last executing test programs: 6m14.062188366s ago: executing program 1 (id=2): r0 = syz_io_uring_complete(0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81000000080047000000000000000000907800000000ffffffff0000000000000000", @ANYRES64, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="5dc00976d3951b0c956b533764d08200fc93ebb74bd69d69c0f63cf0693c7ce0f6083e81e8cc9d6d3c7506d218b9b3281e8b67f0f5ae5acf67a7b208d7686947c16b1aed057491a2ef9942361f6b403102d2959fa6ca"], 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000000)="a2e6ff1f618cb9696a51de682cc3d4b8", 0x10}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x2) socket(0x1d, 0x2, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 5m58.850371109s ago: executing program 32 (id=2): r0 = syz_io_uring_complete(0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81000000080047000000000000000000907800000000ffffffff0000000000000000", @ANYRES64, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="5dc00976d3951b0c956b533764d08200fc93ebb74bd69d69c0f63cf0693c7ce0f6083e81e8cc9d6d3c7506d218b9b3281e8b67f0f5ae5acf67a7b208d7686947c16b1aed057491a2ef9942361f6b403102d2959fa6ca"], 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000000)="a2e6ff1f618cb9696a51de682cc3d4b8", 0x10}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x2) socket(0x1d, 0x2, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4m59.295335893s ago: executing program 3 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00", @ANYRES32, @ANYBLOB="d50633008000009e"], 0x6f4}}, 0x0) 4m55.286058343s ago: executing program 3 (id=113): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0x0, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) connect$ax25(r3, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast]}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 4m51.012500328s ago: executing program 3 (id=119): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae03de91", 0x6e}, {&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887db243f77d07b85a9b7aa2b37d562f4adaab6891408c1003c82891b736c2eb61919f17d0657eb49fbf6bb51c56ac8547212f15b950683c533ad170fb23ac11e55eddffd044710a6bcf563e601e77a75277f1dcc92a5fb0052b41cebb282aecf93d460706f1323b8766140389c66ffed5026daf508c52fcaecb55c1aa4273cb05d25d04938c7df6bcda9174cf08b4d2b7172a3dc45ce9866e6141210c7ee5a61d35751fa2945a4ff94e5df5d77eb0c9fc63148c4871d2dca098bb192aa99ccab8dd8b78313d124cdfe5cc2eabe884554f6081abb91904fe01f6d9d01cb320ab62002a4644b5ccd248e8bec740d72851e328ff55157b39234705e8bfe947daf892be1a09230f3d8b86360adce01621ba347fc9e9e4901fc815a208c63a60266f1998709f5f03983a7b35e0e2963070a91f2912beb46c36d6d5b748944630ccd84917b3eb4abd9353b19ca8042f57a401fe05241b5771e4b8d3c7c592295771fe9e02a2906719e38d306e53105f1c48ff88cb93ff1d315428f15baeeb56fb4f5504ef6993bd0d33ce8dba40be620dc4b2d5e3b5d5a941bcd194723a3c634a19599e0d0bc7ce0d55f1411ae3b2e25caa39c96cacefe08a2870b25615e3106a64cc9181548cfcb62ffc6fe10294fec2d7d0297b913fd7326ad8bb991113172fa8dececf448f887fbf9f0def1bddb796e5e1f323234326a089bed346b3d8dcec4ee52e78b50dfc48dee499420ca1f652b34d8a64b890801e5c90f8fae2f688e68ae3d1d079f4bfc350ef007626746958ad7bcd13dee16913407bc953ff5ac3013b1592b00fdf43784497ce8eaddfb7345fcd3b07d64e284a7529cfb9899e5b8ca62c7eb1491b985f2a3f544d6978107f87bcd8496a34d0f429e65558000b472108a99028e263649be5f3e75c10ca4102819776330423e3264a87095f2b3be20e1ea911b2e285191a4c27a0eab19a5bdbf26bd08fead4f22ebe5b1c82e99edb0c49a4770f74b2e012c5b0d6c6599eaa7f6939cffe30a4184fb3dec8c5a2acd6718edda3867f25cb552926b34c0ee01ccc0160f6f90d08eb72062d014e11285b9c3d02176942c6d881ef830c313b8b578cb54a494205fe7ecf257f7d545c374b931c6c2b15dceacd926b3b76c5298edf0c3bd943537c320ec4c151e6d94743288a030f7cf759229736e68963871b3f31eb521f3e9106255a7c9b8b9db64e9627922df28b5610fa5d66d6fc5fd9966ab57c46daac489b2dabb7273fe15c14a4d837efa05449e8ca37682ea41c363b963cb7ca27d3a2e697d09b71bbab30f157fb0edbcaaf291e4ee0777afb24b1645b9286101daf36cd3af7fed31fee657ddaf2cdd9906d732051eed5bbeec96f9348ba230bd26f0a0f91e3353ab70c85b1af9af9d56d283992eeb24c1e4199088305ba9b2463c0585b28678726bd99ee89722a3525a06d01c0dc1641634748e401f38506d5066ec458235001f1a1d921154cf5bb5946cb9dcf02b5adcb94607fe95af9226346e7bd55b41d376b27d587d840be88eb0aa988e205b1cd63ce4102b7feda0d6bf632a03b80c320f4bacf1660f72c7fd18098f39e026d396135ceaa5844e8dae0b75644e69019baf7cff642d01e503f6017ab253d5af0fca728b608d17dfc86b3bcb4332a52de77e3f8f81b90fe9877cc5cd8e382290f1433404a5810a88c5bdb16d28578479956a049b4ad4fbfe739b38fcef8516699213d276d58de8e5a7989b1dad8a7f04617bb1146c97bda69c2cd9cfa526d742dc92822131d50f2b11b914ba02d5c7614fcd327a1c4446513d9443615a3de7543b3aec7a84a88e54d1ca1f53057d6b30ad49d7fc93282dc00ceab4d16e376383516b1c86732bfbfcc5ef52945fb42e751688c9359032cbfcc870006cc66e22009465e1e74e367f50cc0e8e103b690ce77b8fb641d522a129b1710835f75661301b2a300ec0ba1b883e1ca1ac39df11dd292b8df892ae1a3d705460bcd332fb42385f66d9420d1af2a8b19a36a27584c1eb24e8d02fd4bf907ff952fb30e55c188c4014680145bc2e9ea970beede08dda6aba0d0f698ee373bb94e666de280d6ad6f5200224a18053c2d1360d76926fd1dc1611e8481fcb7c6491addfbc2a2de5975bcd8478260b79134eaa13fe1e93e109f85d45305744b008de64075bf7b3ded8ef7f7d9051fd7ec24f6f36ce3ddd57316d39d2d25257bb226ad0e6950a9c488c5c366ef5c7b3d000ba11b5725755a6d70cdbd4d18e259b9a1cb1e62d8eaf4346faa259cdc09e75bf1ebc05e288f49a73004f80dfd56922a326055e3c492a70fda0044491e46af19711d7e47b898b614f3547d2201579774dd2896b892a0a6ca9e27195e7285dac63b4b2dc922e74ceb8eacccf46c618f381595c22c4d2c091a82808f8fb9fc260773f6c8cfef8e18e27d7fd05de10b8741ba6b2ffe8ce1761708e06f7a4eddd7121b70a4ab54739990a43e4842f36968449c45be8515c417fac4e9172756fef83d7906ce10261581563c6eb5f3d880f82f5e90c284c20bf95343dfcf2c63ad00a7dca4b8c6ed0614938ed7aca529c50610a0b3c5ecbe4977f6b13e40f50bb47ff53bd887e71040f0dc44d60a306a37e400cea89c6dc59aa2249693e0da9d0b94754aec6c4bbf4efef108974ceae0421dc09f2700643c9dd2fd56f7ac4296e3a3afcb2790adb9779c7bad5aca76ccfb467ec4be3462bef0ceccc5bbbbb0e1c124f569066d92fa7af10f5731801d8b325162c6411794ab42f1924aad20af5c626e4f20f79978bc1ba4c215e79ee2bacc973e17f6563e360290cb867e6bdcff998f690cd52ecdf0a9b308cfe7699a5bf2b5dc58273dd8da08961e8712d26913a394f45d40b0e6dd61e2c94851eb15725006f8d3a9badc66e79e465783eec94f9a6ae2c6697ea18d9fb1a4f314d6671b9ae8b9f543119b46c3b483e58efaf7bd2e023423008b2f12bb663958d0c2c1f1c37ac90f19d44a8aef9a65981c1e8c9122c818eb6fe77d5703aa42a96ae6e54fe90c215b8b622bc6fc3c8ce8ff715209b72f41b79293e4411211e9d0f324d2671196ca5dda91e0567d00623e144927f109fb521fe01559d7185e3f998309d4923b7ac5c18869467cefae61ba7cce5d26728d424d87a03f24f5e9219642ba1e06ee8ca0af76da5d0b642b7ec25a30bc2969e5085c963d0ed6ec16831f03a06d34960d6c91a38dc06d97745130e945dc1f36b8f02786f05f", 0xfe2}], 0x3}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m50.585223291s ago: executing program 3 (id=120): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m45.934865794s ago: executing program 3 (id=125): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d600", 0x43}], 0x1}, 0x20004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 4m44.085890947s ago: executing program 3 (id=128): syz_io_uring_complete(0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81000000080047000000000000000000907800000000ffffffff0000000000000000", @ANYRES64, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="5dc00976d3951b0c956b533764d08200fc93ebb74bd69d69c0f63cf0693c7ce0f6083e81e8cc9d6d3c7506d218b9b3281e8b67f0f5ae5acf67a7b208d7686947c16b1aed057491a2ef9942361f6b403102d2959fa6ca"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x2) socket(0x1d, 0x2, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 4m28.932357905s ago: executing program 33 (id=128): syz_io_uring_complete(0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81000000080047000000000000000000907800000000ffffffff0000000000000000", @ANYRES64, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="5dc00976d3951b0c956b533764d08200fc93ebb74bd69d69c0f63cf0693c7ce0f6083e81e8cc9d6d3c7506d218b9b3281e8b67f0f5ae5acf67a7b208d7686947c16b1aed057491a2ef9942361f6b403102d2959fa6ca"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x2) socket(0x1d, 0x2, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1m43.288344687s ago: executing program 5 (id=434): socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00), 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f00000001c0), 0x0) 1m39.229738743s ago: executing program 5 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m37.484511404s ago: executing program 5 (id=448): socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00), 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 1m33.345950568s ago: executing program 5 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b2c, &(0x7f0000000040)) 1m32.254176799s ago: executing program 5 (id=456): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) 1m30.926771416s ago: executing program 5 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000380)='GPL\x00', 0x85e5, 0x3, &(0x7f00000003c0)=""/3, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x58d, 0x401}, 0x10, 0x2b460, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x3, 0x8}], 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) fcntl$dupfd(r5, 0x0, r5) 1m14.439116109s ago: executing program 34 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000380)='GPL\x00', 0x85e5, 0x3, &(0x7f00000003c0)=""/3, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x58d, 0x401}, 0x10, 0x2b460, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x3, 0x8}], 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) fcntl$dupfd(r5, 0x0, r5) 1m1.593338024s ago: executing program 4 (id=529): socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$inet6(0xa, 0x800000000000002, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = dup3(r3, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000480)) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x20) r5 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) 58.646578739s ago: executing program 4 (id=533): mount(0x0, 0x0, &(0x7f0000000380)='hugetlbfs\x00', 0x0, &(0x7f00000000c0)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) 58.26143628s ago: executing program 6 (id=534): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000002240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="2224c8bcb38d9532a5edf985dfdb5ee515836cea3a07bf7d32a5b8c9c868bc73d7f0775533b9663bc6008111eeede2815340a00cd16e9224bac6cf740e72acb698e2363f24ac1497888763ea3e44973be89dc36eda090988a40d24480c2adb717fb0edf287af0e626833e09c8b8f7fcc87311596db", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000214000228bd7000fcdbdf2518004400"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002380)={0x0}, 0x1, 0x0, 0x0, 0x44894}, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000440)={0x80, 0x5, 0x1, 0x10, 0x7ff, 0x0, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 57.116693853s ago: executing program 4 (id=537): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) 53.097779965s ago: executing program 6 (id=544): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) 50.783898781s ago: executing program 6 (id=546): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae03de91", 0x6e}, {&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887db243f77d07b85a9b7aa2b37d562f4adaab6891408c1003c82891b736c2eb61919f17d0657eb49fbf6bb51c56ac8547212f15b950683c533ad170fb23ac11e55eddffd044710a6bcf563e601e77a75277f1dcc92a5fb0052b41cebb282aecf93d460706f1323b8766140389c66ffed5026daf508c52fcaecb55c1aa4273cb05d25d04938c7df6bcda9174cf08b4d2b7172a3dc45ce9866e6141210c7ee5a61d35751fa2945a4ff94e5df5d77eb0c9fc63148c4871d2dca098bb192aa99ccab8dd8b78313d124cdfe5cc2eabe884554f6081abb91904fe01f6d9d01cb320ab62002a4644b5ccd248e8bec740d72851e328ff55157b39234705e8bfe947daf892be1a09230f3d8b86360adce01621ba347fc9e9e4901fc815a208c63a60266f1998709f5f03983a7b35e0e2963070a91f2912beb46c36d6d5b748944630ccd84917b3eb4abd9353b19ca8042f57a401fe05241b5771e4b8d3c7c592295771fe9e02a2906719e38d306e53105f1c48ff88cb93ff1d315428f15baeeb56fb4f5504ef6993bd0d33ce8dba40be620dc4b2d5e3b5d5a941bcd194723a3c634a19599e0d0bc7ce0d55f1411ae3b2e25caa39c96cacefe08a2870b25615e3106a64cc9181548cfcb62ffc6fe10294fec2d7d0297b913fd7326ad8bb991113172fa8dececf448f887fbf9f0def1bddb796e5e1f323234326a089bed346b3d8dcec4ee52e78b50dfc48dee499420ca1f652b34d8a64b890801e5c90f8fae2f688e68ae3d1d079f4bfc350ef007626746958ad7bcd13dee16913407bc953ff5ac3013b1592b00fdf43784497ce8eaddfb7345fcd3b07d64e284a7529cfb9899e5b8ca62c7eb1491b985f2a3f544d6978107f87bcd8496a34d0f429e65558000b472108a99028e263649be5f3e75c10ca4102819776330423e3264a87095f2b3be20e1ea911b2e285191a4c27a0eab19a5bdbf26bd08fead4f22ebe5b1c82e99edb0c49a4770f74b2e012c5b0d6c6599eaa7f6939cffe30a4184fb3dec8c5a2acd6718edda3867f25cb552926b34c0ee01ccc0160f6f90d08eb72062d014e11285b9c3d02176942c6d881ef830c313b8b578cb54a494205fe7ecf257f7d545c374b931c6c2b15dceacd926b3b76c5298edf0c3bd943537c320ec4c151e6d94743288a030f7cf759229736e68963871b3f31eb521f3e9106255a7c9b8b9db64e9627922df28b5610fa5d66d6fc5fd9966ab57c46daac489b2dabb7273fe15c14a4d837efa05449e8ca37682ea41c363b963cb7ca27d3a2e697d09b71bbab30f157fb0edbcaaf291e4ee0777afb24b1645b9286101daf36cd3af7fed31fee657ddaf2cdd9906d732051eed5bbeec96f9348ba230bd26f0a0f91e3353ab70c85b1af9af9d56d283992eeb24c1e4199088305ba9b2463c0585b28678726bd99ee89722a3525a06d01c0dc1641634748e401f38506d5066ec458235001f1a1d921154cf5bb5946cb9dcf02b5adcb94607fe95af9226346e7bd55b41d376b27d587d840be88eb0aa988e205b1cd63ce4102b7feda0d6bf632a03b80c320f4bacf1660f72c7fd18098f39e026d396135ceaa5844e8dae0b75644e69019baf7cff642d01e503f6017ab253d5af0fca728b608d17dfc86b3bcb4332a52de77e3f8f81b90fe9877cc5cd8e382290f1433404a5810a88c5bdb16d28578479956a049b4ad4fbfe739b38fcef8516699213d276d58de8e5a7989b1dad8a7f04617bb1146c97bda69c2cd9cfa526d742dc92822131d50f2b11b914ba02d5c7614fcd327a1c4446513d9443615a3de7543b3aec7a84a88e54d1ca1f53057d6b30ad49d7fc93282dc00ceab4d16e376383516b1c86732bfbfcc5ef52945fb42e751688c9359032cbfcc870006cc66e22009465e1e74e367f50cc0e8e103b690ce77b8fb641d522a129b1710835f75661301b2a300ec0ba1b883e1ca1ac39df11dd292b8df892ae1a3d705460bcd332fb42385f66d9420d1af2a8b19a36a27584c1eb24e8d02fd4bf907ff952fb30e55c188c4014680145bc2e9ea970beede08dda6aba0d0f698ee373bb94e666de280d6ad6f5200224a18053c2d1360d76926fd1dc1611e8481fcb7c6491addfbc2a2de5975bcd8478260b79134eaa13fe1e93e109f85d45305744b008de64075bf7b3ded8ef7f7d9051fd7ec24f6f36ce3ddd57316d39d2d25257bb226ad0e6950a9c488c5c366ef5c7b3d000ba11b5725755a6d70cdbd4d18e259b9a1cb1e62d8eaf4346faa259cdc09e75bf1ebc05e288f49a73004f80dfd56922a326055e3c492a70fda0044491e46af19711d7e47b898b614f3547d2201579774dd2896b892a0a6ca9e27195e7285dac63b4b2dc922e74ceb8eacccf46c618f381595c22c4d2c091a82808f8fb9fc260773f6c8cfef8e18e27d7fd05de10b8741ba6b2ffe8ce1761708e06f7a4eddd7121b70a4ab54739990a43e4842f36968449c45be8515c417fac4e9172756fef83d7906ce10261581563c6eb5f3d880f82f5e90c284c20bf95343dfcf2c63ad00a7dca4b8c6ed0614938ed7aca529c50610a0b3c5ecbe4977f6b13e40f50bb47ff53bd887e71040f0dc44d60a306a37e400cea89c6dc59aa2249693e0da9d0b94754aec6c4bbf4efef108974ceae0421dc09f2700643c9dd2fd56f7ac4296e3a3afcb2790adb9779c7bad5aca76ccfb467ec4be3462bef0ceccc5bbbbb0e1c124f569066d92fa7af10f5731801d8b325162c6411794ab42f1924aad20af5c626e4f20f79978bc1ba4c215e79ee2bacc973e17f6563e360290cb867e6bdcff998f690cd52ecdf0a9b308cfe7699a5bf2b5dc58273dd8da08961e8712d26913a394f45d40b0e6dd61e2c94851eb15725006f8d3a9badc66e79e465783eec94f9a6ae2c6697ea18d9fb1a4f314d6671b9ae8b9f543119b46c3b483e58efaf7bd2e023423008b2f12bb663958d0c2c1f1c37ac90f19d44a8aef9a65981c1e8c9122c818eb6fe77d5703aa42a96ae6e54fe90c215b8b622bc6fc3c8ce8ff715209b72f41b79293e4411211e9d0f324d2671196ca5dda91e0567d00623e144927f109fb521fe01559d7185e3f998309d4923b7ac5c18869467cefae61ba7cce5d26728d424d87a03f24f5e9219642ba1e06ee8ca0af76da5d0b642b7ec25a30bc2969e5085c963d0ed6ec16831f03a06d34960d6c91a38dc06d97745130e945dc1f36b8f02786f05f", 