last executing test programs: 22.420105904s ago: executing program 1 (id=135): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) unshare(0x2c020400) semop(0x0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) unshare(0x40400) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) syz_usb_connect$uac3(0x0, 0x89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) eventfd2(0x2074a6, 0x801) syz_open_procfs(0x0, 0x0) 17.191932919s ago: executing program 1 (id=141): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000001c0)={0x8}) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x20000000) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x9074, 0x4, 0x8001}, &(0x7f0000000440)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r3, 0x9, 0x10}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16.83575804s ago: executing program 2 (id=143): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001080)={&(0x7f0000000f80)=[0x0, 0x0], &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000010c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000ec0)=[0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x4, 0x0, r8}) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000200)=@l2={0x1f, 0x400, @none, 0x1ff, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="87ee88c59562b5f4623ec5cc4a13bc6de5", 0x11}, {&(0x7f0000000400)="71f6485a5da09b0cde83f4f9e1522c4d53d1db87057febbd7d24e1462ac9d3f5ceeabe9af81bee55cc636f2bba2d065be1544e73be6d675ef0ce7df253535f652977610cfd2f79c19a24d0749b181e1aa6a5d64fe669a0ec9206a2c016be765ce9132b5d6d84263e60ae421ed31de163a13672963feede0730617dd8f79c319ec4f6f7e1d1d85c49de85803a4965f0328ee175587c3516a623c8d6e50ad5d5425d094c951da0d56579b3f8735f075f9121261dbab9008cd75a9f26c596cfae00153a0e8f7d1a165902c3120102c02062b26da3c3b8f06bdb3f69adafcf23d8f4547ae8176ec2a9bd1acb67abb701deb6dee1eda68ac81a8f67", 0xf9}, {&(0x7f0000000500)="04dca1e6d7a1b3d6b11e09e185a3511b2595cbdb7f53d1a96d13f82d34fc82acdc03429850500db51a80a28e2c619ba76cf793ae3f5e30ec33885be8b1d4300bc6dd57a8fd97b58ffc25088157f170e377a3bd757523142a7a77078116e0ca2760e9de", 0x63}, {0x0}], 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="58000000000000000301000002000000d3782934a409ddcde44388227926ce131ef1b3716cddc573e249efae40200a34f44961f4834935744ba6f5b0f96571c11914cfd27e0cfe1ea1846e06e5340d06870000000010000000000000000801000004000000000000", @ANYRESHEX=r6, @ANYBLOB="d1e1dadf0c73f8d50d9a7b11d096eb8955570aa4ac1b5446701d001ff2e612c382d2f2a4eb3fbe1227e5e7fbeddbe5f97175f7f7ca0f1e77ebb1914031d97d2bc43a7346de2c431c8e0c839e69f93caff1334e00d46dbfa3e4c7179515137eb89d25c6fbbde6452214cfb56b987b3c585affda2538a6c206f2edc61112bd981ca7636aa7046e5d34728a900d0e934d666e106c96111a72b977eeec3be86cdca3c1ecd07b2225caff2035bb6fd9639983df21cc682d"], 0x68}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x40a200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r11 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000840)={r10, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 14.725527287s ago: executing program 1 (id=145): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0xb, 0x4}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000540)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r1, 0x3, 0x9, 0x3fff}) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x2, 0x0, 0x6, 0x9, 0x1, 0x80, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc819aba103497651}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x0, 0x8, 0xb396}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x2, 0x4, 0xb, 0x6}, {0x0, 0x1, 0xc}, {0x5, 0x4, 0x2, 0x2}, {0x4, 0x3, 0x10, 0x6}, {0x1, 0x3, 0x3, 0x7}], 0x10, 0x3ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.083963869s ago: executing program 0 (id=147): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x2c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000092870000000000000000", @ANYRESOCT], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 13.075080739s ago: executing program 3 (id=148): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) 12.143421368s ago: executing program 0 (id=149): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) unshare(0x2c020400) semop(0x0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) unshare(0x40400) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) syz_usb_connect$uac3(0x0, 0x89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) eventfd2(0x2074a6, 0x801) syz_open_procfs(0x0, 0x0) 11.515812038s ago: executing program 3 (id=150): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="07000000708258636d1d3e010100000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c048b324524c50"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64, @ANYRES64, @ANYRES8=r1, @ANYRES16, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16, @ANYBLOB="c3ee34a531693b6057483351e22540f64ef3a4ce2c3e472ff7760f729edb41799e50e112cc770c7e42db2309a06725190ea582951e0bbe8793c8ef15ea666cfc883dd0301a32f3ad4f7caf5b8b4a34cba35b0a1dd2b808b6e3ea5809a7d3167e96724985c909f8ff11ac078ef1a5460c4f7b24ada3e06cebc152408cf384e7ef6a71efcfca1558d87942c848174f86c43e842eb30ad3e64004f38e33e006d01ee8519d09f2066532c0c9f830fc674accffc3ce7671fd5a52f39ba02afd7e7d38c3a9df932a75798f86e20887fed186d36e29d6f5e5b9fc2a755b8bba8c457e2ec6c46a9cb9cd"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab"], 0xfe33) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 8.481747903s ago: executing program 3 (id=151): syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) 8.283947679s ago: executing program 0 (id=152): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a", 0x21}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc", 0x7c}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff93", 0x55}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.233943271s ago: executing program 3 (id=153): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000001c0)={0x8}) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x20000000) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x9074, 0x4, 0x8001}, &(0x7f0000000440)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r3, 0x9, 0x10}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.203290032s