.311559][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.322787][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.333204][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.344862][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.356835][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1901.380307][T13123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.406795][T13123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.421611][T18482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.432704][T18482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.442771][T18482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.451927][T18482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.516889][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1901.548854][T13123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.564792][T13123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.734432][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.742345][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.876563][T13106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.898394][T13106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1906.225906][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1909.911832][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1914.788806][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.795462][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.182020][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1932.542284][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1937.252378][T13129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1940.836923][T16920] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1948.209879][T13123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1963.467217][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1968.176715][T16920] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1971.761676][T13110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1976.228386][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.236054][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.134491][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1994.494847][T16920] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1998.783200][T12086] Bluetooth: hci5: command 0x0406 tx timeout [ 1998.783671][T17082] Bluetooth: hci4: command 0x0406 tx timeout [ 1999.101434][T13127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2002.686058][T13106] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2006.923023][T18403] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 2010.059547][T13123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)