last executing test programs: 2m24.131508494s ago: executing program 0 (id=402): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffff7f00000000feffffff61106d000003000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m24.071945508s ago: executing program 0 (id=403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0xc4}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 2m24.068320692s ago: executing program 0 (id=404): r0 = io_uring_setup(0x93a, &(0x7f00000002c0)={0x0, 0x32b6, 0x2, 0x0, 0x31d}) r1 = socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r6, @ANYRES8=r0, @ANYRES8=r6], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfff937a41}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x0, 0x8e) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000036000000074a67dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x1]}}) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x1) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f00000001c0)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x15, 0x4, 0x38}, 0x2c) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendfile(r3, r4, 0x0, 0x6) 2m23.102531477s ago: executing program 0 (id=405): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) read$FUSE(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, 0x0) 2m23.051668672s ago: executing program 0 (id=406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x2000000, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m23.051279541s ago: executing program 0 (id=407): r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x44a000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000d42ca95c654009e75ce6bd5bbb1b4fb05ccd216bc72af60c229a9a6572855778e4a041c4c19c4728112afcf26b213afaffb1a49e670c4eaeabe18446deda40e34b58c30f71d8337bcd2675d0e8bdd2e75da5023b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/28], 0x50) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000980)=""/135, 0x87}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x4, &(0x7f0000001a80)=""/84, 0x54}, 0x7}, {{&(0x7f0000001b00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b80)=""/37, 0x25}, {&(0x7f0000001bc0)=""/125, 0x7d}, {&(0x7f0000001c40)=""/147, 0x93}], 0x3}, 0x8}], 0x2, 0x100, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000540)={0x18, 0x0, {0x1, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xb3, &(0x7f0000000700)=""/179, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x10042, &(0x7f0000001d80)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'G\xe4F\xd3?\xdc\xd2E\xf24d\x00\x00\x00\x00*\xa3HMh\x81\xe6\x8fPB<\x96\"\xab\xd0y,\n\xfc\xf5\'\x18s\x96\x96\xbb\xf8`7\xe0\xbb\xb4\xbd\x1a>\xa2\xe2\x93C\xebv\xdd\x92\xf6\x7f}\x13\x9c\xe2\xf1\xa8\xc1\xcf:{M[/\xa6\xa3\xe8\xc6\xf7e_\xc5JI\xbc\x8c\x96\xaf/_R\xc6'}}, {@seclabel}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) socket$inet_sctp(0x2, 0x1, 0x84) 2m8.003495054s ago: executing program 32 (id=407): r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x44a000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000d42ca95c654009e75ce6bd5bbb1b4fb05ccd216bc72af60c229a9a6572855778e4a041c4c19c4728112afcf26b213afaffb1a49e670c4eaeabe18446deda40e34b58c30f71d8337bcd2675d0e8bdd2e75da5023b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/28], 0x50) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000980)=""/135, 0x87}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x4, &(0x7f0000001a80)=""/84, 0x54}, 0x7}, {{&(0x7f0000001b00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b80)=""/37, 0x25}, {&(0x7f0000001bc0)=""/125, 0x7d}, {&(0x7f0000001c40)=""/147, 0x93}], 0x3}, 0x8}], 0x2, 0x100, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000540)={0x18, 0x0, {0x1, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xb3, &(0x7f0000000700)=""/179, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x10042, &(0x7f0000001d80)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'G\xe4F\xd3?\xdc\xd2E\xf24d\x00\x00\x00\x00*\xa3HMh\x81\xe6\x8fPB<\x96\"\xab\xd0y,\n\xfc\xf5\'\x18s\x96\x96\xbb\xf8`7\xe0\xbb\xb4\xbd\x1a>\xa2\xe2\x93C\xebv\xdd\x92\xf6\x7f}\x13\x9c\xe2\xf1\xa8\xc1\xcf:{M[/\xa6\xa3\xe8\xc6\xf7e_\xc5JI\xbc\x8c\x96\xaf/_R\xc6'}}, {@seclabel}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) socket$inet_sctp(0x2, 0x1, 0x84) 1m52.697264182s ago: executing program 3 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x40000000}}, 0x104}}, 0x0) 1m52.643832651s ago: executing program 3 (id=627): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000280)={0x1, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000740)=@framed={{}, [@ldst={0x0, 0x3, 0x0, 0x2, 0x2, 0x50, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m51.518354527s ago: executing program 3 (id=633): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x1, 0x1, 0xff, 0x1}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1m51.391803524s ago: executing program 3 (id=634): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) read$FUSE(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x17, 0x0, &(0x7f0000000280)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r6 = socket(0x10, 0x80003, 0x0) mlockall(0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x10, 0x700, 0x0, 0x1, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x64, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="c6cd7df743000900fffffffffbdbdf250200000004001f00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000100)=ANY=[@ANYRES16=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m51.241672552s ago: executing program 3 (id=635): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000540), 0x6e, &(0x7f0000002500)=[{&(0x7f0000002580)=""/4099, 0x1003}, {&(0x7f0000002240)=""/3, 0x3}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f0000000900)=""/228, 0xe4}], 0x5}, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setrlimit(0xa, &(0x7f0000000340)={0x8}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair(0x2c, 0x80a, 0x6, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 1m50.911753225s ago: executing program 3 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000700000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1m50.554474487s ago: executing program 33 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000700000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 37.330835874s ago: executing program 4 (id=1083): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) pread64(r0, &(0x7f0000000880)=""/228, 0xe4, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') write$binfmt_aout(r0, &(0x7f0000000980)={{0x107, 0x7f, 0x8, 0x18d, 0x351, 0x480, 0xe7, 0x9}, "fdf3a85c05f2551f4aed317cb6f249b3ac1d13986f177d776dafc91452b4c96b3b10edf3a3c8d7fbd537b02158c934b466949db63d0222a87cb0d6933751dc75eafb6c84e3ea3aced9a5042f147464ecd6c29e84d6a199972a642a22d86332dacc910a9bb3de1e4535b6cbcb48bc970cc6370dd890bc8d3dd45e3cd9d030d3abd999b7afcf746fc08f46750180c3084fcf399809b584e29b736e8d00a9471f38cd8069f6f64c23c23d974968e57e68f645ed2a0259551910692055f2798d62f439c932789c1baa970a4e8dc5c837c78b3feca3459f2be773d65780fc754ea76436570b2ee564ea74fa0ae0f977a3e709a48e3593e4b8c1675b5c045e48f81ee7d764b3f6d0f5169fe28f74fca00515d39bb5b8f377c829a9abfdc3ed3dfd883f4312a63e15c78aa90efc0ba206b2f6bba18eb9a7c1b42d3ab6cee35f0ada06f2f63b7af2dabd36f2d9c7aced384155a9ce64443f8d1cddc8c83f380d7fcc99d0b1776b3dcc4f2918caa081f739c1d7b5f80227f3756e0ce8e4537d664d4aa6f390d4ab1640398629ea017c3d70e47210babbbca3329cae1f40f4875a30b0238a25c6c4e95df070d710ec07a3730009381f690312a8f5b7475d4f0c9c86eefdac089b87125a3e3b0c3d59826ee2d9e33626f4311cbbc5e5b8d2c2acaadc16c2b2ec9a1a111cd2b5bfaf1de497531934b74f776399042e4ae749fc9d8d84b0f5c6f323c2c806e2ba9b88ab53f62e2b903a34d11b93af7cd2a14d504b88ff0feb2a8c9f50e368233af8cbf4f813b2f4a5d478eb5a55f8e2ed5514084dab501cf83b36c4429245a4cd81c96b2d56c21417b3991fa8896790e521b18d9a5437bf3e539c77c14a32e33c27b6fabbeeffc97f46edc510db544ac696c894b5d3ac032c13c5e6f5cabc4d6ae21f9575d62f82ff0d882d8be91863e202d9c194b48f4d595c0b2740a08d6d6b87c545249ccf959df94cc44b9a8bf6889a3b3b0edf06a5dad5c92904b6f1c63bedfd291b55591efbc4e4157418cfe87c106b7933529fb684bcd0dea400902b8674fe48c42d6de56592ec84a4cf96fe6d282e3c1d8ddf73510137b96e5ae628f0877f9265830ceca63ab31d261b1d20f324bbdd9ecd839120ca04674ab7ae5914dcefdb1613c0c69b2b1730e5f00f509710504bf06e615958db2b831a3fb9e357e860f502c54e38259dca6c57264a060c29dececa754ee1fbee184c15797e7d30c8b0258a3a5a4d92d908546a39125c8de82479e8f8eb8808c358940325a2def4d592d436bb86a2becea27e8db77fe98720b003f47fb13574f648031f65a64e55bbca86afcdf6e5f628c15066cdbd6b3634c6fe52a36969654e70b80118e9b40f523bbc3248a0de5ad3d7f01d7a25feae1f407a8f69a000128b99902bb45255116612e8b7a43711c63f788c81d69d3e4bc66986a3f5dd906f8b59b06e01c006d57e1535e0908de8ab716b3acb16509d6f4ed78b2eeb720a99aed63b30805a592d307d3d4c80a666c746be3683057d9311e69f9c85f22a837988c5314201c2c40f462d34e344879610a8538f1d1f6e04caa0e4fe83867544fe19c08d345e0805a194d431c4f9a0de1c2fc033e0c4f5501f7e19fcae894a45771e795938d35c4d5458dc1d8c9aec915c80aeb3e9fb07903409dee07f87d87fdef492e410d25c4d6b518cde59b793c8e90e15f18c87f68c70064964dbe68c3438929f829a99b1f992ec2f82ec526ce9af521380935662b04ad8e7f090de4ccdf220b9cdbbd9c790e0ceb5b650bfeba00d9ab8247944173458eb28a79c46f1916ed266b82c0f4409c5100b8d23738a7a8abc4fa44af9f848a111b92314e73667be759b6ff1bcdd8b8a6c77f3e1880a6dce7ec44a54ff69d66a98a9b190eb372b229725633614310408102f64c9f2d89015650d6901d80030ed3d824ac1c3b8d9974861c2ea03475f8c49334a818f721c7eb237e6a9517ffb295c7272fe488ac0a921970aeb8e1e092d0f592f106e4fe5718e4f5f494723f35da4a4cd8ceef4456d8804c9f2a3df5f7894fee0a6cebffe1ca861ea0b5bd96876491f5753a7988fb7015b2b6b0a052654202cd39f35331f0e41e70abbadf53ee1b765177bd8db74ac08e616a636345685ddac1dab16800a9b949e47843bc24fb091d1a93502f46096569ed8891f936df02271d774922ce7b92f22cd85ea7a7a3d8c0f5e308cdcefc9fb7451bc33ae089bdccdeb6cb5c5913a9666b8e916ba8babcbe7075c82881cf9670eefffa6557a3d7c806155c8fcfe6b9b24a73ad4527dca7197d359a782471b6e157b6bc2dfd6af027362db4fab644a02832cd83aa0b6ad63d56235f3990ccb54ed676703abac2ba79abef3a5af510768571b10692230f0cdacde223af2c86d36c091600c0b33398bd98812148505edc11821e860a8a9ff5d9281661c12bd17dc36954913617afd4b7ae450f486b4bf78353bf0605b24a46d1ddb5de97bab3e879b1fde18fa4996bed5f2b1686a38f55bbbd012aec6695f63be2ca584955eff2d79af1ae1892ea03d6f2a60c9cade6eab482a607fac037439874cbd00c6657a59b2bd6637e30d666c0ffbb09d758c41dd7b07a71fe4f9e082cc5ecab882b7b1f4632191b0a69b5a608238c6482296b7b28c883417daad6565231da847596ad0d25351b67edd188ed6feba46e4220c036b135f75640b81e76926884912b769d9e57274e9b6c52b222556b7ea4061678b8f9f4167d0da1545d5582ba92bd1d2e92dcb8e2f426d2a40203275d0faca072e7aa0c16a613df971bcd69b4bcaed1c4e4e8302242fbf34f333a71410d938916f4ec3dfe7c80f8bd76fbe792cdbb52fd6568221ca0e6a8834fe9d2d49acceec398de7e567010b58ee3b8b62e1a6add7c0f924ae74f10d3ffd5e4364fb6482b2076018840bf3490077bf94c3d2f95982e0c9d7b33565a60023a10d2681f120d4a661646e6a5c75c5c5cc848ad48b12219428f4223ddc7569d68da078744ac31e4c503be85d54ff572c2b0ab73abba8b8ed558a16a8c784cbd0d73c97afd42e139af3a0d93b31f91ba59d352f4622d3ec0778bdd093236ca65db555923d0fa3f2ff3f9d5b8ba44171f7092cb339725d5acf9a7f9fe8bc4b1792c536aef3a6293c6d0ed4056281bf389cd7f38c1d5342e67643f60b834a37edfbe41fb2eaf62e381fd17a5c3dc5e66d98c895dd07a9e503e55db62be392753a32712eb21edc2cbd972d71928aec3e5b56e0dcc0673c753c23fa1f47f1733544e3c7c39d7766ab9a98d91b0c0e1c9b0d9c90e0aa800d229a8e3ef661986c6d474bf2a3e5b859ae18fa1505c714918a4b6e417c6a0ffc9c5e5c4281428664a60c839bbf35f23ec3087c50f906d00445d5cd95ba46fc0aa9c34cc6ff55c9e682a0959c566b81059917643580ea9654caf9055824fa987639a96d4cb007101f3f6088b499e5ccbcae15c9838064ef771c4d292a131f4bc0c755e663612e0c323f9cd27942f3fb5c08140c5c22b3b6c36ab17db5e2dff54d11f90fc05f8b843f9a4d0e9a923970406046528aa36b6f8ecb1f56216c69c4a260081d9145641202f10892ef7f7f1d68117193859f1efbbda8ba108b9dd8ddefae16ea63bca0d4f7177f7b8856adba3243a4b7c3bb89a82f6ca701ba620e686583f9e81cdb403cce508e4044a4f083b99f92e9521ddd2aa7f744b70a6bd0c06d89846f7c36cfd57f1abe490c6ec617dee9d6eb4327e84491bc94470ffda1dca0168401a1fe6df8de43433311fab5aa7fbcb123644a0b4813e6f95f295f2965da8779e13be9b6503c55ee9a137ea5ecb84be00ad1bb1a6385e4042c0c3e6e71dfde433ebda6bd4065e1f3dbcaa3886a0fde14a5224bbe830c896cc8dc317caea414f56a9772ca7a3b8e3b88b94d92b32461acecaf999bbc7d5b3feb44c9d95c442c68be0f5a378fdc3529d4abb4aa7868946048bbedd1085474e912bfa2b9f27ac2e10b132487da47d53b804739917e072c1c24be681e22942fb4576e147300fc19bae8adce3fd3e01c678c206c4d05969da3ca63781805223be956d521ac9a69bd85f09f7e01709fe22ab6e5bc8aaded2a21b2e00fc1bc14da709f25ccd6028d1a0cd00b8b195b79d6a05c0bac7407873aaf5d1dae0c8993ebe0d413bb7ac3cd1a4bef1ac6e277b55a32eb030f178213f3828fe603fe47da87c42f167e8ea28817a7228c13417e099167a0ec4231ac35e75a9337c476c2863aaf899510a09314d22adaa57714a505ac1e081e48b38147bb792beb81081f45349493acb4e609edcdcef99cb6a9bafbdde3f3842996950b59f6eb3e7449afac2a5f54e8cbff6a40be7ac3aaeafa0348f0466254b29e15fb8fce3d2dc6db4a45f852f062262fdf90003bdd8449ed5ebce23e4ee9a884b460436b448b193ece9fff7388f98930ef669fbb3410c88a1bf72bced8d6553f15acda510a8fbd7abf195af2b553be9a7a5c0315846e81e4b8d49355f8f5d287094632d1cf8c953448c821d75abf1a14da8b8123cb395deadada212b2479043e34625f039e0df7f1896ffa123c57d4d0850c9762ffc5b6d97d6199d0d09edc956c8c5f03eb497557d33b9ed9769d8d1ed1c3bae9fc92a4bd5406ca6ec1834bbb2050c5f68e24b0bf288bff0c486848ad8e08c19db515a2d2447433cea71252a09f54cdd8a0b4b71a2f9e000aef32f29b76734f97b391fcb5ae909f052af771350f4954649d0e696d078cb5b82394d161422af1fa65aff84116d981800c3ef5d953403cedeb771f066ab9fccd8218c205c8e0c8017b9ec2a81b04c8d41f3da3029883c6e77722e2d0de8fe03e8d7b9047bad78de5642f1798c19454da39efe43da1a67828d3ed8da478e888eac40d69d28422001a7e9ecc6814652fadf8c60c20ab772e4c874352630d16c4780146259fa7f1e74fa31c0e68916b99b0f8f8e181bdb02d4a430e8773ed57d238f69c75de238698300e7763d1d1aadbfbe4231295a50c721806aa9e2e5040e79e827cfe0e893a9cb5105507287583bdea105880cbc1818b5084b813e9accc3862e525a0f529b6fcf065b3f63623c106a0f631639fd15dcee2cf7808be3be940289b3b980549e1732f0914230e72b4abbed76b4752a8fea41de5e7b818864b6d152dc125fec7210f358aa121d902479cf052acaf581022d6b43fefe8725446631dbcea3c0e4357fe8a92611de519ced64393401aa64349a6cb132a0a61deb9e7453d5f1ec3cda2e255ad1ddaeb615b27d7d46c921d33c78e45a598dd9b0814d9b8a781f6fb864b32635d4fcd6e5a39e49d4e56853a4b8242f2df6196cd81eb5e4f04b6935bddc1c5b1b8c4f3404780accb2dc8247e24555768bda3abac99f28135bafe38ec21272f3e5164947909726b0c1787bb3271e83d3ac3084691977095f941e42806d758e38a163a91904b459c0901c1bb0d8189bae73ada0bc971c29a7c3e844f34638b47ca7473365dc5055801ace6f6b8550fd80253bad44c9a71c0f4261f19d55b699c593287b9fc8cb91a14277f62c45395faafe942bb507802528c22454725cb5fba8a463ca59702f44b8e152e1f4c5897bb9b98fbcf2472ce87f9d764a15dd134430c7a0b6c203b5f39f48432397204098fcecccc2445a55d28a9ef96715bfdfbc809e46841f99fd1e8f8f54a848f7f4d32aa863f20acfe3b777219df9e3f12d967a621f6fa5862d5c5973fe8f3340256ea999f45686b28d06b70d8969ba8a0256fd607890cc012c9a079fcc71ee4644f73b781a4c8a290cdea6c523d2663245938e057d1", ['\x00']}, 0x1120) 37.240417658s ago: executing program 4 (id=1084): r0 = socket$kcm(0x2b, 0x2, 0x0) shutdown(r0, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000500)) r3 = socket$unix(0x1, 0x5, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x1) fcntl$setlease(r4, 0x400, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)={0x80040, 0x40}, 0x18) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000640), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000080), 0x4) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) io_setup(0x8, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 37.070388793s ago: executing program 4 (id=1085): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x904}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xf4, 0xa5}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r1, &(0x7f00000003c0)=&(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000400)=0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000001100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000001300)=@deltclass={0x44, 0x29, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0x0, 0xa}, {0xb, 0xd}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_RATE={0x6, 0x5, {0xdb, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x28002) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f00000000c0), 0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000340)={0x2, 0x0, 0x2, 0x8, r1}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x9fc, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x98c, 0x2a8, 0x2a8, 0x98c, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7fffffff, {0x8000}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x850, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xff}, {0x5a4, 0x1}, {0xa1, 0x3}, {0xfff, 0x1}, {0x40, 0x2}, {0x1ff, 0x3}, {0x6, 0x3}, {0x81, 0x2}, {0x9, 0x2}, {0x7fffffff, 0x2}, {0x23, 0x2}], [{0x1, 0x9}, {0x404, 0x2}, {0x0, 0x7}, {0x1, 0x3ff}, {0x6, 0x9}, {0x7ff, 0x4}, {0x0, 0x5}, {0x800, 0x5}, {0x80, 0x2}, {0xd, 0x7fff0}, {0xe, 0x2}], 0x9}, {[{0xfffffffe, 0x2}, {0xec, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {0xadc}, {0x200}, {0x9}, {0x10001, 0x2}, {0x3, 0x3}], [{0x3}, {0x0, 0x7bdded9}, {0x1, 0x1}, {0x6, 0x9}, {0xf, 0x5}, {0x7, 0x4}, {0x401, 0x1}, {0x1, 0x400}, {0xfb, 0xfffffffd}, {0xf8e, 0x1}, {0x8, 0xa}], 0x2, 0xa}, {[{0x2, 0x2}, {0x1}, {0x800}, {0x8, 0x3}, {0x6e, 0x2}, {0x2, 0x1}, {0x9, 0x3}, {0xe6, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x1}], [{0x65, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x8}, {0x7, 0xe0}, {0x8, 0x4e}, {0x6, 0xe7d3}, {0x2, 0xef65}, {0x81e}, {0x1, 0x7fff}, {0x6, 0x100}], 0x1, 0x4}, {[{0x4, 0x2}, {0x400, 0x2}, {0x8, 0x2}, {0x260, 0x2}, {0x6}, {0x2, 0x2}, {0x9}, {0x1, 0x2}, {0x7, 0x2}, {0x7fffffff, 0x2}, {0x7}], [{0x1000, 0x4}, {0x6819, 0x3}, {0x80000000, 0xffff}, {0xd, 0x7}, {0x7fff, 0xfffffffc}, {0x101, 0x1000}, {0x1, 0xd0}, {0x29, 0x5}, {0x4, 0x7}, {0x40, 0xc2f1}, {0x7f, 0xebd}], 0xa, 0x6}, {[{0x2, 0x1}, {0x8, 0x1}, {0xe, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x2}, {0x5, 0x1}, {0x10001}, {0x8, 0x1}, {0x1, 0x3}, {0xf, 0x3}], [{0x6, 0x4}, {0xd86, 0x9}, {0xa67c, 0x800}, {0x7, 0x8}, {0x1, 0x2}, {0xfffffffb, 0x8d}, {0x7}, {0x6, 0x80}, {0x9, 0x2}, {0x81, 0xb}, {0x8, 0x1}], 0x4, 0x7}, {[{0x6, 0x1}, {0x4}, {0x0, 0x2}, {0x4}, {0x3ff, 0x3}, {0xb135, 0x1}, {0xe4ab, 0x2}, {0x200, 0x2}, {0xa, 0x2}, {0x6}, {0x2, 0x2}], [{0x0, 0xa}, {0xa, 0x400}, {0x4, 0x9}, {0x8, 0x5}, {0x5, 0xb84}, {0x7, 0x9}, {0x300000, 0x1000}, {0x800, 0x4}, {0x5, 0x80}, {0x1, 0x3}, {0xa, 0x5}], 0x9, 0x8}, {[{0x5cae8a2b, 0x2}, {0x6, 0x3}, {0x58d8, 0x2}, {0x9c3, 0x1}, {0x5, 0x1}, {0x8}, {0x7}, {0x401, 0xc0875356c265fb1d}, {0x2, 0x2}, {0x6, 0x2}, {0x3}], [{0x3, 0x2}, {0x400, 0x3}, {0xfffffffd, 0xa}, {0xfffffffd, 0x5}, {0x80000001, 0x1}, {0x4, 0xf3}, {0xb}, {0x80000001, 0x3}, {0xc, 0x7}, {0xbaa6, 0x8}, {0x6ab60000, 0x4}], 0x4, 0xb}, {[{0x81}, {0x3}, {0x99, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3}, {0x6c, 0x2}], [{0x8, 0x40}, {0x1, 0xe140}, {0x5, 0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x40, 0x80000000}, {0x5, 0x8}, {0x4, 0x2}, {0xffffffff, 0xffffffff}, {0x3, 0x41}], 0x2, 0x8}, {[{0x8}, {0xc}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x4}, {0x7, 0x2}, {0x8, 0x3}, {0x3}], [{0x4ff4, 