last executing test programs: 19m32.726818159s ago: executing program 3 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m28.38360475s ago: executing program 3 (id=469): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980903, 0x3, @value=0x140000000000}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000000000)="c7", 0x1, 0x24048880, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x822, &(0x7f00000000c0)={0x0, 0xbdbb, 0x10, 0x1, 0x34f}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) 19m24.400645597s ago: executing program 3 (id=477): r0 = socket$inet6(0xa, 0x4, 0x57) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0xc, 0xffffffff, 0x0, 0x1040, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') mq_open(0x0, 0x40, 0x40, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet6(r0, 0x0, 0x0, 0x2040, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @loopback, 0x3}, 0x1c) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/51, 0x1a, 0x33, 0x0, 0x24c, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000140)="aa", &(0x7f0000000000)=@tcp6=r5}, 0x20) 19m19.227501872s ago: executing program 3 (id=483): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4804) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = io_uring_setup(0x2c49, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x2, 0x9, {{0x5, 0x4, 0x2, 0x2e, 0x14, 0x66, 0x0, 0xf5, 0x4, 0x0, @private=0xa010102, @local}}}}) userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, 0x0, 0x0, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) creat(0x0, 0x100) io_setup(0x3, &(0x7f0000000200)) 19m13.523074551s ago: executing program 3 (id=488): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000006100)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0xa0, 0x8, 0x5, 0x8fe2, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x10, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x62, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760", 0x0, 0x8000}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6400000006"], 0x8c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, 0x0, 0x480c4) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000100)=""/217, &(0x7f0000000200)=0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x40004) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r9, 0x80049363, &(0x7f00000003c0)) 19m10.742061291s ago: executing program 3 (id=491): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x358, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9197}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd88}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x671}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf1, 0x3, "f49fdacfe26111a8eaac198c70091afb2ac6089d1625a4e44327635b777f1e63531b770f88b17221e19073129cf4afd598cf0801731cb567c81435d020d012c5a60de1c5f75622d625e425413b4b8a63d1d84698cccce4acd678988ae47fbf466a5edc3cbebb2516b0a70261c8c0a70181ba6cd30d0fe0dae3ddc8b874a5555a8872753407674e50a95746439475597da28334283cf68e6620452ce698314bbf9bf027cdb42b551464d44ddeb91e52ca6a191822747a768f1572af6df50dc43708f351d227f895a3ecf5fe76b14f509bf385735e16670a3233dab9cf75c0878f477e141d6191147b1c897f8736"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "95be3ef8e5612445049a74d98fbc01c8c3f2cdc8423d187df2b6ba42d5d12cf677be57"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x84}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f0000002840)=""/4093, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 18m55.595414677s ago: executing program 32 (id=486): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x901f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mkdir(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendto$inet(r6, &(0x7f00000003c0)="79b733fcef0001771e270fd68eca1ecb0ec8b01bbf6179d74ffcf1d939048716711a829f3a0413563158f5765b7035cae0dc63c4a12a93eb3100dfdbcb794a8c9b6f514de374341ea60ab554c6684b4b20a9591c9b5680cd62f9b45e4fef5dd2fe51ec5b9976151589915fd24189f2dc57d0510dcb3a8a75891930e95324cf26f72c3948ee4ff2bc6458b12610bc40dcdd4d8eecabfd88048a62f189dc00000000000040bc4d7bae2e2ac82e718ed64cf7bf70834ad36cec6e9e353263c6b9da88f677ff728ee4906848dd4353d0eb12d4b6c76767a8a19b39e8f5665ca47640c5e438d5969ea05c87e1899a191beeee", 0xf0, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r4, 0x1, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 18m54.810221313s ago: executing program 33 (id=491): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x358, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9197}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd88}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x671}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf1, 0x3, "f49fdacfe26111a8eaac198c70091afb2ac6089d1625a4e44327635b777f1e63531b770f88b17221e19073129cf4afd598cf0801731cb567c81435d020d012c5a60de1c5f75622d625e425413b4b8a63d1d84698cccce4acd678988ae47fbf466a5edc3cbebb2516b0a70261c8c0a70181ba6cd30d0fe0dae3ddc8b874a5555a8872753407674e50a95746439475597da28334283cf68e6620452ce698314bbf9bf027cdb42b551464d44ddeb91e52ca6a191822747a768f1572af6df50dc43708f351d227f895a3ecf5fe76b14f509bf385735e16670a3233dab9cf75c0878f477e141d6191147b1c897f8736"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "95be3ef8e5612445049a74d98fbc01c8c3f2cdc8423d187df2b6ba42d5d12cf677be57"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x84}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f0000002840)=""/4093, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 12m55.822531006s ago: executing program 4 (id=934): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x372, 0x5, 0x68, 0x10100, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(r0, 0x5425, 0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x102}}, 0x94}}, 0x0) syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x7861, 0x0, 0x0, 0x3cf}, &(0x7f00000002c0), &(0x7f0000000140)) 12m51.35659681s ago: executing program 4 (id=938): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000100000000000d89614e090df447c0000", @ANYRES32=r2, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="03000000020000000100"/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@alu={0x4, 0x0, 0xc, 0x0, 0x1, 0xfffffffffffffff8, 0x10}, @alu={0x4, 0x1, 0x0, 0x0, 0xb, 0x100, 0x10}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf250b0000000c00058008000100756470004dd0ac8b11023d7ffd96a91ec797847859a3623f1b9d9dcf3e1935ed1741350686ef5cd061a9eb61eb68ef086c71db9411a3167ffaf89f3cef48af4131412014d231470e608a71e74c6b3694a2d91dc0bd7f1a82972c775ba066254d735b271febfd202baabeb92017ed64eb580cfd4c9acb82f85a304f216e0fe22ec4d0701f103257f92125e03b845d00"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000000), &(0x7f00000001c0)) write$char_usb(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000800)={0x0, 0xa0, "25c8b7b4f1206ffb24cee36916288f2fb1bdc885311cd4c0c44db1da812079cffc40971e4f0c82275194e4c1c4a122c7ea3023bcdac9c191fae94ca5b6274500792fcce2cb009aad67df3d80d816f6fa87b4a92d9ddad0787017aba287e4ae9eda87dff7746e035ee0c071f848f083c7327b24b560acc44a696ab946ba3e345d4d10e6b048f3e85f82b163ce27f9d3067d2b8a9dc118b3777969a74c05c4f053"}, &(0x7f0000000040)=0xa8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000300)={r7, 0x8}, 0x8) mknod$loop(0x0, 0x6000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) 12m49.099510765s ago: executing program 4 (id=939): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff050000", @ANYRES32], 0x48) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x5, 0x3, 0x8, 0x8}, {0xd, 0x8, 0x7, 0x2}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getcwd(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffffffffc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x06'}]}}}]}]}], {0x14}}, 0x70}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x1, 0x8001}}, @uexit={0x0, 0x18, 0xed7}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x65, {"b9640001c0b847f7cc29ba000000000f3066430f3a14ad885f0000ea0f01c20f01cb3e2ef30fa7e8440f070f07c7442400d7000000c744240213ff4dc7ff2c243e66420f3882350800000065f30fc7b00a000000"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x8, 0x2}}], 0x10d}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000300)) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd80000000080001400000041008000240000000000900010073797a30"], 0xd8}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) 12m44.714727503s ago: executing program 4 (id=944): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000180)=0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], &(0x7f0000000580)=""/111, 0x64, 0x6f, 0x0, 0x8, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b0000000000"], &(0x7f0000000600)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0xb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={r2, 0x7, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) socket(0x9, 0x5, 0xfffffffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x20, 0x40, 0x80, 0x80000001, {{0x5c, 0x4, 0x1, 0x3d, 0x170, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x1f, 0xbc, [@remote, @remote, @remote, @rand_addr=0x64010100, @private=0xa010101, @multicast2, @multicast1]}, @timestamp={0x44, 0x28, 0xb, 0x0, 0xf, [0xc, 0x9, 0xb, 0x7f, 0xfffffffa, 0x8, 0x1, 0x0, 0x6]}, @ssrr={0x89, 0xb, 0xf3, [@dev={0xac, 0x14, 0x14, 0xd}, @multicast1]}, @cipso={0x86, 0x44, 0x3, [{0x6, 0x3, 'a'}, {0x6, 0x5, "537081"}, {0x2, 0x4, "810b"}, {0x2, 0xb, "d1e46f0d8df7c1f007"}, {0x5, 0x5, "2be18d"}, {0x7, 0x10, "4ca68829158b0f62085554e691aa"}, {0x5, 0x9, "dd8353c3dbe445"}, {0x0, 0x9, "d6a6477b1d8ee9"}]}, @timestamp={0x44, 0x24, 0xb0, 0x0, 0x9, [0x8, 0x4, 0x4, 0x8, 0x2, 0xf, 0xd0d7, 0x0]}, @timestamp_prespec={0x44, 0x54, 0x19, 0x3, 0x5, [{@empty, 0x2}, {@multicast1, 0x10000}, {@broadcast, 0x4}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xf}, {@private=0xa010100, 0x1}, {@local, 0xd9e7}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x78}, {@empty, 0xd1}]}, @timestamp_prespec={0x44, 0x34, 0x42, 0x3, 0x7, [{@multicast2, 0xffffffff}, {@remote, 0x1a81}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@loopback, 0x2}, {@private=0xa010102, 0x6}, {@loopback, 0x61}]}, @rr={0x7, 0x17, 0xc7, [@multicast1, @multicast1, @broadcast, @multicast1, @empty]}]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000200000004000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) add_key$user(&(0x7f00000002c0), &(0x7f0000000440), &(0x7f00000000c0), 0x0, r5) write$binfmt_elf32(r0, 0x0, 0x4cd) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB="0a0001"], 0x48}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969b", 0x1f) 12m41.650374984s ago: executing program 4 (id=946): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000007f00000000000000", @ANYRES32=0x1, @ANYBLOB="09000000000000000000000000000000000000082a2a0000206e50e026c985a41c9a66bf4cfcfb6a893f8ea7bb481095fb2525f2ec796e26cfebbed399451deaabe713fe64099afbcd40029753dca83082f3dc5198f7a92eeff73224e39e0000010000000000d471a7c30ef5f28da1ff8b415e218fd0f38815bada1e9e0cd48c7874b93273e790bd7be44896c5c9bb24fbbb44fa62e5a7a8381d267555301deca3674289bda4ccfa0d8578123bb82c77e9f18487a02efcfab41fe6055b8a8bc9ca01c2d4b46ab5067b9ecfd5b10e5427c6c097eee38fbc4575b8f826347721c25f6cc30dcd1fe1f16fd0580012a50082d132bfdb6f137927e3e65df9a4fe0ee04b925694c49955431be1c1faee1838d331bb2ee6645a162e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0xc0045405, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000280)=@get={0x1, 0x0, 0x1}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8003, 0xe0, 0x3, 0x0, 0x1, 0x4, 0x1, 0xc4, 0x7, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x5, 0x0, 0x3, 0x2, 0x0, 0xb}, {0x1, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xd7, 0x89, 0x0, 0x0, 0xe0f1}], 0x7}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r8, 0x9}}, 0x10) close(r7) read(r1, &(0x7f0000000340)=""/254, 0xfe) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 12m39.918307129s ago: executing program 4 (id=949): creat(&(0x7f0000000000)='./file0\x00', 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0xd78, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ae8000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, r4, 0xe66ee000) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000017c0)=ANY=[@ANYBLOB="38000000031401002cbd7000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000053ba7e51e01af97d5cf8b865c0eeeedba39fe89294dc1087a6701be6233abdae943d6a386d40a690daff344e94ebff093cd615e1acec107c8c5744a545f809acf6bccb2e6765a5b00a920bd6"], 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@gettaction={0x24, 0x32, 0x1, 0x70bd26, 0x8000, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) madvise(&(0x7f0000477000/0x3000)=nil, 0x3000, 0x15) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x720, 0x508, 0x508, 0x438, 0x0, 0x438, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x1, 0x5}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [0x0, 0xff000000], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0x0, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x2c, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@frag={{0x30}, {[0x3, 0x8], 0xa, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) 12m24.803118324s ago: executing program 34 (id=949): creat(&(0x7f0000000000)='./file0\x00', 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0xd78, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ae8000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, r4, 0xe66ee000) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000017c0)=ANY=[@ANYBLOB="38000000031401002cbd7000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000053ba7e51e01af97d5cf8b865c0eeeedba39fe89294dc1087a6701be6233abdae943d6a386d40a690daff344e94ebff093cd615e1acec107c8c5744a545f809acf6bccb2e6765a5b00a920bd6"], 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@gettaction={0x24, 0x32, 0x1, 0x70bd26, 0x8000, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) madvise(&(0x7f0000477000/0x3000)=nil, 0x3000, 0x15) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x720, 0x508, 0x508, 0x438, 0x0, 0x438, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x1, 0x5}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [0x0, 0xff000000], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0x0, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x2c, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@frag={{0x30}, {[0x3, 0x8], 0xa, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) 5m45.066232602s ago: executing program 1 (id=2511): socket$kcm(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xcc}}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff9}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0xfffffffe}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0xa0}, 0x2, @in=@local}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in6=@mcast1}, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x33}, 0x300, @in6=@private1, 0x0, 0x5, 0x0, 0x0, 0xbb40}]}]}, 0x1fc}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) 5m43.92998921s ago: executing program 1 (id=2516): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 5m43.166588699s ago: executing program 1 (id=2518): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@alu={0x4, 0x0, 0xc, 0x0, 0x1, 0xfffffffffffffff8, 0x10}, @alu={0x4, 0x1, 0x0, 0x0, 0xb, 0x100, 0x10}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf250b0000000c00058008000100756470004dd0ac8b11023d7ffd96a91ec797847859a3623f1b9d9dcf3e1935ed1741350686ef5cd061a9eb61eb68ef086c71db9411a3167ffaf89f3cef48af4131412014d231470e608a71e74c6b3694a2d91dc0bd7f1a82972c775ba066254d735b271febfd"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000800)={0x0, 0xa0, "25c8b7b4f1206ffb24cee36916288f2fb1bdc885311cd4c0c44db1da812079cffc40971e4f0c82275194e4c1c4a122c7ea3023bcdac9c191fae94ca5b6274500792fcce2cb009aad67df3d80d816f6fa87b4a92d9ddad0787017aba287e4ae9eda87dff7746e035ee0c071f848f083c7327b24b560acc44a696ab946ba3e345d4d10e6b048f3e85f82b163ce27f9d3067d2b8a9dc118b3777969a74c05c4f053"}, &(0x7f0000000040)=0xa8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={r6, 0x8}, 0x8) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) 5m41.974122409s ago: executing program 1 (id=2519): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 5m41.655704985s ago: executing program 1 (id=2520): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r2 = dup3(r1, r0, 0x0) read$rfkill(r2, &(0x7f00000002c0), 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) 5m37.308681639s ago: executing program 1 (id=2527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) 5m36.418736046s ago: executing program 35 (id=2527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) 4m2.43465967s ago: executing program 6 (id=2756): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010008000000000000000000000a20000000000a0300000000000000000007000000090001002b797a30000000003c000000090a010400000000000000000743ab"], 0xb0}}, 0x40400d0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfea7}], 0x1, 0x2200, 0x0, 0xa7) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m1.910100292s ago: executing program 6 (id=2759): socket$kcm(0x10, 0x2, 0x4) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 3m57.591461377s ago: executing program 6 (id=2770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) close(r1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 3m55.140689467s ago: executing program 6 (id=2779): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m54.923548111s ago: executing program 6 (id=2780): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x3f, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r2, &(0x7f0000000380)=""/142, 0x8e) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffffffffffdfa) 3m54.415070633s ago: executing program 6 (id=2784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x28012, 0x141101) socket$pppoe(0x18, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00000000008000001000000000", 