0xfe2}], 0x3}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 49.729272132s ago: executing program 4 (id=549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 48.520808632s ago: executing program 4 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000002c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x11, r2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r6 = dup2(r5, r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth1_macvtap\x00', @local}) lsm_get_self_attr(0x67, &(0x7f0000004500)={0x0, 0x0, 0x20}, &(0x7f0000004540)=0x20, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, 0x0) 46.933585118s ago: executing program 6 (id=553): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000002240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="2224c8bcb38d9532a5edf985dfdb5ee515836cea3a07bf7d32a5b8c9c868bc73d7f0775533b9663bc6008111eeede2815340a00cd16e9224bac6cf740e72acb698e2363f24ac1497888763ea3e44973be89dc36eda090988a40d24480c2adb717fb0edf287af0e626833e09c8b8f7fcc87311596db", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000214000228bd7000fcdbdf2518004400"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002380)={0x0}, 0x1, 0x0, 0x0, 0x44894}, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000440)={0x80, 0x5, 0x1, 0x10, 0x7ff, 0x0, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 45.755620319s ago: executing program 6 (id=555): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) 44.474631459s ago: executing program 6 (id=558): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) 40.570987797s ago: executing program 4 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000380)='GPL\x00', 0x85e5, 0x3, &(0x7f00000003c0)=""/3, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x58d, 0x401}, 0x10, 0x2b460, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x3, 0x8}], 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) fcntl$dupfd(r5, 0x0, r5) 29.106750599s ago: executing program 35 (id=558): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setresgid(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) 25.210696049s ago: executing program 36 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000380)='GPL\x00', 0x85e5, 0x3, &(0x7f00000003c0)=""/3, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x58d, 0x401}, 0x10, 0x2b460, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x3, 0x8}], 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) fcntl$dupfd(r5, 0x0, r5) 20.420093801s ago: executing program 2 (id=585): mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x1, 0x0, &(0x7f00000011c0)=[{0x7ff, 0x107e}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000340)={{0x7, 0x0, 0xae, 0x92, 'syz1\x00', 0x9}, 0x5, 0x3, 0x1, 0xffffffffffffffff, 0x0, 0x7, 'syz0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 18.776179585s ago: executing program 2 (id=587): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000240)=ANY=[], 0x28}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @empty, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x2004800) 15.34160961s ago: executing program 2 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b2c, 0x0) 14.153707128s ago: executing program 2 (id=592): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x28044005) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) 11.218529865s ago: executing program 7 (id=594): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x900) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11.178634467s ago: executing program 0 (id=595): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 11.040542338s ago: executing program 2 (id=596): mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x1, 0x0, &(0x7f00000011c0)=[{0x7ff, 0x107e}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000340)={{0x7, 0x0, 0xae, 0x92, 'syz1\x00', 0x9}, 0x5, 0x3, 0x1, 0xffffffffffffffff, 0x0, 0x7, 'syz0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 9.229973595s ago: executing program 0 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xc, 0x7}, 0x31) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) 8.971933818s ago: executing program 0 (id=598): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 8.931887355s ago: executing program 7 (id=599): socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000027000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) syz_io_uring_submit(r0, r1, 0x0) 4.253022299s ago: executing program 2 (id=600): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a070089b4c45a10000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r1, r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x5e5, 0x10100, 0x0, 0x22e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) 3.287072722s ago: executing program 7 (id=601): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae03de91", 0x6e}, {&(0x7f0000001400)="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", 0xfe2}], 0x3}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.275672342s ago: executing program 0 (id=602): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae03de91", 0x6e}, {&(0x7f0000001400)="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", 0xfc3}], 0x3}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.396834453s ago: executing program 7 (id=603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x8, 0x2, 0x8505}, 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1f}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) 2.32044754s ago: executing program 0 (id=604): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0xfffffffffffffe99, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000140)}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 519.459019ms ago: executing program 0 (id=605): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 344.05515ms ago: executing program 7 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) 0s ago: executing program 7 (id=607): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="03010000ac0fce405d0501904431000000010902120009000080040904"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 81.762608][ T5814] cgroup: Unknown subsys name 'net' [ 81.897790][ T5814] cgroup: Unknown subsys name 'cpuset' [ 81.906651][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.570785][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.837341][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.849814][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.863302][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.872406][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.880201][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.888442][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.898743][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.907086][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.915415][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.917542][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.925158][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.937431][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.938827][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.954570][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.958118][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.965179][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.969872][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.983932][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.987590][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.991530][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.004565][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.010223][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.014412][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.026110][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.027156][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.734591][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.823287][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.054407][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 87.078314][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.153230][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.190597][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.199015][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.206447][ T5827] bridge_slave_0: entered allmulticast mode [ 87.215500][ T5827] bridge_slave_0: entered promiscuous mode [ 87.291989][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.299504][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.306918][ T5827] bridge_slave_1: entered allmulticast mode [ 87.314909][ T5827] bridge_slave_1: entered promiscuous mode [ 87.414188][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.421546][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.428905][ T5828] bridge_slave_0: entered allmulticast mode [ 87.436977][ T5828] bridge_slave_0: entered promiscuous mode [ 87.481761][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.489144][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.496585][ T5828] bridge_slave_1: entered allmulticast mode [ 87.505056][ T5828] bridge_slave_1: entered promiscuous mode [ 87.517392][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.564908][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.698206][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.724895][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.732243][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.740023][ T5829] bridge_slave_0: entered allmulticast mode [ 87.747896][ T5829] bridge_slave_0: entered promiscuous mode [ 87.757348][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.764946][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.772198][ T5826] bridge_slave_0: entered allmulticast mode [ 87.780389][ T5826] bridge_slave_0: entered promiscuous mode [ 87.789092][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.796984][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.804471][ T5832] bridge_slave_0: entered allmulticast mode [ 87.812343][ T5832] bridge_slave_0: entered promiscuous mode [ 87.824706][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.837158][ T5827] team0: Port device team_slave_0 added [ 87.845204][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.852548][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.860188][ T5829] bridge_slave_1: entered allmulticast mode [ 87.868119][ T5829] bridge_slave_1: entered promiscuous mode [ 87.876528][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.884082][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.891379][ T5826] bridge_slave_1: entered allmulticast mode [ 87.899737][ T5826] bridge_slave_1: entered promiscuous mode [ 87.907725][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.915256][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.922563][ T5832] bridge_slave_1: entered allmulticast mode [ 87.930699][ T5832] bridge_slave_1: entered promiscuous mode [ 87.955282][ T5827] team0: Port device team_slave_1 added [ 88.054479][ T5147] Bluetooth: hci2: command tx timeout [ 88.089868][ T5828] team0: Port device team_slave_0 added [ 88.123657][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.134261][ T5147] Bluetooth: hci3: command tx timeout [ 88.134302][ T5833] Bluetooth: hci0: command tx timeout [ 88.134520][ T5836] Bluetooth: hci4: command tx timeout [ 88.152182][ T5840] Bluetooth: hci1: command tx timeout [ 88.157024][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.172271][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.186698][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.198994][ T5828] team0: Port device team_slave_1 added [ 88.206648][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.214342][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.241060][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.257072][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.265250][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.291957][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.308493][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.350230][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.438222][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.445590][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.472282][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.487451][ T5829] team0: Port device team_slave_0 added [ 88.496395][ T5826] team0: Port device team_slave_0 added [ 88.530376][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.537515][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.563667][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.591380][ T5829] team0: Port device team_slave_1 added [ 88.614783][ T5826] team0: Port device team_slave_1 added [ 88.624007][ T5832] team0: Port device team_slave_0 added [ 88.652531][ T5827] hsr_slave_0: entered promiscuous mode [ 88.659847][ T5827] hsr_slave_1: entered promiscuous mode [ 88.698358][ T5832] team0: Port device team_slave_1 added [ 88.735850][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.742829][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.768829][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.824274][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.831279][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.857774][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.870834][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.877865][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.904256][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.925320][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.932512][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.958842][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.991047][ T5828] hsr_slave_0: entered promiscuous mode [ 88.998796][ T5828] hsr_slave_1: entered promiscuous mode [ 89.006501][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 89.012410][ T5828] Cannot create hsr debugfs directory [ 89.027780][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.037086][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.063707][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.099120][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.106230][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.132346][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.339206][ T5832] hsr_slave_0: entered promiscuous mode [ 89.346464][ T5832] hsr_slave_1: entered promiscuous mode [ 89.353474][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 89.359242][ T5832] Cannot create hsr debugfs directory [ 89.431274][ T5829] hsr_slave_0: entered promiscuous mode [ 89.438449][ T5829] hsr_slave_1: entered promiscuous mode [ 89.445587][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 89.451432][ T5829] Cannot create hsr debugfs directory [ 89.478069][ T5826] hsr_slave_0: entered promiscuous mode [ 89.485900][ T5826] hsr_slave_1: entered promiscuous mode [ 89.492860][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 89.499589][ T5826] Cannot create hsr debugfs directory [ 90.106582][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.123362][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.133902][ T5836] Bluetooth: hci2: command tx timeout [ 90.141915][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.166144][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.214538][ T5836] Bluetooth: hci0: command tx timeout [ 90.215648][ T5840] Bluetooth: hci3: command tx timeout [ 90.220259][ T5833] Bluetooth: hci1: command tx timeout [ 90.231993][ T5147] Bluetooth: hci4: command tx timeout [ 90.260596][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.274324][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.289236][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.310850][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.431396][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.449449][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.461698][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.477628][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.639901][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.652972][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.666105][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.689261][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.750621][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.862103][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.889098][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.916085][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.926626][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.934528][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.946595][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.020204][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.027866][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.055210][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.065633][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.072895][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.121356][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.128567][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.155812][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.195619][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.202792][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.254731][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.328693][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.335926][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.376151][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.385278][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.392641][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.527347][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.597927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.605242][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.657414][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.664691][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.770990][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.899042][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.930722][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.999110][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.006381][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.035478][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.042685][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.057444][ T10] cfg80211: failed to load regulatory.db [ 92.155969][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.213828][ T5840] Bluetooth: hci2: command tx timeout [ 92.260469][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.287505][ T5827] veth0_vlan: entered promiscuous mode [ 92.293993][ T5147] Bluetooth: hci4: command tx timeout [ 92.296171][ T5833] Bluetooth: hci1: command tx timeout [ 92.299512][ T5840] Bluetooth: hci3: command tx timeout [ 92.311329][ T5836] Bluetooth: hci0: command tx timeout [ 92.405929][ T5827] veth1_vlan: entered promiscuous mode [ 92.524864][ T5828] veth0_vlan: entered promiscuous mode [ 92.553700][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.620860][ T5828] veth1_vlan: entered promiscuous mode [ 92.640703][ T5827] veth0_macvtap: entered promiscuous mode [ 92.657308][ T5826] veth0_vlan: entered promiscuous mode [ 92.695429][ T5827] veth1_macvtap: entered promiscuous mode [ 92.747093][ T5826] veth1_vlan: entered promiscuous mode [ 92.861766][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.885751][ T5828] veth0_macvtap: entered promiscuous mode [ 92.922725][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.955205][ T5828] veth1_macvtap: entered promiscuous mode [ 92.982656][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.017770][ T5826] veth0_macvtap: entered promiscuous mode [ 93.029336][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.039170][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.062062][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.071004][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.097603][ T5826] veth1_macvtap: entered promiscuous mode [ 93.144870][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.187543][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.215702][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.252236][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.261850][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.280518][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.289951][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.319029][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.405540][ T5829] veth0_vlan: entered promiscuous mode [ 93.414526][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423458][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.432941][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.458607][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.469607][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.479512][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.522592][ T5829] veth1_vlan: entered promiscuous mode [ 93.551539][ T5832] veth0_vlan: entered promiscuous mode [ 93.618568][ T391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.627261][ T391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.674643][ T5832] veth1_vlan: entered promiscuous mode [ 93.748584][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.761474][ T391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.778734][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.783320][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.803868][ T391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.899607][ T5829] veth0_macvtap: entered promiscuous mode [ 93.921712][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.930872][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.020837][ T5829] veth1_macvtap: entered promiscuous mode [ 94.036528][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.065848][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.142450][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.173771][ T5832] veth0_macvtap: entered promiscuous mode [ 94.222339][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.240753][ T5832] veth1_macvtap: entered promiscuous mode [ 94.293979][ T5836] Bluetooth: hci2: command tx timeout [ 94.359123][ T127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.370967][ T127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.415690][ T5836] Bluetooth: hci3: command tx timeout [ 94.421172][ T5833] Bluetooth: hci4: command tx timeout [ 94.421216][ T5147] Bluetooth: hci1: command tx timeout [ 94.435977][ T5840] Bluetooth: hci0: command tx timeout [ 94.451339][ T127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.480398][ T127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.853965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.866418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.368454][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.503384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.526622][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.805103][ T5966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.852485][ T5966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.926275][ T5966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.982860][ T5966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.996499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.996683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.162760][ T391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.192825][ T391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.386675][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.524984][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.640214][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.680483][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.751275][ T5973] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 96.774042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 96.933717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.722245][ T5973] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.734112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 97.802214][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.945863][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.450035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.552449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.896048][ T5991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.902653][ T5991] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.919694][ T5991] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.930703][ T5991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.937302][ T5991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.945744][ T5991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.954631][ T5991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.960607][ T5991] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.123026][ T5991] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.392860][ T5991] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.399736][ T5991] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.619566][ T5991] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.675576][ T5991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.681588][ T5991] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.748192][ T5991] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.874346][ T6001] Zero length message leads to an empty skb [ 100.900379][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 102.003653][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.009977][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.016565][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.538193][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.733229][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.053394][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.053944][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.065693][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.650305][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.777669][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.674058][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 106.134913][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.141250][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.149878][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.899859][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.933650][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.141202][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 109.205317][ T5830] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.405560][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 109.446107][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 109.490058][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.524435][ T5830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.567494][ T5830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 4 [ 109.604155][ T5830] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 109.634282][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.700825][ T5830] usb 1-1: config 0 descriptor?? [ 109.717795][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.738959][ T6040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.750277][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.766456][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.782817][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.791944][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.069234][ T5833] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 111.091530][ T29] audit: type=1326 audit(1772744660.289:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d9d9c799 code=0x7fc00000 [ 111.112955][ T5837] usb 1-1: USB disconnect, device number 2 [ 111.501685][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 111.897364][ T5833] Bluetooth: hci5: command tx timeout [ 113.934629][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.146070][ T5833] Bluetooth: hci5: command tx timeout [ 115.300454][ T6044] chnl_net:caif_netlink_parms(): no params data found [ 115.683346][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 116.573829][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.298656][ T5147] Bluetooth: hci5: command tx timeout [ 117.999911][ T6080] nbd: socks must be embedded in a SOCK_ITEM attr [ 118.113838][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.506744][ T5147] Bluetooth: hci5: command tx timeout [ 121.103734][ T6103] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.589627][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 121.732539][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.901850][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.911881][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.938960][ T6044] bridge_slave_0: entered allmulticast mode [ 121.973533][ T6044] bridge_slave_0: entered promiscuous mode [ 122.018345][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.060540][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.116390][ T6044] bridge_slave_1: entered allmulticast mode [ 123.008172][ T6044] bridge_slave_1: entered promiscuous mode [ 123.567494][ T6044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.642043][ T6044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.852685][ T6044] team0: Port device team_slave_0 added [ 123.917818][ T6044] team0: Port device team_slave_1 added [ 124.239685][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 124.602808][ T49] bridge_slave_1: left allmulticast mode [ 124.626717][ T49] bridge_slave_1: left promiscuous mode [ 124.653134][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.746295][ T49] bridge_slave_0: left allmulticast mode [ 124.775024][ T49] bridge_slave_0: left promiscuous mode [ 124.798326][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.181194][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.515560][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 125.538581][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.559832][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.592788][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.603320][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 125.615025][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.632285][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 125.698877][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.725858][ T9] usb 3-1: Manufacturer: syz [ 125.735590][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.775703][ T9] usb 3-1: config 0 descriptor?? [ 126.543191][ T9] rc_core: IR keymap rc-hauppauge not found [ 