0xfff}, {0x4, 0x6}, {0x7f4c, 0x9}, {0x8, 0x7fff}, {0x80000001, 0x401}, {0x9}, {0x7f, 0x1}, {0xfa, 0x8}, {0xce, 0x4}, {0xc131, 0x2}, {0x6}], 0x5, 0xa}, {[{0x80, 0x1}, {0x6, 0x1}, {0x101, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x7ff, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x6}, {0xa, 0x3}, {0x0, 0x2}], [{0xe000000, 0x3f2d}, {0x80000000, 0x1}, {0x7, 0x4}, {0x3, 0x8}, {0xa, 0xfffffffb}, {0x2b, 0xfffffff1}, {0x8, 0x601c}, {0x1, 0x682d69b7}, {0x4, 0x38000000}, {0x9, 0xb}, {0x7, 0x4}], 0x9, 0x8}, {[{0x800, 0x3}, {0xd02b, 0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x8c, 0x2}, {0x3, 0x1}, {0x8000, 0x1}, {0xfffffffd}, {0x7, 0x2}], [{0x9, 0x200}, {0x8, 0x10001}, {0x2, 0x401}, {0x6}, {0x2, 0x7ff}, {0x9, 0xfffffffd}, {0x7957, 0x7eed}, {0x7, 0x2}, {0x6}, {0x4, 0x1000}, {0xfffffff7, 0x9}], 0x1, 0x3}], 0x0, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xa58) pwritev2(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000000c0)='h', 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r7 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x2) 35.830653738s ago: executing program 4 (id=1091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0xc6, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000090060100000000006000000000000000000000fe8000000000000000000000000000aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 35.719311607s ago: executing program 4 (id=1094): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) (async) unlink(&(0x7f0000000100)='./file0\x00') r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x59c, 0x214, 0x0, 0x13c, 0x324, 0x13c, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xf4, 0x13c, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x4e21], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0xfc}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff}, {}, 0x300}}}, {{@uncond, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f8) (async) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e00038d"}) 35.409913018s ago: executing program 4 (id=1099): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x10000000000002) sync() ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x1, 0x1001}, {0x4d, 0x2}, @cond=[{0xffff, 0x706, 0xfffb, 0x1, 0x100, 0x4}, {0x9, 0x8, 0x4, 0x59, 0x5}]}) syz_open_dev$evdev(0x0, 0x2, 0x822b01) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2c0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x180001) socket$nl_route(0x10, 0x3, 0x0) 11.689712247s ago: executing program 34 (id=1099): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x10000000000002) sync() ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x1, 0x1001}, {0x4d, 0x2}, @cond=[{0xffff, 0x706, 0xfffb, 0x1, 0x100, 0x4}, {0x9, 0x8, 0x4, 0x59, 0x5}]}) syz_open_dev$evdev(0x0, 0x2, 0x822b01) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2c0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x180001) socket$nl_route(0x10, 0x3, 0x0) 7.6665099s ago: executing program 1 (id=1200): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r1, 0x5, 0x80000}) (async) unshare(0x6a040000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0)=0x40, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f00000000c0)=0x1, 0x4) r4 = dup(r3) read$FUSE(r4, 0x0, 0x0) (async) write$binfmt_elf32(r4, &(0x7f0000000500)=ANY=[], 0x258) read$FUSE(r4, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @any, 0x87ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000400)={r5, r5, 0xd, 0x0, 0x0, 0x9, 0x47, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0xd) gettid() (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000040)) (async) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978000000000000009ed100000000000000040004"], 0x1c}}, 0x0) (async) unshare(0x24020400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0xfffffffffffffffe, 0x7, 0x400000000000004, 0x4, 0xfffffffffffffffc}, &(0x7f0000000280)={0x77359400}, 0x0) (async) unshare(0x10020f80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) 6.346690145s ago: executing program 1 (id=1206): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_clone(0x12852911, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203fe031000000033bd7000fbdbdf250200090040000000000000000000000005000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000002000007020000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 5.557389416s ago: executing program 1 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) poll(&(0x7f0000000040)=[{r1, 0x953}], 0x1, 0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x3, 0x83, 0x8, 0xe057, 0x15, 0xf001}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x44}, @local, @multicast2}}, 0x26) 5.428352589s ago: executing program 1 (id=1219): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4a2d1527, 0x3abd, &(0x7f0000006680)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) munmap(&(0x7f0000af2000/0x1000)=nil, 0x1000) 4.440164877s ago: executing program 1 (id=1227): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0xf3}, 'syz0\x00', 0x2a}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000180)={0x9, 0x28, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) 4.390227919s ago: executing program 2 (id=1228): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0xffffffff, 0x81, 0xfffffff9, 0x6}) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) unshare(0x8000000) (async) semget$private(0x0, 0x4000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x2000014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) setitimer(0x0, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) (async) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) socket$kcm(0x2, 0x3, 0x2) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) (async) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) 4.27002223s ago: executing program 2 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000100001000000000000000000e00000020000000000000000000000000a0101000000000000000000000000004e240000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000fcffffffffffffff0000004b16f57b5c17a8460000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebb29fe42d3623842d148b00000000000000001400"/164], 0xec}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@xino_off}, {@index_off}, {@nfs_export_off}]}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) 3.685136727s ago: executing program 1 (id=1230): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x3, 0xbe, &(0x7f0000000300)=""/190, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8a}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = socket(0x11, 0x3, 0x20000001) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) (async) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) close(r8) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df87e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) (async, rerun: 64) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x84001, 0x0) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 3.440323353s ago: executing program 6 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 3.35979405s ago: executing program 2 (id=1235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100636f6e6e62797465730000001c0003004cb4fc4ba7906e8f58c205080000001f0000007521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 3.358017949s ago: executing program 6 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0xd1, &(0x7f0000000b00)=""/209, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00006a3000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcff0300"/18, @ANYRES32=r6, @ANYBLOB="140004006e6963766630000000000000000000000800050006000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000, 0x0, 0xff, 0x8, 0xffff, 0x20}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x14, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="2cec3f892d0248fc2ed09f39a387365fa8d3592f48f10bbebbd2eb87fc8fc5d7a5e6a149b26f068607c4feb4dd601d74ebe4b94b6d4cfbb458f3161eb88b2714ee539cc2fd6c61c75e71ef48fbf52499a71cc5909846fb2dc24f25cd7b37aecc64a2b593634aa8ab8aaa37c5c70db31e09de3f46cdd44c9b970f0ed4d8608bdeef390d108aa0abeffabbb3da8ed83f4a4b6e580f5ffea9a16b123d7069e32185b050f37bec7d744a96b9bcff27e969c7e8a46a"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x22, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x105601, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000002c0)=0x7e) 3.298931712s ago: executing program 2 (id=1237): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40801) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x2, 0x9, 0xfffffffffffffeff, 0x11c3adec}) r1 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="1008040003000000240061766500000000090000000000000001000000"], 0x44}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async, rerun: 64) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3, 0x2000000, r4}, 0x10) (async, rerun: 64) ioctl$BLKTRACESTART(r0, 0x1276, 0x0) 3.079867493s ago: executing program 2 (id=1238): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76696e65459beb1fb664f6ce6c0c7274696f7874656e642c6163638173733d616e792c63616368653d66736361636865"]) syz_emit_vhci(0x0, 0x1d) getrandom(&(0x7f0000000680)=""/288, 0x120, 0x3) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x109) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xa0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6aea, 0x152, 0x8000000, 0x5, 0x7}, 0x2, 0x70}, [{0x0, 0x6, 0x4, 0x7, 0xf, 0x400}, {0x2, 0x6d1b, 0x9, 0x7fff, 0x3, 0xe}, {0x3, 0x1000, 0x6, 0x7035, 0x6, 0xffff}, {0x51, 0x6, 0x4, 0x0, 0x1, 0xc5c4}, {0x1, 0x1, 0x5362, 0x3, 0x0, 0x1}, {0x8, 0x3fe, 0x4, 0xa, 0x7f, 0xd646}, {0xffff1bd4, 0x7b06, 0x6b8, 0x6, 0x41, 0x1}, {0x7, 0xb90, 0x1, 0x6, 0xfffffffc, 0x13}, {0x93dc, 0x0, 0xfffffffa, 0x100, 0xa80c}, {0x9, 0x3, 0x10001, 0xfffffffd, 0xb, 0x1}, {0x1, 0x0, 0xce, 0xe5, 0xf0, 0x6}, {0x4, 0xf, 0x7, 0x5, 0xffffffff, 0x1}, {0xfff, 0xd4, 0x7fff, 0x0, 0x8, 0x24}, {0xd, 0x0, 0x2, 0xee7, 0x6, 0x4}, {0x3, 0x7, 0x3, 0x3, 0x0, 0x40}, {0x6, 0x6, 0xf, 0x3, 0x2, 0x4}, {0x5, 0xfff, 0x100, 0x4, 0x100, 0xf30}, {0x0, 0xfffffff8, 0x7, 0x80000000, 0x5, 0x6}, {0x2, 0x0, 0x400, 0x5, 0x1, 0x6}, {0x4, 0x6, 0xb, 0x6, 0x0, 0xffffff81}, {0x5, 0x9db, 0x9, 0x6, 0x7, 0xfffffffd}, {0x7, 0x1, 0x3, 0x7, 0x7, 0x6}, {0x2, 0x4, 0x1, 0xf, 0x3ff, 0x58d}, {0x7fff, 0xffffffff, 0x9, 0x8, 0xfff, 0x715c}, {0x80000001, 0xaa5, 0x6, 0x9, 0x4, 0x21a}, {0xb, 0xd, 0x0, 0x8, 0x3, 0x4}, {0x80, 0x4, 0x1c, 0x5, 0x2}, {0xfffffffd, 0x5, 0xff, 0x5, 0x0, 0x6}, {0x5, 0xbc7a, 0x7fff, 0x35, 0x10000, 0xffff}, {0xb, 0x4, 0x4, 0x8, 0x9052, 0x800}, {0x8000, 0x0, 0x0, 0x2, 0xb, 0x8292}, {0x4876, 0x2, 0x8, 0xf6, 0xd9, 0x9}, {0x0, 0x9, 0xb19, 0x6, 0x3, 0x2}, {0xdf3c, 0x6, 0xa80, 0x400, 0x10000, 0x6}, {0xd0, 0x2, 0xc, 0x5, 0x3, 0xca3}, {0x2, 0xc1, 0x0, 0x7, 0x3, 0x9}, {0x0, 0x20, 0xbad0, 0x314, 0x5}, {0x3, 0x4, 0x7fffffff, 0x6, 0x1d81, 0xd59}, {0x0, 0x7, 0x7fffffff, 0xcb59, 0xfffffffe, 0x4}, {0x9, 0x2d3, 0x4, 0xd6d5, 0x51, 0x401}, {0x0, 0x7fffffff, 0x7, 0x1ff, 0xff, 0x1}, {0x80000001, 0xd, 0x6, 0xfffffffe, 0x4, 0xd}, {0x100, 0x1, 0xfffff801, 0x8, 0x0, 0xfffffff5}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x9}, {0xfffffff7, 0x80000000, 0x6, 0x6, 0x1ff, 0xd}, {0xdf, 0x9, 0x6, 0x80, 0x1, 0x1}, {0xa2, 0x0, 0x185e, 0xa0, 0x10001, 0x3fc}, {0xfffeffff, 0x9, 0x2, 0x9, 0x0, 0x8}, {0x7fffffff, 0x2, 0xa5, 0x8, 0x8001, 0x5}, {0xc, 0x5fb7, 0x6, 0xfffff7ca, 0x590, 0x5}, {0x40, 0x3, 0x8, 0x6, 0x1, 0xfffff800}, {0x40, 0x101, 0x632, 0x8000, 0xd, 0x11}, {0xd3, 0x1, 0x0, 0x4, 0x2b, 0x401}, {0x9, 0x7704db90, 0x10, 0x9, 0x1, 0x7}, {0xda, 0xb, 0x2, 0x100, 0xc1c, 0x10001}, {0xfffffff8, 0x6, 0x7, 0x7fffffff, 0x4, 0x9cf}, {0x9, 0x8, 0x3, 0x9, 0x3, 0x8000}, {0xf5, 0x8, 0x1, 0x3, 0xb6, 0x4}, {0x9626, 0x0, 0x4, 0x8, 0x5, 0x1}, {0x0, 0x0, 0x8001, 0x1e14, 0x0, 0x3}, {0x6, 0x4, 0x5802, 0xff, 0x1, 0x6}, {0x8, 0x80, 0x9, 0xffe00000, 0xffffffff, 0x9}, {0x2, 0xffff, 0x6, 0x4, 0xffffffff, 0x4}, {0x3ff, 0x1, 0x3, 0x7ff, 0xffffffff, 0x4}, {0x2, 0x7e07, 0x0, 0x9, 0x7}, {0xfff, 0x6, 0x2, 0xffff10e1, 0x6, 0x8}, {0xee28, 0x1, 0x10000, 0x560, 0x80000000, 0xd41}, {0x2, 0x2, 0xfffffffe, 0x8, 0x1, 0x1}, {0x9, 0x800, 0x2, 0xffffffff, 0x6b}, {0x4, 0x1, 0x9, 0x7, 0x4, 0xffffff8d}, {0x101, 0x80000001, 0x0, 0x6, 0x3, 0x9}, {0x7, 0x3ff, 0xffff, 0x3, 0x2, 0x8aef}, {0x8, 0x8, 0x95, 0x7fff, 0x5, 0x1}, {0x3ff, 0xfff, 0xfffffffc, 0x0, 0xdf, 0x7}, {0x626, 0x5, 0xffffff27, 0xaa, 0xfff, 0x3ff}, {0xdae0, 0x6, 0xf4d, 0xfff, 0xfffffff3, 0x6}, {0x3, 0x6, 0x5, 0x9, 0x8001, 0x2}, {0x4, 0x10000, 0x8, 0x2, 0x4, 0x4}, {0x9, 0x7, 0x3, 0x6, 0x8be, 0xfffffffc}, {0x5, 0xfffff3c2, 0xb9dd, 0x6, 0xd204, 0x4}, {0x7, 0x2e, 0x5, 0x5, 0x0, 0x7}, {0x7f, 0x2, 0x6, 0x7, 0x8, 0x6}, {0x4, 0xf6, 0x9, 0x2, 0x40, 0x1}, {0x7b5, 0x0, 0x5, 0x3ff, 0x7ff, 0x8}, {0x200, 0x4, 0x5, 0xede5, 0x1, 0x2}, {0x1, 0xfffffff7, 0x6, 0x143e, 0x6, 0x100}, {0x0, 0x10000, 0xf, 0x4, 0xffff, 0xfffffffa}, {0x5, 0x31c, 0x0, 0x8, 0x9, 0x5}, {0x7, 0xffffffff, 0x6, 0x5, 0xc}, {0x7c1d6e04, 0x9, 0xd5d3, 0x37, 0x7, 0xeb31}, {0xffffffff, 0x0, 0x4, 0x6, 0x10000, 0xab0}, {0x8, 0x7, 0x9, 0x4e7604d5, 0x53, 0xb}, {0x7, 0x7ff, 0x9, 0x4640, 0x19, 0x45259339}, {0x9, 0x0, 0x1, 0xfffffffe, 0x87b4, 0x4}, {0x0, 0x7, 0x2, 0x8, 0x0, 0x5}, {0x400, 0xe, 0x9, 0x4, 0xc19, 0x6}, {0x7e5, 0x10000, 0xfffffe00, 0x1, 0x798, 0x200}, {0x3, 0xffffff6d, 0x7, 0x63b, 0x10000, 0x4}, {0x3, 0x4, 0x8, 0x3, 0xfffffff7, 0x2}, {0x4, 0xfffffdb8, 0xfff, 0x587, 0x8000}, {0x7fffffff, 0x4, 0x31, 0xe90, 0x0, 0x5}, {0xcdfe230a, 0x9, 0x8, 0x2, 0x657, 0x3}, {0x2, 0x0, 0x3, 0x8, 0x4, 0xffff}, {0x8, 0x1, 0x4, 0x2, 0x80000001, 0x1}, {0x9, 0x740, 0xffffff4e, 0x0, 0x7, 0x7}, {0x8000, 0x1, 0x74b, 0x7fff, 0xf02, 0x1}, {0x9, 0x875, 0x1, 0x6, 0x1000, 0x91}, {0x4, 0x3, 0x92, 0x6, 0x3, 0x1a1e}, {0x3, 0x9, 0x5, 0x2, 0xc4, 0x8}, {0x1, 0x3, 0x5, 0x0, 0x800, 0x8}, {0x6, 0x7, 0x38, 0x2, 0x5, 0x57}, {0x375e1f94, 0x4, 0x0, 0x9, 0x9cf30000, 0x1}, {0x5, 0x9, 0x4, 0xfefa, 0x100, 0xf8f}, {0xfffffffd, 0xffffff7f, 0x6, 0xc, 0x5, 0xffff}, {0x72e, 0x5, 0x7, 0x49, 0x5}, {0x7, 0x3, 0x0, 0x40009, 0x6, 0x2}, {0x9, 0xff, 0x4, 0x80000001, 0x4, 0x5}, {0x20000, 0x81, 0x0, 0x1, 0x6, 0x600000}, {0x800, 0xb, 0x2, 0xffffffff, 0x0, 0x5}, {0xf, 0x6, 0x400, 0x0, 0xb, 0x2}, {0x10000, 0x0, 0xfffffffe, 0x63, 0x1, 0x6}, {0x8, 0x25, 0x1, 0x80, 0xce}, {0x4, 0x7, 0xfffffffa, 0x1, 0x10, 0x7}, {0x2, 0x5, 0x9, 0x2, 0x10001, 0x1}, {0x1, 0x2, 0x1, 0x82, 0x1, 0x400}, {0x0, 0xc, 0x0, 0x89, 0x8, 0xc}, {0x4, 0x7, 0xfff, 0x8001, 0x6367, 0x4}, {0x5, 0x8, 0x0, 0x2d5, 0xfff, 0x5}], [{0x4}, {0x1}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0xc58d175f58680532}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x6}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {}, {0x3}, {}, {0x2}, {0x4, 0x3}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x4}, {0x2, 0x1}, {}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x4}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0xc4374b8ee75f9c67}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.429074317s ago: executing program 5 (id=1241): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2}}]}, 0x15c}, 0x1, 0x0, 0x2000000, 0x880}, 0x2014) 2.428882851s ago: executing program 5 (id=1242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x1000000}, 0x0) 2.428128164s ago: executing program 6 (id=1243): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x9100, &(0x7f0000000040)={@_ha_fsid={[0x1ff, 0x5a6d]}, {0x8, 0xf, 0x1cc9, 0x61}}, 0x37, &(0x7f0000000080), &(0x7f00000000c0)=0x7}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1e}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1c53}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x33, 0x3, "45f284a0cfb3db077e668259f8159f5574399f622d252b34475f0d75d1f7688480935afcf739e4ec7f683f93429481"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x75d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x200008c6}, 0x40001) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x11c, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0xd0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x494}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x44001) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r2, 0x523, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x48}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x80, 0x80, 0x0, 0x8, {{0x12, 0x4, 0x2, 0x32, 0x48, 0x68, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}, {[@cipso={0x86, 0x32, 0x0, [{0x0, 0xe, "4f19d9ffd2af72dd6260d5ee"}, {0x6, 0x9, "cfae7bbda9daaf"}, {0x0, 0x10, "d4d18be1cbd7cc99902da463a6e8"}, {0x1, 0x5, ')1/'}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xcc, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xef}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000804}, 0x1) epoll_pwait(r0, &(0x7f0000000ac0)=[{}, {}, {}], 0x3, 0xa0000000, &(0x7f0000000b00)={[0x0, 0x3]}, 0x8) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) pivot_root(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r4, 0x408, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x44001) rseq(&(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x6, 0x3ff, 0x1ff}, 0x1}, 0x20, 0x0, 0x0) setns(r0, 0x8000000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000e00)={@mcast1, 0x4, 0x2, 0x2, 0x8, 0x93a2, 0x5}, &(0x7f0000000e40)=0x20) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000e80)={0xe941, 0x7}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x88, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001100)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x4c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x12}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) prlimit64(r9, 0x6, &(0x7f0000001240)={0x2, 0x3ff}, &(0x7f0000001280)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000013c0)={'ip_vti0\x00', &(0x7f00000012c0)={'sit0\x00', r3, 0x80, 0x7800, 0x7, 0x3ff, {{0x2e, 0x4, 0x1, 0x7, 0xb8, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@generic={0x7, 0x12, "018f92ed45462fd84226b1da3e05879a"}, @lsrr={0x83, 0x13, 0xbf, [@remote, @empty, @remote, @remote]}, @ssrr={0x89, 0x17, 0xb7, [@local, @remote, @local, @local, @remote]}, @lsrr={0x83, 0xb, 0xd2, [@remote, @empty]}, @generic={0x94, 0x11, "3fd04cc943d7f613d37e44fdb863dd"}, @generic={0x88, 0x5, "b61c9c"}, @timestamp={0x44, 0x20, 0x40, 0x0, 0x1, [0x8, 0x1, 0x8, 0x0, 0xf, 0x0, 0x772]}, @ssrr={0x89, 0x13, 0xb3, [@remote, @local, @local, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x71, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf2c}, {@private=0xa010101, 0x3b}]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001400)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) sendmsg$NFT_BATCH(r10, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0x4e, 0xc, "4a4bc038f7a0a9e292ca8a47794fda408eb13d224a1d1b087d0a482ed681339e9878c5c8158411235a0e1c6eae839724269d2b4edb604d2b240e69ba8a972de5fcbb169652cbeb214d00"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x200, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}, 0x1, 0x0, 0x0, 0x88044}, 0x40000) 2.299936966s ago: executing program 5 (id=1244): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x51, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x17, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x17, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, "0000000001004000000000"}}}}}}}, 0x0) 2.299381206s ago: executing program 6 (id=1245): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) shmctl$IPC_SET(0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="8bdbbaca00671c2c249a7bc8f8b925f3aef5e57644148d7bbc2faaf290dcdad6197a1c96c6d79e35bf01465ae2eb6ad499a928dad83ede67c417744f428da7e316183aeea8", 0x45}], 0x1) (async) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x9e69, '\x00', @p_u32=&(0x7f0000000440)=0x9}}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0xffffff55}, 0x7, 0x2, 0x1000, 0x7, 0x1d, 'syz0\x00', "b923b5768b1b39cfb6a7cfa432765bbb2e7fd4ada958140aa69399b40b129cbf", "9c202e30787daa7e09a12355c74b0db55f31118d152c824598d52536ef31d86d", [{0x6f3, 0x40, {0x1, 0x6eb4bf14}}, {0x2, 0x6, {0x3}}, {0x40, 0x8, {0x2, 0x80000001}}, {0x5, 0x0, {0x0, 0x5}}, {0x7, 0x81, {0x3, 0xc}}, {0x1000, 0x34, {0x2, 0x4}}, {0x1, 0x3, {0x1, 0x9}}, {0x5, 0x800, {0x0, 0x9}}, {0xacb, 0xccf8, {0x3, 0x3}}, {0x3ff, 0x1, {0x3, 0x200}}, {0x8, 0x3, {0x3, 0x9}}, {0xc, 0x1, {0x1, 0x2}}, {0x8, 0x6, {0x28013de405d2b763, 0x8}}, {0x7ff, 0xc, {0x2, 0x6}}, {0x3000, 0x200, {0x2, 0x3}}, {0x1, 0x7fff, {0x2, 0x3}}, {0x8, 0xe1, {0x1, 0x5}}, {0x2, 0x5, {0x2}}, {0xf011, 0xffc1, {0x1, 0xc1}}, {0x1, 0x5, {0x0, 0x2}}, {0x6, 0x0, {0x1, 0xa}}, {0x7fff, 0x8, {0x2, 0x7}}, {0x3, 0x2, {0x2, 0x7}}, {0x0, 0x2, {0x1, 0x1}}, {0x9, 0x5, {0x0, 0x28f24972}}, {0x1, 0x3, {0x0, 0x5}}, {0xffff, 0x8, {0x1, 0x7}}, {0x9, 0x10, {0x0, 0x9}}, {0x40, 0x4, {0x0, 0x9}}, {0x0, 0x88cf, {0x1, 0x6}}, {0x4, 0xffff, {0x1, 0x6}}, {0x2, 0x10, {0x3, 0x8}}, {0x0, 0x4, {0x1, 0x7}}, {0x9, 0x7, {0x2, 0xa3dd41a}}, {0x1ff, 0x15, {0x2, 0x100}}, {0x8000, 0x8, {0x1, 0x5}}, {0x2, 0xa, {0x3, 0x3a3a}}, {0x9, 0x403, {0x0, 0x7fffffff}}, {0xdc, 0xfffd, {0x51c63fae1d466727, 0x3}}, {0x5, 0x3, {0x1, 0x4}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44005}, 0x4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000740)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0xc0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e200000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r11, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) r12 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000002c0)='veth1\x00', 0x10) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x50) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WOWLAN(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="020028bd7604f16cdf254a0000000c00990029040000744e2aea0c0075800400030004000800b987b159f9345cf50c2aae8d8353600c5bfc38d3941931eedaae39eb0df48b5457f3b1cecafce50bc43c9b665dda63fe2a67809fe7dd2ed616c98cc0bb56ba2625fdebc3932980cc4f31a478ea143c"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (rerun: 64) 2.22990332s ago: executing program 5 (id=1246): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, r1, 0x0, 0xbfb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r1, r2, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200002, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@directio}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001300)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x4c}}, 0x0) 2.229466455s ago: executing program 6 (id=1247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x800, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r5, r6, 0x0, 0x201f00) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket(0xa, 0x5, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@remote, @rand_addr=' \x01\x00', @empty, 0x7, 0xc6, 0x9, 0x400, 0x80004, 0x1000040}) 1.65779401s ago: executing program 2 (id=1248): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000a00)={'veth1_to_bond\x00', @ifru_hwaddr=@link_local}) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x4, 0x0, 0x5, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x6138, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f00000006c0), 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r5, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) 696.371408ms ago: executing program 5 (id=1249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0xc6, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000090060100000000000000000700000000000000fe8000000000000000000000000000aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 1.766998ms ago: executing program 6 (id=1250): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000003000001"], 0xfdef) 0s ago: executing program 5 (id=1251): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffcdd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) (async) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)=0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x106) (async) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, 0x0, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000480)={0x0, 0x64, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES64=0x0, @ANYRES8=r3, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x4880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e000000000000000000f009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e000000000000000000f009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000500)={0x9, 0x8c7, 0x0, 0x0, 0x0, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x71000, 0x202}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trAns=o,\x00'/20, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trAns=o,\x00'/20, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x3b3ca000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x2, 0x0, 0x8, 0x9}, {0x4000, 0x10000, 0xe, 0x0, 0x2, 0xfc, 0x0, 0x0, 0xa, 0xbf, 0x0, 0x4}, {0xb000, 0x50000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x4, 0xe, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x6000, 0xeeee8000, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x8, 0x80}, {0x7000, 0xeeee0000, 0xb, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x2, 0x0, 0x4}, {0xe000, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x60, 0x2, 0xfe, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x80a0000, 0x110, 0xe, 0x3501, 0xd000, [0xd8, 0x4, 0x9, 0xfffffffffffe0003]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4}, './cgroup.cpu/cgroup.procs\x00'}) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) kernel console output (not intermixed with test programs): e [ 66.153056][ T5753] veth1_vlan: entered promiscuous mode [ 66.163769][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.198934][ T5746] veth0_macvtap: entered promiscuous mode [ 66.214351][ T5746] veth1_macvtap: entered promiscuous mode [ 66.222411][ T5742] veth0_vlan: entered promiscuous mode [ 66.226527][ T5753] veth0_macvtap: entered promiscuous mode [ 66.240091][ T5753] veth1_macvtap: entered promiscuous mode [ 66.255940][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.265624][ T5742] veth1_vlan: entered promiscuous mode [ 66.275578][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.279937][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.296565][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.301385][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.305076][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.315178][ T5748] veth0_vlan: entered promiscuous mode [ 66.318876][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.323600][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.332484][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.345674][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.349273][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.358374][ T5748] veth1_vlan: entered promiscuous mode [ 66.361526][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.369727][ T5742] veth0_macvtap: entered promiscuous mode [ 66.384619][ T5742] veth1_macvtap: entered promiscuous mode [ 66.437708][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.457544][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.468491][ T5748] veth0_macvtap: entered promiscuous mode [ 66.478051][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.481384][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.488793][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.492522][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.500186][ T5748] veth1_macvtap: entered promiscuous mode [ 66.505649][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.510932][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.522727][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.525577][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.551251][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.556132][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.564174][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.585547][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.590427][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.594544][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.606659][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.613618][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.631972][ T87] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.635937][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.665358][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.669471][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.697265][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.720443][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.723938][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.764782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.770028][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.809103][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.811954][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.908730][ T5897] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 66.924219][ T5897] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.938193][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5'. [ 66.942631][ T5899] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5'. [ 66.946168][ T5899] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5'. [ 66.992038][ T5905] tipc: Started in network mode [ 66.996199][ T5905] tipc: Node identity ac14140f, cluster identity 4711 [ 67.003975][ T5905] tipc: New replicast peer: 255.255.255.255 [ 67.008023][ T5905] tipc: Enabled bearer , priority 10 [ 67.034642][ T5904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 67.155124][ T5744] Bluetooth: hci0: command tx timeout [ 67.158314][ T5750] Bluetooth: hci2: command tx timeout [ 67.159388][ T5744] Bluetooth: hci3: command tx timeout [ 67.160803][ T62] Bluetooth: hci1: command tx timeout [ 67.379369][ T5921] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 67.380096][ T5926] xt_connbytes: Forcing CT accounting to be enabled [ 67.438820][ T5919] warning: `syz.3.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.946436][ T5916] ptrace attach of "/syz-executor exec"[5935] was attempted by "/syz-executor exec"[5916] [ 68.143481][ T39] tipc: Node number set to 2886997007 [ 68.368586][ T5941] process 'syz.3.12' launched './file2' with NULL argv: empty string added [ 68.540104][ T5940] Zero length message leads to an empty skb [ 68.543007][ T5944] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 69.143550][ T5950] autofs: Bad value for 'fd' [ 69.232311][ T5744] Bluetooth: hci3: command tx timeout [ 69.232948][ T5750] Bluetooth: hci2: command tx timeout [ 69.234036][ T5744] Bluetooth: hci1: command tx timeout [ 69.234055][ T5744] Bluetooth: hci0: command tx timeout [ 69.698601][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 69.706246][ T5967] netlink: 100 bytes leftover after parsing attributes in process `syz.0.19'. [ 69.710224][ T5967] netlink: 100 bytes leftover after parsing attributes in process `syz.0.19'. [ 69.766546][ T5968] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 70.851661][ T5982] ======================================================= [ 70.851661][ T5982] WARNING: The mand mount option has been deprecated and [ 70.851661][ T5982] and is ignored by this kernel. Remove the mand [ 70.851661][ T5982] option from the mount to silence this warning. [ 70.851661][ T5982] ======================================================= [ 71.313092][ T5750] Bluetooth: hci2: command tx timeout [ 71.322926][ T5744] Bluetooth: hci3: command tx timeout [ 71.324826][ T5752] Bluetooth: hci1: command tx timeout [ 71.329083][ T5750] Bluetooth: hci0: command tx timeout [ 72.053360][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.153727][ T6000] fuse: Bad value for 'rootmode' [ 72.279114][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.292577][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.378047][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.387766][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.449681][ T5990] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.602189][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.955026][ T29] usb 5-1: USB disconnect, device number 2 [ 74.182919][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.035659][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.038767][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.182232][ T5834] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.257207][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 76.352271][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 76.357495][ T5834] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 76.361295][ T5834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.366126][ T5834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.370398][ T5834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.374263][ T5834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.378494][ T5834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.381416][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.566026][ T6041] xt_connbytes: Forcing CT accounting to be enabled [ 76.575676][ T6043] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 76.580823][ T6043] netlink: 72 bytes leftover after parsing attributes in process `syz.2.41'. [ 76.591875][ T6043] tipc: Started in network mode [ 76.595486][ T6043] tipc: Node identity ac14140f, cluster identity 4711 [ 76.598394][ T6043] tipc: New replicast peer: 255.255.255.255 [ 76.601463][ T6043] tipc: Enabled bearer , priority 10 [ 76.603915][ T5834] usb 6-1: usb_control_msg returned -32 [ 76.613992][ T5834] usbtmc 6-1:16.0: can't read capabilities [ 77.000005][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 77.088388][ T6062] ceph: No mds server is up or the cluster is laggy [ 77.148161][ T6060] usbtmc 6-1:16.0: control status returned 0 [ 77.155640][ T5848] libceph: connect (1)[c::]:6789 error -101 [ 77.168959][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 77.210435][ T5833] usb 6-1: USB disconnect, device number 2 [ 77.613769][ T5833] tipc: Node number set to 2886997007 [ 77.738068][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 77.790165][ T40] audit: type=1326 audit(1778774045.285:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.803324][ T40] audit: type=1326 audit(1778774045.285:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.816355][ T40] audit: type=1326 audit(1778774045.285:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.825393][ T40] audit: type=1326 audit(1778774045.285:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.836160][ T40] audit: type=1326 audit(1778774045.285:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.848959][ T40] audit: type=1326 audit(1778774045.295:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.858464][ T40] audit: type=1326 audit(1778774045.295:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.867290][ T40] audit: type=1326 audit(1778774045.295:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.876962][ T40] audit: type=1326 audit(1778774045.295:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.886653][ T40] audit: type=1326 audit(1778774045.295:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 77.945891][ T6083] fuse: Bad value for 'fd' [ 78.180464][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 78.186719][ T6089] netlink: 100 bytes leftover after parsing attributes in process `syz.3.52'. [ 78.190529][ T6089] netlink: 100 bytes leftover after parsing attributes in process `syz.3.52'. [ 78.306569][ T6095] xt_connbytes: Forcing CT accounting to be enabled [ 78.681707][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.58'. [ 78.749693][ T6109] autofs: Unknown parameter '0x0000000000000004' [ 78.899017][ T6123] netlink: 'syz.2.64': attribute type 29 has an invalid length. [ 78.973964][ T6123] pim6reg99999999: entered allmulticast mode [ 79.169474][ T6128] netlink: 'syz.2.65': attribute type 4 has an invalid length. [ 79.283856][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 79.288418][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 79.294923][ T6131] syzkaller1: entered promiscuous mode [ 79.296745][ T6131] syzkaller1: entered allmulticast mode [ 79.638688][ T6137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.029682][ T6152] fuse: Bad value for 'fd' [ 80.832250][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 80.832453][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.890019][ T6162] tipc: Failed to obtain node identity [ 80.892032][ T6162] tipc: Enabling of bearer rejected, failed to enable media [ 80.898689][ T5750] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 80.902980][ T5752] Bluetooth: hci2: hardware error 0x08 [ 80.978686][ T6170] Bluetooth: MGMT ver 1.23 [ 81.070041][ T6174] syzkaller1: entered promiscuous mode [ 81.072449][ T6174] syzkaller1: entered allmulticast mode [ 81.202299][ T5891] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.372347][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 81.374570][ T5891] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 81.374617][ T5891] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.374636][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.374656][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.374676][ T5891] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.374709][ T5891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.374961][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.587507][ T5891] usb 5-1: GET_CAPABILITIES returned 0 [ 81.591924][ T5891] usbtmc 5-1:16.0: can't read capabilities [ 81.819023][ T29] usb 5-1: USB disconnect, device number 3 [ 82.995026][ T5752] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 83.664805][ T6214] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 83.667042][ T6214] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.674011][ T6214] vhci_hcd vhci_hcd.0: Device attached [ 83.683676][ T6214] __nla_validate_parse: 5 callbacks suppressed [ 83.683688][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 83.876829][ T6220] vhci_hcd: connection closed [ 83.881061][ T1160] vhci_hcd vhci_hcd.3: stop threads [ 83.893388][ T1160] vhci_hcd vhci_hcd.3: release socket [ 83.899128][ T1160] vhci_hcd vhci_hcd.3: disconnect device [ 83.945699][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 83.952317][ T29] usb 44-1: enqueue for inactive port 0 [ 84.082598][ T6225] nbd0: detected capacity change from 0 to 63 [ 84.107173][ T5752] block nbd0: Receive control failed (result -104) [ 84.140173][ T6228] netlink: 56 bytes leftover after parsing attributes in process `syz.1.103'. [ 84.155641][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 84.159435][ T6230] netlink: 100 bytes leftover after parsing attributes in process `syz.2.104'. [ 84.163514][ T6230] netlink: 100 bytes leftover after parsing attributes in process `syz.2.104'. [ 84.452696][ T29] usb usb44-port1: attempt power cycle [ 84.484788][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 84.689868][ T6258] 9p: Bad value for 'wfdno' [ 84.820069][ T6263] syzkaller1: entered promiscuous mode [ 84.826086][ T6263] syzkaller1: entered allmulticast mode [ 85.046244][ T29] usb usb44-port1: unable to enumerate USB device [ 85.455011][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.120'. [ 85.917831][ T6285] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 86.614225][ T6280] program syz.3.