0xe) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xd802}}, {{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="7d7a1a1a587621820da214a80d403e29c29a46063a8b786f976de5ab6eaeaae1e53eb5b00c2eb32581e41eddfc6644ae8cb7e22d5ac07b90da0ede49", @ANYBLOB="67abd0d84af198e96825fd9bd8e05e7f8e72b0505c8b5b9086d34c182bf685442738687899f5db9925b0ed81b9a85d29120f1aed84e6c785c0a1ade0cf751b1ec5db25cfafe50fa1bc2a9f3cade6f8ba58afa411f3184f24e400bc996ef908df593ea6f879946c8ac522bf741bddf31b5ce46d9cfca07908c5f132ba7dd62328919f1d25f5fbdca159be6c85f780520b9b7c6b99c48ea6e2f8fee25513774cedd1e9a4265fe553f823dfb3fc79cf62544e1119b25e708e96485fae18c73a2c06b309035f753d5dc96a372c5bf023cf58ae28e82d9bf434d0eabe6d1b75af2b514047adbc7327e48250cd98abf6f46203829e7dc554", @ANYBLOB="b704085c2218e5ccaf589cbf9805fb9b9f5130c61fde3cacbf4894de2a7d6ff73ce6e4374c7bd081c02478d8e045b1cb5d5d03456955f3d5807aca841be6a783428d21ba68b90edab0c4d75b4932c6181d1c20355bd5af4cde2886f1b60cd795b66df8abc38f1e5d0ca94aee4756127fc9134f380af4"], 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 3m54.132462987s ago: executing program 36 (id=2784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x28012, 0x141101) socket$pppoe(0x18, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00000000008000001000000000", 0xe) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xd802}}, {{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="7d7a1a1a587621820da214a80d403e29c29a46063a8b786f976de5ab6eaeaae1e53eb5b00c2eb32581e41eddfc6644ae8cb7e22d5ac07b90da0ede49", @ANYBLOB="67abd0d84af198e96825fd9bd8e05e7f8e72b0505c8b5b9086d34c182bf685442738687899f5db9925b0ed81b9a85d29120f1aed84e6c785c0a1ade0cf751b1ec5db25cfafe50fa1bc2a9f3cade6f8ba58afa411f3184f24e400bc996ef908df593ea6f879946c8ac522bf741bddf31b5ce46d9cfca07908c5f132ba7dd62328919f1d25f5fbdca159be6c85f780520b9b7c6b99c48ea6e2f8fee25513774cedd1e9a4265fe553f823dfb3fc79cf62544e1119b25e708e96485fae18c73a2c06b309035f753d5dc96a372c5bf023cf58ae28e82d9bf434d0eabe6d1b75af2b514047adbc7327e48250cd98abf6f46203829e7dc554", @ANYBLOB="b704085c2218e5ccaf589cbf9805fb9b9f5130c61fde3cacbf4894de2a7d6ff73ce6e4374c7bd081c02478d8e045b1cb5d5d03456955f3d5807aca841be6a783428d21ba68b90edab0c4d75b4932c6181d1c20355bd5af4cde2886f1b60cd795b66df8abc38f1e5d0ca94aee4756127fc9134f380af4"], 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 3m45.609643023s ago: executing program 0 (id=2104): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x200}, 0x2a, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000500)={0x0, r2}) 3m20.47259557s ago: executing program 0 (id=2104): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x200}, 0x2a, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000500)={0x0, r2}) 2m50.464651787s ago: executing program 0 (id=2104): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x200}, 0x2a, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000500)={0x0, r2}) 2m42.60372166s ago: executing program 8 (id=2981): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x99, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x2, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m41.542162988s ago: executing program 8 (id=2983): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) 2m40.434067609s ago: executing program 8 (id=2986): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) 2m38.486315913s ago: executing program 8 (id=2987): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2m38.181782362s ago: executing program 8 (id=2988): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/146, 0x92, 0x100) 2m34.485175256s ago: executing program 8 (id=2995): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) chmod(&(0x7f0000000100)='./file0\x00', 0x180) 2m22.412505469s ago: executing program 0 (id=2104): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x200}, 0x2a, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000500)={0x0, r2}) 2m19.313777774s ago: executing program 37 (id=2995): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) chmod(&(0x7f0000000100)='./file0\x00', 0x180) 1m34.740552854s ago: executing program 0 (id=2104): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x200}, 0x2a, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000500)={0x0, r2}) 57.053183244s ago: executing program 2 (id=3175): creat(&(0x7f0000000000)='./file0\x00', 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(0x0, 0xd78, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000017c0)=ANY=[@ANYBLOB="38000000031401002cbd7000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000053ba7e51e01af97d5cf8b865c0eeeedba39fe89294dc1087a6701be6233abdae943d6a386d40a690daff344e94ebff093cd615e1acec107c8c5744a545f809acf6bccb2e6765a5b00a920bd6"], 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@gettaction={0x18, 0x32, 0x1, 0x70bd26, 0x8000, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x55}, 0xc0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) madvise(&(0x7f0000477000/0x3000)=nil, 0x3000, 0x15) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x720, 0x508, 0x508, 0x438, 0x0, 0x438, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x1, 0x5}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [0x0, 0xff000000], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0x0, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x2c, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@frag={{0x30}, {[0x3, 0x8], 0xa, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) 54.593881328s ago: executing program 2 (id=3178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 53.225998386s ago: executing program 2 (id=3182): socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x48d8, 0x7339, 0x20, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r4, &(0x7f0000001c80)={0x2020}, 0x2020) 51.773364289s ago: executing program 2 (id=3185): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000001000", @ANYRES32=r3, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000020000000100"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@alu={0x4, 0x0, 0xc, 0x0, 0x1, 0xfffffffffffffff8, 0x10}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250b0000000c00058008000100756470004dd0ac8b11023d7ffd96a91ec797847859a3623f1b9d9dcf3e1935ed1741350686ef5cd061a9eb61eb68ef086c71db9411a3167ffaf89f3cef48af4131412014d231470e608a71e74c6b3694a2d91dc0bd7f1a82972c775ba066254d735b271febfd202baabeb92017ed64eb580cfd4c9acb82f85a304f216e0fe22ec4d0701f103257f92125e03b845d00"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000000), &(0x7f00000001c0)) write$char_usb(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000800)={0x0, 0xa0, "25c8b7b4f1206ffb24cee36916288f2fb1bdc885311cd4c0c44db1da812079cffc40971e4f0c82275194e4c1c4a122c7ea3023bcdac9c191fae94ca5b6274500792fcce2cb009aad67df3d80d816f6fa87b4a92d9ddad0787017aba287e4ae9eda87dff7746e035ee0c071f848f083c7327b24b560acc44a696ab946ba3e345d4d10e6b048f3e85f82b163ce27f9d3067d2b8a9dc118b3777969a74c05c4f053"}, &(0x7f0000000040)=0xa8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={r8, 0x8}, 0x8) mknod$loop(0x0, 0x6000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) 51.719506478s ago: executing program 0 (id=2104): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x200}, 0x2a, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000500)={0x0, r2}) 47.699322063s ago: executing program 2 (id=3188): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) 45.148964202s ago: executing program 2 (id=3193): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 29.75867898s ago: executing program 38 (id=3193): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 12.127621847s ago: executing program 5 (id=3248): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000300)=ANY=[], 0x0) syz_io_uring_setup(0x9c2, &(0x7f00000000c0)={0x0, 0x7079, 0x1, 0x3, 0x288}, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xeb9e, 0x10000, 0x2}, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) 10.411665588s ago: executing program 9 (id=3251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x7e000000000}, 0x40000, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 9.405747489s ago: executing program 9 (id=3252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81801) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x22, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 8.612727985s ago: executing program 5 (id=3253): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d", 0x4a}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/78, 0x4e}, {0x0}], 0x2}, 0x12000) 8.50619214s ago: executing program 7 (id=3254): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x1000)=nil, 0x1000}, 0xd}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) 7.525920413s ago: executing program 5 (id=3255): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x0, 0x0, 0x0, 0x520e854a, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r0], &(0x7f0000000840)=[{0x0, 0x2, 0x1, 0x1}, {0x4, 0x5, 0x7, 0x8}, {0x5, 0x1, 0xd, 0x9}, {0x5, 0x4, 0x5, 0x9}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='/\x00\x00\x002 \x00\x00', @ANYRES32, @ANYBLOB="1eb67d00000045d77cab0f6b00005e"], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.687520947s ago: executing program 9 (id=3256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1705e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x4) 5.335717384s ago: executing program 7 (id=3257): socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)={0x3, 0x0, [{0xd000, 0x97, &(0x7f0000000240)=""/151}, {0x1d5d5b000, 0x55, &(0x7f0000000300)=""/85}, {0xeeef0000, 0x1000, &(0x7f0000004740)=""/4096}]}) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 4.566056771s ago: executing program 9 (id=3258): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aa0e02000000000000000000000000000101012025b07f3c58b62cc3e9a47a6f41b5e88b9dd113cfddeae15cdeb483258084a448c33c360d8a4bde0cd2adfb38ebcedd805a06f4c7f59d8cc16a2cd78f635794f8f108cfb3c122bd3261517eb7f829ff923fa416ea26661076ee"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x1c, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x40}]}]}, 0x1c}}, 0x4010) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x34, &(0x7f0000000000)=0x1, 0x59) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) read$FUSE(r3, &(0x7f0000006280)={0x2020}, 0x2020) 4.395259657s ago: executing program 5 (id=3259): memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073ee", 0x3}, {&(0x7f00000038c0)="f9db6d4e6ca7d40c978d37d3ea23d92438e15c1b6ce255bbee36e2dd57ae11821c1af092de99be476596eb92bc722e1b34a6ef9d82e4d70fcf379419bfdb759f54b461633cc8099c9cf1a921921f65a149e1bc3789ee998403a87f2f59f5b66b2627741662f5c1ebc1c63385e103734c8639f135f74b6660a0006033de", 0x7d}], 0x2}}], 0x1, 0x8810) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4120, 0x1018}], 0x1}, 0x12060) 3.406044108s ago: executing program 9 (id=3260): socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x24, 0x5b, 0x8e, 0x40, 0x45e, 0x284, 0x2dad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x0, 0x0, 0x2a, 0xeb, 0x86}}]}}]}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0xe11, 0x2, 0x1}, 0x18, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) 3.337705381s ago: executing program 5 (id=3261): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.277623461s ago: executing program 7 (id=3262): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 2.567208672s ago: executing program 5 (id=3263): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) fcntl$getownex(0xffffffffffffffff, 0x409, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000540)={0x39, 0x2, 0x3, "11010100041400000100b64c0000005c58aa1500", 0x34324948}) 2.457374513s ago: executing program 7 (id=3264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.213860326s ago: executing program 7 (id=3265): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x5b0b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x32) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) 19.495144ms ago: executing program 7 (id=3266): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 0s ago: executing program 9 (id=3267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): t device team_slave_0 added [ 1325.462969][T15776] team0: Port device team_slave_1 added [ 1325.854590][T15906] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2632'. [ 1326.258992][T15776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.297266][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.323220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.353088][T15776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.367398][T15776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.375634][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.401564][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.416778][T15776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.546062][T15572] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1326.604382][T15920] netlink: 'syz.6.2637': attribute type 10 has an invalid length. [ 1326.611769][T15776] hsr_slave_0: entered promiscuous mode [ 1326.633313][T15776] hsr_slave_1: entered promiscuous mode [ 1326.709644][T15572] usb 6-1: Using ep0 maxpacket: 16 [ 1326.719159][T15572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.735263][T15920] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1326.747071][T15572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.757912][T15572] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1326.776201][T15572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.883345][T15572] usb 6-1: config 0 descriptor?? [ 1329.220454][T15572] usbhid 6-1:0.0: can't add hid device: -71 [ 1329.235801][T15572] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1329.315578][T15572] usb 6-1: USB disconnect, device number 36 [ 1329.794711][T15776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1329.896123][T15776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1329.940062][T15776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1329.970516][T15776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1331.340967][T15776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.414020][T15776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.484921][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.492159][ T6232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.536942][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.544160][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.755704][ T1099] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1333.329012][T15776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.516405][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2654'. [ 1333.580149][T15776] veth0_vlan: entered promiscuous mode [ 1333.609228][T15776] veth1_vlan: entered promiscuous mode [ 1333.714253][T15776] veth0_macvtap: entered promiscuous mode [ 1333.753826][T15776] veth1_macvtap: entered promiscuous mode [ 1333.846899][T10932] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1334.010639][ C0] hrtimer: interrupt took 66155 ns [ 1334.196052][T10932] usb 6-1: Using ep0 maxpacket: 16 [ 1334.350740][T10932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.470246][T15776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.479056][T10932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.576420][T10932] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1334.696036][T10932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.749133][T15776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.758203][T10932] usb 6-1: config 0 descriptor?? [ 1334.808318][T15776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.819855][T15776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.828933][T15776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.942771][T15776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.325527][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.333446][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.592831][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.649477][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.519782][T10932] usbhid 6-1:0.0: can't add hid device: -71 [ 1336.553105][T10932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1336.649826][T10932] usb 6-1: USB disconnect, device number 37 [ 1336.668774][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.860819][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.011904][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.137691][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.284932][ T49] bridge_slave_1: left allmulticast mode [ 1337.292124][ T49] bridge_slave_1: left promiscuous mode [ 1337.298575][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.313408][ T49] bridge_slave_0: left allmulticast mode [ 1337.319670][ T49] bridge_slave_0: left promiscuous mode [ 1337.326081][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.730838][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.743394][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.754126][ T49] bond0 (unregistering): Released all slaves [ 1338.265524][ T5966] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1339.337109][ T5966] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.445363][ T5966] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1339.533016][ T5966] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1339.600834][ T5966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.649514][ T5966] usb 9-1: config 0 descriptor?? [ 1339.841678][ T49] hsr_slave_0: left promiscuous mode [ 1339.862348][ T49] hsr_slave_1: left promiscuous mode [ 1339.873179][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.889615][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.926512][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.942594][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.965766][ T5816] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 1340.106240][ T49] veth1_macvtap: left promiscuous mode [ 1340.119431][ T49] veth0_macvtap: left promiscuous mode [ 1340.142421][ T49] veth1_vlan: left promiscuous mode [ 1340.148708][ T49] veth0_vlan: left promiscuous mode [ 1340.160798][ T5816] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.191497][ T5816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1340.216512][T12346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1340.236627][T12346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1340.245899][T12346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1340.255960][T12346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1340.263740][T12346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1340.286078][ T5816] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1340.297472][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.305676][ T5816] usb 8-1: Product: syz [ 1340.309851][ T5816] usb 8-1: Manufacturer: syz [ 1340.314465][ T5816] usb 8-1: SerialNumber: syz [ 1340.528380][ T5816] usb 8-1: 0:2 : does not exist [ 1340.556138][ T5816] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1340.631328][ T5816] usb 8-1: USB disconnect, device number 27 [ 1340.712203][T11514] udevd[11514]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.117947][ T5816] usb 9-1: USB disconnect, device number 5 [ 1341.810453][T16044] netlink: 'syz.7.2672': attribute type 1 has an invalid length. [ 1341.818396][T16044] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2672'. [ 1342.366714][T12346] Bluetooth: hci0: command tx timeout [ 1344.445563][T12346] Bluetooth: hci0: command tx timeout [ 1345.034169][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1346.206993][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1346.535818][T12346] Bluetooth: hci0: command tx timeout [ 1346.561737][T16078] rdma_rxe: rxe_newlink: failed to add lo [ 1346.580498][T16078] netlink: 'syz.6.2682': attribute type 1 has an invalid length. [ 1346.588396][T16078] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2682'. [ 1348.509267][T16043] lo speed is unknown, defaulting to 1000 [ 1348.519306][T16043] lo speed is unknown, defaulting to 1000 [ 1348.525821][T16043] lo speed is unknown, defaulting to 1000 [ 1348.605578][T12346] Bluetooth: hci0: command tx timeout [ 1348.669733][T16043] infiniband syz0: set active [ 1348.674462][T16043] infiniband syz0: added lo [ 1348.680020][T16043] syz0: rxe_create_cq: returned err = -12 [ 1348.686019][T16043] infiniband syz0: Couldn't create ib_mad CQ [ 1348.692131][T16043] infiniband syz0: Couldn't open port 1 [ 1348.701876][ T1215] lo speed is unknown, defaulting to 1000 [ 1348.716604][T16043] RDS/IB: syz0: added [ 1348.720646][T16043] smc: adding ib device syz0 with port count 1 [ 1348.726872][T16043] smc: ib device syz0 port 1 has pnetid [ 1348.735053][T16043] lo speed is unknown, defaulting to 1000 [ 1348.881993][T16043] lo speed is unknown, defaulting to 1000 [ 1349.031176][T16043] lo speed is unknown, defaulting to 1000 [ 1349.181458][T16043] lo speed is unknown, defaulting to 1000 [ 1349.331990][T16043] lo speed is unknown, defaulting to 1000 [ 1349.464314][ T1215] lo speed is unknown, defaulting to 1000 [ 1349.721258][T16023] lo speed is unknown, defaulting to 1000 [ 1351.198582][ T5816] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1352.413594][T16023] lo speed is unknown, defaulting to 1000 [ 1352.455907][ T5816] usb 7-1: Using ep0 maxpacket: 8 [ 1352.486065][ T5816] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1352.514602][ T5816] usb 7-1: config 0 has no interface number 0 [ 1352.532462][ T5816] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1352.564220][ T5816] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1352.603896][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.652788][ T5816] usb 7-1: config 0 descriptor?? [ 1352.674754][ T5816] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1354.530530][T10931] usb 7-1: USB disconnect, device number 34 [ 1354.686426][ T5816] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1354.728682][T16023] chnl_net:caif_netlink_parms(): no params data found [ 1354.869663][ T5816] usb 9-1: Using ep0 maxpacket: 16 [ 1354.899379][ T5816] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1355.745184][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.798910][ T5816] usb 9-1: Product: syz [ 1355.808712][ T5816] usb 9-1: Manufacturer: syz [ 1355.826361][ T5816] usb 9-1: SerialNumber: syz [ 1355.864305][ T5816] usb 9-1: config 0 descriptor?? [ 1355.894419][ T5816] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1356.163661][ T5816] usb 9-1: Detected FT-X [ 1356.355024][T16137] rdma_rxe: rxe_newlink: failed to add lo [ 1356.373392][T16137] netlink: 'syz.5.2698': attribute type 1 has an invalid length. [ 1356.381361][T16137] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2698'. [ 1356.559296][ T5816] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1357.044541][T16023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.065851][T16023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.089133][T16023] bridge_slave_0: entered allmulticast mode [ 1357.097523][T16023] bridge_slave_0: entered promiscuous mode [ 1357.117416][T16023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.141751][T16023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.168325][T16023] bridge_slave_1: entered allmulticast mode [ 1357.956371][ T5816] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1358.154941][T16023] bridge_slave_1: entered promiscuous mode [ 1358.345814][T16148] rdma_rxe: rxe_newlink: failed to add lo [ 1358.591064][T16148] netlink: 'syz.6.2709': attribute type 1 has an invalid length. [ 1358.599025][T16148] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2709'. [ 1358.907857][ T5816] usb 9-1: USB disconnect, device number 6 [ 1359.052343][T16151] netlink: 'syz.7.2701': attribute type 10 has an invalid length. [ 1359.067663][ T5816] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1359.115876][T16152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.124036][T16152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.131826][ T5816] ftdi_sio 9-1:0.0: device disconnected [ 1359.174119][T16152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.199403][T16152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.253926][T16023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.331777][T16023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.674339][T16023] team0: Port device team_slave_0 added [ 1361.369777][T16023] team0: Port device team_slave_1 added [ 1361.770528][T16023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.777642][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.805042][T16023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.851732][T16023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.859027][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.909916][T16023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.245313][T16188] rdma_rxe: rxe_newlink: failed to add lo [ 1362.264511][T16188] netlink: 'syz.8.2711': attribute type 1 has an invalid length. [ 1362.272501][T16188] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2711'. [ 1362.797095][T16023] hsr_slave_0: entered promiscuous mode [ 1362.811765][T16023] hsr_slave_1: entered promiscuous mode [ 1363.359709][T16193] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1364.741442][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2717'. [ 1366.512209][T16023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1366.607685][T16023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1366.640653][T16023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1366.678134][T16023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1366.692224][T16225] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2725'. [ 1366.893129][T16023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.856253][T10931] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1367.938026][T16023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.995047][T16023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1368.005716][T16023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1368.074822][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.082052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.106001][T10931] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1368.114679][T10931] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1368.188053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.195363][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.195755][T10931] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1368.234116][T16238] netlink: 'syz.8.2728': attribute type 10 has an invalid length. [ 1368.253831][T10931] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1368.284307][T10931] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1368.353224][T10931] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1368.376981][T10931] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1368.413940][T10931] usb 7-1: Product: syz [ 1368.433472][T10931] usb 7-1: Manufacturer: syz [ 1368.446396][T16238] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1368.475244][T10931] cdc_wdm 7-1:1.0: skipping garbage [ 1368.487407][T10931] cdc_wdm 7-1:1.0: skipping garbage [ 1368.506555][T10931] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1368.523370][T10931] cdc_wdm 7-1:1.0: Unknown control protocol [ 1368.713649][ T5966] usb 7-1: USB disconnect, device number 35 [ 1369.917661][T16023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.871223][T16259] rdma_rxe: rxe_newlink: failed to add lo [ 1370.879383][T16259] netlink: 'syz.8.2730': attribute type 1 has an invalid length. [ 1370.887236][T16259] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2730'. [ 1371.368758][T16023] veth0_vlan: entered promiscuous mode [ 1371.456795][T16023] veth1_vlan: entered promiscuous mode [ 1371.658350][T16023] veth0_macvtap: entered promiscuous mode [ 1371.693008][T16023] veth1_macvtap: entered promiscuous mode [ 1371.785563][ T5966] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1371.913916][T16023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.946919][ T5966] usb 8-1: Using ep0 maxpacket: 16 [ 1371.967570][ T5966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.993060][T16023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1372.007969][ T5816] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1372.028674][ T5966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.064549][T16023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.095748][ T5966] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1372.123418][T16023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.135075][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.188076][T16023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.192092][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2737'. [ 1372.200256][ T5966] usb 8-1: config 0 descriptor?? [ 1372.245252][ T5816] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1372.255497][T16023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.267973][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.277977][ T5816] usb 7-1: config 0 descriptor?? [ 1373.330777][ T5816] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1373.920324][T16288] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1373.980286][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.034848][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.176854][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.201633][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.767102][ T5816] gspca_stv06xx: HDCS-1020 sensor detected [ 1374.980526][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.043108][ T5816] STV06xx 7-1:0.0: probe with driver STV06xx failed with error -71 [ 1375.086206][ T5816] usb 7-1: USB disconnect, device number 36 [ 1375.307777][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.381633][ T5966] usbhid 8-1:0.0: can't add hid device: -71 [ 1375.388108][ T5966] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1375.399763][ T5966] usb 8-1: USB disconnect, device number 28 [ 1375.454878][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.519672][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.681161][ T12] bridge_slave_1: left allmulticast mode [ 1375.687188][ T12] bridge_slave_1: left promiscuous mode [ 1375.692917][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.703291][ T12] bridge_slave_0: left allmulticast mode [ 1375.709658][ T12] bridge_slave_0: left promiscuous mode [ 1375.718919][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.175712][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.189468][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.200163][ T12] bond0 (unregistering): Released all slaves [ 1377.455433][T16301] syz0: rxe_newlink: already configured on lo [ 1377.503497][T16307] netlink: 'syz.7.2745': attribute type 1 has an invalid length. [ 1377.511309][T16307] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2745'. [ 1377.642719][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2746'. [ 1378.173116][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1378.188323][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1378.219276][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1378.259806][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1378.284673][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1378.363798][T16316] lo speed is unknown, defaulting to 1000 [ 1380.024132][T16316] lo speed is unknown, defaulting to 1000 [ 1380.365571][T12346] Bluetooth: hci0: command tx timeout [ 1380.712862][T16340] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1381.186688][ T12] hsr_slave_0: left promiscuous mode [ 1381.200435][ T12] hsr_slave_1: left promiscuous mode [ 1381.210088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.241180][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.268452][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.278749][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1381.316368][ T12] veth1_macvtap: left promiscuous mode [ 1381.322093][ T12] veth0_macvtap: left promiscuous mode [ 1381.334729][ T12] veth1_vlan: left promiscuous mode [ 1381.341458][ T12] veth0_vlan: left promiscuous mode [ 1382.455408][T12346] Bluetooth: hci0: command tx timeout [ 1383.098606][T16373] rdma_rxe: rxe_newlink: failed to add lo [ 1383.118071][T16373] netlink: 'syz.8.2763': attribute type 1 has an invalid length. [ 1383.126020][T16373] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2763'. [ 1384.097110][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1384.328524][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1384.529930][T12346] Bluetooth: hci0: command tx timeout [ 1384.903007][T16386] loop6: detected capacity change from 0 to 7 [ 1384.910019][T16386] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.921242][T16386] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.937060][T16386] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.945153][T16386] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.956160][T16386] Buffer I/O error on dev loop6, logical block 0, async page read [ 1384.981649][T16386] Buffer I/O error on dev loop6, logical block 0, async page read [ 1385.023885][T16386] Buffer I/O error on dev loop6, logical block 0, async page read [ 1385.043857][T16389] Buffer I/O error on dev loop6, logical block 0, async page read [ 1385.054101][T16389] Buffer I/O error on dev loop6, logical block 0, async page read [ 1385.065789][T16386] ldm_validate_partition_table(): Disk read failed. [ 1385.072493][T16386] Buffer I/O error on dev loop6, logical block 0, async page read [ 1385.091049][T16386] Dev loop6: unable to read RDB block 0 [ 1385.097285][T16386] loop6: unable to read partition table [ 1385.103272][T16386] loop6: partition table beyond EOD, truncated [ 1385.137235][T16386] loop_reread_partitions: partition scan of loop6 (3Ÿ‚¾‚³÷„I÷>Ê9äÿtPΪÅó×AÝÁÅ8}!