126.550214][ T9] Registered IR keymap rc-empty [ 126.562627][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.594254][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 126.627658][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.643186][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 126.689765][ T49] bond0 (unregistering): Released all slaves [ 126.705260][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 126.784339][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.791394][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.829113][ T6044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.851134][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.866356][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.896919][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 127.363545][ T6044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.469394][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.046048][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.143559][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.213225][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.263350][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.327382][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.515304][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.963472][ T6167] netlink: 48 bytes leftover after parsing attributes in process `syz.0.45'. [ 129.262191][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 130.268063][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 130.293245][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 130.370631][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 130.397319][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 130.421507][ T6044] hsr_slave_0: entered promiscuous mode [ 130.431071][ T6044] hsr_slave_1: entered promiscuous mode [ 130.438414][ T6044] debugfs: 'hsr0' already exists in 'hsr' [ 130.451691][ T6044] Cannot create hsr debugfs directory [ 130.488413][ T9] usb 3-1: USB disconnect, device number 2 [ 130.512164][ T6173] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 130.518262][ T6167] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.525992][ T6167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.532000][ T6167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.538064][ T6167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.544143][ T6167] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 130.550192][ T6167] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 130.567437][ T6167] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 133.005060][ T5147] Bluetooth: hci5: command 0x0c1a tx timeout [ 133.005198][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.011236][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.025913][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.039498][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.047153][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.054570][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.524525][ T6173] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.015687][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 135.093287][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 135.788398][ T6191] nbd: socks must be embedded in a SOCK_ITEM attr [ 137.173162][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 137.561027][ T5890] udevd[5890]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.584817][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.622179][ T49] hsr_slave_0: left promiscuous mode [ 137.661694][ T49] hsr_slave_1: left promiscuous mode [ 137.691566][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.719963][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.751367][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.769892][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.840925][ T49] veth1_macvtap: left promiscuous mode [ 137.863358][ T49] veth0_macvtap: left promiscuous mode [ 137.869149][ T49] veth1_vlan: left promiscuous mode [ 137.883325][ T49] veth0_vlan: left promiscuous mode [ 137.898863][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.063271][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 138.071341][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.084061][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.096680][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.107234][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.264412][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.323084][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.836683][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 138.859658][ T10] usb 3-1: Manufacturer: syz [ 138.931479][ T10] usb 3-1: config 0 descriptor?? [ 139.967464][ T10] rc_core: IR keymap rc-hauppauge not found [ 139.979909][ T10] Registered IR keymap rc-empty [ 139.993018][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.033486][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.065055][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 140.081214][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 140.101501][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.123389][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.143315][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.207849][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.253234][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.314551][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.353229][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.382619][ T49] team0 (unregistering): Port device team_slave_1 removed [ 140.398510][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.443629][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.643698][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.752368][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 140.762427][ T49] team0 (unregistering): Port device team_slave_0 removed [ 140.774179][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.802044][ T10] usb 3-1: USB disconnect, device number 3 [ 141.393214][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.602852][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 142.018402][ T6239] nbd: socks must be embedded in a SOCK_ITEM attr [ 142.178985][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 143.727348][ T10] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 144.021895][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.456193][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.467318][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.477072][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 145.611368][ T6255] xt_hashlimit: size too large, truncated to 1048576 [ 145.680883][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.818827][ T10] usb 3-1: string descriptor 0 read error: -71 [ 145.881991][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.920416][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 146.002078][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.669190][ T10] usb 3-1: config 0 descriptor?? [ 146.706350][ T10] usb 3-1: can't set config #0, error -71 [ 146.804911][ T10] usb 3-1: USB disconnect, device number 4 [ 146.852943][ T6044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.928684][ T6044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.988607][ T6044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.058947][ T6044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.044369][ T6044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.198281][ T6044] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.267816][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.275019][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.376936][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.384152][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.159113][ T6305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.74'. [ 150.504304][ T6305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.510964][ T6305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.560213][ T6305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 150.566645][ T6305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.573747][ T6305] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 150.665859][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 151.061573][ T6301] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.077860][ T5890] block nbd64: NBD_DISCONNECT [ 152.102008][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.626795][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.626811][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.633264][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 152.639417][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.645158][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 153.842437][ T6044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.323831][ T5922] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.108526][ T6349] fuse: Bad value for 'fd' [ 155.745574][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.795536][ T5922] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 155.818953][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.854543][ T5922] usb 4-1: Product: syz [ 155.870127][ T5922] usb 4-1: Manufacturer: syz [ 155.897038][ T5922] usb 4-1: SerialNumber: syz [ 155.940725][ T5922] usb 4-1: config 0 descriptor?? [ 155.972984][ T5922] cytherm 4-1:0.0: Cypress thermometer device now attached [ 156.254403][ T6335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.305871][ T5922] usb 4-1: USB disconnect, device number 2 [ 156.327069][ T5922] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 156.389437][ T6044] veth0_vlan: entered promiscuous mode [ 156.456264][ T6044] veth1_vlan: entered promiscuous mode [ 156.550409][ T6044] veth0_macvtap: entered promiscuous mode [ 156.590088][ T6044] veth1_macvtap: entered promiscuous mode [ 156.614945][ T5937] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.703823][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.749004][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.793532][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 156.818185][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.830886][ T6185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.876763][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.896903][ T6185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.914967][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.927498][ T6185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.957648][ T5937] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 157.005088][ T6185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.036273][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.099032][ T5937] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.805084][ T5937] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 159.627665][ T5937] usb 3-1: Manufacturer: syz [ 159.647357][ T5937] usb 3-1: config 0 descriptor?? [ 159.733997][ T5839] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 159.873499][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.898947][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 159.910701][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.992518][ T5937] usb 3-1: can't set config #0, error -71 [ 161.005791][ T29] audit: type=1326 audit(1772744710.179:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13ab9c799 code=0x7fc00000 [ 161.309131][ T5839] usb 5-1: device descriptor read/all, error -71 [ 161.385561][ T5937] usb 3-1: USB disconnect, device number 5 [ 161.484361][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.515204][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.807472][ T5836] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 167.823187][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.116846][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 168.142302][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 168.197634][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.240854][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.282491][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 4 [ 168.335294][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 168.395324][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.453496][ T9] usb 1-1: config 0 descriptor?? [ 168.487171][ T6438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.233883][ T6457] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.108'. [ 170.755920][ T6459] syz.2.107 (6459) used greatest stack depth: 16904 bytes left [ 171.455686][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 171.576528][ T29] audit: type=1326 audit(1772744720.789:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d9d9c799 code=0x7fc00000 [ 171.626472][ T5830] usb 1-1: USB disconnect, device number 3 [ 180.556060][ T5922] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.314620][ T29] audit: type=1326 audit(1772744730.549:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.5.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cde39c799 code=0x7fc00000 [ 181.626814][ T6519] 9p: Bad value for 'access' [ 184.782805][ T6554] xt_TPROXY: Can be used only with -p tcp or -p udp [ 184.817213][ T6554] warning: `syz.2.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 185.392027][ T5836] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 185.392305][ T5836] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 185.401197][ T5836] Bluetooth: hci2: Malformed LE Event: 0x02 [ 186.281257][ T6563] netlink: 'syz.0.131': attribute type 10 has an invalid length. [ 186.440439][ T6572] netlink: 1760 bytes leftover after parsing attributes in process `syz.5.123'. [ 186.581072][ T6563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 190.709377][ T29] audit: type=1326 audit(1772744740.009:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.5.