last executing test programs: 7m53.938164816s ago: executing program 0 (id=975): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x749bc, 0x2}) fstat(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0xffffffffffffff4c) fanotify_init(0x40, 0x40c02) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) 7m48.915803506s ago: executing program 0 (id=986): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 7m48.818441996s ago: executing program 0 (id=987): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) r4 = io_uring_setup(0x678c, &(0x7f0000000100)={0x0, 0x1314, 0x2, 0x2, 0x2c2}) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(r1, 0x5) read$msr(0xffffffffffffffff, &(0x7f0000002fc0)=""/102400, 0x19000) 7m45.167058245s ago: executing program 0 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e21, 0x6, @mcast2, 0x10}, {0xa, 0x4e23, 0x3eb3, @mcast1, 0x8}, 0x1, {[0x8, 0x8, 0x6, 0xfffff801, 0x7, 0x2, 0x1, 0x478]}}, 0x5c) r5 = syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0x80885659, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r8, r9, 0x0, 0x2) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x1}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x220, &(0x7f0000000780)="$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") r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r11, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) 7m44.54616355s ago: executing program 0 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x44040) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'vlan0\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x38}}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0x0) 7m43.838501887s ago: executing program 0 (id=1001): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x400, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000002d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 7m43.257713317s ago: executing program 32 (id=1001): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x400, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000002d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 6m55.49397533s ago: executing program 1 (id=1165): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6m54.321734326s ago: executing program 1 (id=1168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) 6m49.111298471s ago: executing program 1 (id=1182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x208000, 0x0) wait4(r1, 0x0, 0x2, 0x0) 6m47.663956828s ago: executing program 1 (id=1183): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = userfaultfd(0x801) socket$inet_udplite(0x2, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x10010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) 6m45.934701504s ago: executing program 1 (id=1187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 6m41.560495794s ago: executing program 1 (id=1193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) socket$kcm(0x11, 0xa, 0x300) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000280)={{0x2, @name="92df8aa692b6176c5e5b8415146301caad6d3d743779d6e4aed87b5e0c0698e1"}, 0x8, 0x7fffffffffffffff, 0x6}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000440)="0dde6b72ef38133c940e41d7c8ecd8cc4e5d8a1e648c81df453f18ba7620098bc06df367edb914314bab0f3624ebdd91d63e75d96c5acf4d595e90036e2bcc6506518b8083d465f66a0ec526a331ac266568ac9e27d4c74b", 0x58, 0x4, &(0x7f0000000300)={0x11, 0x1a, r8, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x60, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 6m26.356844841s ago: executing program 33 (id=1193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) socket$kcm(0x11, 0xa, 0x300) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000280)={{0x2, @name="92df8aa692b6176c5e5b8415146301caad6d3d743779d6e4aed87b5e0c0698e1"}, 0x8, 0x7fffffffffffffff, 0x6}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000440)="0dde6b72ef38133c940e41d7c8ecd8cc4e5d8a1e648c81df453f18ba7620098bc06df367edb914314bab0f3624ebdd91d63e75d96c5acf4d595e90036e2bcc6506518b8083d465f66a0ec526a331ac266568ac9e27d4c74b", 0x58, 0x4, &(0x7f0000000300)={0x11, 0x1a, r8, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x60, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4m51.620466368s ago: executing program 5 (id=1587): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) personality(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 4m44.835877223s ago: executing program 5 (id=1603): socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) socket$kcm(0x10, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 4m43.560066202s ago: executing program 5 (id=1608): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x1ff, r0, 0x0}]) 4m43.101218165s ago: executing program 5 (id=1609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e21, 0x6, @mcast2, 0x10}, {0xa, 0x4e23, 0x3eb3, @mcast1, 0x8}, 0x1, {[0x8, 0x8, 0x6, 0xfffff801, 0x7, 0x2, 0x1, 0x478]}}, 0x5c) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0x80885659, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r6, r7, 0x0, 0x2) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r5) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x1}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x220, &(0x7f0000000780)="$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") r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) 4m42.717445127s ago: executing program 5 (id=1611): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffd, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x40004000}, 0x20000000) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) 4m40.415976245s ago: executing program 5 (id=1615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f0000000040)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 4m39.918397453s ago: executing program 34 (id=1615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f0000000040)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 3m2.483378705s ago: executing program 3 (id=1893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0x80885659, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x2) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) 2m59.53225866s ago: executing program 3 (id=1901): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write(r5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x200, 0x6, 0x2, 0xf137, 0x2, 0x5}}, {0xe, 0x2, [0x3a9, 0x1000, 0x0, 0x2, 0xc82]}}, {{0x1c, 0x1, {0x9, 0x5, 0x978c, 0x9, 0x2, 0x0, 0x1000, 0x4}}, {0xc, 0x2, [0x9, 0x7, 0x2e, 0x0]}}, {{0x1c, 0x1, {0xe, 0x6, 0x8, 0x3752ae84, 0x2, 0x800, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x9, 0x8, 0x2, 0x0, 0x1, 0x2, 0x2}}, {0x8, 0x2, [0xff, 0x2]}}]}]}, 0xd4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) 2m58.467088085s ago: executing program 3 (id=1904): rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$kcm(0x10, 0x2, 0x10) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x4fa6, @empty, 0x7}}, 0x4, 0xdbf, 0x5, 0x9, 0x4, 0x8, 0x3}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x2}, 0x8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="9e", 0x1, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) socket$kcm(0x10, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 2m55.527563833s ago: executing program 3 (id=1909): r0 = syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x3, 0x5987, &(0x7f0000005c00)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x5001, 0x0, 0x2}, 0x18, 0x0) kcmp(r1, r1, 0x6, r0, r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$BPF_BTF_GET_NEXT_ID(0x7, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7c, 0x42, 0x1d}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000000020000008002"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x8, 0x0) 2m51.418350003s ago: executing program 3 (id=1920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008aec1, &(0x7f00000000c0)=ANY=[]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x84, 0x1, 0x1, 0x600, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000480), 0x105981, 0x0) r6 = dup2(0xffffffffffffffff, r4) close_range(r6, 0xffffffffffffffff, 0x0) 2m50.243691755s ago: executing program 3 (id=1921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}, {}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x122008, 0x6, 0x800, 0x1, 0xfffffff7, 0x0, 0x0, 0x10, 0xe}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2m33.825850698s ago: executing program 35 (id=1921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}, {}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x122008, 0x6, 0x800, 0x1, 0xfffffff7, 0x0, 0x0, 0x10, 0xe}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2m4.865868085s ago: executing program 8 (id=2039): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m1.461738493s ago: executing program 8 (id=2048): add_key(&(0x7f0000001b80)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[], 0x70}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001940)=""/129, 0x81}], 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet(r7, &(0x7f0000001900)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000440)="c5ebdf634f9af5969f5bd561de649a566a97fa64fb1ef00f199ae3b56905a3240b2f89bf181af7dd1d37dbbba075bec9dfd1b71512cdbb07a98a7fd95b545d0faf938a32d3bfd0c9", 0x48}, {&(0x7f0000000500)="adb14561d85c160b5e9700a2e1ec2fcd23d733dd625a02d583bed3cb49cf37807a3eff77e5a88b1cf91cccacb54363492235687c05695d4112ede8a989ae43cb2ebfa84686e99b11846e04b513ca324008364e6f2081771a6838a757a3ac63e1101ee3538daae20343186495399d5a0e30c78de2fcfb9001de08dd142487ed7fdf4de4cf4cc723de02a88f98fa3057b2d62bad1199db99340bc4499e62f0e0a5dbad51896116a191777a403e8be541f7c398e9fb52afd568b1f59fe02338adf4c33d4043f305aff599f1bd7c5c36dab171a3c2fa80015111d17cf0d99b73445b6e59f64892577a014365dbad729fd7", 0xef}, {&(0x7f0000000600)}, {&(0x7f0000000700)="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", 