ago: executing program 2 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x20}}, 0x40000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pim6reg0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x7}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 6.810788656s ago: executing program 2 (id=155): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x1, 0x48042) writev(r1, &(0x7f0000000c40), 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) syz_ublk_setup_io_uring(0x2f8f, &(0x7f0000002600)={0x0, 0xfaef, 0x20, 0x2, 0x247}, &(0x7f0000002680), 0x0, &(0x7f0000002700)) r3 = socket$inet(0x2, 0xa, 0x4) connect$can_j1939(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x1, 0x9, 0x2}, 0x10}}, 0x8010) setsockopt$sock_int(r3, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, 0x0, 0x40}, 0xfffe) 6.68019113s ago: executing program 0 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000990000000000fbdbdf250a106b00000000f41f00020014000200fc020000000000000000000000000001140001002001000000000000000000090000000008001700"], 0x4c}}, 0x40000) 6.660454571s ago: executing program 3 (id=157): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x2c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000092870000000000000000", @ANYRESOCT], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 6.186235495s ago: executing program 1 (id=158): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) 5.855470386s ago: executing program 0 (id=159): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="07000000708258636d1d3e010100000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c048b324524c50"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64, @ANYRES64, @ANYRES8=r1, @ANYRES16, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16, @ANYBLOB="c3ee34a531693b6057483351e22540f64ef3a4ce2c3e472ff7760f729edb41799e50e112cc770c7e42db2309a06725190ea582951e0bbe8793c8ef15ea666cfc883dd0301a32f3ad4f7caf5b8b4a34cba35b0a1dd2b808b6e3ea5809a7d3167e96724985c909f8ff11ac078ef1a5460c4f7b24ada3e06cebc152408cf384e7ef6a71efcfca1558d87942c848174f86c43e842eb30ad3e64004f38e33e006d01ee8519d09f2066532c0c9f830fc674accffc3ce7671fd5a52f39ba02afd7e7d38c3a9df932a75798f86e20887fed186d36e29d6f5e5b9fc2a755b8bba8c457e2ec6c46a9cb9cd"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab"], 0xfe33) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.491740688s ago: executing program 3 (id=160): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) unshare(0x2c020400) semop(0x0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) unshare(0x40400) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) syz_usb_connect$uac3(0x0, 0x89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) eventfd2(0x2074a6, 0x801) syz_open_procfs(0x0, 0x0) 4.226763667s ago: executing program 1 (id=161): syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) 4.13623598s ago: executing program 2 (id=162): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 4.115465091s ago: executing program 0 (id=163): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 3.83814506s ago: executing program 2 (id=164): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a", 0x21}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc", 0x7c}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff93", 0x55}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.528495092s ago: executing program 1 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(0x0, 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) write(r3, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000003c0)={0xe, "87c9c91fe0c3cbbd1ccf165a2d040489b8555b47a6f2a18bb255f0dc7b038c6241270a0d1ed6b3dcd3a11f67a4602c13e4bbe96f56744b4ba88b88f61985f1f2"}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x34, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_TUPLE={0x4}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xde}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x0, 0x9}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000000024080003"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 0s ago: executing program 2 (id=166): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0xb, 0x4}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000540)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r1, 0x3, 0x9, 0x3fff}) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x2, 0x0, 0x6, 0x9, 0x1, 0x80, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc819aba103497651}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x0, 0x8, 0xb396}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x2, 0x4, 0xb, 0x6}, {0x0, 0x1, 0xc}, {0x5, 0x4, 0x2, 0x2}, {0x4, 0x3, 0x10, 0x6}, {0x1, 0x3, 0x3, 0x7}], 0x10, 0x3ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 77.601113][ T5766] cgroup: Unknown subsys name 'net' [ 77.713380][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.390319][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.025925][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.039697][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.048242][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.056921][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.065659][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.073753][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.093121][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.101761][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.105367][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.116928][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.124474][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.133441][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.138033][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.142547][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.155794][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.163412][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.172006][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.181878][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.189178][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.189498][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.197324][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.205427][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.217498][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.226020][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.749974][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 