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cde39c799 code=0x7fc00000 [ 190.843416][ T5903] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 192.955715][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.142'. [ 194.528238][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.551862][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.685681][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 196.702363][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 201.983196][ T5922] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 202.185924][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 202.266689][ T29] audit: type=1326 audit(1772744751.509:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cde39c799 code=0x7fc00000 [ 202.346155][ T5922] usb 6-1: device descriptor read/all, error -71 [ 202.438316][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.452707][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.461614][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.479943][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.489221][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.820076][ T6648] chnl_net:caif_netlink_parms(): no params data found [ 203.079911][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.108135][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.136770][ T6648] bridge_slave_0: entered allmulticast mode [ 203.179461][ T6648] bridge_slave_0: entered promiscuous mode [ 203.223885][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.253710][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.283560][ T6648] bridge_slave_1: entered allmulticast mode [ 203.285001][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 203.329927][ T6648] bridge_slave_1: entered promiscuous mode [ 204.536135][ T5840] Bluetooth: hci0: command tx timeout [ 204.726698][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.785917][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.677786][ T5840] Bluetooth: hci0: command tx timeout [ 207.115568][ T6648] team0: Port device team_slave_0 added [ 207.553776][ T6648] team0: Port device team_slave_1 added [ 208.627611][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.637824][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.693182][ T5840] Bluetooth: hci0: command tx timeout [ 208.712446][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.769335][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.271296][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.337881][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.742923][ T6648] hsr_slave_0: entered promiscuous mode [ 209.784641][ T6648] hsr_slave_1: entered promiscuous mode [ 209.856299][ T6648] debugfs: 'hsr0' already exists in 'hsr' [ 209.890240][ T6648] Cannot create hsr debugfs directory [ 210.783158][ T5840] Bluetooth: hci0: command tx timeout [ 214.693898][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.700427][ T5924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 214.863976][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 214.883848][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 214.900535][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.917934][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.698341][ T29] audit: type=1326 audit(1772744765.929:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d9d9c799 code=0x7fc00000 [ 216.771357][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 4 [ 216.819315][ T5924] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 216.861139][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.949674][ T5924] usb 1-1: config 0 descriptor?? [ 217.128801][ T5924] usb 1-1: can't set config #0, error -71 [ 217.137437][ T5924] usb 1-1: USB disconnect, device number 4 [ 217.909581][ T6185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.367100][ T6185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.980038][ T6185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.047108][ T6648] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.188553][ T6185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.288113][ T6648] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.336514][ T6648] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 220.390187][ T6648] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.403305][ T6185] bridge_slave_1: left allmulticast mode [ 222.409275][ T6185] bridge_slave_1: left promiscuous mode [ 222.415319][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.485310][ T6185] bridge_slave_0: left allmulticast mode [ 222.514689][ T6185] bridge_slave_0: left promiscuous mode [ 222.540056][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.364441][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.648446][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.761097][ T6185] bond0 (unregistering): Released all slaves [ 228.071695][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.102719][ T6648] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.293436][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.300699][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.224088][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.231286][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.535725][ T6185] hsr_slave_0: left promiscuous mode [ 229.557970][ T6185] hsr_slave_1: left promiscuous mode [ 230.858415][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.010436][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.772895][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 231.850439][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.899039][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.934504][ T6185] veth1_macvtap: left promiscuous mode [ 231.944384][ T6185] veth0_macvtap: left promiscuous mode [ 231.955194][ T6185] veth1_vlan: left promiscuous mode [ 231.970849][ T6185] veth0_vlan: left promiscuous mode [ 231.991358][ T6850] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 232.619053][ T5840] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 232.726967][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 233.374762][ T6856] nbd: socks must be embedded in a SOCK_ITEM attr [ 233.429505][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 233.519010][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 233.560003][ T6729] udevd[6729]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 234.040959][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 234.373686][ T6870] nbd: socks must be embedded in a SOCK_ITEM attr [ 236.163383][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 236.534144][ T5922] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 236.986106][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 237.016101][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.049730][ T5922] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.087029][ T6729] udevd[6729]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 237.125847][ T5922] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 237.150237][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.164512][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 237.185536][ T5922] usb 3-1: Product: syz [ 237.216884][ T5922] usb 3-1: Manufacturer: syz [ 237.246982][ T5922] usb 3-1: SerialNumber: syz [ 237.304779][ T5922] usb 3-1: config 0 descriptor?? [ 239.125525][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.937175][ T5924] usb 3-1: USB disconnect, device number 6 [ 242.395524][ T6648] veth0_vlan: entered promiscuous mode [ 242.522128][ T6936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.689229][ T6648] veth1_vlan: entered promiscuous mode [ 242.912597][ T6648] veth0_macvtap: entered promiscuous mode [ 242.994016][ T6648] veth1_macvtap: entered promiscuous mode [ 243.149502][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.248648][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.340945][ T472] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.396300][ T472] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.429526][ T472] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.503788][ T472] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.685231][ T5839] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 243.968789][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 244.283937][ T6957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.206'. [ 244.677002][ T5839] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 244.705165][ T6957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.711160][ T6957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 244.717519][ T5839] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 244.733176][ T5839] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.743328][ T5839] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.758885][ T5839] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.770626][ T6957] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.776921][ T6957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.783550][ T6957] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 244.789618][ T6957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.795740][ T6957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 244.810990][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.825762][ T6957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 244.939330][ T472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.969249][ T472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.109286][ T472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.147108][ T472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.166985][ T5839] usb 1-1: usb_control_msg returned -32 [ 245.213174][ T5839] usbtmc 1-1:16.0: can't read capabilities [ 245.583855][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 246.489315][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.208'. [ 247.376383][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.382505][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.382527][ T5147] Bluetooth: hci5: command 0x0c1a tx timeout [ 247.390446][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.395181][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 247.583446][ T5923] usb 1-1: USB disconnect, device number 5 [ 247.699945][ T6975] nbd: socks must be embedded in a SOCK_ITEM attr [ 248.419823][ T6882] udevd[6882]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 248.571231][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 249.044432][ T5147] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 249.622363][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.623505][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.653330][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.533369][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 253.838871][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.854248][ T10] usb 5-1: config 0 has no interfaces? [ 253.861869][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 253.876755][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.181407][ T7045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.224'. [ 254.614067][ T7045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.620173][ T7045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.626330][ T7045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.652104][ T10] usb 5-1: config 0 descriptor?? [ 254.674661][ T7045] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 254.680765][ T7045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.908801][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.172049][ T5922] usb 5-1: USB disconnect, device number 4 [ 256.745347][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.751593][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 256.773628][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 256.783187][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.814943][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 258.567617][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.233'. [ 258.862739][ T7084] nbd: socks must be embedded in a SOCK_ITEM attr [ 262.915983][ T6729] udevd[6729]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 262.988144][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 263.303179][ T5922] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 264.103121][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 264.145982][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.192152][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.231807][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 264.270695][ T5922] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 264.305755][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.367214][ T5922] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 264.416631][ T5922] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 264.440455][ T5922] usb 5-1: Manufacturer: syz [ 264.466072][ T5922] usb 5-1: config 0 descriptor?? [ 265.049272][ T7120] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.244'. [ 265.693129][ T5922] rc_core: IR keymap rc-hauppauge not found [ 265.699103][ T5922] Registered IR keymap rc-empty [ 265.704268][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 265.796820][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 265.910849][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 265.979324][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 266.007402][ T7126] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.245'. [ 266.528988][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.616582][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.686455][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.707964][ T7133] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 266.743976][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.803161][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.870223][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.923495][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 266.984552][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 267.044231][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 268.024964][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 268.047240][ T5922] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 268.216911][ T5922] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 268.775235][ T5922] usb 5-1: USB disconnect, device number 5 [ 268.951047][ T7154] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.251'. [ 270.000067][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 270.024560][ T7164] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.183132][ T5903] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 270.230885][ T7169] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.256'. [ 270.347347][ T6681] udevd[6681]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.382414][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 270.419803][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.445294][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.484165][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.536825][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.579329][ T5903] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.622290][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.626306][ T7183] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.258'. [ 270.676579][ T5903] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.715736][ T5903] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.162037][ T5903] usb 6-1: Manufacturer: syz [ 271.201034][ T5903] usb 6-1: config 0 descriptor?? [ 272.206402][ T5903] rc_core: IR keymap rc-hauppauge not found [ 272.297536][ T5903] Registered IR keymap rc-empty [ 272.319381][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.387136][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.460930][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 272.523865][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 272.603224][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.684244][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.733264][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 272.783227][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 273.377309][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 273.460349][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 273.687177][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.203386][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.265135][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.863389][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 275.042320][ T5903] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 275.080204][ T5903] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 275.167047][ T5903] usb 6-1: USB disconnect, device number 6 [ 275.299403][ T7223] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.267'. [ 275.543474][ T7228] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.269'. [ 275.633562][ T7232] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.270'. [ 276.800832][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.991623][ T7251] syz.2.274 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 278.020271][ T7251] ubi31: attaching mtd0 [ 278.043316][ T7251] ubi31: scanning is finished [ 278.048157][ T7251] ubi31: empty MTD device detected [ 278.736723][ T7251] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 283.305280][ T7288] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.284'. [ 286.907101][ T7326] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.295'. [ 288.103292][ T7342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.109430][ T7342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.115572][ T7342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.121582][ T7342] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.127644][ T7342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.231154][ T7358] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.636337][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.642517][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.648583][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.655013][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 291.661136][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.595031][ T5937] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 293.773179][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 293.806670][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 293.859840][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.894149][ T5937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.921116][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 20801, setting to 1024 [ 293.960198][ T5937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 293.982666][ T5937] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 294.022827][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.104499][ T5937] usb 1-1: config 0 descriptor?? [ 294.125112][ T7371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.433862][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 294.456456][ T29] audit: type=1326 audit(1772744843.