Žñè3#yXÖe) failed (rc=-5) [ 1385.512908][T16316] chnl_net:caif_netlink_parms(): no params data found [ 1385.558745][ T5194] ldm_validate_partition_table(): Disk read failed. [ 1385.586002][ T5194] Dev loop6: unable to read RDB block 0 [ 1385.596918][ T5194] loop6: unable to read partition table [ 1385.631330][ T5194] loop6: partition table beyond EOD, truncated [ 1386.711092][T12346] Bluetooth: hci0: command tx timeout [ 1386.980873][T16316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.054600][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.064990][T16316] bridge_slave_0: entered allmulticast mode [ 1387.084727][T16316] bridge_slave_0: entered promiscuous mode [ 1387.103676][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.170921][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.191945][T16316] bridge_slave_1: entered allmulticast mode [ 1387.223933][T16316] bridge_slave_1: entered promiscuous mode [ 1387.382615][T16316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.415495][T10932] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1387.432132][T16316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.563738][T16316] team0: Port device team_slave_0 added [ 1387.583186][T10932] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.608441][T10932] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1387.638444][T16316] team0: Port device team_slave_1 added [ 1387.694336][T10932] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1387.725891][T10932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.754395][T10932] usb 8-1: config 0 descriptor?? [ 1387.792260][T10932] hub 8-1:0.0: bad descriptor, ignoring hub [ 1387.799851][T10932] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1387.818878][T16316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.834768][T10932] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1387.846680][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.915384][T16316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.948676][T16316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.970800][T16419] kvm: pic: non byte write [ 1388.017352][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.017474][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2775'. [ 1388.064004][T16419] kvm: pic: non byte write [ 1388.070941][T16316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.071031][T16419] kvm: pic: non byte write [ 1388.166020][T16419] kvm: pic: non byte write [ 1388.208195][T16419] kvm: pic: non byte write [ 1388.212852][T16419] kvm: pic: non byte write [ 1388.325606][T16419] kvm: pic: non byte write [ 1388.331452][T16419] kvm: pic: non byte write [ 1388.345540][T16419] kvm: pic: non byte write [ 1388.353581][T16419] kvm: pic: non byte write [ 1388.478232][T16316] hsr_slave_0: entered promiscuous mode [ 1388.488449][T16316] hsr_slave_1: entered promiscuous mode [ 1388.498490][ T1215] usb 8-1: USB disconnect, device number 29 [ 1388.915708][ T1215] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1389.076865][ T1215] usb 9-1: Using ep0 maxpacket: 32 [ 1389.089560][ T1215] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.120801][ T1215] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.132264][ T1215] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1389.203275][ T1215] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1389.223859][ T1215] usb 9-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1389.253270][ T1215] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.278632][ T1215] usb 9-1: config 0 descriptor?? [ 1389.367848][T16316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1389.379977][T16316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1389.393857][T16316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1389.406738][T16316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1389.523482][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1389.531084][T16316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.541427][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1389.552007][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1389.559765][T16316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.568928][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1389.577605][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1389.609148][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.616312][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.637919][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.645112][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.719132][ T1215] wacom 0003:056A:0094.0015: Using device in hidraw-only mode [ 1389.728856][T16439] lo speed is unknown, defaulting to 1000 [ 1389.967650][ T1215] wacom 0003:056A:0094.0015: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.8-1/input0 [ 1389.984409][ T1215] usb 9-1: USB disconnect, device number 7 [ 1390.072686][T16448] syz0: rxe_newlink: already configured on lo [ 1390.092376][T16448] netlink: 'syz.7.2789': attribute type 1 has an invalid length. [ 1390.100298][T16448] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2789'. [ 1390.713570][T16316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1390.782565][T16447] fido_id[16447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1390.906543][T16439] lo speed is unknown, defaulting to 1000 [ 1391.655391][ T5838] Bluetooth: hci3: command tx timeout [ 1391.673557][ T30] audit: type=1326 audit(1748963329.202:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16457 comm="syz.8.2792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14e778e969 code=0x0 [ 1392.173756][T16316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.519218][T16316] veth0_vlan: entered promiscuous mode [ 1392.556462][T16316] veth1_vlan: entered promiscuous mode [ 1392.661887][T16316] veth0_macvtap: entered promiscuous mode [ 1392.682809][T16439] chnl_net:caif_netlink_parms(): no params data found [ 1392.707821][T16316] veth1_macvtap: entered promiscuous mode [ 1392.754336][T16474] binder: 16473:16474 ioctl c0306201 200000000280 returned -14 [ 1393.184377][T16316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.344239][T16439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.366687][T16439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.373967][T16439] bridge_slave_0: entered allmulticast mode [ 1393.382028][T16439] bridge_slave_0: entered promiscuous mode [ 1393.399913][T16316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.725464][ T5838] Bluetooth: hci3: command tx timeout [ 1394.155527][T16439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.163914][T16439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.207347][T16439] bridge_slave_1: entered allmulticast mode [ 1394.218629][T16439] bridge_slave_1: entered promiscuous mode [ 1394.298533][T16316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.308269][T16316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.317717][T16316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.345507][T16316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.420677][T16439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.481603][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2797'. [ 1394.547578][T16439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.757720][T16439] team0: Port device team_slave_0 added [ 1394.871643][T11300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.895500][T11300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.934508][T16439] team0: Port device team_slave_1 added [ 1395.115416][ T5987] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1395.194402][T16439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.231352][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.681929][T16439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.725047][T16439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.747334][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.819249][ T5838] Bluetooth: hci3: command tx timeout [ 1395.833248][T16439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1395.976620][T11382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.019292][T11382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.165404][ T5987] usb 8-1: Using ep0 maxpacket: 8 [ 1396.174660][ T5987] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1396.183852][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.192084][T16439] hsr_slave_0: entered promiscuous mode [ 1396.205821][T10931] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1396.215037][ T5987] usb 8-1: config 0 descriptor?? [ 1396.236816][T16439] hsr_slave_1: entered promiscuous mode [ 1396.279413][T16439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1396.309368][T16439] Cannot create hsr debugfs directory [ 1396.983921][T10931] usb 9-1: Using ep0 maxpacket: 16 [ 1397.095457][T10931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1397.247642][ T5987] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1397.269762][T10931] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1397.280278][T10931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.292814][T10931] usb 9-1: Product: syz [ 1397.302666][T10931] usb 9-1: Manufacturer: syz [ 1397.312819][T10931] usb 9-1: SerialNumber: syz [ 1397.350934][T10931] usb 9-1: config 0 descriptor?? [ 1397.369747][T10931] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1397.387937][T10931] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1397.730834][T11382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.880397][T11382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.895589][ T5838] Bluetooth: hci3: command tx timeout [ 1397.911023][T16439] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1397.923622][T16439] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1397.935557][T16439] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1397.953880][T16439] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1397.988781][T11382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.000616][T10931] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1398.079121][T11382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.148290][T16439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.179888][T16439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.193922][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.201143][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.224280][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.231502][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.342371][T11382] bridge_slave_1: left allmulticast mode [ 1398.349342][T11382] bridge_slave_1: left promiscuous mode [ 1398.355196][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.369538][T11382] bridge_slave_0: left allmulticast mode [ 1398.375215][T11382] bridge_slave_0: left promiscuous mode [ 1398.381413][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.665011][ T5987] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1398.682629][ T5987] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1398.694812][ T5987] asix 8-1:0.0: probe with driver asix failed with error -71 [ 1398.748212][ T5987] usb 8-1: USB disconnect, device number 30 [ 1398.853912][T10931] em28xx 9-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 1398.862725][T10931] em28xx 9-1:0.0: failed to read eeprom (err=-5) [ 1398.869765][T10931] em28xx 9-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1398.892818][T11382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.907814][T11382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.918913][T11382] bond0 (unregistering): Released all slaves [ 1398.965480][T10931] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1398.973443][T10931] em28xx 9-1:0.0: dvb set to bulk mode. [ 1399.006850][ T5987] em28xx 9-1:0.0: Binding DVB extension [ 1399.029885][T10931] usb 9-1: USB disconnect, device number 8 [ 1399.058803][T10931] em28xx 9-1:0.0: Disconnecting em28xx [ 1399.255923][ T5987] em28xx 9-1:0.0: Registering input extension [ 1399.289548][T10931] em28xx 9-1:0.0: Closing input extension [ 1399.342705][T10931] em28xx 9-1:0.0: Freeing device [ 1400.279118][T16439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.847217][T12346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1400.870427][T12346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1400.883992][T12346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1400.896579][T12346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1400.904982][T12346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1402.024496][ T30] audit: type=1400 audit(1748963339.552:876): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16548 comm="syz.8.2814" dest=20004 [ 1402.746358][T16539] lo speed is unknown, defaulting to 1000 [ 1403.012137][ T5838] Bluetooth: hci0: command tx timeout [ 1403.867711][T11382] hsr_slave_0: left promiscuous mode [ 1403.887232][T11382] hsr_slave_1: left promiscuous mode [ 1403.893380][T11382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.905627][ T918] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1403.910607][T11382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.941927][T11382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.963439][T11382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.023941][T11382] veth1_macvtap: left promiscuous mode [ 1404.029720][T11382] veth0_macvtap: left promiscuous mode [ 1404.051756][T11382] veth1_vlan: left promiscuous mode [ 1404.062597][T11382] veth0_vlan: left promiscuous mode [ 1404.105976][ T918] usb 6-1: Using ep0 maxpacket: 16 [ 1404.117653][ T918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.152642][ T918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.185120][ T918] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1404.211882][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.244139][ T918] usb 6-1: config 0 descriptor?? [ 1404.525913][T10931] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1404.696042][T10931] usb 8-1: Using ep0 maxpacket: 8 [ 1404.709332][T10931] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1404.720303][T10931] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1404.732537][T10931] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1404.744512][T10931] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1404.767538][T10931] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1404.782773][T10931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.031009][T10931] usb 8-1: GET_CAPABILITIES returned 0 [ 1405.039434][T11382] team0 (unregistering): Port device team_slave_1 removed [ 1405.047163][T10931] usbtmc 8-1:16.0: can't read capabilities [ 1405.085823][ T5838] Bluetooth: hci0: command tx timeout [ 1405.136152][T11382] team0 (unregistering): Port device team_slave_0 removed [ 1405.249386][ T5987] usb 8-1: USB disconnect, device number 31 [ 1405.853323][T16539] lo speed is unknown, defaulting to 1000 [ 1405.900887][T16439] veth0_vlan: entered promiscuous mode [ 1405.927010][T16439] veth1_vlan: entered promiscuous mode [ 1406.008657][T16439] veth0_macvtap: entered promiscuous mode [ 1406.041718][T16439] veth1_macvtap: entered promiscuous mode [ 1406.135247][T16439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.196893][T16439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.559765][T15572] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1406.623677][T16439] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.633669][ T918] usbhid 6-1:0.0: can't add hid device: -71 [ 1406.642759][ T918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1406.650686][T16439] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.662585][T16439] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.671862][ T918] usb 6-1: USB disconnect, device number 38 [ 1406.677977][T16439] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.746212][T15572] usb 8-1: Using ep0 maxpacket: 16 [ 1406.772485][T15572] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.796999][T15572] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.819070][T16581] netlink: 'syz.5.2823': attribute type 1 has an invalid length. [ 1406.836979][T15572] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1406.849003][T15572] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.867372][T15572] usb 8-1: config 0 descriptor?? [ 1407.913209][ T5838] Bluetooth: hci0: command tx timeout [ 1408.267439][T11382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.337479][T11382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.756752][T16592] rdma_rxe: rxe_newlink: failed to add lo [ 1409.107495][T16592] netlink: 'syz.5.2825': attribute type 1 has an invalid length. [ 1409.115490][T16592] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2825'. [ 1409.208688][ T30] audit: type=1400 audit(1748963346.712:877): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16594 comm="syz.8.2826" daddr=fc01:: dest=20002 [ 1409.301304][ T30] audit: type=1400 audit(1748963346.722:878): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16594 comm="syz.8.2826" daddr=fc01:: dest=20002 [ 1409.317944][T15572] usbhid 8-1:0.0: can't add hid device: -71 [ 1409.324658][T15572] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1409.358555][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.359681][T15572] usb 8-1: USB disconnect, device number 32 [ 1409.399655][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.840232][T16539] chnl_net:caif_netlink_parms(): no params data found [ 1409.965553][ T5838] Bluetooth: hci0: command tx timeout [ 1410.687024][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.702842][T16628] netlink: 'syz.9.2834': attribute type 1 has an invalid length. [ 1410.729255][T16539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.745714][T16539] bridge_slave_0: entered allmulticast mode [ 1410.753841][T16539] bridge_slave_0: entered promiscuous mode [ 1410.834581][T16629] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2834'. [ 1410.860137][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.879566][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.929821][T16539] bridge_slave_1: entered allmulticast mode [ 1411.017353][T16539] bridge_slave_1: entered promiscuous mode [ 1412.070083][T16539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.148316][T16539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.556451][T16642] rdma_rxe: rxe_newlink: failed to add lo [ 1412.576669][T16642] netlink: 'syz.8.2838': attribute type 1 has an invalid length. [ 1412.584529][T16642] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2838'. [ 1413.223211][T16539] team0: Port device team_slave_0 added [ 1413.273032][T16539] team0: Port device team_slave_1 added [ 1413.403880][T16539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.414976][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.468915][T16539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.681072][T16539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.692037][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.762497][T16539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.942111][T16539] hsr_slave_0: entered promiscuous mode [ 1413.960468][T16539] hsr_slave_1: entered promiscuous mode [ 1414.487250][ T918] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1414.667064][ T918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1414.696058][ T918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1414.713621][T16663] kvm: pic: non byte read [ 1414.718616][T16663] kvm: pic: non byte read [ 1414.724017][T16663] kvm: pic: non byte read [ 1414.728700][T16663] kvm: pic: non byte read [ 1414.733212][T16663] kvm: pic: non byte read [ 1414.738671][T16663] kvm: pic: level sensitive irq not supported [ 1414.738767][T16663] kvm: pic: non byte read [ 1414.759820][T16663] kvm: pic: non byte read [ 1414.771404][ T918] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1414.800986][T16663] kvm: pic: non byte read [ 1414.806049][ T918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.827027][T16663] kvm: pic: non byte read [ 1414.846060][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1414.861354][ T918] usb 6-1: Product: syz [ 1414.919664][ T918] usb 6-1: Manufacturer: syz [ 1414.935448][ T918] usb 6-1: SerialNumber: syz [ 1414.965974][ T918] usb 6-1: config 0 descriptor?? [ 1415.288467][ T918] usb 6-1: USB disconnect, device