81.763233][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.839477][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 81.886449][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 82.005459][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.012636][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.021117][ T5780] bridge_slave_0: entered allmulticast mode [ 82.029542][ T5780] bridge_slave_0: entered promiscuous mode [ 82.091298][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.098621][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.106277][ T5780] bridge_slave_1: entered allmulticast mode [ 82.113306][ T5780] bridge_slave_1: entered promiscuous mode [ 82.143759][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.151099][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.158516][ T5777] bridge_slave_0: entered allmulticast mode [ 82.168348][ T5777] bridge_slave_0: entered promiscuous mode [ 82.177140][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.184302][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.191672][ T5783] bridge_slave_0: entered allmulticast mode [ 82.199307][ T5783] bridge_slave_0: entered promiscuous mode [ 82.207966][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.215270][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.222591][ T5783] bridge_slave_1: entered allmulticast mode [ 82.230038][ T5783] bridge_slave_1: entered promiscuous mode [ 82.266724][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.273892][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.282085][ T5777] bridge_slave_1: entered allmulticast mode [ 82.290001][ T5777] bridge_slave_1: entered promiscuous mode [ 82.311064][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.321878][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.329800][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.337131][ T5786] bridge_slave_0: entered allmulticast mode [ 82.344157][ T5786] bridge_slave_0: entered promiscuous mode [ 82.353291][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.360547][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.368133][ T5786] bridge_slave_1: entered allmulticast mode [ 82.375472][ T5786] bridge_slave_1: entered promiscuous mode [ 82.406352][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.461128][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.473651][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.496760][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.509581][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.521546][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.544458][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.560536][ T5780] team0: Port device team_slave_0 added [ 82.602422][ T5780] team0: Port device team_slave_1 added [ 82.622601][ T5777] team0: Port device team_slave_0 added [ 82.661849][ T5786] team0: Port device team_slave_0 added [ 82.669642][ T5777] team0: Port device team_slave_1 added [ 82.679701][ T5783] team0: Port device team_slave_0 added [ 82.689317][ T5783] team0: Port device team_slave_1 added [ 82.710385][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.717469][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.743879][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.758246][ T5786] team0: Port device team_slave_1 added [ 82.768481][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.775539][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.802478][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.893284][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.903581][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.930237][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.943120][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.950561][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.976710][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.988690][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.996135][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.022503][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.035028][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.042023][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.069023][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.108572][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.115976][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.142954][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.155030][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.162011][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.188184][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.223926][ T5780] hsr_slave_0: entered promiscuous mode [ 83.230505][ T5780] hsr_slave_1: entered promiscuous mode [ 83.254062][ T5777] hsr_slave_0: entered promiscuous mode [ 83.261343][ T5777] hsr_slave_1: entered promiscuous mode [ 83.268003][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.276416][ T5777] Cannot create hsr debugfs directory [ 83.285769][ T5087] Bluetooth: hci2: command tx timeout [ 83.291484][ T5087] Bluetooth: hci3: command tx timeout [ 83.297466][ T5779] Bluetooth: hci1: command tx timeout [ 83.297489][ T5789] Bluetooth: hci0: command tx timeout [ 83.400432][ T5783] hsr_slave_0: entered promiscuous mode [ 83.407878][ T5783] hsr_slave_1: entered promiscuous mode [ 83.414237][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.421966][ T5783] Cannot create hsr debugfs directory [ 83.493892][ T5786] hsr_slave_0: entered promiscuous mode [ 83.500436][ T5786] hsr_slave_1: entered promiscuous mode [ 83.507382][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.515036][ T5786] Cannot create hsr debugfs directory [ 