0x800}, {0x0}, {&(0x7f0000001700)="c60e23ca5b440d87436bfdc227640be0269674cb0f1ad7e192a84e5467fe1be1870f858d9e9d939ca79497aa72f1c90cc844c3aca21813e8a7eae17871c17503fab45ebc29502b2c11a9633b3f26bed3b05d9dfb5b73197408c35d25458fe7217f687c07e85ecd2ceece1b9b24fae8f1a3ebbd4880db03e11d57179cfa0264daf942d3634fd529d0b2b88ce788de871c9c10c0df03b33bdfe5935ca2012e28a7872b173ddefb0101017175364d0e0bfa161e4c5960e30826253208bd0f3acd570d8a8501ca70c3891c8690c21b945d00", 0xd0}], 0x6, &(0x7f0000001880)=ANY=[@ANYBLOB="14080000000000000000000001000000fcffffff000000003000000000000000000000000700000001830b3be0000001ffffffff83076affffffff440cf9637e0a00000000000000140000000000000000000000020000000800000000"], 0x60}}], 0x1, 0x40400c0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r1, 0x0, 0x7ffff041, 0x0) 2m0.669228262s ago: executing program 8 (id=2052): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="746172676574205043493a313a31373a31642e04"], 0x16) 1m59.552084453s ago: executing program 8 (id=2058): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m54.431539163s ago: executing program 8 (id=2074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9027, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000400)='ext4_sync_file_enter\x00', r1, 0x0, 0xfffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000400)='ext4_sync_file_enter\x00', r0, 0x0, 0xfffffd}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1m53.837780517s ago: executing program 8 (id=2077): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 1m37.714047091s ago: executing program 36 (id=2077): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 5.615986123s ago: executing program 9 (id=2447): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x141042, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "ff0f00000000000600a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 5.295794799s ago: executing program 4 (id=2450): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000680)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x595, @void, @value}, 0x94) 5.101868176s ago: executing program 4 (id=2453): syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001780)}], 0x1}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) memfd_create(0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 3.990067451s ago: executing program 7 (id=2461): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000280)) read$msr(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x103842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGUNIT(r2, 0x80047456, 0x0) 3.989227284s ago: executing program 6 (id=2462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x54c1}, 0x8) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 3.05528854s ago: executing program 6 (id=2465): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r0, r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r3) 3.000156828s ago: executing program 7 (id=2466): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.956402913s ago: executing program 4 (id=2468): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.923486464s ago: executing program 6 (id=2469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = epoll_create(0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0xe2180) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000380)={0x1, 0x0, {0x40, 0x0, 0x2011, 0x3, 0x2, 0x1, 0x5, 0x1}}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x40, 0x8, 0x6, 0x5, 0xffffffffffffff79, 0x6}, 0x0, &(0x7f0000000240)={0xfffffffffffffc00, 0x7, 0x3, 0x9, 0x1, 0x60e8, 0x2, 0xb}, &(0x7f0000000280), &(0x7f0000000340)={0x0}) r5 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_virt_wifi\x00', 0x10) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010000) 2.819723908s ago: executing program 7 (id=2470): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) close(0x3) 2.81321858s ago: executing program 4 (id=2471): socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) socket$kcm(0x10, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 2.746574663s ago: executing program 7 (id=2472): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 2.352019503s ago: executing program 9 (id=2473): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, &(0x7f0000000100)=0x900) 2.143355728s ago: executing program 6 (id=2474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.052039095s ago: executing program 7 (id=2475): bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {0x0}], 0x2) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg$inet6(r4, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000380)=0xb946) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r6}, 0x18) 1.856562188s ago: executing program 9 (id=2477): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000001, 0x2) fsopen(0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) pipe2$9p(0x0, 0x81000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x8, 0x4) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x3ec0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x206000, 0x0) modify_ldt$write(0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000063b9ffff00000000000000006b00000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000007040000f0ffffffb70200000800000018230000245c6a4704b652b22ac430804902597a7577070ab3bd4d10fcd2b73d57beafa7d33635eb9cbf47657409ad577875c1791395c346870353c50600dfcd8423a46c363ddf956def464f4e250e8a4caa41d1999d44b2e6068f64b35329320000000000000000aabb747b64b27d26a52b76d2ab27026caaa27c5d312855beb096b75e8112ded9aaf3639be9f7a8f2", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000d5dc"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f01a, 0x6}) 1.703858896s ago: executing program 6 (id=2478): syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001780)}], 0x1}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) memfd_create(0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 1.195763102s ago: executing program 4 (id=2480): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r0, r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r3) 1.138940357s ago: executing program 2 (id=2481): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 628.191419ms ago: executing program 2 (id=2482): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) close(0x3) 520.552343ms ago: executing program 4 (id=2483): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x141042, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "ff0f00000000000600a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 469.530202ms ago: executing program 2 (id=2484): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nl80211(0x0, r0) 423.634318ms ago: executing program 9 (id=2485): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 318.102712ms ago: executing program 2 (id=2486): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd, 0x0, 0x0, 0x0, {0x9208}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 236.163198ms ago: executing program 9 (id=2487): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, &(0x7f0000000100)=0x900) 201.29216ms ago: executing program 2 (id=2488): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115e0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 150.708421ms ago: executing program 6 (id=2489): socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(0x0, 0x0) syz_emit_vhci(0x0, 0xd) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x4, 0xc9, 0x9e}}}, 0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000003d00090000000000000000000100000004000000140001801000108008000b00", @ANYRES32=r5, @ANYBLOB="9462172c080002"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 64.612651ms ago: executing program 2 (id=2490): socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) socket$kcm(0x10, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 7.978371ms ago: executing program 9 (id=2491): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x3dd2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="0198000000000000200012800800010067726500140002800c000700ac"], 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) 0s ago: executing program 7 (id=2492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r5, 0xfbff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000440)=0x2) kernel console output (not intermixed with test programs): call=202 compat=0 ip=0x7f1607185d29 code=0x7ffc0000 [ 404.459258][ T29] audit: type=1326 audit(1734519754.150:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1607185d29 code=0x7ffc0000 [ 404.481846][ T29] audit: type=1326 audit(1734519754.150:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1607185d29 code=0x7ffc0000 [ 404.506058][ T29] audit: type=1326 audit(1734519754.150:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1607185d29 code=0x7ffc0000 [ 404.546505][ T29] audit: type=1326 audit(1734519754.290:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1607185d29 code=0x7ffc0000 [ 404.671389][ T29] audit: type=1326 audit(1734519754.290:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1607185d29 code=0x7ffc0000 [ 404.694325][ T29] audit: type=1326 audit(1734519754.320:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f160717cce7 code=0x7ffc0000 [ 404.716864][ T29] audit: type=1326 audit(1734519754.330:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1607121f29 code=0x7ffc0000 [ 404.739402][ T29] audit: type=1326 audit(1734519754.330:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.5.