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.626268][ T53] cfg80211: failed to load regulatory.db [ 86.759562][ T6290] fuse: Unknown parameter 'C Ai^fd' [ 86.763132][ T6291] fuse: Unknown parameter 'C Ai^fd' [ 86.961843][ T6302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'. [ 86.982554][ T6301] netlink: 'syz.3.128': attribute type 4 has an invalid length. [ 87.099701][ T6306] capability: warning: `syz.1.129' uses 32-bit capabilities (legacy support in use) [ 87.107881][ T6306] tmpfs: Unknown parameter 'grpquota_block_Qardlimit' [ 87.261952][ T6315] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 88.484067][ T6340] netlink: 'syz.1.141': attribute type 4 has an invalid length. [ 88.578652][ T6344] xt_connbytes: Forcing CT accounting to be enabled [ 88.754369][ T6351] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 88.758557][ T6351] netlink: 'syz.0.143': attribute type 2 has an invalid length. [ 88.761176][ T6351] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 88.764174][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 88.841915][ T6356] syzkaller0: entered promiscuous mode [ 88.843918][ T6356] syzkaller0: entered allmulticast mode [ 89.023376][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.150'. [ 89.104157][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 89.155180][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 89.453860][ T53] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 89.622411][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 89.629359][ T53] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 89.632498][ T53] usb 7-1: config 0 has no interface number 0 [ 89.634965][ T53] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.640355][ T53] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 89.644360][ T53] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.648308][ T53] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.655619][ T53] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.659516][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.664127][ T53] usb 7-1: config 0 descriptor?? [ 89.701521][ T53] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 90.044395][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.152'. [ 90.347007][ T6384] binder: 6383:6384 ioctl c0306201 800003c0 returned -14 [ 90.431921][ T40] kauditd_printk_skb: 439 callbacks suppressed [ 90.431939][ T40] audit: type=1107 audit(1778774057.915:451): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 91.174572][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 92.133058][ T1346] usb 7-1: USB disconnect, device number 2 [ 92.151896][ T1346] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 92.152668][ T6420] netlink: 60 bytes leftover after parsing attributes in process `syz.0.173'. [ 92.171705][ T6419] : renamed from virt_wifi0 [ 92.193486][ T6423] netlink: 'syz.2.174': attribute type 4 has an invalid length. [ 92.197821][ T6423] netlink: 72 bytes leftover after parsing attributes in process `syz.2.174'. [ 92.221591][ T6423] tipc: Enabling of bearer rejected, already enabled [ 92.270585][ T6426] syzkaller1: entered promiscuous mode [ 92.273147][ T6426] syzkaller1: entered allmulticast mode [ 92.460044][ T6432] autofs: Unknown parameter 'fd0x0000000000000004' [ 92.509129][ T6435] usb usb7: usbfs: process 6435 (syz.0.179) did not claim interface 0 before use [ 92.718108][ T6441] netlink: 'syz.2.181': attribute type 4 has an invalid length. [ 92.813959][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 92.818621][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 92.965039][ T6449] netlink: 'syz.3.184': attribute type 4 has an invalid length. [ 92.971308][ T6449] tipc: Started in network mode [ 92.973772][ T6449] tipc: Node identity ac14140f, cluster identity 4711 [ 92.976087][ T6449] tipc: New replicast peer: 255.255.255.255 [ 92.978588][ T6449] tipc: Enabled bearer , priority 10 [ 94.111786][ T53] tipc: Node number set to 2886997007 [ 95.069427][ T6483] __nla_validate_parse: 5 callbacks suppressed [ 95.069448][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 95.069465][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'. [ 95.256114][ T6491] netlink: 'syz.3.200': attribute type 4 has an invalid length. [ 95.261199][ T6491] netlink: 72 bytes leftover after parsing attributes in process `syz.3.200'. [ 95.270014][ T6491] tipc: Enabling of bearer rejected, already enabled [ 95.692003][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 95.902485][ T6513] x_tables: duplicate underflow at hook 1 [ 96.027028][ T6497] hub 8-0:1.0: USB hub found [ 96.028970][ T6497] hub 8-0:1.0: 1 port detected [ 96.041641][ T6516] netlink: 'syz.3.209': attribute type 4 has an invalid length. [ 96.300174][ T6524] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 96.613899][ T6538] syzkaller1: entered promiscuous mode [ 96.616963][ T6538] syzkaller1: entered allmulticast mode [ 97.087275][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 97.096229][ T6542] netlink: 100 bytes leftover after parsing attributes in process `syz.2.220'. [ 97.099837][ T6542] netlink: 100 bytes leftover after parsing attributes in process `syz.2.220'. [ 97.243687][ T6544] netlink: 'syz.2.221': attribute type 4 has an invalid length. [ 97.251537][ T6544] netlink: 72 bytes leftover after parsing attributes in process `syz.2.221'. [ 97.265545][ T6544] tipc: Enabling of bearer rejected, already enabled [ 97.403968][ T5833] IPVS: starting estimator thread 0... [ 98.272054][ T6560] netlink: 'syz.0.226': attribute type 4 has an invalid length. [ 98.304194][ T6564] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 98.320393][ T6567] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 98.324081][ T6567] netlink: 72 bytes leftover after parsing attributes in process `syz.3.230'. [ 98.328824][ T6567] tipc: Enabling of bearer rejected, already enabled [ 98.352377][ T6549] IPVS: using max 30 ests per chain, 72000 per kthread [ 98.635590][ T6579] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 98.765253][ T6585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 98.768089][ T6585] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.800933][ T6585] vhci_hcd vhci_hcd.0: Device attached [ 98.837447][ T6593] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 98.841102][ T6593] netlink: 72 bytes leftover after parsing attributes in process `syz.2.239'. [ 98.852851][ T6593] tipc: Enabling of bearer rejected, already enabled [ 99.084328][ T53] usb 38-1: SetAddress Request (2) to port 0 [ 99.086998][ T53] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 99.304699][ T6588] vhci_hcd: connection reset by peer [ 99.317645][ T214] vhci_hcd vhci_hcd.0: stop threads [ 99.319704][ T214] vhci_hcd vhci_hcd.0: release socket [ 99.325116][ T214] vhci_hcd vhci_hcd.0: disconnect device [ 99.489898][ T6615] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 99.661998][ T6623] netlink: 'syz.1.249': attribute type 4 has an invalid length. [ 99.667711][ T6623] tipc: Enabling of bearer rejected, already enabled [ 101.290097][ T6653] syz.0.257: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 101.326717][ T6653] geneve2: entered promiscuous mode [ 101.874216][ T6662] netlink: 'syz.1.258': attribute type 4 has an invalid length. [ 101.907279][ T6662] __nla_validate_parse: 5 callbacks suppressed [ 101.907294][ T6662] netlink: 72 bytes leftover after parsing attributes in process `syz.1.258'. [ 101.908635][ T6664] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.947540][ T6662] tipc: Enabling of bearer rejected, already enabled [ 102.452240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.971569][ T6689] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 102.975047][ T6689] netlink: 72 bytes leftover after parsing attributes in process `syz.3.268'. [ 102.980872][ T6689] tipc: Enabling of bearer rejected, already enabled [ 103.334956][ T6702] netlink: 'syz.3.272': attribute type 4 has an invalid length. [ 103.438293][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 103.492014][ T6707] capability: warning: `syz.3.274' uses deprecated v2 capabilities in a way that may be insecure [ 103.516346][ T6707] overlay: ./file0 is not a directory [ 103.520529][ T6707] overlay: ./file0 is not a directory [ 103.802343][ T6711] 9pnet_virtio: no channels available for device syz [ 103.838912][ T6713] netlink: 'syz.0.277': attribute type 4 has an invalid length. [ 103.848096][ T6713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.277'. [ 103.867465][ T6713] tipc: Started in network mode [ 103.875242][ T6713] tipc: Node identity ac14140f, cluster identity 4711 [ 103.879948][ T6713] tipc: New replicast peer: 255.255.255.255 [ 103.887163][ T6713] tipc: Enabled bearer , priority 10 [ 104.195314][ T53] usb 38-1: device descriptor read/8, error -110 [ 104.407068][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 104.654053][ T53] usb usb38-port1: attempt power cycle [ 104.724676][ T6740] x_tables: ip_tables: osf match: only valid for protocol 6 [ 104.733111][ T6740] fuse: Unknown parameter 'dN ' [ 104.777313][ T6742] syzkaller1: entered promiscuous mode [ 104.779484][ T6742] syzkaller1: entered allmulticast mode [ 104.792351][ T6743] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 105.021118][ T29] tipc: Node number set to 2886997007 [ 105.645771][ T53] usb usb38-port1: unable to enumerate USB device [ 106.019778][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 106.023008][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.032821][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.485389][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 107.738992][ T6824] netlink: 'syz.2.308': attribute type 4 has an invalid length. [ 107.821363][ T6827] syzkaller1: entered promiscuous mode [ 107.824523][ T6827] syzkaller1: entered allmulticast mode [ 107.896887][ T6833] netlink: 'syz.1.313': attribute type 4 has an invalid length. [ 107.900661][ T6833] netlink: 72 bytes leftover after parsing attributes in process `syz.1.313'. [ 107.907590][ T6833] tipc: Enabling of bearer rejected, already enabled [ 107.994555][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 108.269055][ T6862] netlink: 'syz.2.325': attribute type 4 has an invalid length. [ 108.273144][ T6862] netlink: 72 bytes leftover after parsing attributes in process `syz.2.325'. [ 108.280991][ T6862] tipc: Enabling of bearer rejected, already enabled [ 108.562074][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 108.906503][ T6864] block nbd1: server does not support multiple connections per device. [ 108.940011][ T6864] block nbd1: shutting down sockets [ 109.102319][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.175844][ T5752] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 109.328512][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 109.455647][ T6885] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 109.458579][ T6885] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 110.568327][ T6942] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 110.571606][ T6942] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 110.576330][ T6942] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 110.869491][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 111.330739][ T6983] syzkaller1: entered promiscuous mode [ 111.333330][ T6983] syzkaller1: entered allmulticast mode [ 112.332326][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.484172][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.488782][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.492224][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.498922][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.502290][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.506293][ T9] usb 5-1: config 0 descriptor?? [ 112.737891][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 112.741382][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.750928][ T9] usb 5-1: USB disconnect, device number 4 [ 113.314797][ T7034] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 113.463625][ T7037] netlink: 'syz.3.372': attribute type 4 has an invalid length. [ 113.512174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 113.637674][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 113.646230][ T7040] netlink: 100 bytes leftover after parsing attributes in process `syz.3.373'. [ 113.650323][ T7040] netlink: 100 bytes leftover after parsing attributes in process `syz.3.373'. [ 114.444496][ T35] block nbd0: Possible stuck request ffff888027800000: control (read@0,1024B). Runtime 30 seconds [ 114.450748][ T35] block nbd0: Possible stuck request ffff8880278001c0: control (read@1024,1024B). Runtime 30 seconds [ 114.455156][ T35] block nbd0: Possible stuck request ffff888027800380: control (read@2048,1024B). Runtime 30 seconds [ 114.459314][ T35] block nbd0: Possible stuck request ffff888027800540: control (read@3072,1024B). Runtime 30 seconds [ 115.911116][ T40] audit: type=1326 audit(1778774083.405:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 115.920399][ T40] audit: type=1326 audit(1778774083.405:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 115.929679][ T40] audit: type=1326 audit(1778774083.415:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 115.938792][ T40] audit: type=1326 audit(1778774083.415:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 115.948324][ T40] audit: type=1326 audit(1778774083.415:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 115.957765][ T40] audit: type=1326 audit(1778774083.425:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71961ab code=0x7ffc0000 [ 115.966814][ T40] audit: type=1326 audit(1778774083.425:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 115.977067][ T40] audit: type=1326 audit(1778774083.425:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 115.986672][ T40] audit: type=1326 audit(1778774083.425:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 116.154463][ T40] audit: type=1326 audit(1778774083.655:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.2.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 116.626926][ T7095] random: crng reseeded on system resumption [ 116.652964][ T7095] random: crng reseeded on system resumption [ 116.951024][ T7112] binder_alloc: 7111: binder_alloc_buf size 65520 failed, no address space [ 116.956944][ T7112] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 117.207867][ T7117] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 117.247901][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 117.251417][ T7119] netlink: 100 bytes leftover after parsing attributes in process `syz.2.400'. [ 117.254908][ T7119] netlink: 100 bytes leftover after parsing attributes in process `syz.2.400'. [ 117.291644][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 117.296881][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 117.796431][ T7134] loop4: detected capacity change from 0 to 7 [ 117.990311][ T6019] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.006432][ T6019] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.042068][ T6019] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.059420][ T6019] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.079028][ T6019] Buffer I/O error on dev loop4, logical block 0, async page read [ 118.433635][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 118.497893][ T7146] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.502518][ T7146] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.507158][ T7146] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.510153][ T7146] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.517720][ T7146] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.520381][ T7146] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.524023][ T7146] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.526872][ T7146] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.529879][ T7146] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.531962][ T7146] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.817293][ T7151] netlink: 'syz.2.408': attribute type 4 has an invalid length. [ 118.823313][ T7151] netlink: 72 bytes leftover after parsing attributes in process `syz.2.408'. [ 118.832709][ T7151] tipc: Enabling of bearer rejected, already enabled [ 118.943137][ T7147] cgroup: Unknown subsys name 'smackfsfloor' [ 119.528565][ T7172] loop5: detected capacity change from 0 to 7 [ 119.543836][ T7172] Dev loop5: unable to read RDB block 7 [ 119.546858][ T7172] loop5: unable to read partition table [ 119.549889][ T7172] loop5: partition table beyond EOD, truncated [ 119.554562][ T7172] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 119.573435][ T7172] batman_adv: batadv0: Adding interface: gretap1 [ 119.576586][ T7172] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.586980][ T7172] batman_adv: batadv0: Interface activated: gretap1 [ 120.336058][ T7196] netlink: 830 bytes leftover after parsing attributes in process `syz.1.422'. [ 120.392648][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 120.420731][ T7204] binder_alloc: 7203: binder_alloc_buf size 16384 failed, no address space [ 120.426579][ T7204] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 122.467773][ T7242] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 122.588475][ T7247] binder_alloc: 7246: binder_alloc_buf size 61696 failed, no address space [ 122.591847][ T7247] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 123.904659][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 125.728762][ T7277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.730353][ T7284] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 125.771082][ T7285] fuse: Bad value for 'fd' [ 126.017918][ T7295] binder_alloc: 7294: binder_alloc_buf size 65520 failed, no address space [ 126.027079][ T7295] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 126.070093][ T7277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.228703][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 126.253242][ T7277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.351436][ T7311] IPv6: NLM_F_REPLACE set, but no existing node found! [ 126.482024][ T7277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.540694][ T7314] Cannot find set identified by id 0 to match [ 126.636228][ T165] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.645221][ T214] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.653974][ T214] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.661360][ T214] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.006720][ T7335] netlink: 'syz.1.466': attribute type 4 has an invalid length. [ 127.692290][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 127.842280][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 127.845351][ T58] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 127.850028][ T58] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.857192][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.861519][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.866688][ T58] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.872831][ T58] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.876707][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.093073][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.099240][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.106826][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.110184][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.115537][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.119272][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.126563][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.130779][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.135980][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.140044][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.640217][ C1] net_ratelimit: 1990 callbacks suppressed [ 128.640230][ C1] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 128.650289][ T7350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.470'. [ 128.654279][ T7350] No control pipe specified [ 128.746586][ T5848] usb 6-1: USB disconnect, device number 3 [ 128.957526][ T7365] syzkaller1: entered promiscuous mode [ 128.959682][ T7365] syzkaller1: entered allmulticast mode [ 129.088160][ T7369] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 129.092367][ T7369] netlink: 72 bytes leftover after parsing attributes in process `syz.1.477'. [ 129.101420][ T7369] tipc: Enabling of bearer rejected, already enabled [ 129.511909][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 130.022434][ T7395] netlink: 'syz.1.488': attribute type 4 has an invalid length. [ 130.026353][ T7395] netlink: 72 bytes leftover after parsing attributes in process `syz.1.488'. [ 130.035576][ T7395] tipc: Enabling of bearer rejected, already enabled [ 131.256673][ T7404] autofs: Unknown parameter ':G"0jGPΞ4Y8 vS蒖' [ 131.447291][ T7410] binder_alloc: 7408: binder_alloc_buf size 16384 failed, no address space [ 131.451072][ T7410] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 131.509339][ T7415] netlink: 'syz.3.497': attribute type 4 has an invalid length. [ 131.514355][ T7415] netlink: 72 bytes leftover after parsing attributes in process `syz.3.497'. [ 131.521837][ T7415] tipc: Enabling of bearer rejected, already enabled [ 131.592289][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 131.597934][ T7419] binder: 7418:7419 ioctl 4018620d 80000100 returned -16 [ 132.490330][ T7428] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 132.781870][ T7430] netlink: 'syz.2.502': attribute type 4 has an invalid length. [ 133.656262][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.674440][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.678875][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.689090][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.711524][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.463281][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 135.415341][ T7502] syzkaller1: entered promiscuous mode [ 135.415407][ T7502] syzkaller1: entered allmulticast mode [ 135.460152][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.460300][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.460413][ T7456] bridge_slave_0: entered allmulticast mode [ 135.461770][ T7456] bridge_slave_0: entered promiscuous mode [ 135.464674][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.464793][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.464908][ T7456] bridge_slave_1: entered allmulticast mode [ 135.466418][ T7456] bridge_slave_1: entered promiscuous mode [ 135.491102][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.494478][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.518667][ T7456] team0: Port device team_slave_0 added [ 135.524645][ T7456] team0: Port device team_slave_1 added [ 135.555382][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.560016][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.560047][ T7456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.562011][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.580053][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.589361][ T7456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.633515][ T7456] hsr_slave_0: entered promiscuous mode [ 135.636321][ T7456] hsr_slave_1: entered promiscuous mode [ 135.639088][ T7456] debugfs: 'hsr0' already exists in 'hsr' [ 135.640969][ T7456] Cannot create hsr debugfs directory [ 135.740376][ T7456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.745032][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.748279][ T7456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.752405][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.755468][ T7456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.759649][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.763905][ T7456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.768394][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.784043][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.786786][ T7456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.790308][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.794278][ T7456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.794281][ T5752] Bluetooth: hci4: command tx timeout [ 135.828387][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.836852][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.843370][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.858155][ T7456] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.866676][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.870203][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.877966][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.881088][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.013175][ T7523] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 136.188696][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.437281][ T7456] veth0_vlan: entered promiscuous mode [ 136.500272][ T7456] veth1_vlan: entered promiscuous mode [ 136.513899][ T7545] netlink: 'syz.3.521': attribute type 10 has an invalid length. [ 136.561421][ T7456] veth0_macvtap: entered promiscuous mode [ 136.574568][ T7547] netlink: 'syz.3.522': attribute type 4 has an invalid length. [ 136.579137][ T7547] netlink: 72 bytes leftover after parsing attributes in process `syz.3.522'. [ 136.579196][ T7456] veth1_macvtap: entered promiscuous mode [ 136.595031][ T7547] tipc: Enabling of bearer rejected, already enabled [ 136.615565][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.632918][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.661703][ T165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.666235][ T165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.674089][ T165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.680684][ T165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.808159][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.810938][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.885806][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.889040][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.916074][ T7557] bond1: option arp_validate: invalid value (18446744073709551615) [ 136.936227][ T7557] bond1 (unregistering): Released all slaves [ 137.111340][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 137.118544][ T7562] netlink: 100 bytes leftover after parsing attributes in process `syz.3.527'. [ 137.123904][ T7562] netlink: 100 bytes leftover after parsing attributes in process `syz.3.527'. [ 137.272827][ T7567] netlink: 532 bytes leftover after parsing attributes in process `syz.3.528'. [ 137.426893][ T7575] autofs: Unknown parameter 'L|' [ 137.476362][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.478826][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.540035][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 137.671276][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 137.868624][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 137.872264][ T5752] Bluetooth: hci4: command tx timeout [ 137.874805][ T7594] netlink: 100 bytes leftover after parsing attributes in process `syz.3.539'. [ 138.360402][ T7604] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 138.783616][ T7609] syzkaller0: entered promiscuous mode [ 138.785287][ T7609] syzkaller0: entered allmulticast mode [ 139.952263][ T5752] Bluetooth: hci4: command tx timeout [ 140.443210][ T7632] __nla_validate_parse: 2 callbacks suppressed [ 140.443424][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 140.593966][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 141.151995][ T7649] syzkaller1: entered promiscuous mode [ 141.156331][ T7649] syzkaller1: entered allmulticast mode [ 141.436082][ T7664] netlink: 'syz.1.557': attribute type 4 has an invalid length. [ 141.459044][ T7664] netlink: 72 bytes leftover after parsing attributes in process `syz.1.557'. [ 141.482983][ T7664] tipc: Enabling of bearer rejected, already enabled [ 141.702587][ T7676] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 142.032250][ T5752] Bluetooth: hci4: command tx timeout [ 142.222376][ T7695] xt_connbytes: Forcing CT accounting to be enabled [ 142.323446][ T7714] netlink: 'syz.2.568': attribute type 7 has an invalid length. [ 142.325967][ T7714] netlink: 'syz.2.568': attribute type 8 has an invalid length. [ 142.334682][ T7711] bridge0: port 3(erspan0) entered blocking state [ 142.337221][ T7711] bridge0: port 3(erspan0) entered disabled state [ 142.339569][ T7711] erspan0: entered allmulticast mode [ 142.343494][ T7711] erspan0: entered promiscuous mode [ 142.346283][ T7711] bridge0: port 3(erspan0) entered blocking state [ 142.348575][ T7711] bridge0: port 3(erspan0) entered forwarding state [ 142.457067][ T7724] binder_alloc: 7723: binder_alloc_buf size -1080863910568919040 failed, no address space [ 142.460640][ T7724] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 142.475372][ T7731] kvm: user requested TSC rate below hardware speed [ 142.555701][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.576'. [ 142.619426][ T7741] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 142.755789][ T7747] loop2: detected capacity change from 0 to 7 [ 142.762001][ T7747] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 142.763969][ T7747] loop2: partition table partially beyond EOD, truncated [ 142.767885][ T7747] loop2: p1 size 1898597519 extends beyond EOD, truncated [ 143.485893][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 143.607169][ T7763] netlink: 100 bytes leftover after parsing attributes in process `syz.1.585'. [ 143.637037][ T7763] netlink: 100 bytes leftover after parsing attributes in process `syz.1.585'. [ 144.205332][ T7778] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 144.209475][ T7779] netlink: 'syz.2.589': attribute type 4 has an invalid length. [ 144.213179][ T7779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.589'. [ 144.234871][ T7779] tipc: Enabling of bearer rejected, already enabled [ 144.300907][ T7782] binder_alloc: 7781: binder_alloc_buf size -16 failed, no address space [ 144.308878][ T7782] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 144.517487][ T35] block nbd0: Possible stuck request ffff888027800000: control (read@0,1024B). Runtime 60 seconds [ 144.521360][ T35] block nbd0: Possible stuck request ffff8880278001c0: control (read@1024,1024B). Runtime 60 seconds [ 144.528566][ T35] block nbd0: Possible stuck request ffff888027800380: control (read@2048,1024B). Runtime 60 seconds [ 144.532010][ T35] block nbd0: Possible stuck request ffff888027800540: control (read@3072,1024B). Runtime 60 seconds [ 144.537314][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 144.619602][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 144.711431][ T7827] syzkaller1: entered promiscuous mode [ 144.713478][ T7827] syzkaller1: entered allmulticast mode [ 144.907877][ T7850] fuse: Bad value for 'user_id' [ 144.909847][ T7850] fuse: Bad value for 'user_id' [ 145.706065][ T7869] ubi16: attaching mtd0 [ 145.721459][ T7869] ubi16: scanning is finished [ 145.724223][ T7869] ubi16: empty MTD device detected [ 146.135985][ T7869] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 146.138917][ T7869] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 146.141528][ T7869] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 146.151387][ T7869] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 146.168685][ T7869] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 146.172242][ T7869] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 146.176313][ T7869] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2951592572 [ 146.182546][ T7869] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 146.191811][ T7875] ubi16: background thread "ubi_bgt16d" started, PID 7875 [ 146.689908][ T7890] 9p: Bad value for 'rfdno' [ 148.763992][ T7929] netlink: 72 bytes leftover after parsing attributes in process `syz.4.623'. [ 148.765778][ T7929] tipc: Started in network mode [ 148.765800][ T7929] tipc: Node identity ac14140f, cluster identity 4711 [ 148.765949][ T7929] tipc: New replicast peer: 255.255.255.255 [ 148.766349][ T7929] tipc: Enabled bearer , priority 10 [ 148.843207][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.626'. [ 148.920154][ T7941] binder: 7938:7941 ioctl c02064b6 800006c0 returned -22 [ 150.019609][ T7958] netlink: 72 bytes leftover after parsing attributes in process `syz.3.633'. [ 150.032551][ T7958] tipc: Enabling of bearer rejected, already enabled [ 150.245618][ T5834] tipc: Node number set to 2886997007 [ 151.062391][ T7963] netlink: 'syz.1.637': attribute type 2 has an invalid length. [ 151.096678][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.107023][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.118300][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.122901][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.133798][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.163696][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.201439][ T7963] !: entered promiscuous mode [ 151.450255][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.582977][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.686632][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.779579][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.781982][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.784555][ T7966] bridge_slave_0: entered allmulticast mode [ 151.787837][ T7966] bridge_slave_0: entered promiscuous mode [ 151.791311][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.794937][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.797391][ T7966] bridge_slave_1: entered allmulticast mode [ 151.800209][ T7966] bridge_slave_1: entered promiscuous mode [ 151.822735][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.828054][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.845097][ T7966] team0: Port device team_slave_0 added [ 151.848835][ T7966] team0: Port device team_slave_1 added [ 151.943183][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.943224][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.943247][ T7966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.959967][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.959987][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.960009][ T7966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.067421][ T46] bridge_slave_1: left allmulticast mode [ 152.070296][ T46] bridge_slave_1: left promiscuous mode [ 152.073487][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.085521][ T46] bridge_slave_0: left allmulticast mode [ 152.088165][ T46] bridge_slave_0: left promiscuous mode [ 152.090963][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.376947][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.385979][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.389918][ T46] bond0 (unregistering): Released all slaves [ 152.458552][ T8003] fuse: Bad value for 'fd' [ 152.469259][ T7966] hsr_slave_0: entered promiscuous mode [ 152.479032][ T7966] hsr_slave_1: entered promiscuous mode [ 152.481354][ T7966] debugfs: 'hsr0' already exists in 'hsr' [ 152.488280][ T7966] Cannot create hsr debugfs directory [ 152.490690][ T46] tipc: Disabling bearer [ 152.495187][ T46] tipc: Left network mode [ 152.647163][ T8005] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 152.649344][ T8005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 152.686600][ T8005] vhci_hcd vhci_hcd.0: Device attached [ 152.843955][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 152.881584][ T8005] wg2 speed is unknown, defaulting to 1000 [ 152.926185][ T8005] wg2 speed is unknown, defaulting to 1000 [ 152.926538][ T7966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.942394][ T7966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.993969][ T39] usb 42-1: SetAddress Request (2) to port 0 [ 152.997856][ T39] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 153.017348][ T8010] vhci_hcd: connection closed [ 153.018422][ T13] vhci_hcd vhci_hcd.2: stop threads [ 153.024547][ T13] vhci_hcd vhci_hcd.2: release socket [ 153.027519][ T46] hsr_slave_0: left promiscuous mode [ 153.027674][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 153.033265][ T46] hsr_slave_1: left promiscuous mode [ 153.042831][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.046614][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.073176][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.076724][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.115790][ T8028] netlink: 'syz.1.649': attribute type 39 has an invalid length. [ 153.115828][ T8029] netlink: 'syz.1.649': attribute type 39 has an