83.903085][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.919553][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.937714][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.948652][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.022848][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.043132][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.054429][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.070408][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.179948][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.191230][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.203785][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.225336][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.301628][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.318251][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.329697][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.342779][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.420763][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.497229][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.549618][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.557194][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.576577][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.614568][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.621791][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.634313][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.648056][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.663321][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.700211][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.707521][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.730872][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.751305][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.758537][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.784281][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.809345][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.816670][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.830775][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.837978][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.865581][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.872733][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.903818][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.911046][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.089264][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.365738][ T5779] Bluetooth: hci0: command tx timeout [ 85.371395][ T5779] Bluetooth: hci2: command tx timeout [ 85.381527][ T5087] Bluetooth: hci1: command tx timeout [ 85.386154][ T5782] Bluetooth: hci3: command tx timeout [ 85.450925][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.599463][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.611094][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.660392][ T5780] veth0_vlan: entered promiscuous mode [ 85.680453][ T5780] veth1_vlan: entered promiscuous mode [ 85.714464][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.783568][ T5780] veth0_macvtap: entered promiscuous mode [ 85.817179][ T5777] veth0_vlan: entered promiscuous mode [ 85.829289][ T5786] veth0_vlan: entered promiscuous mode [ 85.838883][ T5780] veth1_macvtap: entered promiscuous mode [ 85.886780][ T5786] veth1_vlan: entered promiscuous mode [ 85.910363][ T5777] veth1_vlan: entered promiscuous mode [ 85.928149][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.946943][ T5783] veth0_vlan: entered promiscuous mode [ 85.987921][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.001083][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.012812][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.025802][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.034591][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.055497][ T5783] veth1_vlan: entered promiscuous mode [ 86.102892][ T5777] veth0_macvtap: entered promiscuous mode [ 86.140457][ T5786] veth0_macvtap: entered promiscuous mode [ 86.167934][ T5777] veth1_macvtap: entered promiscuous mode [ 86.188129][ T5786] veth1_macvtap: entered promiscuous mode [ 86.230698][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.242388][ T5783] veth0_macvtap: entered promiscuous mode [ 86.249792][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.284450][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.296895][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.309245][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.348032][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.358886][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.371101][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.383434][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.395286][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.405389][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.416138][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.427919][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.438402][ T5783] veth1_macvtap: entered promiscuous mode [ 86.455907][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.470388][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.481254][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.492694][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.493089][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.513622][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.523584][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.534546][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.551855][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.561847][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.571341][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.580595][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.590091][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.616613][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.635076][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.647350][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.659254][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.671236][