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d9d9c799 code=0x7fc00000 [ 294.482262][ T9] usb 1-1: USB disconnect, device number 6 [ 295.716020][ T7399] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.486677][ T7401] fuse: Bad value for 'fd' [ 301.823448][ T5922] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 301.985276][ T5922] usb 5-1: device descriptor read/64, error -71 [ 302.243369][ T5922] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 302.403147][ T5922] usb 5-1: device descriptor read/64, error -71 [ 302.607000][ T5922] usb usb5-port1: attempt power cycle [ 302.703016][ T29] audit: type=1326 audit(1772744851.949:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13ab9c799 code=0x7fc00000 [ 304.376288][ T7452] netlink: 48 bytes leftover after parsing attributes in process `syz.5.328'. [ 305.044806][ T7452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.050939][ T7452] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.057122][ T7452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.063422][ T7452] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 305.069444][ T7452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 306.813928][ T5922] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 306.992489][ T5922] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 307.016823][ T5922] usb 7-1: config 0 has no interface number 0 [ 307.031854][ T5922] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 307.052024][ T5922] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.076298][ T5922] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 307.116211][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.143053][ T5922] usb 7-1: Product: syz [ 307.193187][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.193403][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 307.193576][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.193737][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 307.193892][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.244557][ T5922] usb 7-1: Manufacturer: syz [ 307.253222][ T5922] usb 7-1: SerialNumber: syz [ 307.644323][ T5922] usb 7-1: config 0 descriptor?? [ 307.669221][ T7457] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 307.701986][ T5922] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 307.806140][ T5922] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 310.533055][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 310.552861][ T5937] usb 7-1: USB disconnect, device number 2 [ 310.624260][ T5924] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 310.632178][ T5937] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 310.679368][ T5937] cyberjack 7-1:0.69: device disconnected [ 310.794819][ T5924] usb 1-1: device descriptor read/64, error -71 [ 311.685728][ T29] audit: type=1326 audit(1772744860.309:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4d9d9c799 code=0x7fc00000 [ 311.808409][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 317.362430][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.267254][ T5839] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 321.047846][ T29] audit: type=1326 audit(1772744870.299:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13ab9c799 code=0x7fc00000 [ 323.933123][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 324.183393][ T5839] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 324.423169][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 324.925820][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.952690][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.975247][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 324.995369][ T5839] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 325.048912][ T5839] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.110829][ T5839] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 325.132438][ T5839] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.160199][ T5839] usb 6-1: Manufacturer: syz [ 325.174892][ T5839] usb 6-1: config 0 descriptor?? [ 325.303079][ T5922] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 325.485632][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.510753][ T5922] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.533289][ T5839] rc_core: IR keymap rc-hauppauge not found [ 325.553705][ T5922] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.571434][ T5839] Registered IR keymap rc-empty [ 325.584780][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 325.598317][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.030264][ T5922] usb 5-1: config 0 descriptor?? [ 326.047315][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.135650][ T5839] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 326.169218][ T5839] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 326.202084][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.233419][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.263192][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.283273][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.333220][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.373197][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.414057][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.449821][ T29] audit: type=1326 audit(1772744875.769:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.6.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eb59c799 code=0x7fc00000 [ 326.503191][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 326.533439][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 327.026996][ T5839] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 327.101509][ T5839] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 327.135264][ T5839] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 327.169028][ T5839] usb 6-1: USB disconnect, device number 7 [ 328.390690][ T9] usb 5-1: USB disconnect, device number 10 [ 331.888144][ T7592] netlink: 'syz.5.368': attribute type 10 has an invalid length. [ 332.373897][ T7592] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 333.253957][ T5924] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 334.009836][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 334.093066][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 334.227835][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.542714][ T7614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.369'. [ 334.977890][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.007462][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.018380][ T7614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 335.024575][ T7614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 335.030591][ T7614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 335.036653][ T7614] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 335.042647][ T7614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 335.155619][ T5924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 335.169740][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.185260][ T5924] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 335.196636][ T5924] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 335.206078][ T5924] usb 5-1: Manufacturer: syz [ 335.218931][ T5924] usb 5-1: config 0 descriptor?? [ 336.905931][ T5924] rc_core: IR keymap rc-hauppauge not found [ 337.084610][ T5924] Registered IR keymap rc-empty [ 337.091654][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.113218][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.181557][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 337.235002][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 337.239846][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 337.241515][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 337.249475][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.255330][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.283219][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 337.455702][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 337.464916][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 337.481141][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 337.503294][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.525012][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.554475][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.583973][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.603593][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.638711][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.651459][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.669917][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.692177][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 337.702788][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.722707][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.733216][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 338.186294][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 338.211470][ T9] usb 1-1: config 0 descriptor?? [ 338.223132][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 338.266230][ T5924] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 338.308351][ T5924] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 338.363627][ T5924] usb 5-1: USB disconnect, device number 11 [ 340.036729][ T5922] usb 1-1: USB disconnect, device number 9 [ 352.704935][ T7727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 352.711236][ T7727] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 352.717360][ T7727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.723420][ T7727] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 352.729424][ T7727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.133104][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.139250][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 356.139296][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.145435][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 356.151463][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.422695][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 357.347700][ T7743] nbd: socks must be embedded in a SOCK_ITEM attr [ 360.397664][ T7763] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.420'. [ 361.033652][ T7767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.039795][ T7767] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.045820][ T7767] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 361.055297][ T7767] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.062101][ T7767] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 361.068244][ T7767] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.110528][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 361.689385][ T7782] ubi31: attaching mtd0 [ 361.708412][ T7782] ubi31: scanning is finished [ 362.280208][ T7781] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.424'. [ 362.454168][ T7782] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 362.462736][ T7782] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 362.471432][ T7782] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 362.478551][ T7782] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 362.486137][ T7782] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 362.493662][ T7782] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 362.502086][ T7782] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 926138671 [ 362.512193][ T7782] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 362.524467][ T7787] ubi31: background thread "ubi_bgt31d" started, PID 7787 [ 363.253444][ T7798] Cannot find add_set index 65532 as target [ 363.652187][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.658503][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 363.664692][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.671533][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.677664][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 364.860042][ T7810] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.430'. [ 365.145134][ T7817] netlink: 48 bytes leftover after parsing attributes in process `syz.2.433'. [ 365.733233][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 365.752898][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.432'. [ 365.763340][ T7817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.769518][ T7817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 365.775600][ T7817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.781602][ T7817] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 365.787676][ T7817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.793727][ T7817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 366.063857][ T7818] nbd: socks must be embedded in a SOCK_ITEM attr [ 366.079314][ T29] audit: type=1326 audit(1772744915.399:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.2.436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd684b9c799 code=0x0 [ 367.243510][ T7835] netlink: 80 bytes leftover after parsing attributes in process `syz.0.437'. [ 367.813579][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.830145][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.844745][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 