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f1607185d29 code=0x7ffc0000 [ 405.042042][T10158] tipc: Enabling of bearer rejected, failed to enable media [ 409.546337][T10188] tipc: Enabling of bearer rejected, failed to enable media [ 409.558172][ T977] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 409.677173][ T977] hid-generic 0001:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 409.799929][ T977] hid-generic 0001:0000:0000.0013: unknown main item tag 0x0 [ 409.817165][T10195] tipc: Enabling of bearer rejected, failed to enable media [ 409.838742][ T977] hid-generic 0001:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 411.143439][T10203] xt_nat: multiple ranges no longer supported [ 411.543022][T10209] tipc: Enabling of bearer rejected, failed to enable media [ 416.930938][ T977] IPVS: starting estimator thread 0... [ 417.036669][T10278] IPVS: using max 23 ests per chain, 55200 per kthread [ 418.203001][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.218534][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.230039][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.239249][T10299] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 418.304451][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.360165][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 418.367644][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.103251][T10307] xt_nat: multiple ranges no longer supported [ 419.185360][T10309] tipc: Enabling of bearer rejected, failed to enable media [ 419.197943][ T5879] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 419.394553][ T5879] hid-generic 0001:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 419.889172][T10296] chnl_net:caif_netlink_parms(): no params data found [ 419.935406][T10315] net_ratelimit: 23 callbacks suppressed [ 419.935426][T10315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.174480][T10296] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.213411][T10296] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.245160][T10296] bridge_slave_0: entered allmulticast mode [ 420.280017][T10296] bridge_slave_0: entered promiscuous mode [ 420.325777][T10296] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.402300][ T5833] Bluetooth: hci5: command tx timeout [ 420.705657][T10296] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.848872][T10296] bridge_slave_1: entered allmulticast mode [ 421.023993][T10296] bridge_slave_1: entered promiscuous mode [ 422.025531][T10296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.108049][T10296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.211939][T10296] team0: Port device team_slave_0 added [ 422.230085][T10296] team0: Port device team_slave_1 added [ 422.396621][T10296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.482675][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.536599][ T5833] Bluetooth: hci5: command tx timeout [ 422.647094][T10296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.853495][T10296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.861220][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.888179][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.949494][T10296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.125804][T10296] hsr_slave_0: entered promiscuous mode [ 423.162542][T10296] hsr_slave_1: entered promiscuous mode [ 423.179644][T10395] loop4: detected capacity change from 0 to 1024 [ 423.223640][T10296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.248396][T10296] Cannot create hsr debugfs directory [ 423.610877][ T6129] hfsplus: b-tree write err: -5, ino 8 [ 424.322332][T10404] 9pnet_fd: p9_fd_create_unix (10404): problem connecting socket: ./cgroup: -111 [ 424.558244][ T5833] Bluetooth: hci5: command tx timeout [ 424.636892][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 424.852750][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.952844][ T46] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 425.063589][T10296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 425.111468][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.178908][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.215711][T10296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.232090][ T977] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 425.257269][ T46] usb 5-1: Product: syz [ 425.261474][ T46] usb 5-1: Manufacturer: syz [ 425.266083][ T46] usb 5-1: SerialNumber: syz [ 425.299996][T10296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.330264][ T977] hid-generic 0001:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 425.346705][T10407] tipc: Enabling of bearer rejected, failed to enable media [ 425.386524][T10296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.564858][T10404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 425.643604][T10296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.664092][T10296] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.695696][T10296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.706145][T10296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.780305][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.787491][ T6409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.797419][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.804600][ T6409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.917283][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.380890][T10404] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1257'. [ 426.646702][ T5833] Bluetooth: hci5: command tx timeout [ 426.719222][T10404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 426.738504][T10296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.896702][ T46] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 426.904203][ T46] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 426.912143][ T46] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 427.036301][T10438] loop5: detected capacity change from 0 to 1024 [ 427.126319][ T46] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 427.140749][ T46] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 427.159063][ T46] wwan wwan0: port wwan0mbim0 attached [ 427.174688][ T46] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 428.125600][T10296] veth0_vlan: entered promiscuous mode [ 428.152555][T10296] veth1_vlan: entered promiscuous mode [ 428.158648][ T25] usb 5-1: USB disconnect, device number 5 [ 428.165468][ T25] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 428.581319][T10296] veth0_macvtap: entered promiscuous mode [ 428.619879][ T25] wwan wwan0: port wwan0mbim0 disconnected [ 428.652234][T10296] veth1_macvtap: entered promiscuous mode [ 428.711403][ T52] hfsplus: b-tree write err: -5, ino 8 [ 428.781477][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.832579][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.843812][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.854676][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.864742][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.875687][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.885830][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.896500][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.906337][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.917111][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.927272][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.938023][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.950797][T10296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.967533][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.978312][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.988298][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.998882][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.008757][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.019297][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.029175][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.039763][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.049785][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.060589][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.070682][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.081211][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.092269][T10296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.102519][T10296] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.111475][T10296] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.120479][T10296] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.129615][T10296] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.234472][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.251017][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.321011][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 429.424833][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.432945][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.676952][ T977] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 429.857419][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.955836][ T977] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 430.052470][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.094267][ T977] usb 6-1: config 0 descriptor?? [ 430.261796][T10460] loop4: detected capacity change from 0 to 32768 [ 430.279496][T10460] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 430.279496][T10460] clean (size 2912): [ 430.279496][T10460] flags: 0 [ 430.279496][T10460] journal_seq: 10 [ 430.279496][T10460] usage: type=inodes v=8 [ 430.279496][T10460] usage: type=key_version v=0 [ 430.279496][T10460] usage: type=reserved v=0 [ 430.279496][T10460] usage: type=reserved v=0 [ 430.279496][T10460] usage: type=reserved v=0 [ 430.279496][T10460] usage: type=reserved v=0 [ 430.279496][T10460] data_usage: btree: 1/1 [0]=2816 [ 430.279496][T10460] data_usage: journal: 1/1 [0]=0 [ 430.279496][T10460] data_usage: user: 1/1 [0]=16 [ 430.279496][T10460] dev_usage: dev=0 [ 430.279496][T10460] free: buckets=83 sectors=0 fragmented=0 [ 430.279496][T10460] sb: buckets=25 sectors=6152 fragmented=248 [ 