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.682655][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.697082][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.711203][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.722750][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.734943][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.745834][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.761219][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.792804][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.808467][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.817685][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.827437][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.857333][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.892625][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.914732][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.923514][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.318090][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.331621][ T5842] syz_tun: entered allmulticast mode [ 87.440551][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.480381][ T5789] Bluetooth: hci3: command tx timeout [ 87.486130][ T5789] Bluetooth: hci2: command tx timeout [ 87.491757][ T5789] Bluetooth: hci1: command tx timeout [ 87.499278][ T5782] Bluetooth: hci0: command tx timeout [ 88.959116][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.101338][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.403196][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.525545][ T5782] Bluetooth: hci0: command tx timeout [ 89.531201][ T5087] Bluetooth: hci2: command tx timeout [ 89.536881][ T5779] Bluetooth: hci3: command tx timeout [ 89.542418][ T5789] Bluetooth: hci1: command tx timeout [ 89.561946][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.983829][ T4126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.008018][ T4126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.080908][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.123390][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.131319][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.131365][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.521904][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.649990][ T5859] blktrace: Concurrent blktraces are not allowed on sg0 [ 92.847615][ T971] cfg80211: failed to load regulatory.db [ 93.455738][ T5881] blktrace: Concurrent blktraces are not allowed on sg0 [ 93.538826][ T5888] fuse: Unknown parameter 'euid>00000000000000060929' [ 95.045441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 95.455067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.642335][ T5893] mmap: syz.0.11 (5893) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.804128][ T5896] syz.2.12[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.862507][ T5907] blktrace: Concurrent blktraces are not allowed on sg0 [ 97.432977][ T5918] Zero length message leads to an empty skb [ 97.457169][ T5918] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.574905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.677628][ T5928] blktrace: Concurrent blktraces are not allowed on sg0 [ 101.035099][ T5515] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.206777][ T5515] usb 4-1: device descriptor read/64, error -71 [ 101.376674][ T5933] fuse: Unknown parameter 'euid>00000000000000060929' [ 103.135028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 103.218486][ T5515] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.479530][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 105.226922][ T5952] blktrace: Concurrent blktraces are not allowed on sg0 [ 105.313513][ T5957] blktrace: Concurrent blktraces are not allowed on sg0 [ 106.871369][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.253403][ T9] usb 4-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 107.470190][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.553764][ T5971] fuse: Unknown parameter 'euid>00000000000000060929' [ 107.600432][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 108.350565][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 108.451859][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.644953][ T9] usb 4-1: Product: syz [ 108.690687][ T9] usb 4-1: Manufacturer: syz [ 108.748992][ T9] usb 4-1: SerialNumber: syz [ 111.053738][ T9] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 111.132436][ T9] usb 4-1: incorrect wMaxPacketSize 0xc00 for BADD profile [ 111.280043][ T9] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 111.346962][ T9] usb 4-1: USB disconnect, device number 4 [ 111.439237][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.218855][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 113.458240][ T6009] blktrace: Concurrent blktraces are not allowed on sg0 [ 114.283176][ T6017] fuse: Unknown parameter 'euid>00000000000000060929' [ 115.525384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 118.993520][ T6045] blktrace: Concurrent blktraces are not allowed on sg0 [ 119.837788][ T6050] fuse: Unknown parameter 'euid>00000000000000060929' [ 121.054941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.464694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.915003][ T5818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.162126][ T5818] usb 4-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 122.172659][ T5818] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 122.187501][ T5818] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 122.229966][ T5818] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 122.315386][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.323481][ T5818] usb 4-1: Product: syz [ 122.344735][ T5818] usb 4-1: Manufacturer: syz [ 122.349497][ T5818] usb 4-1: SerialNumber: syz [ 123.459803][ T5818] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 123.468475][ T5818] usb 4-1: incorrect wMaxPacketSize 0xc00 for BADD profile [ 123.519085][ T5818] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 123.546041][ T5818] usb 4-1: USB disconnect, device number 5 [ 