367.855592][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.923642][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 368.021681][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 368.155088][ T7840] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.438'. [ 370.033196][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 370.631663][ T7858] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.445'. [ 373.143916][ T5922] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 373.653254][ T7873] netlink: 80 bytes leftover after parsing attributes in process `syz.4.449'. [ 373.663269][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 373.940373][ T29] audit: type=1326 audit(1772744923.149:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd684b9c799 code=0x7fc00000 [ 373.985762][ T5922] usb 3-1: device descriptor read/all, error -71 [ 374.036771][ T7877] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.450'. [ 374.859182][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.453'. [ 375.892430][ T7884] nbd: socks must be embedded in a SOCK_ITEM attr [ 377.263215][ T5830] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 377.443146][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 377.456391][ T5830] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.476386][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.503139][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.523337][ T5830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 377.547297][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.575734][ T5830] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.587001][ T5830] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.606515][ T5830] usb 1-1: Manufacturer: syz [ 377.625042][ T5830] usb 1-1: config 0 descriptor?? [ 377.816289][ T29] audit: type=1326 audit(1772744927.139:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.2.451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd684b9c799 code=0x0 [ 378.193134][ T5830] rc_core: IR keymap rc-hauppauge not found [ 378.199196][ T5830] Registered IR keymap rc-empty [ 378.392639][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.444692][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.491092][ T5830] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 378.541524][ T5830] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 378.591650][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.643291][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.683321][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.743636][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.777926][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.807075][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.845853][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.893089][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.953115][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.986604][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.025931][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.947884][ T7927] netlink: 80 bytes leftover after parsing attributes in process `syz.4.462'. [ 380.218128][ T5830] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 381.287892][ T5830] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 381.379800][ T5830] usb 1-1: USB disconnect, device number 10 [ 381.894923][ T7939] netlink: 'syz.0.463': attribute type 72 has an invalid length. [ 383.247249][ T29] audit: type=1326 audit(1772744932.469:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.6.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eb59c799 code=0x7fc00000 [ 389.355914][ T7974] netlink: 'syz.0.476': attribute type 72 has an invalid length. [ 389.494646][ T7982] 9p: Unknown access argument 18446744073709551615: -34 [ 396.391429][ T8024] fuse: Bad value for 'fd' [ 396.481422][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.493750][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.506889][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.519690][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.529021][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.972624][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.513989][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.623141][ T5840] Bluetooth: hci1: command tx timeout [ 398.794978][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.816207][ T8060] netlink: 'syz.2.488': attribute type 72 has an invalid length. [ 399.067124][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.442876][ T8025] chnl_net:caif_netlink_parms(): no params data found [ 399.683369][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 400.693031][ T5840] Bluetooth: hci1: command tx timeout [ 400.725016][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.764435][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.803481][ T8025] bridge_slave_0: entered allmulticast mode [ 400.834589][ T8025] bridge_slave_0: entered promiscuous mode [ 400.927127][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.948145][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.957715][ T8025] bridge_slave_1: entered allmulticast mode [ 400.977930][ T8025] bridge_slave_1: entered promiscuous mode [ 400.998038][ T35] bridge_slave_1: left allmulticast mode [ 401.007159][ T35] bridge_slave_1: left promiscuous mode [ 401.021187][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.048756][ T35] bridge_slave_0: left allmulticast mode [ 401.056299][ T35] bridge_slave_0: left promiscuous mode [ 401.071350][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.087507][ T8091] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.514'. [ 401.516089][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.529526][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.562818][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 401.595505][ T35] bond0 (unregistering): Released all slaves [ 401.715929][ T8083] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 401.769683][ T8083] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 401.786130][ T8025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.795866][ T8083] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 401.814826][ T8025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.652366][ T8102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.517'. [ 402.775655][ T5840] Bluetooth: hci1: command tx timeout [ 403.193029][ T8025] team0: Port device team_slave_0 added [ 403.203697][ T8102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.209890][ T8102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.216192][ T8102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.222286][ T8102] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 403.228524][ T8102] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 403.244376][ T8025] team0: Port device team_slave_1 added [ 403.317844][ T8102] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.324316][ T8102] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 403.364324][ T8102] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 403.485993][ T35] hsr_slave_0: left promiscuous mode [ 403.529287][ T35] hsr_slave_1: left promiscuous mode [ 403.570278][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.598165][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.624325][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.519'. [ 403.639204][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.647020][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.677322][ T35] veth1_macvtap: left promiscuous mode [ 403.685809][ T35] veth0_macvtap: left promiscuous mode [ 403.694494][ T35] veth1_vlan: left promiscuous mode [ 403.707833][ T35] veth0_vlan: left promiscuous mode [ 404.856065][ T35] team0 (unregistering): Port device team_slave_1 removed [ 404.930029][ T35] team0 (unregistering): Port device team_slave_0 removed [ 405.253936][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 405.260274][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 405.266524][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 405.266543][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 405.414541][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 405.475564][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.511431][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.635115][ T8025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.700318][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.725176][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.868764][ T8025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.901288][ T8138] 9p: Unknown access argument 18446744073709551615: -34 [ 406.711516][ T8147] 9p: Unknown access argument 18446744073709551615: -34 [ 406.880407][ T8025] hsr_slave_0: entered promiscuous mode [ 406.908630][ T8025] hsr_slave_1: entered promiscuous mode [ 407.333003][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 407.527882][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 409.576634][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 409.782676][ T29] audit: type=1326 audit(1772744959.019:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eb59c799 code=0x7fc00000 [ 411.490672][ T8185] 9p: Unknown access argument 18446744073709551615: -34 [ 412.163275][ T8025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 412.229070][ T8025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 412.322093][ T8025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.428048][ T8025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 413.801604][ T8025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.146510][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.177791][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.534'. [ 415.003337][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.011827][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.097614][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.104976][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.513177][ T5937] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 418.033267][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 418.059007][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.141374][ T29] audit: type=1326 audit(1772744967.389:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd684b9c799 code=0x7fc00000 [ 418.220181][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 418.285168][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.337695][ T5937] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.364632][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.419023][ T5937] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 418.471083][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.524911][ T5937] usb 3-1: config 0 descriptor?? [ 418.550689][ T5937] usb 3-1: can't set config #0, error -71 [ 418.612171][ T5937] usb 3-1: USB disconnect, device number 9 [ 418.747214][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 419.488114][ T8025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.553188][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 420.577314][ T8272] nbd: socks must be embedded in a SOCK_ITEM attr [ 420.699017][ T8025] veth0_vlan: entered promiscuous mode [ 420.750898][ T8025] veth1_vlan: entered promiscuous mode [ 421.004973][ T6729] udevd[6729]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 421.072492][ T8025] veth0_macvtap: entered promiscuous mode [ 421.085420][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 421.120241][ T8025] veth1_macvtap: entered promiscuous mode [ 421.242301][ T8025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.309498][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.553'. [ 421.320747][ T8025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.530721][ T391] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.551261][ T391] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.214570][ T391] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.223877][ T391] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.967323][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.731631][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.779635][ T8311] vcan0: entered allmulticast mode [ 425.090101][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.099980][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.252244][ T8317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.560'. [ 425.711320][ T8317] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 425.842025][ T8317] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 425.848171][ T8317] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 425.854362][ T8317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 425.860417][ T8317] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 427.893277][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 427.899650][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 427.905775][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 427.911905][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 427.919086][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 428.097337][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 437.003810][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 438.220046][ T8384] nbd: socks must be embedded in a SOCK_ITEM attr [ 438.240554][ T6879] block nbd64: NBD_DISCONNECT [ 438.446269][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 438.731611][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 439.089238][ T8406] nbd: socks must be embedded in a SOCK_ITEM attr [ 439.147499][ T6879] block nbd64: NBD_DISCONNECT [ 439.645732][ T6879] udevd[6879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 440.402692][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.216524][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.231143][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.242061][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.265226][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.278740][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.695008][ T5840] Bluetooth: hci5: command tx timeout [ 447.703733][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 447.710178][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.724736][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.742858][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.861491][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.877193][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.892089][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.209468][ T127] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.461069][ T127] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.735303][ T5840] Bluetooth: hci5: command tx timeout [ 449.828813][ T127] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.973556][ T5840] Bluetooth: hci0: command tx timeout [ 450.168559][ T127] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.263221][ T5924] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 450.481667][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 450.511378][ T5924] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.552208][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.615138][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 450.668374][ T5924] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 450.726427][ T5924] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.787463][ T5924] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 