430.279496][T10460] journal: buckets=8 sectors=2048 fragmented=0 [ 430.279496][T10460] btree: buckets=11 sectors=2816 fragmented=0 [ 430.279496][T10460] user: buckets=1 sectors=16 fragmented=240 [ 430.279496][T10460] cached: buckets=0 sectors=0 fragmented=0 [ 430.279496][T10460] parity: buckets=458752 sectors=0 fragmented=0 [ 430.279496][T10460] stripe: buckets=0 sectors=0 fragmented=0 [ 430.279496][T10460] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 430.279496][T10460] need_discard: buckets=0 sectors=0 fragmented=0 [ 430.279496][T10460] clock: read=0 [ 430.279496][T10460] clock: write=1280 [ 430.279496][T10460] blacklist: seq=0 [ 430.279496][T10460] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 430.279677][T10460] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 430.340503][ T977] usbhid 6-1:0.0: can't add hid device: -71 [ 430.516397][ T977] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 430.578644][ T977] usb 6-1: USB disconnect, device number 4 [ 430.678633][T10485] 9pnet_fd: p9_fd_create_unix (10485): problem connecting socket: ./cgroup: -111 [ 430.888395][ T25] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 430.910020][T10486] tipc: Enabling of bearer rejected, failed to enable media [ 430.928448][ T25] hid-generic 0001:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 431.066600][ T977] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 431.066703][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 431.476537][ T977] usb 6-1: Using ep0 maxpacket: 32 [ 431.484237][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.496168][ T977] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 431.505356][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.518403][ T977] usb 6-1: config 0 descriptor?? [ 431.582509][T10499] xt_nat: multiple ranges no longer supported [ 431.965680][ T977] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 432.188002][ T977] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 432.366352][ T5881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.386531][ T5881] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 432.408242][ T977] usb 6-1: USB disconnect, device number 5 [ 432.420721][ T977] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 432.526145][T10511] No source specified [ 432.561694][ T5881] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.590754][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.600492][ T5881] usb 7-1: Product: syz [ 432.606103][ T5881] usb 7-1: Manufacturer: syz [ 432.613068][ T5881] usb 7-1: SerialNumber: syz [ 433.105634][T10485] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 433.122803][ T5833] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 433.129325][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 433.161837][T10520] loop3: detected capacity change from 0 to 1024 [ 433.965208][T10485] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1281'. [ 433.981064][T10485] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 434.229117][ T5881] cdc_mbim 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 434.239093][ T5881] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 434.282695][ T5881] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 434.461958][T10544] xt_nat: multiple ranges no longer supported [ 435.184746][ T5881] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 435.193176][ T5881] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 435.200762][ T5881] wwan wwan0: port wwan0mbim0 attached [ 435.211089][ T6412] hfsplus: b-tree write err: -5, ino 8 [ 435.211427][ T5881] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 42:42:42:42:42:42 [ 435.268660][ T5881] usb 7-1: USB disconnect, device number 2 [ 435.275311][ T5881] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 435.867711][ T5881] wwan wwan0: port wwan0mbim0 disconnected [ 439.304780][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 439.826002][T10601] Bluetooth: MGMT ver 1.23 [ 440.786822][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.793631][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.998441][ T5833] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 442.244604][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 442.251223][ T54] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 443.249731][T10646] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1338'. [ 443.431561][T10649] tipc: Enabling of bearer rejected, failed to enable media [ 443.443002][ T46] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 443.451699][ T46] hid-generic 0001:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 443.801088][T10657] Invalid source name [ 445.319580][ T5833] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 445.330906][ T5833] Bluetooth: hci1: Injecting HCI hardware error event [ 445.342583][ T5833] Bluetooth: hci1: hardware error 0x00 [ 445.573515][T10671] openvswitch: netlink: nsh attr 11328 is out of range max 3 [ 445.597378][T10671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.752839][T10677] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.988593][T10677] loop4: detected capacity change from 0 to 16 [ 445.997549][T10677] erofs (device loop4): mounted with root inode @ nid 36. [ 447.784387][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 447.827047][T10698] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1355'. [ 447.886109][ T5835] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 448.137183][ T5835] Bluetooth: hci5: Injecting HCI hardware error event [ 448.149859][ T5835] Bluetooth: hci5: hardware error 0x00 [ 450.218356][T10723] tipc: Enabling of bearer rejected, failed to enable media [ 450.231492][ T977] hid-generic 0001:0000:0000.0018: unknown main item tag 0x0 [ 450.249717][ T977] hid-generic 0001:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 451.080671][ T5835] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 453.020569][T10755] xt_nat: multiple ranges no longer supported [ 454.162891][T10765] 9pnet_fd: p9_fd_create_unix (10765): problem connecting socket: ./cgroup: -111 [ 454.700520][T10775] xt_nat: multiple ranges no longer supported [ 455.698446][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 456.030887][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 456.043362][T10785] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 456.211697][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.245517][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 456.340429][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.410221][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.462055][ T25] usb 5-1: Product: syz [ 456.484894][ T25] usb 5-1: Manufacturer: syz [ 456.498418][ T25] usb 5-1: SerialNumber: syz [ 456.790421][T10765] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 457.178181][T10802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.821177][T10765] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1374'. [ 457.901432][T10765] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 458.088492][T10810] loop3: detected capacity change from 0 to 1024 [ 458.126298][ T25] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 458.132939][ T25] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 458.140815][ T25] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 458.344990][ T25] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 458.354213][ T25] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 458.375435][ T25] wwan wwan0: port wwan0mbim0 attached [ 458.395359][ T25] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 458.610165][ T25] usb 5-1: USB disconnect, device number 6 [ 458.617453][ T25] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 458.675310][T10818] xt_nat: multiple ranges no longer supported [ 458.687740][ T25] wwan wwan0: port wwan0mbim0 disconnected [ 458.700666][ T46] IPVS: starting estimator thread 0... [ 458.798935][T10821] IPVS: using max 23 ests per chain, 55200 per kthread [ 459.155953][ T6409] hfsplus: b-tree write err: -5, ino 8 [ 459.223311][T10836] 9pnet_fd: p9_fd_create_unix (10836): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 464.373350][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 464.756944][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 465.024972][ T25] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 465.025006][ T25] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 465.025028][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 465.025047][ T25] usb 4-1: config 1 has no interface number 0 [ 465.025082][ T25] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.025108][ T25] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 465.025138][ T25] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 465.025153][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.097384][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 465.934220][T10890] tty tty33: ldisc open failed (-12), clearing slot 32 [ 466.942009][ T25] snd_usb_pod 4-1:1.1: set_interface failed [ 466.962313][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 467.017293][ T25] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 467.137522][T10908] tipc: Enabling of bearer rejected, failed to enable media [ 467.174320][ T977] hid-generic 0001:0000:0000.0019: unknown main item tag 0x0 [ 467.257230][ T977] hid-generic 0001:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 467.274265][ T25] usb 4-1: USB disconnect, device number 6 [ 469.365363][T10928] sp0: Synchronizing with TNC [ 471.274722][ T5878] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 471.874074][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 471.881498][ T5878] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 471.890825][ T5878] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 471.899543][ T5878] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 471.911981][ T5878] usb 6-1: config 1 has no interface number 0 [ 471.918490][ T5878] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.945446][ T5878] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 471.973710][ T5878] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 471.994131][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.029250][ T5878] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 472.178008][T10945] loop2: detected capacity change from 0 to 32768 [ 472.205527][T10945] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 472.205527][T10945] clean (size 2912): [ 472.205527][T10945] flags: 0 [ 472.205527][T10945] journal_seq: 10 [ 472.205527][T10945] usage: type=inodes v=8 [ 472.205527][T10945] usage: type=key_version v=0 [ 472.205527][T10945] usage: type=reserved v=0 [ 472.205527][T10945] usage: type=reserved v=0 [ 472.205527][T10945] usage: type=reserved v=0 [ 472.205527][T10945] usage: type=reserved v=0 [ 472.205527][T10945] data_usage: btree: 1/1 [0]=2816 [ 472.205527][T10945] data_usage: journal: 1/1 [0]=0 [ 472.205527][T10945] data_usage: user: 1/1 [0]=16 [ 472.205527][T10945] dev_usage: dev=0 [ 472.205527][T10945] free: buckets=83 sectors=0 fragmented=0 [ 472.205527][T10945] sb: buckets=25 sectors=6152 fragmented=248 [ 472.205527][T10945] journal: buckets=8 sectors=2048 fragmented=0 [ 472.205527][T10945] btree: buckets=11 sectors=2816 fragmented=0 [ 472.205527][T10945] user: buckets=1 sectors=16 fragmented=240 [ 472.205527][T10945] cached: buckets=0 sectors=0 fragmented=0 [ 472.205527][T10945] parity: buckets=458752 sectors=0 fragmented=0 [ 472.205527][T10945] stripe: buckets=0 sectors=0 fragmented=0 [ 472.205527][T10945] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 472.205527][T10945] need_discard: buckets=0 sectors=0 fragmented=0 [ 472.205527][T10945] clock: read=0 [ 472.205527][T10945] clock: write=1280 [ 472.205527][T10945] blacklist: seq=0 [ 472.205527][T10945] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 472.205720][T10945] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 474.622068][T10975] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.640594][ T5878] snd_usb_pod 6-1:1.1: set_interface failed [ 474.652116][ T5878] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 475.675054][ T5878] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 475.721899][ T5835] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 475.728051][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout [ 475.763221][ T5878] usb 6-1: USB disconnect, device number 6 [ 475.870912][T10989] process 'syz.6.1446' launched './file1' with NULL argv: empty string added [ 475.893850][ T977] IPVS: starting estimator thread 0... [ 475.917100][T10975] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.102789][T10998] 9pnet_fd: p9_fd_create_unix (10998): problem connecting socket: ./cgroup: -111 [ 476.122201][T10994] IPVS: using max 40 ests per chain, 96000 per kthread [ 476.131879][T10975] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.309927][T10975] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.650865][ T5878] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 477.768912][T10975] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.825882][T10975] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.875735][ T5878] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.893332][ T5878] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 477.931686][ T5878] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.941729][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.942995][T10975] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.959052][ T5878] usb 6-1: Product: syz [ 477.963308][ T5878] usb 6-1: Manufacturer: syz [ 477.968476][ T5878] usb 6-1: SerialNumber: syz [ 478.076234][T10975] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.242255][T10998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 478.950604][T10998] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1449'. [ 479.144846][T10998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 479.658755][ T5878] cdc_mbim 6-1:1.0: failed to get mac address [ 479.674015][ T5878] cdc_mbim 6-1:1.0: bind() failure [ 479.685710][ T5878] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 479.722715][ T5878] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 479.744183][ T5878] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 479.795185][ T5878] usb 6-1: USB disconnect, device number 7 [ 481.202220][T11055] No control pipe specified [ 483.079488][T11076] netlink: 'syz.4.1477': attribute type 10 has an invalid length. [ 483.694954][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 483.733283][T11073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.829007][T11080] loop3: detected capacity change from 0 to 1024 [ 483.932452][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 483.940111][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 483.954050][ T9] usb 3-1: config 0 has no interface number 0 [ 483.969151][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 483.979022][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.987298][ T9] usb 3-1: Product: syz [ 483.991534][ T9] usb 3-1: Manufacturer: syz [ 483.996215][ T9] usb 3-1: SerialNumber: syz [ 484.012549][ T9] usb 3-1: config 0 descriptor?? [ 484.029165][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 484.882336][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 484.953021][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 485.051275][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 485.077953][T11093] No control pipe specified [ 485.275821][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 485.285336][ T9] usb 3-1: USB disconnect, device number 8 [ 485.293493][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 485.340382][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 485.392898][ T9] quatech2 3-1:0.51: device disconnected [ 486.358881][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 486.664328][T11118] netlink: 'syz.4.1490': attribute type 10 has an invalid length. [ 486.998034][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.995769][ T6409] hfsplus: b-tree write err: -5, ino 8 [ 488.477589][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 488.625100][T11146] tipc: Enabling of bearer rejected, failed to enable media [ 489.493213][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 489.661839][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 489.671329][ T9] usb 3-1: config 0 has no interface number 0 [ 489.717338][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 489.754246][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.769578][ T9] usb 3-1: Product: syz [ 489.791546][ T9] usb 3-1: Manufacturer: syz [ 489.806887][ T9] usb 3-1: SerialNumber: syz [ 489.820898][ T9] usb 3-1: config 0 descriptor?? [ 490.129109][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 490.347031][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 490.366321][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 490.401343][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 490.615851][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 490.616718][ T46] usb 3-1: USB disconnect, device number 9 [ 490.639790][ T46] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 490.685855][ T46] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 490.721223][ T46] quatech2 3-1:0.51: device disconnected [ 491.041620][ T5882] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 491.932839][ T5882] usb 7-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 491.943894][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 491.971803][T11190] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1517'. [ 491.982034][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 492.004821][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.079496][T11191] Invalid source name [ 492.503387][ T5882] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 492.512665][ T5882] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 492.521340][ T5882] usb 7-1: Manufacturer: syz [ 492.528096][ T5882] usb 7-1: config 0 descriptor?? [ 492.533906][T11173] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 492.545639][ T5882] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 493.033600][ T9] usb 7-1: USB disconnect, device number 3 [ 495.830197][T11229] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1530'. [ 497.385013][T11251] xt_nat: multiple ranges no longer supported [ 499.250609][T11274] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1542'. [ 502.365146][T11302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.708994][T11307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1554'. [ 506.480580][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.504969][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.796989][T11359] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1571'. [ 507.854529][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 508.086080][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 508.143451][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 508.153404][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 508.845990][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 508.855807][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 508.864913][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.882356][ T9] usb 6-1: config 0 descriptor?? [ 509.108620][ C0] hrtimer: interrupt took 57254 ns [ 509.119106][ T9] hdpvr 6-1:0.0: firmware version 0x0 dated [ 509.125740][ T9] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 509.344386][ T9] hdpvr 6-1:0.0: device init failed [ 509.350245][ T9] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 