123.663907][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.385616][ T5840] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.028833][ T5840] usb 4-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 128.115706][ T5840] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.920077][ T5840] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 129.155330][ T5840] usb 4-1: string descriptor 0 read error: -71 [ 129.245812][ T5840] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 129.322265][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.518824][ T5840] usb 4-1: can't set config #1, error -71 [ 129.550429][ T5840] usb 4-1: USB disconnect, device number 6 [ 131.124949][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.317323][ T9] usb 2-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 131.334735][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 131.356816][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 131.401998][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 131.429500][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.449833][ T9] usb 2-1: Product: syz [ 131.454786][ T9] usb 2-1: Manufacturer: syz [ 131.469616][ T9] usb 2-1: SerialNumber: syz [ 132.416015][ T9] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 132.436021][ T9] usb 2-1: incorrect wMaxPacketSize 0xc00 for BADD profile [ 133.611231][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.624769][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.731823][ T9] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 133.759282][ T9] usb 2-1: USB disconnect, device number 2 [ 133.835477][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.865566][ T6136] fuse: Unknown parameter 'euid>00000000000000060929' [ 133.885665][ T6137] blktrace: Concurrent blktraces are not allowed on sg0 [ 137.610923][ T5816] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.102688][ T5816] usb 3-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 138.230925][ T5816] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 138.381915][ T5816] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 138.590611][ T5816] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 138.703265][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.811437][ T5816] usb 3-1: Product: syz [ 138.879765][ T5816] usb 3-1: Manufacturer: syz [ 138.938181][ T5816] usb 3-1: SerialNumber: syz [ 140.793265][ T5816] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 140.805160][ T5816] usb 3-1: incorrect wMaxPacketSize 0xc00 for BADD profile [ 140.846332][ T5816] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 140.862284][ T5816] usb 3-1: USB disconnect, device number 2 [ 140.898344][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.534935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.158818][ T5840] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.522410][ T5840] usb 1-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 143.639620][ T5840] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.764058][ T5840] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 143.955529][ T5840] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 144.056957][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.169384][ T5840] usb 1-1: Product: syz [ 144.228865][ T5840] usb 1-1: Manufacturer: syz [ 144.283242][ T5840] usb 1-1: SerialNumber: syz [ 146.228533][ T5840] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 146.241243][ T5840] usb 1-1: incorrect wMaxPacketSize 0xc00 for BADD profile [ 146.569233][ T5840] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 146.615128][ T5840] usb 1-1: USB disconnect, device number 2 [ 146.731757][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.712359][ T6178] fuse: Unknown parameter 'euid>00000000000000060929' [ 149.978449][ T6187] blktrace: Concurrent blktraces are not allowed on sg0 [ 151.974866][ T5515] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.424812][ T5515] usb 2-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 153.869242][ T5515] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 153.931893][ T5515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 154.614669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 154.724666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.855253][ T5515] usb 2-1: string descriptor 0 read error: -71 [ 154.861724][ T5515] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 154.924806][ T5515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.977838][ T5515] usb 2-1: can't set config #1, error -71 [ 155.016267][ T5515] usb 2-1: USB disconnect, device number 3 [ 157.013208][ T6218] fuse: Unknown parameter 'euid>00000000000000060929' [ 158.677627][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 161.704936][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.435089][ T8] usb 4-1: device descriptor read/all, error -71 [ 165.186819][ T6253] loop8: detected capacity change from 0 to 7 [ 165.202504][ T6253] Dev loop8: unable to read RDB block 7 [ 165.210326][ T6253] loop8: unable to read partition table [ 165.216436][ T6253] loop8: partition table beyond EOD, truncated [ 165.222692][ T6253] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 168.096923][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 168.295932][ T6277] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 170.054911][ T5816] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.208236][ T5816] usb 4-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 171.744415][ T5816] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 171.784822][ T5816] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 171.837861][ T5816] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 172.017075][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.026052][ T5816] usb 4-1: Product: syz [ 172.030280][ T5816] usb 4-1: Manufacturer: syz [ 172.035404][ T5816] usb 4-1: SerialNumber: syz [ 172.069999][ T5816] usb 4-1: can't set config #1, error -71 [ 172.949549][ T5816] usb 4-1: USB disconnect, device number 9 [ 175.698398][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 177.817745][ T6336] syz.2.134 