number 39 [ 1415.424480][T11244] udevd[11244]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.619423][T16539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1415.663246][T16539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1415.777063][T16539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1415.929511][T16539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1417.903458][T16539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.965037][T16539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.719206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.726354][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.860858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.868071][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.022359][T16683] netlink: 'syz.8.2849': attribute type 4 has an invalid length. [ 1419.685693][ T5966] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1419.791037][T16539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.545593][ T5966] usb 9-1: Using ep0 maxpacket: 16 [ 1420.553239][ T5966] usb 9-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 1420.556680][T16539] veth0_vlan: entered promiscuous mode [ 1420.579472][T16705] binder: BINDER_SET_CONTEXT_MGR already set [ 1420.584266][ T5966] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1420.590975][T16705] binder: 16704:16705 ioctl 4018620d 200000000040 returned -16 [ 1420.610608][ T5966] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1420.618658][T16539] veth1_vlan: entered promiscuous mode [ 1420.637129][ T5966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.659055][ T5966] usb 9-1: Product: syz [ 1420.663613][ T5966] usb 9-1: Manufacturer: syz [ 1420.673735][ T5966] usb 9-1: SerialNumber: syz [ 1420.889936][T16539] veth0_macvtap: entered promiscuous mode [ 1420.906636][ T5966] usb 9-1: 0:2 : does not exist [ 1420.908916][T16539] veth1_macvtap: entered promiscuous mode [ 1421.724879][ T5966] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1421.729170][T16539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.767729][T16539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.813872][ T5966] usb 9-1: USB disconnect, device number 9 [ 1421.813905][T16539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.852999][T16539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.873736][T16539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.886463][T16539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.907074][T11514] udevd[11514]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1422.075560][T16732] binder: 16731:16732 ioctl c0306201 2000000026c0 returned -14 [ 1422.163836][T15842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.182220][T15842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.234340][T15842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.250837][T15842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.261444][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2864'. [ 1422.294398][T16737] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2864'. [ 1422.316824][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2864'. [ 1422.339399][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2864'. [ 1422.645565][ T5944] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1422.798809][T15842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.823743][ T5944] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1422.865748][ T5944] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1422.894705][ T5944] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1422.924446][T15842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.943604][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.959220][T16745] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1422.990950][ T5944] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.240961][ T5966] usb 6-1: USB disconnect, device number 40 [ 1423.288700][T15842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.443484][T15842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.589501][T15842] bridge_slave_1: left allmulticast mode [ 1423.595196][T15842] bridge_slave_1: left promiscuous mode [ 1423.601237][T15842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.612033][T15842] bridge_slave_0: left allmulticast mode [ 1423.618149][T15842] bridge_slave_0: left promiscuous mode [ 1423.623892][T15842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.055099][T15842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.069943][T15842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.081134][T15842] bond0 (unregistering): Released all slaves [ 1426.302479][T12346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1426.313740][T12346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1426.325775][T12346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1426.347922][T12346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1426.360624][T12346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1426.670574][T16791] rdma_rxe: rxe_newlink: failed to add lo [ 1426.689492][T16791] netlink: 'syz.8.2878': attribute type 1 has an invalid length. [ 1426.697393][T16791] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2878'. [ 1427.292189][T16782] lo speed is unknown, defaulting to 1000 [ 1428.456025][T12346] Bluetooth: hci0: command tx timeout [ 1428.705509][T15842] hsr_slave_0: left promiscuous mode [ 1428.732700][T15842] hsr_slave_1: left promiscuous mode [ 1428.754494][T15842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.780946][T15842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.945608][T15842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.955075][T15842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.285088][T15842] veth1_macvtap: left promiscuous mode [ 1429.309955][T15842] veth0_macvtap: left promiscuous mode [ 1429.336172][T15842] veth1_vlan: left promiscuous mode [ 1429.342322][T15842] veth0_vlan: left promiscuous mode [ 1430.525591][T12346] Bluetooth: hci0: command tx timeout [ 1430.715880][ T918] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1431.229277][ T918] usb 10-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1431.242626][ T918] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1431.302819][ T918] usb 10-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1431.321091][ T918] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.364585][ T918] usb 10-1: config 0 descriptor?? [ 1431.918071][T15842] team0 (unregistering): Port device team_slave_1 removed [ 1431.991056][T15842] team0 (unregistering): Port device team_slave_0 removed [ 1432.615647][T12346] Bluetooth: hci0: command tx timeout [ 1432.623003][T16782] lo speed is unknown, defaulting to 1000 [ 1432.714136][ T918] usbhid 10-1:0.0: can't add hid device: -71 [ 1432.735419][ T918] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1432.763916][ T918] usb 10-1: USB disconnect, device number 2 [ 1432.958708][T16854] tipc: Enabled bearer , priority 0 [ 1433.140318][T16859] picdev_write: 26 callbacks suppressed [ 1433.140341][T16859] kvm: pic: non byte write [ 1433.187190][T16854] syzkaller0: entered promiscuous mode [ 1433.203036][T16854] syzkaller0: entered allmulticast mode [ 1433.209540][ T5816] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1433.238205][T16854] tipc: Resetting bearer [ 1433.279594][T16852] tipc: Resetting bearer [ 1433.365455][ T5816] usb 9-1: Using ep0 maxpacket: 16 [ 1433.373709][ T5816] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.375537][T16863] CIFS: iocharset name too long [ 1433.386854][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1433.559750][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1433.681814][ T5816] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1433.705468][ T5816] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1433.771446][ T5816] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1433.796064][ T5816] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1433.804365][ T5816] usb 9-1: Manufacturer: syz [ 1433.928393][ T5816] usb 9-1: config 0 descriptor?? [ 1434.243371][ T30] audit: type=1400 audit(1748963371.782:879): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16869 comm="syz.5.2903" daddr=fe80::bb dest=20000 [ 1434.273657][ T5816] rc_core: IR keymap rc-hauppauge not found [ 1434.280476][ T5816] Registered IR keymap rc-empty [ 1434.295914][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1434.325653][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1434.348438][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1434.363664][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input31 [ 1434.399288][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1434.444484][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1434.500373][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1434.574975][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1434.740662][T12346] Bluetooth: hci0: command tx timeout [ 1434.901266][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1435.055574][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1435.076298][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1435.095578][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1435.115653][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1435.145515][ T5816] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1435.171109][ T5816] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1435.184328][ T5816] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1435.205520][ T5816] usb 9-1: USB disconnect, device number 10 [ 1436.610530][ T30] audit: type=1400 audit(1748963374.152:880): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16893 comm="syz.8.2910" dest=2 [ 1437.529153][ T5883] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1437.695468][ T5883] usb 9-1: Using ep0 maxpacket: 8 [ 1437.711806][ T5883] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1437.722088][ T5883] usb 9-1: config 0 has no interface number 0 [ 1437.730917][ T5883] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1437.743662][ T5883] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1437.754748][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.771179][ T5883] usb 9-1: config 0 descriptor?? [ 1437.793177][ T5883] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1438.102799][T16852] tipc: Disabling bearer [ 1438.499962][ T5883] usb 9-1: USB disconnect, device number 11 [ 1438.614021][T16910] rdma_rxe: rxe_newlink: failed to add lo [ 1438.634053][T16910] netlink: 'syz.9.2914': attribute type 1 has an invalid length. [ 1438.642143][T16910] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2914'. [ 1439.337675][T16782] chnl_net:caif_netlink_parms(): no params data found [ 1439.581098][T16918] binder: BINDER_SET_CONTEXT_MGR already set [ 1439.606945][T16918] binder: 16917:16918 ioctl 4018620d 200000000040 returned -16 [ 1441.951966][T16935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1442.048976][T16782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.075447][T16782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.105835][T16782] bridge_slave_0: entered allmulticast mode [ 1442.113809][T16782] bridge_slave_0: entered promiscuous mode [ 1442.166902][T16782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.194033][T16782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.298040][T16782] bridge_slave_1: entered allmulticast mode [ 1442.695987][T16782] bridge_slave_1: entered promiscuous mode [ 1443.951067][T16782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.974085][T16782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.271115][T16782] team0: Port device team_slave_0 added [ 1444.281135][T16782] team0: Port device team_slave_1 added [ 1444.318858][T16782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.326197][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.353404][T16782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.386449][T16963] rdma_rxe: rxe_newlink: failed to add lo [ 1444.404351][T16963] netlink: 'syz.5.2928': attribute type 1 has an invalid length. [ 1444.412363][T16963] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2928'. [ 1444.542639][T16782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.594327][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.789593][T16782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1444.877552][T16782] hsr_slave_0: entered promiscuous mode [ 1444.884286][T16782] hsr_slave_1: entered promiscuous mode [ 1445.226547][ T30] audit: type=1800 audit(1748963382.762:881): pid=16972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2926" name="/" dev="9p" ino=2 res=0 errno=0 [ 1445.592073][T16974] syz.8.2932 (16974): drop_caches: 2 [ 1447.496655][T16782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1447.511750][T16782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1447.600102][T16782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1447.637811][T16782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1447.644797][ T30] audit: type=1400 audit(1748963385.152:882): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=16997 comm="syz.7.2939" daddr=::ffff:172.20.20.0 [ 1447.822673][T17002] binder_alloc: 17001: binder_alloc_buf, no vma [ 1447.977737][T16782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.029296][T16782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.316296][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.323531][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.379569][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.386727][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.114628][T16782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.199106][T16782] veth0_vlan: entered promiscuous mode [ 1451.222705][T16782] veth1_vlan: entered promiscuous mode [ 1451.309979][T16782] veth0_macvtap: entered promiscuous mode [ 1451.434270][T16782] veth1_macvtap: entered promiscuous mode [ 1451.672708][T16782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.703883][T16782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.758202][T16782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.769593][ T5987] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1451.792014][T16782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.820622][T16782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.832152][T16782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.937995][ T5987] usb 10-1: Using ep0 maxpacket: 16 [ 1451.943461][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.968508][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.977329][ T5987] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1451.988288][ T5987] usb 10-1: config 0 has no interface number 0 [ 1451.994601][ T5987] usb 10-1: too many endpoints for config 0 interface 1 altsetting 114: 40, using maximum allowed: 30 [ 1452.008590][ T5987] usb 10-1: config 0 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 1452.023351][ T5987] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1452.034182][ T5987] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1452.050933][ T5987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.064824][T15842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.073727][T15842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.081869][ T5987] usb 10-1: Product: syz [ 1452.085507][ T5883] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1452.095744][ T5987] usb 10-1: Manufacturer: syz [ 1452.115380][ T5987] usb 10-1: SerialNumber: syz [ 1452.130539][ T5987] usb 10-1: config 0 descriptor?? [ 1452.273017][ T5883] usb 9-1: config 0 has no interfaces? [ 1452.291778][ T5883] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1452.302269][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.320333][ T5883] usb 9-1: config 0 descriptor?? [ 1452.371642][ T5987] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1452.545898][T17053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.554777][T17053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.763322][ T5942] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.904401][ T5942] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.995770][ T5987] gspca_spca1528: reg_w err -71 [ 1453.025599][ T5987] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1453.028261][ T5942] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.071853][ T5987] usb 10-1: USB disconnect, device number 3 [ 1453.113120][ T5944] usb 9-1: USB disconnect, device number 12 [ 1453.287097][ T5942] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.694377][ T5942] bridge_slave_1: left allmulticast mode [ 1453.704508][ T5942] bridge_slave_1: left promiscuous mode [ 1453.717960][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.732327][ T5942] bridge_slave_0: left allmulticast mode [ 1453.742143][ T5942] bridge_slave_0: left promiscuous mode [ 1453.750961][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.231689][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.244297][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.256295][ T5942] bond0 (unregistering): Released all slaves [ 1457.009487][T17089] xt_CT: No such helper "snmp_trap" [ 1458.752486][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1458.770488][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1458.782308][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1458.802549][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1458.813577][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1459.839713][T17108] lo speed is unknown, defaulting to 1000 [ 1460.137590][ T5883] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1460.318426][ T5942] hsr_slave_0: left promiscuous mode [ 1460.337534][ T5942] hsr_slave_1: left promiscuous mode [ 1460.414361][ T5883] usb 10-1: config 0 has no interfaces? [ 1460.424100][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.463406][ T5883] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1460.475710][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.499572][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.509164][ T5883] usb 10-1: Product: syz [ 1460.513459][ T5883] usb 10-1: Manufacturer: syz [ 1460.537771][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.545231][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.562152][ T5883] usb 10-1: SerialNumber: syz [ 1460.607246][ T5883] usb 10-1: config 0 descriptor?? [ 1460.794977][ T5944] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1460.857935][ T5942] veth1_macvtap: left promiscuous mode [ 1460.863545][ T5942] veth0_macvtap: left promiscuous mode [ 1461.160255][ T5942] veth1_vlan: left promiscuous mode [ 1461.164836][ T5944] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1461.175519][ T5942] veth0_vlan: left promiscuous mode [ 1461.735728][ T5838] Bluetooth: hci0: command tx timeout [ 1462.577496][T17152] binder: 17151:17152 ioctl c0306201 200000001d40 returned -14 [ 1462.581716][ T5987] usb 10-1: USB disconnect, device number 4 [ 1463.906129][ T5838] Bluetooth: hci0: command tx timeout [ 1465.426988][ T5987] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1465.975409][T12346] Bluetooth: hci0: command tx timeout [ 1466.414891][T17171] syz0: rxe_newlink: already configured on lo [ 1466.433930][T17171] netlink: 'syz.7.2990': attribute type 1 has an invalid length. [ 1466.442078][T17171] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2990'. [ 1466.875344][ T5987] usb 9-1: Using ep0 maxpacket: 32 [ 1466.905422][ T5987] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1466.913488][ T5987] usb 9-1: config 0 has no interface number 0 [ 1466.985454][ T5987] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1467.015476][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.023546][ T5987] usb 9-1: Product: syz [ 1467.075238][ T5987] usb 9-1: Manufacturer: syz [ 1467.079975][ T5987] usb 9-1: SerialNumber: syz [ 1467.109224][ T5987] usb 9-1: config 0 descriptor?? [ 1467.139194][ T5987] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1467.152536][ T5987] usb 9-1: selecting invalid altsetting 1 [ 1467.209460][ T5987] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1467.278145][ T5987] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1467.345694][T15572] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1467.353951][ T5987] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1467.404982][ T5987] usb 9-1: media controller created [ 1467.417923][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 1467.522552][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1467.611400][T15572] usb 8-1: Using ep0 maxpacket: 16 [ 1467.637233][T15572] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.666003][T15572] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.683483][T15572] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1467.693859][T15572] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.709461][T15572] usb 8-1: config 0 descriptor?? [ 1467.718362][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 1468.045905][T12346] Bluetooth: hci0: command tx timeout [ 1468.464296][T17164] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1468.567745][ T5987] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1468.583297][ T5987] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1468.654534][ T5987] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1469.980151][ T5987] usb 9-1: USB disconnect, device number 13 [ 1470.273135][T15572] usbhid 8-1:0.0: can't add hid device: -71 [ 1470.280103][T15572] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1470.310173][T15572] usb 8-1: USB disconnect, device number 33 [ 1470.685683][T17200] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1470.697882][T17200] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 1470.710793][T17200] kvm: pic: single mode not supported [ 1470.710819][T17200] kvm: pic: level sensitive irq not supported [ 1470.730503][T17200] kvm: pic: single mode not supported [ 1470.738009][T17200] kvm: pic: level sensitive irq not supported [ 1470.743624][T17200] kvm: pic: single mode not supported [ 1470.750126][T17200] kvm: pic: level sensitive irq not supported [ 1470.755950][T17200] kvm: pic: single mode not supported [ 1470.762106][T17200] kvm: pic: level sensitive irq not supported [ 1470.769130][T17200] kvm: pic: single mode not supported [ 1471.022294][T17108] lo speed is unknown, defaulting to 1000 [ 1472.380861][T17217] rdma_rxe: rxe_newlink: failed to add lo [ 1472.388969][T17217] netlink: 'syz.5.3002': attribute type 1 has an invalid length. [ 1472.396863][T17217] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3002'. [ 1474.013529][T17108] chnl_net:caif_netlink_parms(): no params data found [ 1474.395855][ T5944] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1474.529907][T17108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.548258][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.566794][T17108] bridge_slave_0: entered allmulticast mode [ 1474.574851][T17108] bridge_slave_0: entered promiscuous mode [ 1474.584517][T17108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.592156][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.595497][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 1474.599596][T17108] bridge_slave_1: entered allmulticast mode [ 1474.612566][T17108] bridge_slave_1: entered promiscuous mode [ 1474.632864][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.664234][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.682413][ T5944] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1474.704796][T17108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.717279][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.724443][T17108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.748951][ T5944] usb 6-1: config 0 descriptor?? [ 1474.856108][T17108] team0: Port device team_slave_0 added [ 1474.877339][T17108] team0: Port device team_slave_1 added [ 1475.005985][T17108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.013567][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.043838][T17108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.062873][T17108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.078188][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.104149][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.547566][T17108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.767471][T17108] hsr_slave_0: entered promiscuous mode [ 1476.774716][T17108] hsr_slave_1: entered promiscuous mode [ 1477.046517][ T5944] usbhid 6-1:0.0: can't add hid device: -71 [ 1477.054338][ T5944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1477.092884][ T5944] usb 6-1: USB disconnect, device number 41 [ 1477.487818][T17270] rdma_rxe: rxe_newlink: failed to add lo [ 1477.506614][T17270] netlink: 'syz.5.3017': attribute type 1 has an invalid length. [ 1477.514435][T17270] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3017'. [ 1478.263364][T17108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1478.277809][T17108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1478.289519][T17108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1478.300604][T17108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1478.414569][T17108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.444299][T17108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.461953][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.469188][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.488332][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.495598][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.665495][T15572] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1478.818025][T15572] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.838523][T15572] usb 6-1: config 0 has no interfaces? [ 1478.844087][T15572] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1478.869207][T15572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.896467][T15572] usb 6-1: config 0 descriptor?? [ 1478.951263][T17108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.037555][T17108] veth0_vlan: entered promiscuous mode [ 1479.056167][T17108] veth1_vlan: entered promiscuous mode [ 1479.113310][T17108] veth0_macvtap: entered promiscuous mode [ 1479.133018][ T918] usb 6-1: USB disconnect, device number 42 [ 1479.171439][T17108] veth1_macvtap: entered promiscuous mode [ 1479.203390][T17108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.222651][T17108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.253736][T17108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.287781][T17108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.296680][T17108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.305901][T17108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.433698][ T6232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.482598][ T6232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.552263][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.567152][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.156590][T10931] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1480.337252][T10931] usb 6-1: Using ep0 maxpacket: 16 [ 1480.345795][T10931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.358128][T10931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.369338][T10931] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1480.378940][T10931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.390668][T10931] usb 6-1: config 0 descriptor?? [ 1481.239478][T17314] rdma_rxe: rxe_newlink: failed to add lo [ 1481.249126][T17314] netlink: 'syz.9.3030': attribute type 1 has an invalid length. [ 1481.257231][T17314] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3030'. [ 1482.322494][ T6013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.660457][ T6013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.813196][T10931] usbhid 6-1:0.0: can't add hid device: -71 [ 1482.824486][T10931] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1482.837890][T10931] usb 6-1: USB disconnect, device number 43 [ 1483.000301][ T6013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.083523][ T6013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.243447][ T6013] bridge_slave_1: left allmulticast mode [ 1483.249318][ T6013] bridge_slave_1: left promiscuous mode [ 1483.255067][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.264985][ T6013] bridge_slave_0: left allmulticast mode [ 1483.271475][ T6013] bridge_slave_0: left promiscuous mode [ 1483.277755][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.643679][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.664788][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.924080][ T6013] bond0 (unregistering): Released all slaves [ 1484.932571][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1484.947523][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1484.964210][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1484.980252][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1484.992221][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1485.137577][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1485.153137][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1485.162691][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1485.193410][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1485.201841][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1485.253595][T17334] kvm: kvm [17333]: vcpu0, guest rIP: 0x94f Unhandled WRMSR(0x187) = 0xb86600a000000000 [ 1485.350779][T17331] lo speed is unknown, defaulting to 1000 [ 1487.085635][T12346] Bluetooth: hci0: command tx timeout [ 1487.252206][T12346] Bluetooth: hci5: command tx timeout [ 1487.983082][T10931] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1488.165739][T10931] usb 6-1: Using ep0 maxpacket: 16 [ 1488.176901][T10931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.195415][T10931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.225413][T10931] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1488.234946][T10931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.264981][T10931] usb 6-1: config 0 descriptor?? [ 1489.170356][T12346] Bluetooth: hci0: command tx timeout [ 1489.328352][T12346] Bluetooth: hci5: command tx timeout [ 1490.345033][T17367] netlink: 'syz.9.3044': attribute type 1 has an invalid length. [ 1490.353298][T17367] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3044'. [ 1490.679603][T10931] usbhid 6-1:0.0: can't add hid device: -71 [ 1490.687788][T10931] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1490.715689][T10931] usb 6-1: USB disconnect, device number 44 [ 1491.252482][T12346] Bluetooth: hci0: command tx timeout [ 1491.412888][T12346] Bluetooth: hci5: command tx timeout [ 1491.868205][T17331] lo speed is unknown, defaulting to 1000 [ 1491.868278][T17335] lo speed is unknown, defaulting to 1000 [ 1492.278035][T17335] lo speed is unknown, defaulting to 1000 [ 1493.357363][T12346] Bluetooth: hci0: command tx timeout [ 1493.489292][T12346] Bluetooth: hci5: command tx timeout [ 1493.498581][ T30] audit: type=1400 audit(1748963431.032:883): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17382 comm="syz.5.3048" daddr=::ffff:172.20.20.187 [ 1493.507292][T17366] rdma_rxe: rxe_newlink: failed to add lo [ 1493.571549][T17331] chnl_net:caif_netlink_parms(): no params data found [ 1493.973953][ T30] audit: type=1326 audit(1748963431.502:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.151885][ T30] audit: type=1326 audit(1748963431.502:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.253596][ T30] audit: type=1326 audit(1748963431.502:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.353078][ T30] audit: type=1326 audit(1748963431.502:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.381756][ T30] audit: type=1326 audit(1748963431.000:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.415356][ T30] audit: type=1326 audit(1748963431.020:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.438188][ T6013] hsr_slave_0: left promiscuous mode [ 1494.444583][ T6013] hsr_slave_1: left promiscuous mode [ 1494.450519][ T30] audit: type=1326 audit(1748963431.020:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.473299][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.484799][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.500874][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.508678][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.519503][T17402] futex_wake_op: syz.7.3053 tries to shift op by 32; fix this program [ 1494.540463][ T30] audit: type=1326 audit(1748963431.020:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.567054][ T30] audit: type=1326 audit(1748963431.080:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17390 comm="syz.7.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bd8e969 code=0x7ffc0000 [ 1494.597483][ T6013] veth1_macvtap: left promiscuous mode [ 1494.603336][ T6013] veth0_macvtap: left promiscuous mode [ 1494.610097][ T6013] veth1_vlan: left promiscuous mode [ 1494.615785][ T6013] veth0_vlan: left promiscuous mode [ 1495.035628][T17409] rdma_rxe: rxe_newlink: failed to add lo [ 1495.055843][T17409] netlink: 'syz.9.3055': attribute type 1 has an invalid length. [ 1495.063682][T17409] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3055'. [ 1499.885593][ T6013] team0 (unregistering): Port device team_slave_1 removed [ 1500.165374][T15572] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1500.306331][ T6013] team0 (unregistering): Port device team_slave_0 removed [ 1500.355523][T15572] usb 10-1: Using ep0 maxpacket: 16 [ 1500.381852][T15572] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.448537][T15572] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1500.503175][T15572] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1500.534155][T15572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.566628][T15572] usb 10-1: Product: syz [ 1500.571029][T15572] usb 10-1: Manufacturer: syz [ 1500.595693][T15572] usb 10-1: SerialNumber: syz [ 1500.957314][T17448] rdma_rxe: rxe_newlink: failed to add lo [ 1500.983830][T17448] netlink: 'syz.5.3066': attribute type 1 has an invalid length. [ 1500.991802][T17448] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1501.406932][T15572] usb 10-1: 0:2 : does not exist [ 1502.037706][T15572] usb 10-1: USB disconnect, device number 5 [ 1503.265741][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1503.265760][ T30] audit: type=1400 audit(1748963440.270:896): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17465 comm="syz.5.3070" dest=2 [ 1505.137267][T17331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.175129][T17331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.226272][T17331] bridge_slave_0: entered allmulticast mode [ 1505.246939][T17331] bridge_slave_0: entered promiscuous mode [ 1505.306308][T17331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.313572][T17331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.332837][T17331] bridge_slave_1: entered allmulticast mode [ 1505.370026][T17331] bridge_slave_1: entered promiscuous mode [ 1505.554872][T17488] trusted_key: encrypted_key: insufficient parameters specified [ 1505.829244][T17331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1506.182912][T17331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.555429][T15572] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1507.341441][T15572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.362968][T15572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.446281][T15572] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1507.548710][T15572] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1507.571946][T17331] team0: Port device team_slave_0 added [ 1507.606391][T15572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.632542][T17331] team0: Port device team_slave_1 added [ 1507.843954][T17498] delete_channel: no stack [ 1508.238444][T15572] usb 6-1: config 0 descriptor?? [ 