invalid length. [ 153.125664][ T46] veth1_macvtap: left promiscuous mode [ 153.129787][ T46] veth0_macvtap: left promiscuous mode [ 153.131936][ T46] veth1_vlan: left promiscuous mode [ 153.136228][ T46] veth0_vlan: left promiscuous mode [ 153.232309][ T5752] Bluetooth: hci3: command tx timeout [ 153.681956][ T46] team0 (unregistering): Port device team_slave_1 removed [ 153.699797][ T46] team0 (unregistering): Port device team_slave_0 removed [ 153.819231][ T7966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.819817][ T8005] wg2 speed is unknown, defaulting to 1000 [ 153.826441][ T7966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.841398][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 153.849790][ T7966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.858774][ T7966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.865348][ T7966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.872616][ T7966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.037282][ T7966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.085041][ T7966] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.105458][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.108532][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.122956][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.125984][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.180267][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 154.292311][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 154.427244][ T5890] wg2 speed is unknown, defaulting to 1000 [ 154.434706][ T8005] infiniband syz2: set active [ 154.440871][ T8005] infiniband syz2: added wg2 [ 154.451944][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 154.521549][ T8005] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 154.533442][ T7966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.538542][ T8005] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 154.552189][ T8005] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 154.626354][ T8005] RDS/IB: syz2: added [ 154.632951][ T8005] smc: adding ib device syz2 with port count 1 [ 154.642426][ T8005] smc: ib device syz2 port 1 has no pnetid [ 154.647617][ T5834] wg2 speed is unknown, defaulting to 1000 [ 154.716110][ T8005] wg2 speed is unknown, defaulting to 1000 [ 154.747103][ T7966] veth0_vlan: entered promiscuous mode [ 154.753021][ T7966] veth1_vlan: entered promiscuous mode [ 154.766434][ T7966] veth0_macvtap: entered promiscuous mode [ 154.786920][ T7966] veth1_macvtap: entered promiscuous mode [ 154.797074][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.804112][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.811715][ T165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.816354][ T1160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.824167][ T1160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.829650][ T1160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.985822][ T6956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.988618][ T6956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.090138][ T6956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.095658][ T6956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.236654][ T8005] wg2 speed is unknown, defaulting to 1000 [ 155.312377][ T5752] Bluetooth: hci3: command tx timeout [ 155.507436][ T8005] wg2 speed is unknown, defaulting to 1000 [ 155.723834][ T8005] wg2 speed is unknown, defaulting to 1000 [ 155.940710][ T8005] wg2 speed is unknown, defaulting to 1000 [ 156.188236][ T8111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.659'. [ 156.221706][ T8005] wg2 speed is unknown, defaulting to 1000 [ 156.976242][ T8157] overlayfs: failed to resolve 'fsuuid=0aacdc7-dd94-9214-j4b6-7]2b': -2 [ 157.067166][ T8162] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 157.072556][ T8162] netlink: 'syz.1.675': attribute type 2 has an invalid length. [ 157.075321][ T8162] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 157.078313][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'. [ 157.374185][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 157.394349][ T5752] Bluetooth: hci3: command tx timeout [ 157.406117][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 157.439953][ T8172] veth3: entered allmulticast mode [ 157.448484][ T8172] bond1: (slave veth3): Enslaving as an active interface with an up link [ 157.465154][ T8172] bond1 (unregistering): (slave veth3): Releasing backup interface [ 157.470122][ T8172] bond1 (unregistering): Released all slaves [ 157.564625][ T5890] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 157.716389][ T5890] usb 10-1: not running at top speed; connect to a high speed hub [ 157.721104][ T5890] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 157.726583][ T5890] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 157.740511][ T5890] usb 10-1: config 1 interface 0 has no altsetting 0 [ 157.745439][ T5890] usb 10-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.40 [ 157.749522][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.752393][ T5890] usb 10-1: Product: ᔯܘ炠崖坡斟緅ⴢ≃능䢺ᆓ쭚삨뤅ᖜ뽡䀱饘䷄羪珽杄ᛸ갯㢑歶⭋꧊悿鈴☙鯯瘘矧馎ᶦἢ칟Ὧ州鼔拟୬鲜恦櫟岏శꗅ媻躺⊾ [ 157.757986][ T5890] usb 10-1: Manufacturer: 첋㌤帹럷狸齿蛲᭘䗜嵤ೄ妲ꍧꋵᅤ覿샸죄䨲仳땀踙긛᫯춻豮鈌䜽羀前웍⛁썵䎟洯㑏溜➇瓭＄띒摀ꕂ쎹࿂峩牆寨䛼썉焲珶瘊촷槢줢攘泝⨸惍鄓ඟ魂Ôƍ䤢籙苐톑썷簋㈁睰먕䴃ﭑ⍧꓆絙ଙ⚾뀴걉᠊]샦觇械⡸ꞩ붽庭ں䂷 [ 157.776828][ T8170] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 158.032309][ T39] usb 42-1: device descriptor read/8, error -110 [ 158.424491][ T39] usb usb42-port1: attempt power cycle [ 158.663737][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.685'. [ 158.891188][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 158.985943][ T39] usb usb42-port1: unable to enumerate USB device [ 159.472419][ T5752] Bluetooth: hci3: command tx timeout [ 159.853073][ T8222] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 159.855193][ T8222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 159.858694][ T8222] vhci_hcd vhci_hcd.0: Device attached [ 159.871795][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'. [ 160.132265][ T5848] usb 46-1: SetAddress Request (2) to port 0 [ 160.134303][ T5848] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 160.151693][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 160.204813][ T8227] vhci_hcd: connection reset by peer [ 160.208444][ T13] vhci_hcd vhci_hcd.4: stop threads [ 160.214308][ T13] vhci_hcd vhci_hcd.4: release socket [ 160.219041][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 160.248247][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 160.306249][ T8243] fuse: Bad value for 'fd' [ 160.441439][ T5890] usbhid 10-1:1.0: can't add hid device: -71 [ 160.444074][ T5890] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 160.452805][ T5890] usb 10-1: USB disconnect, device number 2 [ 161.286102][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 161.856722][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.719'. [ 161.914431][ T8301] netlink: 72 bytes leftover after parsing attributes in process `syz.1.720'. [ 161.921515][ T8301] tipc: Enabling of bearer rejected, already enabled [ 162.207044][ T8309] wg2 speed is unknown, defaulting to 1000 [ 162.211389][ T8312] netlink: 'syz.4.724': attribute type 4 has an invalid length. [ 162.324795][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 163.108660][ T8337] netlink: 72 bytes leftover after parsing attributes in process `syz.4.731'. [ 163.115892][ T8337] tipc: Enabling of bearer rejected, already enabled [ 163.155369][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 163.159085][ T8339] netlink: 100 bytes leftover after parsing attributes in process `syz.4.732'. [ 163.600302][ T8342] bridge_slave_0: left allmulticast mode [ 163.602635][ T8342] bridge_slave_0: left promiscuous mode [ 163.604999][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.646557][ T8342] bridge_slave_1: left allmulticast mode [ 163.648744][ T8342] bridge_slave_1: left promiscuous mode [ 163.652398][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.671817][ T8342] bond0: (slave bond_slave_0): Releasing backup interface [ 163.695621][ T8342] bond0: (slave bond_slave_1): Releasing backup interface [ 163.723627][ T8342] team0: Port device team_slave_0 removed [ 163.747829][ T8342] team0: Port device team_slave_1 removed [ 163.754136][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.756972][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.774840][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.777667][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.793949][ T8342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.232426][ T5848] usb 46-1: device descriptor read/8, error -110 [ 165.622689][ T5848] usb usb46-port1: attempt power cycle [ 166.183164][ T5848] usb usb46-port1: unable to enumerate USB device [ 167.574766][ T8391] __nla_validate_parse: 1 callbacks suppressed [ 167.574781][ T8391] netlink: 72 bytes leftover after parsing attributes in process `syz.4.740'. [ 167.585055][ T8391] tipc: Enabling of bearer rejected, already enabled [ 169.165087][ T8410] tipc: Enabled bearer , priority 0 [ 169.182991][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 170.980361][ T58] IPVS: starting estimator thread 0... [ 171.072495][ T8444] IPVS: using max 43 ests per chain, 103200 per kthread [ 171.292684][ T8449] ubi: mtd0 is already attached to ubi16 [ 174.727239][ T35] block nbd0: Possible stuck request ffff888027800000: control (read@0,1024B). Runtime 90 seconds [ 174.731235][ T35] block nbd0: Possible stuck request ffff8880278001c0: control (read@1024,1024B). Runtime 90 seconds [ 174.737483][ T35] block nbd0: Possible stuck request ffff888027800380: control (read@2048,1024B). Runtime 90 seconds [ 174.742453][ T35] block nbd0: Possible stuck request ffff888027800540: control (read@3072,1024B). Runtime 90 seconds [ 175.396851][ T8502] tmpfs: Bad value for 'nr_blocks' [ 175.474010][ T8503] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 175.476625][ T8503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.480825][ T8503] vhci_hcd vhci_hcd.0: Device attached [ 175.510293][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 175.696010][ T8513] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 175.765691][ T5834] usb 48-1: SetAddress Request (2) to port 0 [ 175.765934][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'. [ 175.770881][ T5834] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 175.776884][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 175.831485][ T8505] vhci_hcd: connection reset by peer [ 175.847534][ T165] vhci_hcd vhci_hcd.5: stop threads [ 175.851736][ T165] vhci_hcd vhci_hcd.5: release socket [ 175.853581][ T165] vhci_hcd vhci_hcd.5: disconnect device [ 176.190984][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 176.191265][ T40] audit: type=1326 audit(1778774143.685:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.4.785" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f28fcc code=0x0 [ 176.459938][ T40] audit: type=1800 audit(1778774143.955:480): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.786" name="nullb0" dev="tmpfs" ino=1176 res=0 errno=0 [ 177.114017][ T8551] set match dimension is over the limit! [ 177.395734][ T8560] raw_sendmsg: syz.5.790 forgot to set AF_INET. Fix it! [ 177.452782][ T46] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.665634][ T46] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.730023][ T46] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.752803][ T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.866853][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 178.341792][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 178.415138][ T8579] openvswitch: netlink: IP tunnel TTL not specified. [ 178.467471][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 178.471633][ T8581] netlink: 100 bytes leftover after parsing attributes in process `syz.1.796'. [ 178.475603][ T8581] netlink: 100 bytes leftover after parsing attributes in process `syz.1.796'. [ 178.652267][ T5852] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 178.804406][ T5852] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1535, setting to 1024 [ 178.808123][ T5852] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 178.811634][ T5852] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 178.816729][ T5852] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.819887][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.823345][ T5852] usb 7-1: Product: ዸ乼㛸蓚곐衭䙇풼놙Ὄ皎沃퐈鐻ﹰ䆛ꗒ뚿헉擓ὦ濬 [ 178.827913][ T5852] usb 7-1: Manufacturer: 흚悕瑾돡덚辭쫡ૌ鲝괮汔⋫ [ 178.831454][ T5852] usb 7-1: SerialNumber: Р [ 179.038766][ T8579] f2fs: Unknown parameter 'usrquota  ' [ 179.045779][ T8579] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.048299][ T8579] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.333332][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.337899][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.666908][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 180.019362][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 180.020753][ T5852] cdc_ncm 7-1:1.0: bind() failure [ 180.029790][ T5852] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 180.033160][ T5852] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 180.036333][ T5852] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 180.043324][ T5852] usb 7-1: USB disconnect, device number 3 [ 180.071910][ T8625] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 180.079868][ T8626] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 180.109500][ T8626] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 180.117681][ T8626] bond1 (unregistering): Released all slaves [ 180.583137][ T8641] __nla_validate_parse: 4 callbacks suppressed [ 180.583160][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 180.592781][ T8640] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 180.833171][ T5834] usb 48-1: device descriptor read/8, error -110 [ 180.848715][ T8652] overlayfs: missing 'lowerdir' [ 180.995199][ T8655] openvswitch: netlink: Flow actions attr not present in new flow. [ 181.018596][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 181.023135][ T8658] netlink: 100 bytes leftover after parsing attributes in process `syz.4.820'. [ 181.026534][ T8658] netlink: 100 bytes leftover after parsing attributes in process `syz.4.820'. [ 181.070448][ T8655] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 181.073842][ T8660] wg2 speed is unknown, defaulting to 1000 [ 181.079218][ T8655] overlayfs: overlapping lowerdir path [ 181.169147][ T8661] netlink: 'syz.4.821': attribute type 4 has an invalid length. [ 181.242735][ T5834] usb usb48-port1: attempt power cycle [ 181.411306][ T8664] team0: Mode changed to "activebackup" [ 181.480605][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 181.746539][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 181.900267][ T8679] netlink: 100 bytes leftover after parsing attributes in process `syz.4.829'. [ 181.914117][ T8679] netlink: 100 bytes leftover after parsing attributes in process `syz.4.829'. [ 181.933181][ T5834] usb usb48-port1: unable to enumerate USB device [ 182.418871][ T8701] wg2 speed is unknown, defaulting to 1000 [ 182.438531][ T8707] netlink: 'syz.1.834': attribute type 4 has an invalid length. [ 182.514147][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.836'. [ 182.538867][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.827'. [ 184.729810][ T8784] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 185.008223][ T8787] Set syz0 is full, maxelem 0 reached [ 185.632680][ T5750] Bluetooth: hci1: command 0x0406 tx timeout [ 185.813237][ T8831] IPv6: sit1: Disabled Multicast RS [ 185.816615][ T8831] sit1: entered allmulticast mode [ 185.853536][ T8831] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.877' sets config #1 [ 186.149751][ T8839] 9pnet_fd: Insufficient options for proto=fd [ 186.228322][ T8841] __nla_validate_parse: 11 callbacks suppressed [ 186.228344][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 186.228850][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 186.444078][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 186.504930][ T8856] wg2 speed is unknown, defaulting to 1000 [ 186.585057][ T8858] netlink: 'syz.1.888': attribute type 4 has an invalid length. [ 187.920195][ T8862] hub 9-0:1.0: USB hub found [ 187.936550][ T8862] hub 9-0:1.0: 1 port detected [ 188.590384][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.893'. [ 190.636220][ T8890] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 190.650077][ T8890] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.992661][ T8897] overlayfs: failed to clone upperpath [ 191.257359][ T8890] wg2 speed is unknown, defaulting to 1000 [ 192.254814][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 192.268273][ T8925] netlink: 100 bytes leftover after parsing attributes in process `syz.4.906'. [ 192.280936][ T8925] netlink: 100 bytes leftover after parsing attributes in process `syz.4.906'. [ 192.311428][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 192.506462][ T8936] netlink: 'syz.5.901': attribute type 10 has an invalid length. [ 192.530980][ T8936] team0: Port device dummy0 added [ 192.541154][ T5752] Bluetooth: hci4: hardware error 0x00 [ 192.541630][ T8936] netlink: 'syz.5.901': attribute type 10 has an invalid length. [ 192.612965][ T8936] team0: Port device dummy0 removed [ 193.014734][ T8936] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 194.345125][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 194.526708][ T8947] mmap: syz.4.914 (8947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.594622][ T5752] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 195.017233][ T8955] wg2 speed is unknown, defaulting to 1000 [ 195.072465][ T8958] netlink: 'syz.4.918': attribute type 4 has an invalid length. [ 195.667738][ T8976] ptrace attach of "/syz-executor exec"[8977] was attempted by "/syz-executor exec"[8976] [ 195.782981][ T8981] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 196.229054][ T8990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 196.430970][ T8990] can0: slcan on ttyS3. [ 196.851084][ T8991] can0 (unregistered): slcan off ttyS3. [ 197.849391][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 197.955758][ T40] audit: type=1326 audit(1778774165.435:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 197.977515][ T40] audit: type=1326 audit(1778774165.445:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 197.996524][ T40] audit: type=1326 audit(1778774165.465:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 198.022306][ T40] audit: type=1326 audit(1778774165.465:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 198.063725][ T40] audit: type=1326 audit(1778774165.465:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 198.081032][ T40] audit: type=1326 audit(1778774165.465:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 198.109095][ T40] audit: type=1326 