510.155972][ T9] usb 6-1: USB disconnect, device number 8 [ 510.724782][T11391] tipc: Enabling of bearer rejected, failed to enable media [ 510.752069][ T977] hid-generic 0001:0000:0000.001A: unknown main item tag 0x0 [ 510.820971][ T977] hid-generic 0001:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 511.464406][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1583'. [ 511.766241][T11405] loop3: detected capacity change from 0 to 1024 [ 512.623720][T11409] hfsplus: xattr search failed [ 513.491543][T11421] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1591'. [ 515.620488][T11444] loop3: detected capacity change from 0 to 1024 [ 516.017498][T11454] tipc: Enabling of bearer rejected, failed to enable media [ 516.532612][ T46] hid-generic 0001:0000:0000.001B: unknown main item tag 0x0 [ 517.349031][T11455] hfsplus: xattr search failed [ 517.783905][ T46] hid-generic 0001:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 520.236164][T11487] xt_nat: multiple ranges no longer supported [ 520.594821][T11489] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.603677][T11489] loop5: detected capacity change from 0 to 16 [ 520.612334][T11489] erofs (device loop5): mounted with root inode @ nid 36. [ 520.700615][ T9336] syz-executor: attempt to access beyond end of device [ 520.700615][ T9336] loop5: rw=0, sector=296, nr_sectors = 16 limit=16 [ 520.736204][ T9336] erofs (device loop5): read error -5 @ 0 of nid 36 [ 520.750925][ T9336] erofs (device loop5): fail to readdir of logical block 0 of nid 36 [ 520.915954][T11493] loop6: detected capacity change from 0 to 1024 [ 521.801031][T11498] hfsplus: xattr search failed [ 522.190529][T11502] tipc: Enabling of bearer rejected, failed to enable media [ 522.222221][ T25] hid-generic 0001:0000:0000.001C: unknown main item tag 0x0 [ 522.805618][ T25] hid-generic 0001:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 523.659913][ T6409] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.480063][ T6409] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.648597][ T6409] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.673705][T11529] Invalid source name [ 524.888508][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 524.929305][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 524.949937][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 524.950559][ T6409] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.061305][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 525.072803][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 525.139178][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 525.566664][ T6409] bridge_slave_1: left allmulticast mode [ 525.591171][ T6409] bridge_slave_1: left promiscuous mode [ 525.605165][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.653359][ T6409] bridge_slave_0: left allmulticast mode [ 525.677448][ T6409] bridge_slave_0: left promiscuous mode [ 525.704503][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.338071][ T5835] Bluetooth: hci0: command tx timeout [ 529.584330][ T5835] Bluetooth: hci0: command tx timeout [ 529.605301][ T46] hid-generic 0001:0000:0000.001D: unknown main item tag 0x0 [ 530.016947][ T46] hid-generic 0001:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 530.133924][ T6409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.154010][ T6409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.167170][ T6409] bond0 (unregistering): Released all slaves [ 530.251832][T11572] tipc: Enabling of bearer rejected, failed to enable media [ 530.513693][T11582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.430527][T11531] chnl_net:caif_netlink_parms(): no params data found [ 532.003051][ T5835] Bluetooth: hci0: command tx timeout [ 532.265996][ T5835] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 532.986673][T11531] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.062475][T11531] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.085906][T11531] bridge_slave_0: entered allmulticast mode [ 533.125758][T11531] bridge_slave_0: entered promiscuous mode [ 533.155268][T11531] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.179829][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.204489][T11531] bridge_slave_1: entered allmulticast mode [ 533.292827][T11531] bridge_slave_1: entered promiscuous mode [ 533.336417][ T6409] hsr_slave_0: left promiscuous mode [ 533.368522][ T6409] hsr_slave_1: left promiscuous mode [ 533.405889][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.424641][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.446687][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.472807][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.597418][ T6409] veth1_macvtap: left promiscuous mode [ 533.618759][ T6409] veth0_macvtap: left promiscuous mode [ 533.635189][ T6409] veth1_vlan: left promiscuous mode [ 533.654897][ T6409] veth0_vlan: left promiscuous mode [ 533.701494][T11614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.046259][ T5835] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 534.178326][ T5835] Bluetooth: hci0: command tx timeout [ 535.313475][ T5882] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 535.424332][ T6409] team0 (unregistering): Port device team_slave_1 removed [ 535.482431][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 535.496833][ T5882] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 535.506176][ T5882] usb 3-1: config 0 has no interface number 0 [ 535.519771][ T6409] team0 (unregistering): Port device team_slave_0 removed [ 535.527158][ T5882] usb 3-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 535.569823][ T5882] usb 3-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 535.582200][ T5882] usb 3-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 535.594700][ T5882] usb 3-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 535.605072][ T5882] usb 3-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 535.617178][ T5882] usb 3-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 535.643968][ T5882] usb 3-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 535.653856][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.661965][ T5882] usb 3-1: Product: syz [ 535.667883][ T5882] usb 3-1: Manufacturer: syz [ 535.672721][ T5882] usb 3-1: SerialNumber: syz [ 535.682977][ T5882] usb 3-1: config 0 descriptor?? [ 535.689319][T11642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.697504][T11642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.713911][ T5882] spcp8x5 3-1:0.110: SPCP8x5 converter detected [ 535.736030][ T5882] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 536.490238][T11531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.535999][T11531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.649959][T11531] team0: Port device team_slave_0 added [ 536.659966][T11531] team0: Port device team_slave_1 added [ 536.802283][T11531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.845417][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.924498][T11531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.980837][T11531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.001292][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.083767][T11531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.193486][ T6409] IPVS: stop unused estimator thread 0... [ 537.243833][T11531] hsr_slave_0: entered promiscuous mode [ 537.255952][T11531] hsr_slave_1: entered promiscuous mode [ 537.278555][T11531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.302925][T11531] Cannot create hsr debugfs directory [ 537.746082][T11531] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 537.847721][T11531] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 537.860378][T11531] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 537.890656][T11531] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 538.095491][T11531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.147669][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.172927][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.180155][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.230717][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.237842][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.305283][ T5878] usb 3-1: USB disconnect, device number 10 [ 538.313514][ T5878] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 538.350831][ T5878] spcp8x5 3-1:0.110: device disconnected [ 538.379732][ T5835] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 538.390292][ T5835] Bluetooth: hci4: Injecting HCI hardware error event [ 538.399665][ T5835] Bluetooth: hci4: hardware error 0x00 [ 538.405555][ T5882] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 538.572333][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 538.593847][ T5882] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 539.008359][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.061083][ T5882] usb 4-1: Product: syz [ 539.081883][ T5882] usb 4-1: Manufacturer: syz [ 539.096729][ T5882] usb 4-1: SerialNumber: syz [ 539.131941][ T5882] usb 4-1: config 0 descriptor?? [ 539.151845][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.181211][ T5882] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 540.595362][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 540.711605][T11531] veth0_vlan: entered promiscuous mode [ 540.744565][T11531] veth1_vlan: entered promiscuous mode [ 540.798499][T11531] veth0_macvtap: entered promiscuous mode [ 540.823140][T11531] veth1_macvtap: entered promiscuous mode [ 