450.826716][ T5924] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 450.859873][ T5924] usb 8-1: Manufacturer: syz [ 450.894500][ T5924] usb 8-1: config 0 descriptor?? [ 451.309635][ T127] bridge_slave_1: left allmulticast mode [ 451.323792][ T127] bridge_slave_1: left promiscuous mode [ 451.331873][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.366443][ T127] bridge_slave_0: left allmulticast mode [ 451.372469][ T127] bridge_slave_0: left promiscuous mode [ 451.380028][ T5924] rc_core: IR keymap rc-hauppauge not found [ 451.386494][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.397001][ T5924] Registered IR keymap rc-empty [ 451.403771][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.433319][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.479977][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 451.542256][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input17 [ 451.590345][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.613976][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.653519][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.695221][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.723356][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.764716][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.803281][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.825664][ T5840] Bluetooth: hci5: command tx timeout [ 451.849062][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.896604][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.930617][ T5924] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 451.972078][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.083097][ T5840] Bluetooth: hci0: command tx timeout [ 452.640887][ T5924] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 452.651686][ T5924] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 452.668227][ T5924] usb 8-1: USB disconnect, device number 2 [ 452.810812][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.852651][ T127] bond0 (unregistering): Released all slaves [ 453.185695][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 453.312306][ T8513] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.903056][ T5840] Bluetooth: hci5: command tx timeout [ 454.286525][ T5840] Bluetooth: hci0: command tx timeout [ 456.653094][ T51] Bluetooth: hci0: command tx timeout [ 457.010355][ T8453] chnl_net:caif_netlink_parms(): no params data found [ 458.057792][ T127] hsr_slave_0: left promiscuous mode [ 458.093871][ T127] hsr_slave_1: left promiscuous mode [ 458.109335][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.139930][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.193471][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.219114][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.281410][ T127] veth1_macvtap: left promiscuous mode [ 458.296989][ T127] veth0_macvtap: left promiscuous mode [ 458.443775][ T127] veth1_vlan: left promiscuous mode [ 458.764826][ T127] veth0_vlan: left promiscuous mode [ 465.036057][ T8560] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.602'. [ 465.161275][ T127] team0 (unregistering): Port device team_slave_1 removed [ 465.193295][ T127] team0 (unregistering): Port device team_slave_0 removed [ 465.658019][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.692705][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.736022][ T8440] bridge_slave_0: entered allmulticast mode [ 465.779734][ T8440] bridge_slave_0: entered promiscuous mode [ 466.781409][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.819496][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.852569][ T8440] bridge_slave_1: entered allmulticast mode [ 467.117072][ T8440] bridge_slave_1: entered promiscuous mode [ 467.606659][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.653656][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.669717][ T8453] bridge_slave_0: entered allmulticast mode [ 467.678812][ T8453] bridge_slave_0: entered promiscuous mode [ 467.688798][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.708174][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.785626][ T8453] bridge_slave_1: entered allmulticast mode [ 467.845259][ T8453] bridge_slave_1: entered promiscuous mode [ 467.975665][ T8538] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 468.089188][ T8538] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 468.247751][ T8587] ------------[ cut here ]------------ [ 468.253569][ T8587] !chanctx_conf [ 468.253596][ T8587] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x64a/0x6e0, CPU#0: syz.0.605/8587 [ 468.268815][ T8587] Modules linked in: [ 468.273094][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.0.605 Not tainted syzkaller #0 PREEMPT(full) [ 468.282336][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.292851][ T8587] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 468.299091][ T8587] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 50 a0 f6 90 0f 0b 90 eb e1 e8 67 50 a0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 468.319967][ T8587] RSP: 0018:ffffc900047d6f28 EFLAGS: 00010283 [ 468.327594][ T8587] RAX: ffffffff8b263db9 RBX: ffff8880344a8000 RCX: 0000000000080000 [ 468.335756][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.344919][ T8587] RDX: ffffc90006b69000 RSI: 0000000000001ceb RDI: 0000000000001cec [ 468.353002][ T8587] RBP: 0000000000000000 R08: ffffffff8b2638d3 R09: ffffffff8e75e8a0 [ 468.361027][ T8587] R10: dffffc0000000000 R11: ffffed1006895031 R12: 1ffff1100689500a [ 468.369353][ T8587] R13: ffff888057980e80 R14: 0000000000000001 R15: ffffffff8b2638d3 [ 468.379158][ T8587] FS: 00007fc4dab806c0(0000) GS:ffff88812543c000(0000) knlGS:0000000000000000 [ 468.388559][ T8587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.395571][ T8587] CR2: 00007ffd4b628498 CR3: 00000000688fa000 CR4: 00000000003526f0 [ 468.403969][ T8587] Call Trace: [ 468.407682][ T8587] [ 468.410649][ T8587] rate_control_rate_init_all_links+0x109/0x1a0 [ 468.417220][ T8587] sta_apply_auth_flags+0x1c2/0x400 [ 468.423117][ T8587] sta_apply_parameters+0xea9/0x1620 [ 468.428640][ T8587] ieee80211_add_station+0x401/0x670 [ 468.434915][ T8587] rdev_add_station+0xfc/0x2c0 [ 468.440120][ T8587] nl80211_new_station+0x187c/0x1cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 468.445583][ T8587] ? __pfx_nl80211_new_station+0x10/0x10 [ 468.451229][ T8587] ? ref_tracker_alloc+0x35c/0x4c0 [ 468.456678][ T8587] ? nl80211_pre_doit+0x4d5/0x8e0 [ 468.461736][ T8587] genl_family_rcv_msg_doit+0x22a/0x330 [ 468.467581][ T8587] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.473767][ T8587] ? bpf_lsm_capable+0x9/0x20 [ 468.478499][ T8587] ? security_capable+0x7e/0x2c0 [ 468.483537][ T8587] genl_rcv_msg+0x61c/0x7a0 [ 468.488101][ T8587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.493233][ T8587] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 468.498660][ T8587] ? __pfx_nl80211_new_station+0x10/0x10 [ 468.504459][ T8587] ? __pfx_nl80211_post_doit+0x10/0x10 [ 468.509985][ T8587] ? __lock_acquire+0x6b5/0x2cf0 [ 468.515054][ T8587] netlink_rcv_skb+0x232/0x4b0 [ 468.519932][ T8587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.525432][ T8587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.530768][ T8587] ? down_read+0x272/0x2e0 [ 468.535381][ T8587] ? genl_rcv+0xd/0x40 [ 468.539467][ T8587] genl_rcv+0x28/0x40 [ 468.543570][ T8587] netlink_unicast+0x80f/0x9b0 [ 468.548371][ T8587] ? __pfx_netlink_unicast+0x10/0x10 [ 468.553735][ T8587] ? netlink_sendmsg+0x650/0xb40 [ 468.558683][ T8587] ? skb_put+0x11b/0x210 [ 468.563004][ T8587] netlink_sendmsg+0x813/0xb40 [ 468.567825][ T8587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.573166][ T8587] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 468.579626][ T8587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.584967][ T8587] sock_sendmsg_nosec+0x112/0x150 [ 468.590095][ T8587] ____sys_sendmsg+0x589/0x8c0 [ 468.594889][ T8587] ? futex_unqueue+0x211/0x240 [ 468.599670][ T8587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.605013][ T8587] ? import_iovec+0x73/0xa0 [ 468.609525][ T8587] ___sys_sendmsg+0x2a5/0x360 [ 468.614638][ T8587] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.619983][ T8587] ? futex_wait+0x2a2/0x390 [ 468.624629][ T8587] ? __fget_files+0x2a/0x420 [ 468.629524][ T8587] ? __fget_files+0x3a0/0x420 [ 468.634468][ T8587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 468.639470][ T8587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.644985][ T8587] ? rcu_is_watching+0x15/0xb0 [ 468.649761][ T8587] do_syscall_64+0x14d/0xf80 [ 468.654414][ T8587] ? trace_irq_disable+0x3b/0x150 [ 468.659537][ T8587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.665641][ T8587] ? clear_bhb_loop+0x40/0x90 [ 468.670326][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.676269][ T8587] RIP: 0033:0x7fc4d9d9c799 [ 468.680720][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.700367][ T8587] RSP: 002b:00007fc4dab80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.708842][ T8587] RAX: ffffffffffffffda RBX: 00007fc4da016090 RCX: 00007fc4d9d9c799 [ 468.716855][ T8587] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 468.724853][ T8587] RBP: 00007fc4d9e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 468.733159][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.741140][ T8587] R13: 00007fc4da016128 R14: 00007fc4da016090 R15: 00007ffc96a74218 [ 468.749305][ T8587] [ 468.752358][ T8587] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 468.759725][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.0.605 Not tainted syzkaller #0 PREEMPT(full) [ 468.768921][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.778984][ T8587] Call Trace: [ 468.782267][ T8587] [ 468.785200][ T8587] vpanic+0x56c/0xa60 [ 468.789197][ T8587] ? __pfx__printk+0x10/0x10 [ 468.793799][ T8587] ? __pfx_vpanic+0x10/0x10 [ 468.798329][ T8587] ? is_bpf_text_address+0x292/0x2b0 [ 468.803733][ T8587] ? is_bpf_text_address+0x26/0x2b0 [ 468.808949][ T8587] panic+0xc5/0xd0 [ 468.812682][ T8587] ? __pfx_panic+0x10/0x10 [ 468.817211][ T8587] __warn+0x315/0x4f0 [ 468.821206][ T8587] ? rate_control_rate_init+0x64a/0x6e0 [ 468.826753][ T8587] ? rate_control_rate_init+0x64a/0x6e0 [ 468.832310][ T8587] __report_bug+0x29a/0x540 [ 468.837106][ T8587] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.842323][ T8587] ? rate_control_rate_init+0x64a/0x6e0 [ 468.847884][ T8587] ? __pfx___report_bug+0x10/0x10 [ 468.853011][ T8587] ? __lock_acquire+0x6b5/0x2cf0 [ 468.858077][ T8587] ? __lock_acquire+0x6b5/0x2cf0 [ 468.863133][ T8587] ? rate_control_rate_init+0x64a/0x6e0 [ 468.868747][ T8587] report_bug+0x16a/0x220 [ 468.873098][ T8587] ? rate_control_rate_init+0x64a/0x6e0 [ 468.878777][ T8587] ? rate_control_rate_init+0x64c/0x6e0 [ 468.884330][ T8587] handle_bug+0x9c/0x200 [ 468.888585][ T8587] exc_invalid_op+0x1a/0x50 [ 468.893120][ T8587] asm_exc_invalid_op+0x1a/0x20 [ 468.897992][ T8587] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 468.904148][ T8587] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 50 a0 f6 90 0f 0b 90 eb e1 e8 67 50 a0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 468.923927][ T8587] RSP: 0018:ffffc900047d6f28 EFLAGS: 00010283 [ 468.930002][ T8587] RAX: ffffffff8b263db9 RBX: ffff8880344a8000 RCX: 0000000000080000 [ 468.937979][ T8587] RDX: ffffc90006b69000 RSI: 0000000000001ceb RDI: 0000000000001cec [ 468.946049][ T8587] RBP: 0000000000000000 R08: ffffffff8b2638d3 R09: ffffffff8e75e8a0 [ 468.954038][ T8587] R10: dffffc0000000000 R11: ffffed1006895031 R12: 1ffff1100689500a [ 468.962102][ T8587] R13: ffff888057980e80 R14: 0000000000000001 R15: ffffffff8b2638d3 [ 468.970091][ T8587] ? rate_control_rate_init+0x163/0x6e0 [ 468.975660][ T8587] ? rate_control_rate_init+0x163/0x6e0 [ 468.981213][ T8587] ? rate_control_rate_init+0x649/0x6e0 [ 468.986770][ T8587] ? rate_control_rate_init+0x649/0x6e0 [ 468.992346][ T8587] rate_control_rate_init_all_links+0x109/0x1a0 [ 468.998693][ T8587] sta_apply_auth_flags+0x1c2/0x400 [ 469.003905][ T8587] sta_apply_parameters+0xea9/0x1620 [ 469.009208][ T8587] ieee80211_add_station+0x401/0x670 [ 469.014521][ T8587] rdev_add_station+0xfc/0x2c0 [ 469.019316][ T8587] nl80211_new_station+0x187c/0x1cc0 [ 469.024646][ T8587] ? __pfx_nl80211_new_station+0x10/0x10 [ 469.030294][ T8587] ? ref_tracker_alloc+0x35c/0x4c0 [ 469.035471][ T8587] ? nl80211_pre_doit+0x4d5/0x8e0 [ 469.040566][ T8587] genl_family_rcv_msg_doit+0x22a/0x330 [ 469.046134][ T8587] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 469.052225][ T8587] ? bpf_lsm_capable+0x9/0x20 [ 469.056917][ T8587] ? security_capable+0x7e/0x2c0 [ 469.061886][ T8587] genl_rcv_msg+0x61c/0x7a0 [ 469.066433][ T8587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.071482][ T8587] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 469.076885][ T8587] ? __pfx_nl80211_new_station+0x10/0x10 [ 469.082525][ T8587] ? __pfx_nl80211_post_doit+0x10/0x10 [ 469.087999][ T8587] ? __lock_acquire+0x6b5/0x2cf0 [ 469.092970][ T8587] netlink_rcv_skb+0x232/0x4b0 [ 469.097772][ T8587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.102802][ T8587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.108112][ T8587] ? down_read+0x272/0x2e0 [ 469.112541][ T8587] ? genl_rcv+0xd/0x40 [ 469.116620][ T8587] genl_rcv+0x28/0x40 [ 469.120610][ T8587] netlink_unicast+0x80f/0x9b0 [ 469.125392][ T8587] ? __pfx_netlink_unicast+0x10/0x10 [ 469.130690][ T8587] ? netlink_sendmsg+0x650/0xb40 [ 469.135637][ T8587] ? skb_put+0x11b/0x210 [ 469.139892][ T8587] netlink_sendmsg+0x813/0xb40 [ 469.144676][ T8587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.149990][ T8587] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 469.156445][ T8587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.161745][ T8587] sock_sendmsg_nosec+0x112/0x150 [ 469.166789][ T8587] ____sys_sendmsg+0x589/0x8c0 [ 469.171559][ T8587] ? futex_unqueue+0x211/0x240 [ 469.176342][ T8587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.181664][ T8587] ? import_iovec+0x73/0xa0 [ 469.186180][ T8587] ___sys_sendmsg+0x2a5/0x360 [ 469.190869][ T8587] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.196104][ T8587] ? futex_wait+0x2a2/0x390 [ 469.200641][ T8587] ? __fget_files+0x2a/0x420 [ 469.205504][ T8587] ? __fget_files+0x3a0/0x420 [ 469.210204][ T8587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 469.215187][ T8587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.220676][ T8587] ? rcu_is_watching+0x15/0xb0 [ 469.225545][ T8587] do_syscall_64+0x14d/0xf80 [ 469.230144][ T8587] ? trace_irq_disable+0x3b/0x150 [ 469.235179][ T8587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.241776][ T8587] ? clear_bhb_loop+0x40/0x90 [ 469.246551][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.252472][ T8587] RIP: 0033:0x7fc4d9d9c799 [ 469.256914][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.276526][ T8587] RSP: 002b:00007fc4dab80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.284959][ T8587] RAX: ffffffffffffffda RBX: 00007fc4da016090 RCX: 00007fc4d9d9c799 [ 469.293186][ T8587] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 469.301181][ T8587] RBP: 00007fc4d9e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 469.309161][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.317144][ T8587] R13: 00007fc4da016128 R14: 00007fc4da016090 R15: 00007ffc96a74218 [ 469.325177][ T8587] [ 469.328946][ T8587] Kernel Offset: disabled [ 469.333289][ T8587] Rebooting in 86400 seconds..