audit(1778774165.475:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 198.119355][ T40] audit: type=1326 audit(1778774165.525:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 198.140542][ T40] audit: type=1326 audit(1778774165.525:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 198.178611][ T40] audit: type=1326 audit(1778774165.525:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.932" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f28fcc code=0x7ffc0000 [ 198.230658][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 198.234980][ T9039] netlink: 100 bytes leftover after parsing attributes in process `syz.1.936'. [ 198.238401][ T9039] netlink: 100 bytes leftover after parsing attributes in process `syz.1.936'. [ 198.364820][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 198.488850][ T9054] fuse: Unknown parameter 'fd0x0000000000000005' [ 198.673178][ T9064] wg2 speed is unknown, defaulting to 1000 [ 198.709998][ T9065] netlink: 'syz.1.945': attribute type 4 has an invalid length. [ 198.874599][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 198.878942][ T9068] netlink: 100 bytes leftover after parsing attributes in process `syz.1.946'. [ 198.892322][ T9068] netlink: 100 bytes leftover after parsing attributes in process `syz.1.946'. [ 198.923384][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.925678][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.260428][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.947'. [ 199.265166][ T9070] netlink: 116 bytes leftover after parsing attributes in process `syz.1.947'. [ 199.340561][ T9074] syz.1.947 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.490445][ T9078] netlink: 'syz.1.949': attribute type 4 has an invalid length. [ 199.618124][ T9086] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 199.700919][ T9096] wg2 speed is unknown, defaulting to 1000 [ 199.741322][ T9099] netlink: 'syz.5.956': attribute type 4 has an invalid length. [ 202.119093][ T9126] syz.4.963 (9126) used greatest stack depth: 18968 bytes left [ 202.675837][ T9136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.816236][ T9158] netlink: 'syz.1.973': attribute type 1 has an invalid length. [ 205.035452][ T9167] netlink: 'syz.1.976': attribute type 39 has an invalid length. [ 205.313678][ T35] block nbd0: Possible stuck request ffff888027800000: control (read@0,1024B). Runtime 120 seconds [ 205.317629][ T35] block nbd0: Possible stuck request ffff8880278001c0: control (read@1024,1024B). Runtime 120 seconds [ 205.321671][ T35] block nbd0: Possible stuck request ffff888027800380: control (read@2048,1024B). Runtime 120 seconds [ 205.328041][ T35] block nbd0: Possible stuck request ffff888027800540: control (read@3072,1024B). Runtime 120 seconds [ 205.386704][ T9170] syz_tun: entered allmulticast mode [ 205.454295][ T9173] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 205.993181][ T9191] openvswitch: netlink: IP tunnel dst address not specified [ 206.232423][ T9193] block nbd1: server does not support multiple connections per device. [ 206.237173][ T9193] block nbd1: shutting down sockets [ 206.298818][ T9196] wg2 speed is unknown, defaulting to 1000 [ 206.340028][ T9197] netlink: 'syz.4.984': attribute type 4 has an invalid length. [ 207.143310][ T9225] fuse: Unknown parameter '' [ 207.304816][ T9233] /dev/nullb0: Can't open blockdev [ 207.798289][ T9218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.802074][ T9218] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 207.810135][ T9218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.812177][ T9218] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 207.821971][ T9218] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 208.665007][ T5890] IPVS: starting estimator thread 0... [ 208.762246][ T9243] IPVS: using max 42 ests per chain, 100800 per kthread [ 209.381364][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 209.381378][ T40] audit: type=1326 audit(1778774176.875:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.1.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 209.394136][ T5752] Bluetooth: hci1: command 0x0406 tx timeout [ 209.397212][ T40] audit: type=1326 audit(1778774176.895:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.1.996" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 209.406982][ T40] audit: type=1326 audit(1778774176.895:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.1.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 209.416729][ T40] audit: type=1326 audit(1778774176.895:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.1.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 209.430061][ T40] audit: type=1326 audit(1778774176.895:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.1.996" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 209.526323][ T9249] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 209.836925][ T9258] __nla_validate_parse: 4 callbacks suppressed [ 209.836948][ T9258] netlink: 28 bytes leftover after parsing attributes in process `syz.5.995'. [ 209.851052][ T9249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.872351][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.925338][ T40] audit: type=1326 audit(1778774177.425:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.1.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 209.940100][ T40] audit: type=1326 audit(1778774177.425:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.1.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7ffc0000 [ 209.985960][ T9266] vlan2: entered allmulticast mode [ 209.988079][ T9266] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 209.995836][ T9266] bridge0: port 3(vlan2) entered blocking state [ 209.998850][ T9266] bridge0: port 3(vlan2) entered disabled state [ 210.003761][ T9266] vlan2: entered promiscuous mode [ 210.005993][ T9266] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 210.010336][ T9266] bridge0: port 3(vlan2) entered blocking state [ 210.016178][ T9266] bridge0: port 3(vlan2) entered forwarding state [ 210.063243][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 210.070629][ T9271] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1002'. [ 210.076672][ T40] audit: type=1326 audit(1778774177.575:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.5.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 210.077148][ T9271] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1002'. [ 210.091430][ T40] audit: type=1326 audit(1778774177.575:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.5.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 210.102686][ T40] audit: type=1326 audit(1778774177.595:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9272 comm="syz.5.1003" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 210.103020][ T9273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.129361][ T9275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.482525][ T5752] Bluetooth: hci1: command 0x0406 tx timeout [ 211.573861][ C1] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 211.578161][ C1] sr 2:0:0:0: [sr0] tag#18 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 212.002285][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 212.583873][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 212.587773][ T9308] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1012'. [ 212.602219][ T9308] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1012'. [ 212.909142][ T9319] ipip0: entered allmulticast mode [ 212.915491][ T9319] overlayfs: failed to clone upperpath [ 213.458489][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 213.476075][ T58] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 213.485903][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.497332][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.510984][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.512434][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.512458][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.512477][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.512496][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.512514][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.512534][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 213.547398][ T58] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 213.749522][ T9336] fido_id[9336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.801148][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 213.805732][ T9338] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1021'. [ 213.808851][ T9338] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1021'. [ 214.042312][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 215.496868][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 215.496882][ T40] audit: type=1326 audit(1778774182.995:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.514222][ T40] audit: type=1326 audit(1778774183.005:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.531056][ T40] audit: type=1326 audit(1778774183.005:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.542066][ T40] audit: type=1326 audit(1778774183.005:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.549922][ T40] audit: type=1326 audit(1778774183.005:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.558861][ T40] audit: type=1326 audit(1778774183.025:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.566650][ T40] audit: type=1326 audit(1778774183.025:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.575650][ T40] audit: type=1326 audit(1778774183.025:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.584196][ T40] audit: type=1326 audit(1778774183.025:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.593250][ T40] audit: type=1326 audit(1778774183.025:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 215.674981][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 215.679213][ T9362] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1030'. [ 215.683580][ T9362] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1030'. [ 215.943751][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 216.479370][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 216.487143][ T9385] fuse: Bad value for 'fd' [ 216.613843][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'. [ 216.692612][ T9399] netlink: 'syz.2.1039': attribute type 4 has an invalid length. [ 216.701940][ T9400] loop9: detected capacity change from 0 to 7 [ 216.712609][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728117][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728189][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728236][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728291][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728346][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728394][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728432][ T9400] ldm_validate_partition_table(): Disk read failed. [ 216.728456][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728502][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728555][ T9400] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.728625][ T9400] Dev loop9: unable to read RDB block 0 [ 216.781067][ T9399] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 216.825585][ T9400] loop9: unable to read partition table [ 216.827644][ T9400] loop9: partition table beyond EOD, truncated [ 216.832227][ T9400] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 217.887587][ T9413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.912203][ T9413] block device autoloading is deprecated and will be removed. [ 217.960577][ T9412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.984276][ T9412] block device autoloading is deprecated and will be removed. [ 218.084776][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 218.107889][ T9416] veth0_macvtap: left promiscuous mode [ 218.519574][ T9425] netlink: 'syz.5.1046': attribute type 10 has an invalid length. [ 218.522896][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1046'. [ 218.537204][ T9425] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1046'. [ 218.917949][ T9433] wg2 speed is unknown, defaulting to 1000 [ 219.623541][ T9441] syzkaller0: entered promiscuous mode [ 219.627681][ T9441] syzkaller0: entered allmulticast mode [ 219.637540][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.644257][ T9441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.788835][ T9449] /dev/sg0: Can't lookup blockdev [ 219.980757][ T9453] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1053'. [ 219.987971][ T9453] openvswitch: netlink: Actions may not be safe on all matching packets [ 220.319077][ T9466] wg2 speed is unknown, defaulting to 1000 [ 220.347705][ T9467] netlink: 'syz.1.1058': attribute type 4 has an invalid length. [ 221.278215][ T9495] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 221.292269][ T9485] bridge_slave_0: left allmulticast mode [ 221.299261][ T9485] bridge_slave_0: left promiscuous mode [ 221.326961][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.371098][ T9485] bridge_slave_1: left allmulticast mode [ 221.373409][ T9485] bridge_slave_1: left promiscuous mode [ 221.376168][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.412051][ T9485] bond0: (slave bond_slave_0): Releasing backup interface [ 221.429232][ T9485] bond0: (slave bond_slave_1): Releasing backup interface [ 221.526973][ T9485] team0: Port device team_slave_0 removed [ 221.605747][ T9485] team0: Port device team_slave_1 removed [ 221.625326][ T9485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.644094][ T9485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.670086][ T9485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.689773][ T9485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.717333][ T9485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.786971][ T9495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.796138][ T29] wg2 speed is unknown, defaulting to 1000 [ 221.844270][ T9496] veth5: entered allmulticast mode [ 222.608516][ T9521] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 222.727408][ T9525] __nla_validate_parse: 4 callbacks suppressed [ 222.727429][ T9525] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1075'. [ 223.139326][ T9533] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1077'. [ 223.602293][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 223.773740][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 223.778875][ T53] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 223.784916][ T53] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 223.789866][ T53] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 223.798027][ T53] usb 7-1: config 250 has no interface number 0 [ 223.800781][ T53] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 223.809139][ T53] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 223.813678][ T53] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.817702][ T53] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 223.822068][ T53] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 223.827872][ T53] usb 7-1: config 250 interface 228 has no altsetting 0 [ 223.832795][ T53] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 223.836639][ T53] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 223.839782][ T53] usb 7-1: Product: syz [ 223.841526][ T53] usb 7-1: SerialNumber: syz [ 223.850087][ T53] hub 7-1:250.228: bad descriptor, ignoring hub [ 223.854475][ T53] hub 7-1:250.228: probe with driver hub failed with error -5 [ 224.062683][ T53] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 224.350851][ T53] libceph: connect (1)[c::]:6789 error -22 [ 224.356442][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 224.448841][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 224.448862][ T40] audit: type=1326 audit(1778774191.935:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.460063][ T40] audit: type=1326 audit(1778774191.935:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.479793][ T40] audit: type=1326 audit(1778774191.935:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.492033][ T40] audit: type=1326 audit(1778774191.935:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.501464][ T40] audit: type=1326 audit(1778774191.935:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.510359][ T40] audit: type=1326 audit(1778774191.945:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.530238][ T40] audit: type=1326 audit(1778774191.945:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.546796][ T40] audit: type=1326 audit(1778774191.945:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.556202][ T40] audit: type=1326 audit(1778774191.945:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.624379][ T53] libceph: connect (1)[c::]:6789 error -22 [ 224.634518][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 224.674985][ T40] audit: type=1326 audit(1778774192.175:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.1078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efcc code=0x7ffc0000 [ 224.982666][ T9549] ceph: No mds server is up or the cluster is laggy [ 225.228711][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1086'. [ 225.815788][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1095'. [ 225.956287][ T9603] evm: overlay not supported [ 226.310393][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1101'. [ 226.802713][ T58] usb 7-1: USB disconnect, device number 4 [ 226.818764][ T58] usblp0: removed [ 227.006791][ T9622] binder: 9620:9622 ioctl c0285840 80000000 returned -22 [ 228.443095][ T9637] gtp0: entered allmulticast mode [ 229.492251][ T39] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 229.497010][ T9674] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 229.505581][ T9675] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 229.524663][ T9674] bond3: entered promiscuous mode [ 229.531750][ T9674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.548161][ T9674] bond3: (slave bridge1): making interface the new active one [ 229.551431][ T9674] bridge1: entered promiscuous mode [ 229.557530][ T9674] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 229.652348][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 229.659394][ T39] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 229.662592][ T39] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.665793][ T39] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.669081][ T39] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.672339][ T39] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.677693][ T39] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.680651][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.889369][ T39] usb 10-1: GET_CAPABILITIES returned 0 [ 229.898120][ T39] usbtmc 10-1:16.0: can't read capabilities [ 230.093780][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1114'. [ 230.176835][ T5430] usb 10-1: USB disconnect, device number 3 [ 231.343872][ T9699] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 