540.885293][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.910404][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.924477][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.936198][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.946500][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.957992][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.968421][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.991711][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.007984][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.027370][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.037933][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.057023][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.072152][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.135112][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.174536][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.199366][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.212498][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.223762][ T5882] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 541.234832][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.235100][ T5882] usb 4-1: USB disconnect, device number 7 [ 541.245826][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.286227][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.307002][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.317847][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.349394][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.390568][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.413774][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.432839][T11531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.446398][T11531] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.455798][T11531] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.465361][T11531] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.494784][T11531] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.691687][ T6412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.700100][ T6412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.935790][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.992626][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.659419][T11714] loop6: detected capacity change from 0 to 1024 [ 543.749735][ T6412] hfsplus: b-tree write err: -5, ino 8 [ 544.794050][ T5878] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 545.348313][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 545.478707][ T5878] usb 7-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 545.487966][ T5878] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 545.498277][ T5878] usb 7-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 545.508155][ T5878] usb 7-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 545.517272][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.566374][ T5878] usb 7-1: probing VID:PID(2201:012C) [ 545.573396][ T5878] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 545.586198][ T5878] vub300 7-1:63.0: probe with driver vub300 failed with error -22 [ 545.796019][ T9] usb 7-1: USB disconnect, device number 4 [ 546.876152][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 547.224079][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 547.234642][ T5878] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 547.243894][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.252007][ T5878] usb 3-1: Product: syz [ 547.295766][ T5878] usb 3-1: Manufacturer: syz [ 547.300428][ T5878] usb 3-1: SerialNumber: syz [ 547.322655][ T5878] usb 3-1: config 0 descriptor?? [ 547.563519][ T5878] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 547.618356][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.457996][ T5878] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 548.490024][ T5878] usb 3-1: USB disconnect, device number 11 [ 549.240706][T11781] binder: 11780:11781 ioctl c0306201 0 returned -14 [ 552.298807][ T5878] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 553.164168][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 553.640755][ T5878] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 553.649098][ T5878] usb 5-1: config 0 has no interface number 0 [ 553.692051][ T5878] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 553.701594][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.719423][ T5878] usb 5-1: Product: syz [ 553.723980][ T5878] usb 5-1: Manufacturer: syz [ 553.728596][ T5878] usb 5-1: SerialNumber: syz [ 553.734624][ T5878] usb 5-1: config 0 descriptor?? [ 553.745622][ T5878] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 554.439712][ T5878] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 554.452191][ T5878] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 554.678911][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.692847][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.919225][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 554.927053][ T5878] usb 5-1: USB disconnect, device number 7 [ 554.935106][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 554.954045][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 554.979917][ T5878] quatech2 5-1:0.51: device disconnected [ 564.457034][ T977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 564.670180][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 565.465408][ T977] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 565.474722][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.484824][ T977] usb 5-1: Product: syz [ 565.489018][ T977] usb 5-1: Manufacturer: syz [ 565.494035][ T977] usb 5-1: SerialNumber: syz [ 565.504596][ T977] usb 5-1: config 0 descriptor?? [ 566.026384][ T977] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 566.498868][ T977] gspca_sunplus: reg_w_riv err -71 [ 566.504175][ T977] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 566.517954][ T977] usb 5-1: USB disconnect, device number 8 [ 570.543068][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1739'. [ 570.552201][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1739'. [ 572.164348][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.170959][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.333807][ T5879] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 572.901414][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 572.963627][ T5879] usb 4-1: config index 0 descriptor too short (expected 249, got 27) [ 572.976948][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.989733][ T5879] usb 4-1: config 0 has no interfaces? [ 572.995698][ T5879] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 573.007047][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.082764][ T5879] usb 4-1: config 0 descriptor?? [ 574.954341][ T977] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 575.134239][ T977] usb 8-1: Using ep0 maxpacket: 8 [ 575.161258][ T977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.406116][ T5879] usb 4-1: USB disconnect, device number 8 [ 575.447116][ T977] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 575.477001][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.527837][ T977] usb 8-1: config 0 descriptor?? [ 575.545795][ T977] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 576.117875][ T977] gspca_vc032x: reg_r err -110 [ 576.124213][ T977] vc032x 8-1:0.0: probe with driver vc032x failed with error -110 [ 576.488701][T12009] xt_CT: No such helper "snmp" [ 578.895921][ T5878] usb 8-1: USB disconnect, device number 2 [ 579.196634][ T46] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 579.281930][ T977] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 579.369613][ T46] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 579.377236][ T46] usb 7-1: can't read configurations, error -61 [ 579.442228][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 579.452824][ T977] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 579.462539][ T977] usb 3-1: config 0 has no interface number 0 [ 579.474240][ T977] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 579.483330][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.526758][ T977] usb 3-1: config 0 descriptor?? [ 579.560987][ T46] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 580.225645][ T46] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 580.398712][ T46] usb 7-1: can't read configurations, error -61 [ 580.413057][ T46] usb usb7-port1: attempt power cycle [ 580.502062][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.510646][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.537397][ T977] usb 3-1: USB disconnect, device number 12 [ 581.056803][ T46] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 581.091287][ T46] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 581.098904][ T46] usb 7-1: can't read configurations, error -61 [ 581.270441][ T46] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 581.363448][ T46] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 581.397878][ T46] usb 7-1: can't read configurations, error -61 [ 581.427445][ T46] usb usb7-port1: unable to enumerate USB device [ 582.214062][T12082] Bluetooth: MGMT ver 1.23 [ 587.486973][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 588.080379][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 588.726012][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 588.735567][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.743704][ T9] usb 3-1: Product: syz [ 588.747897][ T9] usb 3-1: Manufacturer: syz [ 588.752523][ T9] usb 3-1: SerialNumber: syz [ 588.759316][ T9] usb 3-1: config 0 descriptor?? [ 589.972716][ T9] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 590.019327][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 590.326517][ T5879] usb 3-1: USB disconnect, device number 13 [ 592.600180][T12177] netlink: 'syz.7.1813': attribute type 10 has an invalid length. [ 