uses obsolete (PF_INET,SOCK_PACKET) [ 179.435029][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 179.919165][ T8] usb 2-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 181.053585][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 181.844566][ T6348] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.139'. [ 182.578483][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 182.792378][ T8] usb 2-1: string descriptor 0 read error: -71 [ 182.915436][ T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 182.924541][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.868994][ T8] usb 2-1: can't set config #1, error -71 [ 183.876607][ T8] usb 2-1: USB disconnect, device number 4 [ 185.599556][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 185.980982][ T6375] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 188.714948][ T971] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 190.336526][ T6401] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.150'. [ 194.478702][ T6431] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.159'. [ 194.675164][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.692492][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.404832][ T5840] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 198.219232][ T5840] usb 4-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 198.396520][ T5840] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 198.539777][ T5840] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42784, setting to 1024 [ 198.766634][ T5840] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 198.917745][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.070072][ T5840] usb 4-1: Product: syz [ 199.162678][ T5840] usb 4-1: Manufacturer: syz [ 199.249554][ T5840] usb 4-1: SerialNumber: syz [ 199.947436][ T6454] ================================================================== [ 199.955584][ T6454] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 199.963327][ T6454] Read of size 8 at addr ffff888144b61e18 by task syz.1.165/6454 [ 199.971094][ T6454] [ 199.973465][ T6454] CPU: 1 PID: 6454 Comm: syz.1.165 Not tainted syzkaller #0 [ 199.980786][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.990897][ T6454] Call Trace: [ 199.994217][ T6454] [ 199.997190][ T6454] dump_stack_lvl+0x18c/0x250 [ 200.001913][ T6454] ? __lock_acquire+0x7d40/0x7d40 [ 200.006990][ T6454] ? show_regs_print_info+0x20/0x20 [ 200.012242][ T6454] ? load_image+0x420/0x420 [ 200.016797][ T6454] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 200.022362][ T6454] ? __virt_addr_valid+0x18c/0x540 [ 200.027517][ T6454] ? __virt_addr_valid+0x469/0x540 [ 200.032676][ T6454] print_report+0xa8/0x210 [ 200.037221][ T6454] ? dvb_device_open+0xca/0x370 [ 200.042122][ T6454] kasan_report+0x117/0x150 [ 200.046677][ T6454] ? dvb_device_open+0xca/0x370 [ 200.051578][ T6454] dvb_device_open+0xca/0x370 [ 200.056317][ T6454] chrdev_open+0x5cc/0x6a0 [ 200.060781][ T6454] ? cd_forget+0x160/0x160 [ 200.065240][ T6454] ? fsnotify_perm+0x3ed/0x5e0 [ 200.070052][ T6454] ? cd_forget+0x160/0x160 [ 200.074513][ T6454] do_dentry_open+0x8c6/0x1500 [ 200.079323][ T6454] path_openat+0x27f1/0x3230 [ 200.083965][ T6454] ? do_sys_openat2+0xda/0x1d0 [ 200.088774][ T6454] ? verify_lock_unused+0x140/0x140 [ 200.094012][ T6454] ? do_filp_open+0x430/0x430 [ 200.098724][ T6454] ? asan.module_dtor+0x20/0x20 [ 200.103653][ T6454] do_filp_open+0x1f5/0x430 [ 200.108196][ T6454] ? vfs_tmpfile+0x490/0x490 [ 200.112836][ T6454] ? preempt_schedule_common+0x82/0xc0 [ 200.118346][ T6454] ? _raw_spin_unlock+0x3a/0x40 [ 200.123245][ T6454] ? alloc_fd+0x58f/0x630 [ 200.127636][ T6454] do_sys_openat2+0x134/0x1d0 [ 200.132364][ T6454] ? do_sys_open+0xe0/0xe0 [ 200.136831][ T6454] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 200.142859][ T6454] ? lock_chain_count+0x20/0x20 [ 200.147759][ T6454] __x64_sys_openat+0x139/0x160 [ 200.152658][ T6454] do_syscall_64+0x55/0xb0 [ 200.157116][ T6454] ? clear_bhb_loop+0x40/0x90 [ 200.161833][ T6454] ? clear_bhb_loop+0x40/0x90 [ 200.166552][ T6454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.172527][ T6454] RIP: 0033:0x7f801d75d68e [ 200.176996][ T6454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.196648][ T6454] RSP: 002b:00007f801e599b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.205200][ T6454] RAX: ffffffffffffffda RBX: 00007f801e59a6c0 RCX: 00007f801d75d68e [ 200.213250][ T6454] RDX: 0000000000040002 RSI: 00007f801e599c00 RDI: ffffffffffffff9c [ 200.221279][ T6454] RBP: 00007f801e599c00 R08: 0000000000000000 R09: 0000000000000000 [ 200.229297][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 200.237398][ T6454] R13: 00007f801da16218 R14: 00007f801da16180 R15: 00007ffff77c6b68 [ 200.245424][ T6454] [ 200.248478][ T6454] [ 200.250831][ T6454] Allocated by task 1: [ 200.254919][ T6454] kasan_set_track+0x4e/0x70 [ 200.259546][ T6454] __kasan_kmalloc+0x8f/0xa0 [ 200.264175][ T6454] dvb_register_device+0x2fd/0x2210 [ 200.269430][ T6454] dvb_register_frontend+0x649/0x930 [ 200.274756][ T6454] vidtv_bridge_probe+0x9ab/0xf80 [ 200.279824][ T6454] platform_probe+0x13b/0x1c0 [ 200.284630][ T6454] really_probe+0x25b/0xb20 [ 200.289183][ T6454] __driver_probe_device+0x1ef/0x390 [ 200.294518][ T6454] driver_probe_device+0x4f/0x420 [ 200.299588][ T6454] __driver_attach+0x451/0x6e0 [ 200.304388][ T6454] bus_for_each_dev+0x235/0x2b0 [ 200.309283][ T6454] bus_add_driver+0x340/0x630 [ 200.313998][ T6454] driver_register+0x23a/0x310 [ 200.318803][ T6454] vidtv_bridge_init+0x3d/0x70 [ 200.323645][ T6454] do_one_initcall+0x242/0x790 [ 200.328452][ T6454] do_initcall_level+0x137/0x1f0 [ 200.333441][ T6454] do_initcalls+0x69/0xd0 [ 200.337819][ T6454] kernel_init_freeable+0x3ed/0x580 [ 200.343060][ T6454] kernel_init+0x1d/0x1c0 [ 200.347432][ T6454] ret_from_fork+0x48/0x80 [ 200.351888][ T6454] ret_from_fork_asm+0x11/0x20 [ 200.356691][ T6454] [ 200.359055][ T6454] Freed by task 6375: [ 200.363061][ T6454] kasan_set_track+0x4e/0x70 [ 200.367691][ T6454] kasan_save_free_info+0x2e/0x50 [ 200.372754][ T6454] ____kasan_slab_free+0x126/0x1e0 [ 200.377907][ T6454] slab_free_freelist_hook+0x130/0x1a0 [ 200.383411][ T6454] __kmem_cache_free+0xba/0x1e0 [ 200.388304][ T6454] dvb_device_open+0x2ee/0x370 [ 200.393122][ T6454] chrdev_open+0x5cc/0x6a0 [ 200.397571][ T6454] do_dentry_open+0x8c6/0x1500 [ 200.402385][ T6454] path_openat+0x27f1/0x3230 [ 200.407013][ T6454] do_filp_open+0x1f5/0x430 [ 200.411550][ T6454] do_sys_openat2+0x134/0x1d0 [ 200.416267][ T6454] __x64_sys_openat+0x139/0x160 [ 200.421159][ T6454] do_syscall_64+0x55/0xb0 [ 200.425614][ T6454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.431559][ T6454] [ 200.433918][ T6454] The buggy address belongs to the object at ffff888144b61e00 [ 200.433918][ T6454] which belongs to the cache kmalloc-256 of size 256 [ 200.448016][ T6454] The buggy address is located 24 bytes inside of [ 200.448016][ T6454] freed 256-byte region [ffff888144b61e00, ffff888144b61f00) [ 200.461772][ T6454] [ 200.464127][ T6454] The buggy address belongs to the physical page: [ 200.470600][ T6454] page:ffffea000512d800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x144b60 [ 200.480967][ T6454] head:ffffea000512d800 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 200.489942][ T6454] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 200.498057][ T6454] page_type: 0xffffffff() [ 200.502601][ T6454] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 200.511240][ T6454] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 200.519860][ T6454] page dumped because: kasan: bad access detected [ 200.526316][ T6454] page_owner tracks the page as allocated [ 200.532062][ T6454] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18692078049, free_ts 0 [ 200.551819][ T6454] post_alloc_hook+0x1c1/0x200 [ 200.556638][ T6454] get_page_from_freelist+0x1951/0x19e0 [ 200.562241][ T6454] __alloc_pages+0x1f0/0x460 [ 200.566902][ T6454] alloc_page_interleave+0x24/0x1e0 [ 200.572133][ T6454] alloc_slab_page+0x5d/0x160 [ 200.576852][ T6454] new_slab+0x87/0x2d0 [ 200.580963][ T6454] ___slab_alloc+0xc5d/0x12f0 [ 200.585683][ T6454] __kmem_cache_alloc_node+0x19e/0x250 [ 200.591184][ T6454] kmalloc_trace+0x2a/0xe0 [ 200.595647][ T6454] bus_add_driver+0x162/0x630 [ 200.600391][ T6454] driver_register+0x23a/0x310 [ 200.605199][ T6454] usb_register_driver+0x206/0x3d0 [ 200.610355][ T6454] uvc_init+0x27/0x50 [ 200.614375][ T6454] do_one_initcall+0x242/0x790 [ 200.619276][ T6454] do_initcall_level+0x137/0x1f0 [ 200.624263][ T6454] do_initcalls+0x69/0xd0 [ 200.628656][ T6454] page_owner free stack trace missing [ 200.634138][ T6454] [ 200.636486][ T6454] Memory state around the buggy address: [ 200.642138][ T6454] ffff888144b61d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.650314][ T6454] ffff888144b61d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.658493][ T6454] >ffff888144b61e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.666578][ T6454] ^ [ 200.671452][ T6454] ffff888144b61e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.679547][ T6454] ffff888144b61f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.687634][ T6454] ================================================================== [ 200.696880][ T6454] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.704130][ T6454] CPU: 1 PID: 6454 Comm: syz.1.165 Not tainted syzkaller #0 [ 200.711459][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.721586][ T6454] Call Trace: [ 200.724928][ T6454] [ 200.727894][ T6454] dump_stack_lvl+0x18c/0x250 [ 200.732616][ T6454] ? show_regs_print_info+0x20/0x20 [ 200.737871][ T6454] ? load_image+0x420/0x420 [ 200.742446][ T6454] panic+0x2dc/0x730 [ 200.746386][ T6454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 200.752589][ T6454] ? bpf_jit_dump+0xd0/0xd0 [ 200.757146][ T6454] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 200.763196][ T6454] ? _raw_spin_unlock+0x40/0x40 [ 200.768108][ T6454] ? dvb_device_open+0xca/0x370 [ 200.773007][ T6454] check_panic_on_warn+0x84/0xa0 [ 200.777985][ T6454] ? dvb_device_open+0xca/0x370 [ 200.782884][ T6454] end_report+0x6f/0x130 [ 200.787166][ T6454] kasan_report+0x128/0x150 [ 200.791713][ T6454] ? dvb_device_open+0xca/0x370 [ 200.796615][ T6454] dvb_device_open+0xca/0x370 [ 200.801341][ T6454] chrdev_open+0x5cc/0x6a0 [ 200.805817][ T6454] ? cd_forget+0x160/0x160 [ 200.810281][ T6454] ? fsnotify_perm+0x3ed/0x5e0 [ 200.815085][ T6454] ? cd_forget+0x160/0x160 [ 200.819541][ T6454] do_dentry_open+0x8c6/0x1500 [ 200.824447][ T6454] path_openat+0x27f1/0x3230 [ 200.829090][ T6454] ? do_sys_openat2+0xda/0x1d0 [ 200.833899][ T6454] ? verify_lock_unused+0x140/0x140 [ 200.839167][ T6454] ? do_filp_open+0x430/0x430 [ 200.843895][ T6454] ? asan.module_dtor+0x20/0x20 [ 200.848794][ T6454] do_filp_open+0x1f5/0x430 [ 200.853350][ T6454] ? vfs_tmpfile+0x490/0x490 [ 200.857978][ T6454] ? preempt_schedule_common+0x82/0xc0 [ 200.863492][ T6454] ? _raw_spin_unlock+0x3a/0x40 [ 200.868392][ T6454] ? alloc_fd+0x58f/0x630 [ 200.872771][ T6454] do_sys_openat2+0x134/0x1d0 [ 200.877498][ T6454] ? do_sys_open+0xe0/0xe0 [ 200.881958][ T6454] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 200.887982][ T6454] ? lock_chain_count+0x20/0x20 [ 200.892877][ T6454] __x64_sys_openat+0x139/0x160 [ 200.897780][ T6454] do_syscall_64+0x55/0xb0 [ 200.902234][ T6454] ? clear_bhb_loop+0x40/0x90 [ 200.906946][ T6454] ? clear_bhb_loop+0x40/0x90 [ 200.911661][ T6454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.917690][ T6454] RIP: 0033:0x7f801d75d68e [ 200.922147][ T6454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.941923][ T6454] RSP: 002b:00007f801e599b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.950376][ T6454] RAX: ffffffffffffffda RBX: 00007f801e59a6c0 RCX: 00007f801d75d68e [ 200.958389][ T6454] RDX: 0000000000040002 RSI: 00007f801e599c00 RDI: ffffffffffffff9c [ 200.966397][ T6454] RBP: 00007f801e599c00 R08: 0000000000000000 R09: 0000000000000000 [ 200.974405][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 200.982414][ T6454] R13: 00007f801da16218 R14: 00007f801da16180 R15: 00007ffff77c6b68 [ 200.990427][ T6454] [ 200.994079][ T6454] Kernel Offset: disabled [ 200.998422][ T6454] Rebooting in 86400 seconds..