1508.432803][T17331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.440094][T17331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.466953][T17331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.483856][T17335] chnl_net:caif_netlink_parms(): no params data found [ 1509.521411][T15572] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 1509.534718][T17331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.551664][T17331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.594778][T15572] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1509.658142][T15572] usb 6-1: USB disconnect, device number 45 [ 1509.667360][T17331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.781748][T17515] fido_id[17515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1509.941718][T17331] hsr_slave_0: entered promiscuous mode [ 1509.951892][T17331] hsr_slave_1: entered promiscuous mode [ 1510.122259][T17335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.130930][T17335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.170698][T17335] bridge_slave_0: entered allmulticast mode [ 1510.192488][T17335] bridge_slave_0: entered promiscuous mode [ 1510.253067][T17335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.269589][T17335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.278207][T17335] bridge_slave_1: entered allmulticast mode [ 1510.289110][T17335] bridge_slave_1: entered promiscuous mode [ 1510.627702][ T5944] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1510.668730][T17335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.710472][T17335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.856195][ T5944] usb 10-1: Using ep0 maxpacket: 16 [ 1510.867123][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.902955][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.924039][ T5944] usb 10-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1510.937748][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.959953][ T5944] usb 10-1: config 0 descriptor?? [ 1511.002308][T17335] team0: Port device team_slave_0 added [ 1511.048000][T17335] team0: Port device team_slave_1 added [ 1511.658736][T17335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.680203][T17335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.748567][T17335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.830101][ T30] audit: type=1400 audit(1748963448.780:897): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17527 comm="syz.7.3086" daddr=ff01::1 dest=20002 [ 1512.061355][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 1513.228932][T17335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.237379][T17335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.266051][T17335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.484702][T17335] hsr_slave_0: entered promiscuous mode [ 1513.930112][ T5944] usbhid 10-1:0.0: can't add hid device: -71 [ 1513.936489][T17335] hsr_slave_1: entered promiscuous mode [ 1513.943699][T17335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.954161][T17335] Cannot create hsr debugfs directory [ 1513.957495][ T5944] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1513.995164][ T5944] usb 10-1: USB disconnect, device number 6 [ 1514.354600][T17331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1514.641462][T17331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1514.660680][T17331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1515.593115][T17331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1519.213858][T17331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.460505][T17331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.474524][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.481726][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.507908][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.515140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.688415][T17331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1520.597122][T17335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1520.713612][T17335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1520.761773][T17335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1520.816354][T17335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1521.253599][T17331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.127484][T17331] veth0_vlan: entered promiscuous mode [ 1522.195563][T17331] veth1_vlan: entered promiscuous mode [ 1522.251568][T17331] veth0_macvtap: entered promiscuous mode [ 1522.262361][T17331] veth1_macvtap: entered promiscuous mode [ 1522.300841][T17331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.414419][T17331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.843806][T17331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.035345][T17331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.044264][T17331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.057907][T17331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.151522][T17335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.679127][T11300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.788955][T11300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.742184][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.774210][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.790852][T17335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.856814][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.864018][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.882216][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.889437][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.986615][T17620] binder: 17617:17620 ioctl c0046209 0 returned -22 [ 1528.709001][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.134784][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.239042][T17335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.385707][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.613316][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.649012][T17335] veth0_vlan: entered promiscuous mode [ 1529.671135][T17335] veth1_vlan: entered promiscuous mode [ 1529.741580][T17335] veth0_macvtap: entered promiscuous mode [ 1529.770235][T17335] veth1_macvtap: entered promiscuous mode [ 1529.810913][ T12] bridge_slave_1: left allmulticast mode [ 1529.818453][ T12] bridge_slave_1: left promiscuous mode [ 1529.824774][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.835049][ T12] bridge_slave_0: left allmulticast mode [ 1529.841564][ T12] bridge_slave_0: left promiscuous mode [ 1529.847677][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.353473][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.365192][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.377670][ T12] bond0 (unregistering): Released all slaves [ 1530.413275][T17335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.444161][T17335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.468320][T17335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.480469][T17335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.489624][T17335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.500571][T17335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.344362][T17651] syzkaller0: entered promiscuous mode [ 1531.374966][T17651] syzkaller0: entered allmulticast mode [ 1532.977369][ T6232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.023662][ T6232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.161975][T12346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1533.174246][T12346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1533.182686][T12346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1533.192147][T12346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1533.200393][T12346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1533.360971][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.377933][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.455573][T17661] lo speed is unknown, defaulting to 1000 [ 1533.849711][T17661] lo speed is unknown, defaulting to 1000 [ 1534.846385][T16587] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1535.022434][T16587] usb 6-1: config 0 has no interfaces? [ 1535.039559][T16587] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1535.072776][T16587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.125580][T16587] usb 6-1: config 0 descriptor?? [ 1535.248643][T12346] Bluetooth: hci0: command tx timeout [ 1535.292021][ T12] hsr_slave_0: left promiscuous mode [ 1535.301776][ T12] hsr_slave_1: left promiscuous mode [ 1535.317644][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1535.325149][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.351215][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.366410][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.431537][ T12] veth1_macvtap: left promiscuous mode [ 1535.445442][ T12] veth0_macvtap: left promiscuous mode [ 1535.451164][ T12] veth1_vlan: left promiscuous mode [ 1535.458050][ T12] veth0_vlan: left promiscuous mode [ 1535.545042][ T5816] usb 6-1: USB disconnect, device number 46 [ 1537.333289][T12346] Bluetooth: hci0: command tx timeout [ 1538.525007][T17704] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1539.503086][T12346] Bluetooth: hci0: command tx timeout [ 1539.665391][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1539.882952][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1541.586401][T12346] Bluetooth: hci0: command tx timeout [ 1541.713407][T17728] kvm: pic: level sensitive irq not supported [ 1541.713564][T17728] kvm: pic: non byte read [ 1541.727903][T17728] kvm: pic: non byte read [ 1541.732270][T17728] kvm: pic: non byte read [ 1541.737808][T17728] kvm: pic: non byte read [ 1541.752503][T17728] kvm: pic: non byte read [ 1541.760842][T17728] kvm: pic: non byte read [ 1541.766082][T17728] kvm: pic: non byte read [ 1541.770443][T17728] kvm: pic: non byte read [ 1541.774786][T17728] kvm: pic: non byte read [ 1541.843369][T17728] kvm: pic: non byte read [ 1542.251593][T17734] usb usb9: usbfs: process 17734 (syz.9.3137) did not claim interface 0 before use [ 1542.480262][T17661] chnl_net:caif_netlink_parms(): no params data found [ 1542.671447][ T30] audit: type=1326 audit(1748963479.690:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1542.797198][ T30] audit: type=1326 audit(1748963479.690:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1542.836422][ T30] audit: type=1326 audit(1748963479.690:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1542.858411][ T30] audit: type=1326 audit(1748963479.690:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1542.880334][ T30] audit: type=1326 audit(1748963479.690:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1542.901999][ T30] audit: type=1326 audit(1748963479.690:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1543.026050][ T30] audit: type=1326 audit(1748963479.690:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1543.064204][ T30] audit: type=1326 audit(1748963479.690:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1543.846389][T17661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.854037][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.878356][ T30] audit: type=1326 audit(1748963479.690:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1543.948989][T17661] bridge_slave_0: entered allmulticast mode [ 1543.979588][ T30] audit: type=1326 audit(1748963479.690:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17738 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0bb818e969 code=0x7ffc0000 [ 1544.031736][T17661] bridge_slave_0: entered promiscuous mode [ 1544.070839][T17661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.094175][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.109705][T17661] bridge_slave_1: entered allmulticast mode [ 1544.121819][T17661] bridge_slave_1: entered promiscuous mode [ 1544.323496][T17661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.347059][T17661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.519513][T12346] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1544.532322][T12346] Bluetooth: hci5: Injecting HCI hardware error event [ 1544.544683][T12346] Bluetooth: hci5: hardware error 0x00 [ 1544.827935][T17661] team0: Port device team_slave_0 added [ 1544.929939][T17661] team0: Port device team_slave_1 added [ 1545.111653][T17661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.160278][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1545.188861][T17661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.225682][T17661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.232766][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1545.266934][T17661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.902152][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3147'. [ 1546.707114][T12346] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1547.671698][T17776] hsr_slave_0: left promiscuous mode [ 1547.680103][T17776] hsr_slave_1: left promiscuous mode [ 1548.028831][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1548.028852][ T30] audit: type=1800 audit(1748963485.030:922): pid=17766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3145" name="bus" dev="ramfs" ino=77405 res=0 errno=0 [ 1548.037644][T17661] hsr_slave_0: entered promiscuous mode [ 1548.109710][T17661] hsr_slave_1: entered promiscuous mode [ 1551.541413][T10932] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1551.697107][T10932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.712161][T10932] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1551.726697][T10932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.739750][T10932] usb 6-1: config 0 descriptor?? [ 1551.757138][T10932] pwc: Askey VC010 type 2 USB webcam detected. [ 1552.362804][T17818] lo speed is unknown, defaulting to 1000 [ 1552.772244][T10932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1552.832672][T17818] lo speed is unknown, defaulting to 1000 [ 1553.039666][T10932] pwc: recv_control_msg error -32 req 02 val 2700 [ 1553.071161][T10932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1553.085130][T10932] pwc: recv_control_msg error -32 req 04 val 1000 [ 1553.103206][T10932] pwc: recv_control_msg error -32 req 04 val 1300 [ 1553.322374][T10932] pwc: recv_control_msg error -32 req 04 val 1400 [ 1554.185849][T10932] pwc: recv_control_msg error -32 req 02 val 2000 [ 1554.194665][T10932] pwc: recv_control_msg error -32 req 02 val 2100 [ 1554.206230][T10932] pwc: recv_control_msg error -32 req 04 val 1500 [ 1554.226568][T10932] pwc: recv_control_msg error -32 req 02 val 2500 [ 1554.240255][T10932] pwc: recv_control_msg error -32 req 02 val 2400 [ 1554.459981][T10932] pwc: recv_control_msg error -71 req 02 val 2900 [ 1554.510832][T10932] pwc: recv_control_msg error -71 req 02 val 2800 [ 1554.538167][T10932] pwc: recv_control_msg error -71 req 04 val 1100 [ 1554.572016][T10932] pwc: recv_control_msg error -71 req 04 val 1200 [ 1554.732680][T17661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1554.735700][T10932] pwc: Registered as video103. [ 1554.824838][T10932] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 1555.024978][T10932] usb 6-1: USB disconnect, device number 47 [ 1556.695969][T17661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1559.215720][T17661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1559.277281][T17661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1561.388637][T17661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1561.603634][T17856] netlink: 'syz.5.3166': attribute type 11 has an invalid length. [ 1562.134272][T17661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.193208][T11300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.200438][T11300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.278383][T11300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.285590][T11300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1562.507489][T17661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1564.714884][T17661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1564.899760][T17661] veth0_vlan: entered promiscuous mode [ 1564.935017][T17661] veth1_vlan: entered promiscuous mode [ 1566.026465][T17661] veth0_macvtap: entered promiscuous mode [ 1566.036606][T17661] veth1_macvtap: entered promiscuous mode [ 1566.057978][T17661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1566.219536][T17661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.341003][T17661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.616966][T17661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.838274][T17896] rdma_rxe: rxe_newlink: failed to add lo [ 1566.859975][T17896] netlink: 'syz.2.3175': attribute type 1 has an invalid length. [ 1566.867898][T17896] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3175'. [ 1567.308868][T17661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.459390][T17661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.014720][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.042207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.162482][T17160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.543691][T17160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.071842][T17934] /dev/nullb0: Can't open blockdev [ 1573.782274][ T6013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.909342][ T6013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.033061][ T6013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.139379][ T6013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.302073][ T6013] bridge_slave_1: left allmulticast mode [ 1575.308273][ T6013] bridge_slave_1: left promiscuous mode [ 1575.314758][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.331441][ T6013] bridge_slave_0: left allmulticast mode [ 1575.348798][ T6013] bridge_slave_0: left promiscuous mode [ 1575.354602][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.130965][T17954] rdma_rxe: rxe_newlink: failed to add lo [ 