231.350148][ T9699] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 231.357555][ T9699] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 231.371299][ T9699] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 231.405219][ T9699] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 232.775460][ T9716] fuse: Bad value for 'fd' [ 232.964977][ T9717] kAFS: No cell specified [ 233.778881][ T9732] wg2 speed is unknown, defaulting to 1000 [ 233.800384][ T9733] netlink: 'syz.2.1134': attribute type 4 has an invalid length. [ 234.827994][ T9751] ip6tnl2: entered promiscuous mode [ 234.830450][ T9751] ip6tnl2: entered allmulticast mode [ 235.040993][ T9753] ptrace attach of "/syz-executor exec"[9756] was attempted by "/syz-executor exec"[9753] [ 235.401256][ T35] block nbd0: Possible stuck request ffff888027800000: control (read@0,1024B). Runtime 150 seconds [ 235.405375][ T35] block nbd0: Possible stuck request ffff8880278001c0: control (read@1024,1024B). Runtime 150 seconds [ 235.408962][ T35] block nbd0: Possible stuck request ffff888027800380: control (read@2048,1024B). Runtime 150 seconds [ 235.413151][ T35] block nbd0: Possible stuck request ffff888027800540: control (read@3072,1024B). Runtime 150 seconds [ 235.424227][ T9760] netlink: 'syz.5.1140': attribute type 3 has an invalid length. [ 235.427552][ T9760] netlink: 16066 bytes leftover after parsing attributes in process `syz.5.1140'. [ 235.672576][ T5890] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 236.291790][ T9773] wg2 speed is unknown, defaulting to 1000 [ 236.334413][ T9774] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 236.806510][ T5890] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.809265][ T5890] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.812432][ T5890] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.815122][ T5890] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 236.818797][ T5890] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 236.823964][ T5890] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.826781][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.829188][ T5890] usb 10-1: Product: syz [ 236.830512][ T5890] usb 10-1: Manufacturer: syz [ 236.836700][ T9760] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 236.846170][ T5890] cdc_wdm 10-1:1.0: skipping garbage [ 236.847953][ T5890] cdc_wdm 10-1:1.0: skipping garbage [ 236.852080][ T5890] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 236.854071][ T5890] cdc_wdm 10-1:1.0: Unknown control protocol [ 237.278583][ T9760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.284062][ T9760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.289602][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1140'. [ 237.299920][ T39] usb 10-1: USB disconnect, device number 4 [ 237.332869][ T9795] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 237.346793][ T9795] CIFS mount error: No usable UNC path provided in device string! [ 237.346793][ T9795] [ 237.351250][ T9795] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 238.631632][ T9824] 9pnet_virtio: no channels available for device syz [ 239.056136][ T9837] ref_ctr_offset mismatch. inode: 0x208 offset: 0x0 ref_ctr_offset(old): 0x2f38d380e8 ref_ctr_offset(new): 0x0 [ 239.243906][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 239.806644][ T9869] netlink: 'syz.5.1164': attribute type 1 has an invalid length. [ 239.810027][ T9869] netlink: 'syz.5.1164': attribute type 3 has an invalid length. [ 239.813187][ T9869] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1164'. [ 240.193702][ T9878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.196475][ T9878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.272632][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.272787][ T5750] Bluetooth: hci1: command 0x0406 tx timeout [ 243.263230][ T5151] udevd[5151]: worker [6015] /devices/virtual/block/nbd0 is taking a long time [ 249.847482][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 249.869369][ T9897] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1169'. [ 249.869397][ T5752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.873326][ T9897] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1169'. [ 249.883082][ T5752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.889018][ T5752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.901442][ T5752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.906364][ T5752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.116378][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 250.258084][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1173'. [ 250.399849][ T9896] wg2 speed is unknown, defaulting to 1000 [ 250.959653][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.970617][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.974059][ T9896] bridge_slave_0: entered allmulticast mode [ 250.978268][ T9896] bridge_slave_0: entered promiscuous mode [ 250.983959][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.987997][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.991528][ T9896] bridge_slave_1: entered allmulticast mode [ 250.998143][ T9896] bridge_slave_1: entered promiscuous mode [ 251.033430][ T9896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.041610][ T9896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.074208][ T9896] team0: Port device team_slave_0 added [ 251.079803][ T9896] team0: Port device team_slave_1 added [ 251.106081][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.109114][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.122572][ T9896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.129720][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.133379][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.146743][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.190798][ T9896] hsr_slave_0: entered promiscuous mode [ 251.194386][ T9896] hsr_slave_1: entered promiscuous mode [ 251.302511][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.318142][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.502510][ T9896] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.508599][ T9896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.511998][ T9896] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.517709][ T9896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.520655][ T9896] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.528494][ T9896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.531431][ T9896] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.540102][ T9896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.542644][ T5430] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 251.588119][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.591115][ T9896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.594460][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.597393][ T9896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.648204][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.661752][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.666262][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.673813][ T9896] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.685072][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.687488][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.696228][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.698708][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.703397][ T5430] usb 7-1: Using ep0 maxpacket: 16 [ 251.710457][ T5430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.714071][ T5430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.717190][ T5430] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 251.721272][ T5430] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 251.725406][ T5430] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.734730][ T5430] usb 7-1: config 0 descriptor?? [ 251.944495][ T5430] usbhid 7-1:0.0: can't add hid device: -71 [ 251.951360][ T5430] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 251.952388][ T5752] Bluetooth: hci5: command tx timeout [ 251.963248][ T5430] usb 7-1: USB disconnect, device number 6 [ 252.038316][ T9896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.254076][ T9896] veth0_vlan: entered promiscuous mode [ 252.259872][ T9896] veth1_vlan: entered promiscuous mode [ 252.291459][ T9896] veth0_macvtap: entered promiscuous mode [ 252.299406][ T9896] veth1_macvtap: entered promiscuous mode [ 252.316050][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.328042][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.341803][ T226] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.359044][ T226] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.366005][ T226] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.371794][ T226] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.486458][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.499258][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.576816][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.580692][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.660705][ T9991] nbd: illegal input index 2958377 [ 253.583656][ T40] kauditd_printk_skb: 244 callbacks suppressed [ 253.583683][ T40] audit: type=1326 audit(1778774221.085:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.1.1191" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefcc code=0x7fc00000 [ 253.859604][T10040] wg2 speed is unknown, defaulting to 1000 [ 253.952591][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 254.032360][ T5752] Bluetooth: hci5: command tx timeout [ 255.171692][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1203'. [ 255.451812][T10067] loop5: detected capacity change from 0 to 7 [ 255.459254][T10067] Dev loop5: unable to read RDB block 7 [ 255.461205][T10067] loop5: unable to read partition table [ 255.463858][T10067] loop5: partition table beyond EOD, truncated [ 255.466445][T10067] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 255.471499][T10067] binder: 10066:10067 ioctl c0285840 80000000 returned -22 [ 255.547567][ T5151] Dev loop5: unable to read RDB block 7 [ 255.552688][ T5151] loop5: unable to read partition table [ 255.557106][ T5151] loop5: partition table beyond EOD, truncated [ 255.614055][T10072] kvm: emulating exchange as write [ 255.657746][ T5151] Dev loop5: unable to read RDB block 7 [ 255.661613][ T5151] loop5: unable to read partition table [ 255.663739][ T5151] loop5: partition table beyond EOD, truncated [ 255.708301][ T5151] Dev loop5: unable to read RDB block 7 [ 255.710291][ T5151] loop5: unable to read partition table [ 255.714169][ T5151] loop5: partition table beyond EOD, truncated [ 255.775712][ T5151] Dev loop5: unable to read RDB block 7 [ 255.777943][ T5151] loop5: unable to read partition table [ 255.780100][ T5151] loop5: partition table beyond EOD, truncated [ 255.801385][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1214'. [ 255.917629][ T5151] Dev loop5: unable to read RDB block 7 [ 255.919434][ T5151] loop5: unable to read partition table [ 255.921307][ T5151] loop5: partition table beyond EOD, truncated [ 255.954775][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1216'. [ 255.959161][T10094] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1216'. [ 255.962462][T10094] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1216'. [ 255.983104][ T5151] Dev loop5: unable to read RDB block 7 [ 255.985755][ T5151] loop5: unable to read partition table [ 255.988120][ T5151] loop5: partition table beyond EOD, truncated [ 255.996755][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.092155][ T5151] Dev loop5: unable to read RDB block 7 [ 256.094304][ T5151] loop5: unable to read partition table [ 256.096893][ T5151] loop5: partition table beyond EOD, truncated [ 256.124162][ T5752] Bluetooth: hci5: command tx timeout [ 256.653470][T10115] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 256.655749][T10115] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 256.673648][T10115] vhci_hcd vhci_hcd.0: Device attached [ 256.952307][ T5848] usb 48-1: SetAddress Request (6) to port 0 [ 256.966406][ T5848] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 257.136117][T10132] netlink: 'syz.6.1226': attribute type 10 has an invalid length. [ 257.236365][T10136] netlink: 'syz.6.1226': attribute type 10 has an invalid length. [ 257.276224][T10132] team0: Port device dummy0 added [ 257.407258][T10136] team0: Port device dummy0 removed [ 257.440999][T10136] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 257.444491][T10116] vhci_hcd: connection reset by peer [ 257.450644][ T6957] vhci_hcd vhci_hcd.5: stop threads [ 257.452415][ T6957] vhci_hcd vhci_hcd.5: release socket [ 257.457134][ T6957] vhci_hcd vhci_hcd.5: disconnect device [ 258.193890][ T5752] Bluetooth: hci5: command tx timeout [ 258.599274][T10176] overlay: ./bus is not a directory [ 260.383808][ T5752] Bluetooth: hci5: command tx timeout [ 260.384621][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.391396][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.432362][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.483110][T10200] pimreg: entered allmulticast mode [ 261.172316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 261.635800][T10207] smc: removing ib device syz2 [ 261.659188][T10208] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN NOPTI [ 261.663300][T10208] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 261.667060][T10208] CPU: 3 UID: 0 PID: 10208 Comm: syz.5.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.668019][T10207] smbdirect: ib_dev[syz2] removed [ 261.671412][T10208] Tainted: [L]=SOFTLOCKUP [ 261.671423][T10208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.671437][T10208] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 261.679637][T10208] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 33 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d 7c 24 68 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 1a 49 8b 44 24 68 89 ee 48 89 df 5b 5d 41 5c e9 d2 [ 261.685706][T10208] RSP: 0000:ffffc9000d627170 EFLAGS: 00010202 [ 261.687957][T10208] RAX: dffffc0000000000 RBX: ffff88801b6dec40 RCX: 0000000000000000 [ 261.690501][T10208] RDX: 000000000000000d RSI: ffffffff8952e692 RDI: 0000000000000068 [ 261.692927][T10208] RBP: 0000000000000002 R08: 0000000000000001 R09: ffffed10027464a5 [ 261.695446][T10208] R10: ffff888013a3252b R11: 0000000000000000 R12: 0000000000000000 [ 261.697968][T10208] R13: ffff88804cdfcd80 R14: 0000000000000002 R15: 0000000000000018 [ 261.700668][T10208] FS: 0000000000000000(0000) GS:ffff888097477000(0063) knlGS:00000000f5442b40 [ 261.704403][T10208] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 261.706768][T10208] CR2: 0000000080002000 CR3: 0000000070a2c000 CR4: 0000000000352ef0 [ 261.709394][T10208] Call Trace: [ 261.710515][T10208] [ 261.711505][T10208] ? __pfx_rxe_ns_pernet_set_sk4+0x10/0x10 [ 261.713500][T10208] udp_tunnel_sock_release+0x68/0x80 [ 261.715201][T10208] rxe_sock_put+0xae/0x130 [ 261.716718][T10208] ? __pfx_rxe_dellink+0x10/0x10 [ 261.718386][T10208] rxe_net_del+0x83/0x120 [ 261.719940][T10208] rxe_dellink+0x15/0x20 [ 261.721554][T10208] nldev_dellink+0x289/0x3c0 [ 261.723146][T10208] ? __pfx_nldev_dellink+0x10/0x10 [ 261.724790][T10208] ? rcu_is_watching+0x12/0xc0 [ 261.726468][T10208] ? apparmor_capable+0x1d7/0x4d0 [ 261.728233][T10208] ? bpf_lsm_capable+0x9/0x10 [ 261.729706][T10208] ? security_capable+0x80/0x260 [ 261.731300][T10208] ? ns_capable+0xd2/0xf0 [ 261.732753][T10208] ? __pfx_nldev_dellink+0x10/0x10 [ 261.734392][T10208] rdma_nl_rcv_msg+0x392/0x6f0 [ 261.736073][T10208] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 261.737959][T10208] ? __lock_acquire+0x4a5/0x2630 [ 261.739749][T10208] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 261.741877][T10208] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 261.744634][T10208] ? netlink_deliver_tap+0x1ae/0xcc0 [ 261.746635][T10208] netlink_unicast+0x585/0x850 [ 261.748523][T10208] ? __pfx_netlink_unicast+0x10/0x10 [ 261.750437][T10208] netlink_sendmsg+0x8b0/0xda0 [ 261.751972][T10208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.753730][T10208] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 261.755792][T10208] ____sys_sendmsg+0x9e1/0xb70 [ 261.757586][T10208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.759570][T10208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.761491][T10208] ? __pfx___futex_wait+0x10/0x10 [ 261.763192][T10208] ? __pfx_futex_wake_mark+0x10/0x10 [ 261.764875][T10208] ___sys_sendmsg+0x190/0x1e0 [ 261.766646][T10208] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.768391][T10208] ? find_held_lock+0x2b/0x80 [ 261.770076][T10208] __sys_sendmsg+0x170/0x220 [ 261.771678][T10208] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.773363][T10208] ? rcu_is_watching+0x12/0xc0 [ 261.774962][T10208] __do_fast_syscall_32+0xe7/0x950 [ 261.776736][T10208] do_fast_syscall_32+0x32/0x70 [ 261.778342][T10208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.780524][T10208] RIP: 0023:0xf7fc5fcc [ 261.781836][T10208] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 261.789521][T10208] RSP: 002b:00000000f544250c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 261.792113][T10208] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800002c0 [ 261.794703][T10208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.797448][T10208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.800028][T10208] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 261.802408][T10208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.804783][T10208] [ 261.805822][T10208] Modules linked in: [ 261.807863][T10208] ---[ end trace 0000000000000000 ]--- [ 261.817014][T10208] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 261.819367][T10208] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 33 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d 7c 24 68 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 1a 49 8b 44 24 68 89 ee 48 89 df 5b 5d 41 5c e9 d2 [ 261.841912][T10208] RSP: 0000:ffffc9000d627170 EFLAGS: 00010202 [ 261.845248][T10208] RAX: dffffc0000000000 RBX: ffff88801b6dec40 RCX: 0000000000000000 [ 261.848496][T10208] RDX: 000000000000000d RSI: ffffffff8952e692 RDI: 0000000000000068 [ 261.851980][T10208] RBP: 0000000000000002 R08: 0000000000000001 R09: ffffed10027464a5 [ 261.855804][T10208] R10: ffff888013a3252b R11: 0000000000000000 R12: 0000000000000000 [ 261.859400][T10208] R13: ffff88804cdfcd80 R14: 0000000000000002 R15: 0000000000000018 [ 261.863822][T10208] FS: 0000000000000000(0000) GS:ffff888097477000(0063) knlGS:00000000f5442b40 [ 261.867656][T10208] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 261.870524][T10208] CR2: 0000000080002000 CR3: 0000000070a2c000 CR4: 0000000000352ef0 [ 261.874639][T10208] Kernel panic - not syncing: Fatal exception [ 261.878330][T10208] Kernel Offset: disabled [ 261.880253][T10208] Rebooting in 86400 seconds..