1578.192290][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1578.204287][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1578.213269][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1578.592110][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1578.604799][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1581.788886][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3197'. [ 1582.537757][T17977] Bluetooth: hci0: command tx timeout [ 1582.855710][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.876101][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.887941][ T6013] bond0 (unregistering): Released all slaves [ 1583.287130][T17973] lo speed is unknown, defaulting to 1000 [ 1583.526399][T17973] lo speed is unknown, defaulting to 1000 [ 1583.779850][T17970] lo speed is unknown, defaulting to 1000 [ 1583.958360][T10931] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1584.132225][T10931] usb 10-1: Using ep0 maxpacket: 32 [ 1584.147337][T10931] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1584.164694][T10931] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1584.197459][T10931] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1584.222842][T10931] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1584.249969][T10931] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1584.267215][T10931] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1584.276756][T10931] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1584.288396][T17970] lo speed is unknown, defaulting to 1000 [ 1584.295621][T10931] usb 10-1: Product: syz [ 1584.308376][T10931] usb 10-1: Manufacturer: syz [ 1584.323358][T10931] usb 10-1: SerialNumber: syz [ 1584.342086][T10931] usb 10-1: config 0 descriptor?? [ 1584.367300][T10931] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1584.395586][T10931] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1584.605468][T17977] Bluetooth: hci0: command tx timeout [ 1584.677926][T10931] usb 10-1: USB disconnect, device number 7 [ 1584.694925][T10931] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1586.716077][T17977] Bluetooth: hci0: command tx timeout [ 1587.026347][T18020] rdma_rxe: rxe_newlink: failed to add lo [ 1588.225420][ T30] audit: type=1400 audit(1748963525.130:923): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=18018 comm="syz.5.3206" daddr=::1c9a:e7ff:fe9a:6f34 [ 1588.775319][T17977] Bluetooth: hci0: command tx timeout [ 1589.075046][ T6013] hsr_slave_0: left promiscuous mode [ 1589.176167][ T6013] hsr_slave_1: left promiscuous mode [ 1589.288447][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.526089][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.639874][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.018384][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.173316][ T6013] veth1_macvtap: left promiscuous mode [ 1590.179855][ T6013] veth0_macvtap: left promiscuous mode [ 1590.192804][ T6013] veth1_vlan: left promiscuous mode [ 1590.198297][ T6013] veth0_vlan: left promiscuous mode [ 1591.519268][T18045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1595.669973][ T6013] team0 (unregistering): Port device team_slave_1 removed [ 1596.119947][ T8698] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1596.165934][ T8698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1596.180577][ T8698] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1596.192174][ T8698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1596.200625][ T8698] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1596.255753][ T6013] team0 (unregistering): Port device team_slave_0 removed [ 1598.290017][ T8698] Bluetooth: hci6: command tx timeout [ 1600.365733][ T8698] Bluetooth: hci6: command tx timeout [ 1602.465309][ T8698] Bluetooth: hci6: command tx timeout [ 1603.114610][T18076] lo speed is unknown, defaulting to 1000 [ 1604.026892][T17970] chnl_net:caif_netlink_parms(): no params data found [ 1604.525771][ T8698] Bluetooth: hci6: command tx timeout [ 1605.332816][T18076] lo speed is unknown, defaulting to 1000 [ 1605.339068][T17970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.369050][T17970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.406234][T17970] bridge_slave_0: entered allmulticast mode [ 1605.422659][T17970] bridge_slave_0: entered promiscuous mode [ 1605.431243][T17970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.438470][T17970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.449596][T17970] bridge_slave_1: entered allmulticast mode [ 1605.482934][T17970] bridge_slave_1: entered promiscuous mode [ 1607.009348][ T6013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.215054][T17970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.276380][T17970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.399581][T18158] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3240'. [ 1608.549242][ T6013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.582753][T18153] bond0: entered promiscuous mode [ 1608.588522][T18153] bond_slave_0: entered promiscuous mode [ 1608.594400][T18153] bond_slave_1: entered promiscuous mode [ 1608.676797][ T6013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.729295][T17970] team0: Port device team_slave_0 added [ 1609.518088][T17970] team0: Port device team_slave_1 added [ 1609.712084][ T6013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.099232][T17970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.107760][T17970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.133737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1610.923746][T17970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.974602][T17970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.983112][T17970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.045817][T17970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.408650][T17970] hsr_slave_0: entered promiscuous mode [ 1611.418841][T17970] hsr_slave_1: entered promiscuous mode [ 1611.564985][ T6013] bridge_slave_1: left allmulticast mode [ 1611.581450][ T6013] bridge_slave_1: left promiscuous mode [ 1611.593729][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.611821][ T6013] bridge_slave_0: left allmulticast mode [ 1611.621577][ T6013] bridge_slave_0: left promiscuous mode [ 1611.629295][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.336180][ T30] audit: type=1326 audit(1748963551.350:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18188 comm="syz.5.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851a58e969 code=0x7fc00000 [ 1618.374404][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.394901][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.411348][ T6013] bond0 (unregistering): Released all slaves [ 1619.678321][T18076] chnl_net:caif_netlink_parms(): no params data found [ 1620.085603][T15572] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1620.219159][ T30] audit: type=1400 audit(1748963557.190:925): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=18241 comm="syz.7.3262" daddr=::ffff:172.20.20.170 dest=20002 [ 1620.455127][T15572] usb 10-1: config 0 has an invalid interface number: 49 but max is 0 [ 1620.524848][T15572] usb 10-1: config 0 has no interface number 0 [ 1620.553067][T15572] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 1620.655284][T15572] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.679328][T15572] usb 10-1: config 0 descriptor?? [ 1621.676443][ T5883] usb 10-1: USB disconnect, device number 8 [ 1622.264144][T18076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.282446][T18076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.306401][T18076] bridge_slave_0: entered allmulticast mode [ 1622.347417][T18076] bridge_slave_0: entered promiscuous mode [ 1622.416063][ T6013] hsr_slave_0: left promiscuous mode [ 1622.423896][ T6013] hsr_slave_1: left promiscuous mode [ 1622.446929][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.466757][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.485428][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.975695][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1623.179499][ T6013] veth1_macvtap: left promiscuous mode [ 1623.185097][ T6013] veth0_macvtap: left promiscuous mode [ 1623.211120][ T6013] veth1_vlan: left promiscuous mode [ 1623.230065][ T6013] veth0_vlan: left promiscuous mode [ 1623.275554][ T31] INFO: task syz.8.2995:17191 blocked for more than 143 seconds. [ 1623.283334][ T31] Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 [ 1624.426463][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1624.441688][ T31] task:syz.8.2995 state:D stack:24352 pid:17191 tgid:17189 ppid:15545 task_flags:0x400140 flags:0x00004006 [ 1624.454025][ T31] Call Trace: [ 1624.457656][ T31] [ 1624.460621][ T31] __schedule+0x16a2/0x4cb0 [ 1624.465589][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1624.470656][ T31] ? schedule+0x165/0x360 [ 1624.475027][ T31] ? __lock_acquire+0xab9/0xd20 [ 1624.630422][ T31] ? __pfx___schedule+0x10/0x10 [ 1624.651636][ T31] ? schedule+0x91/0x360 [ 1624.885342][ T31] schedule+0x165/0x360 [ 1624.889586][ T31] netfs_wait_for_request+0x1f0/0x600 [ 1624.894994][ T31] ? __pfx_netfs_write_collection+0x10/0x10 [ 1624.945324][ T31] ? __pfx_netfs_wait_for_request+0x10/0x10 [ 1624.959875][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1624.966754][ T31] netfs_unbuffered_write_iter_locked+0x52a/0x910 [ 1624.973460][ T31] netfs_unbuffered_write_iter+0x4c4/0x660 [ 1624.984439][ T31] do_iter_readv_writev+0x56b/0x7f0 [ 1625.011595][ T31] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1625.038346][ T31] ? rcu_read_lock_any_held+0xb3/0x120 [ 1625.055371][ T31] vfs_writev+0x31a/0x960 [ 1625.109152][ T31] ? __lock_acquire+0xab9/0xd20 [ 1625.129948][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 1625.150998][ T31] ? __fget_files+0x2a/0x420 [ 1625.188179][ T31] ? __fget_files+0x3a0/0x420 [ 1625.197605][ T31] ? __fget_files+0x2a/0x420 [ 1625.207749][ T31] do_writev+0x14d/0x2d0 [ 1625.220189][ T31] ? __pfx_do_writev+0x10/0x10 [ 1625.236675][ T31] ? rcu_is_watching+0x15/0xb0 [ 1625.248091][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1625.258205][ T31] do_syscall_64+0xfa/0x3b0 [ 1625.267390][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1625.278653][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.292122][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1625.302191][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.320051][ T31] RIP: 0033:0x7f14e778e969 [ 1625.335332][ T31] RSP: 002b:00007f14e8691038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1625.363983][ T31] RAX: ffffffffffffffda RBX: 00007f14e79b5fa0 RCX: 00007f14e778e969 [ 1625.402177][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006 [ 1625.447910][ T31] RBP: 00007f14e7810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1625.464562][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1625.473079][ T31] R13: 0000000000000000 R14: 00007f14e79b5fa0 R15: 00007fffd347cb78 [ 1625.484346][ T31] [ 1625.490131][ T31] [ 1625.490131][ T31] Showing all locks held in the system: [ 1625.531247][ T31] 1 lock held by khungtaskd/31: [ 1625.555014][ T31] #0: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1625.601459][ T31] 2 locks held by getty/5589: [ 1625.625479][ T31] #0: ffff8880345500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1625.650572][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1625.711043][ T31] 4 locks held by kworker/u8:10/6013: [ 1625.755363][ T31] 3 locks held by kworker/u8:13/11382: [ 1625.763213][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1625.799762][ T31] #1: ffffc90003cb7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1625.826752][ T31] #2: ffffffff8f4fb5c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1625.850641][ T31] 3 locks held by syz.8.2995/17191: [ 1625.861592][ T31] #0: ffff88805bf35978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 1625.884988][ T31] #1: ffff88806fbb4428 (sb_writers#26){.+.+}-{0:0}, at: vfs_writev+0x288/0x960 [ 1625.915458][ T31] #2: ffff8880478d1498 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: netfs_start_io_direct+0x1ef/0x230 [ 1625.933163][ T31] 7 locks held by syz-executor/17970: [ 1625.944370][ T31] #0: ffff888023764428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1625.956884][ T31] #1: ffff88802dfa8488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1625.974291][ T31] #2: ffff8880272ff008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1625.984846][ T31] #3: ffffffff8ed994c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1625.996384][ T31] #4: ffff8880537ad0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 1626.011325][ T31] #5: ffff88806ba66250 (&devlink->lock_key#35){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1626.021936][ T31] #6: ffffffff8f4fb5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1626.031906][ T31] 1 lock held by syz-executor/18076: [ 1626.037603][ T31] #0: ffffffff8f4fb5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1626.047535][ T31] 3 locks held by syz.7.3265/18262: [ 1626.052919][ T31] [ 1626.068776][ T31] ============================================= [ 1626.068776][ T31] [ 1626.100685][ T31] NMI backtrace for cpu 0 [ 1626.100703][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1626.100721][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1626.100731][ T31] Call Trace: [ 1626.100738][ T31] [ 1626.100745][ T31] dump_stack_lvl+0x189/0x250 [ 1626.100782][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1626.100800][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1626.100821][ T31] ? __pfx__printk+0x10/0x10 [ 1626.100844][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1626.100865][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1626.100882][ T31] ? _printk+0xcf/0x120 [ 1626.100899][ T31] ? __pfx__printk+0x10/0x10 [ 1626.100914][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1626.100934][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1626.100955][ T31] watchdog+0xfee/0x1030 [ 1626.100975][ T31] ? watchdog+0x1de/0x1030 [ 1626.100999][ T31] kthread+0x711/0x8a0 [ 1626.101018][ T31] ? __pfx_watchdog+0x10/0x10 [ 1626.101035][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.101052][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1626.101072][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1626.101092][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.101113][ T31] ret_from_fork+0x3f9/0x770 [ 1626.101135][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1626.101176][ T31] ? __switch_to_asm+0x39/0x70 [ 1626.101189][ T31] ? __switch_to_asm+0x33/0x70 [ 1626.101203][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.101220][ T31] ret_from_fork_asm+0x1a/0x30 [ 1626.101246][ T31] [ 1626.101252][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1626.260837][ C1] NMI backtrace for cpu 1 [ 1626.260854][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1626.260874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1626.260885][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1626.260915][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 c5 2a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1626.260931][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1626.260946][ C1] RAX: fc0c006e619a7e00 RBX: ffffffff81974f88 RCX: fc0c006e619a7e00 [ 1626.260959][ C1] RDX: 0000000000000001 RSI: ffffffff8d95cd79 RDI: ffffffff8be1a180 [ 1626.260972][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 1626.260985][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fb8f0 [ 1626.260998][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad3b40 [ 1626.261009][ C1] FS: 0000000000000000(0000) GS:ffff888125d93000(0000) knlGS:0000000000000000 [ 1626.261023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1626.261039][ C1] CR2: 00005584fba7ca08 CR3: 0000000078ec6000 CR4: 00000000003526f0 [ 1626.261054][ C1] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 1626.261064][ C1] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1626.261075][ C1] Call Trace: [ 1626.261083][ C1] [ 1626.261090][ C1] default_idle+0x13/0x20 [ 1626.261107][ C1] default_idle_call+0x74/0xb0 [ 1626.261124][ C1] do_idle+0x1e8/0x510 [ 1626.261154][ C1] ? __pfx_do_idle+0x10/0x10 [ 1626.261178][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1626.261211][ C1] cpu_startup_entry+0x44/0x60 [ 1626.261237][ C1] start_secondary+0x101/0x110 [ 1626.261276][ C1] common_startup_64+0x13e/0x147 [ 1626.261303][ C1] [ 1626.826593][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1626.833503][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 1626.844976][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1626.855037][ T31] Call Trace: [ 1626.858329][ T31] [ 1626.861283][ T31] dump_stack_lvl+0x99/0x250 [ 1626.865920][ T31] ? __asan_memcpy+0x40/0x70 [ 1626.870542][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1626.875779][ T31] ? __pfx__printk+0x10/0x10 [ 1626.880401][ T31] panic+0x2db/0x790 [ 1626.884330][ T31] ? __pfx_panic+0x10/0x10 [ 1626.888777][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1626.894617][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1626.900022][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1626.906225][ T31] watchdog+0x102d/0x1030 [ 1626.910606][ T31] ? watchdog+0x1de/0x1030 [ 1626.915073][ T31] kthread+0x711/0x8a0 [ 1626.919178][ T31] ? __pfx_watchdog+0x10/0x10 [ 1626.923889][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.928526][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1626.933762][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1626.938996][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.943616][ T31] ret_from_fork+0x3f9/0x770 [ 1626.948235][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1626.953381][ T31] ? __switch_to_asm+0x39/0x70 [ 1626.958165][ T31] ? __switch_to_asm+0x33/0x70 [ 1626.962948][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.967572][ T31] ret_from_fork_asm+0x1a/0x30 [ 1626.972377][ T31] [ 1626.975903][ T31] Kernel Offset: disabled [ 1626.980226][ T31] Rebooting in 86400 seconds..