593.086229][T12171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.758698][T12177] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 594.935048][T12194] sp0: Synchronizing with TNC [ 596.028702][ T977] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 597.006926][ T977] usb 7-1: Using ep0 maxpacket: 32 [ 597.021562][ T977] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 597.031624][ T977] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 597.040701][ T977] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.051606][ T977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 597.061093][ T977] usb 7-1: config 1 has no interface number 0 [ 597.067700][ T977] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 597.076981][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.152537][ T977] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 598.632815][ T977] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 598.641259][ T977] snd_usb_pod 7-1:1.1: invalid control EP [ 598.647574][ T977] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 598.665979][ T977] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 598.673448][ T977] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 598.850971][ T5878] usb 7-1: USB disconnect, device number 9 [ 600.818630][T12248] sp0: Synchronizing with TNC [ 602.267394][ T46] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 602.437861][ T46] usb 7-1: Using ep0 maxpacket: 8 [ 602.468650][ T46] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 602.552377][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.591914][ T46] usb 7-1: Product: syz [ 602.607199][ T46] usb 7-1: Manufacturer: syz [ 602.750238][ T46] usb 7-1: SerialNumber: syz [ 602.772092][ T46] usb 7-1: config 0 descriptor?? [ 602.872133][ T5835] Bluetooth: hci0: ACL packet for unknown connection handle 3584 [ 603.017699][ T46] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 603.717746][ T46] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 603.767244][ T46] usb 7-1: USB disconnect, device number 10 [ 603.962632][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 603.962652][ T29] audit: type=1326 audit(1734519942.701:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.000522][ T29] audit: type=1326 audit(1734519942.701:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.023393][ T29] audit: type=1326 audit(1734519942.739:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.046248][ T29] audit: type=1326 audit(1734519942.739:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.069100][ T29] audit: type=1326 audit(1734519942.739:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.096895][ T29] audit: type=1326 audit(1734519942.823:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.119813][ T29] audit: type=1326 audit(1734519942.832:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.142291][ T29] audit: type=1326 audit(1734519942.832:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.228636][ T29] audit: type=1326 audit(1734519942.954:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 604.269871][T12275] netlink: 'syz.3.1842': attribute type 11 has an invalid length. [ 604.278136][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1842'. [ 604.279003][ T29] audit: type=1326 audit(1734519942.954:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6e585d29 code=0x7ffc0000 [ 606.542986][ T5835] Bluetooth: hci0: ACL packet for unknown connection handle 3584 [ 608.841608][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 609.001876][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 609.017486][ T5879] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 609.029914][ T5879] usb 5-1: config 0 has no interface number 0 [ 609.044780][ T5879] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 609.072124][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.086268][ T5879] usb 5-1: config 0 descriptor?? [ 609.194327][ T5882] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 609.450800][ T5882] usb 8-1: Using ep0 maxpacket: 8 [ 609.462835][ T5882] usb 8-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 609.472101][ T5882] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 609.482478][ T5882] usb 8-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 609.492682][ T5882] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 609.555266][T12331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.564161][T12331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.577352][ T25] usb 5-1: USB disconnect, device number 9 [ 609.866006][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.891190][ T5882] usb 8-1: probing VID:PID(2201:012C) [ 609.898627][ T5882] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 609.911177][ T5882] vub300 8-1:63.0: probe with driver vub300 failed with error -22 [ 610.149947][T12326] sit0: entered promiscuous mode [ 610.180916][T12326] netlink: 'syz.7.1859': attribute type 1 has an invalid length. [ 610.189871][T12326] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1859'. [ 610.207388][ T25] usb 8-1: USB disconnect, device number 3 [ 614.927928][T12373] sp0: Synchronizing with TNC [ 615.941010][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 616.164473][ T5879] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 616.324973][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 616.363905][ T5879] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 616.395284][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.427814][ T5879] usb 4-1: Product: syz [ 616.633551][ T5879] usb 4-1: Manufacturer: syz [ 616.638782][ T5879] usb 4-1: SerialNumber: syz [ 616.678614][ T5879] usb 4-1: config 0 descriptor?? [ 617.502121][ T5879] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 617.939308][ T46] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 618.167995][ T46] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.198937][ T46] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 618.269910][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 618.293075][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 618.326350][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 618.340197][ T5879] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 618.351056][ T5879] usb 4-1: USB disconnect, device number 9 [ 618.402460][ T46] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 618.412138][ T46] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 618.425697][ T46] usb 7-1: Manufacturer: syz [ 618.454921][ T46] usb 7-1: config 0 descriptor?? [ 618.465463][ T46] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 618.704113][ T5879] usb 7-1: USB disconnect, device number 11 [ 618.946600][T12414] netlink: 'syz.7.1886': attribute type 12 has an invalid length. [ 619.780930][T12419] sp0: Synchronizing with TNC [ 624.246604][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 624.428464][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 624.472493][ T46] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 624.553092][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.600921][ T46] usb 3-1: Product: syz [ 624.846808][ T46] usb 3-1: Manufacturer: syz [ 624.851456][ T46] usb 3-1: SerialNumber: syz [ 624.878290][ T46] usb 3-1: config 0 descriptor?? [ 625.060183][ T29] audit: type=1326 audit(1734519962.438:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.199674][ T29] audit: type=1326 audit(1734519962.485:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.234625][ T46] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 625.262150][ T29] audit: type=1326 audit(1734519962.485:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.287126][ T29] audit: type=1326 audit(1734519962.485:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.310082][ T29] audit: type=1326 audit(1734519962.485:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.332795][ T29] audit: type=1326 audit(1734519962.485:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.355850][ T29] audit: type=1326 audit(1734519962.485:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.378787][ T29] audit: type=1326 audit(1734519962.485:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.401878][ T29] audit: type=1326 audit(1734519962.485:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.424949][ T29] audit: type=1326 audit(1734519962.485:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f41f5585d29 code=0x7ffc0000 [ 625.950009][ T5833] Bluetooth: hci0: command 0x1407 tx timeout [ 625.971648][ T5835] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 627.216023][ T46] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 627.230528][ T46] usb 3-1: USB disconnect, device number 14 [ 628.090740][T12488] xt_CT: No such helper "snmp" [ 629.432347][T12498] loop3: detected capacity change from 0 to 32768 [ 629.440268][T12498] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 629.440268][T12498] clean (size 2912): [ 629.440268][T12498] flags: 0 [ 629.440268][T12498] journal_seq: 10 [ 629.440268][T12498] usage: type=inodes v=8 [ 629.440268][T12498] usage: type=key_version v=0 [ 629.440268][T12498] usage: type=reserved v=0 [ 629.440268][T12498] usage: type=reserved v=0 [ 629.440268][T12498] usage: type=reserved v=0 [ 629.440268][T12498] usage: type=reserved v=0 [ 629.440268][T12498] data_usage: btree: 1/1 [0]=2816 [ 629.440268][T12498] data_usage: journal: 1/1 [0]=0 [ 629.440268][T12498] data_usage: user: 1/1 [0]=16 [ 629.440268][T12498] dev_usage: dev=0 [ 629.440268][T12498] free: buckets=83 sectors=0 fragmented=0 [ 629.440268][T12498] sb: buckets=25 sectors=6152 fragmented=248 [ 629.440268][T12498] journal: buckets=8 sectors=2048 fragmented=0 [ 629.440268][T12498] btree: buckets=11 sectors=2816 fragmented=0 [ 629.440268][T12498] user: buckets=1 sectors=16 fragmented=240 [ 629.440268][T12498] cached: buckets=0 sectors=0 fragmented=0 [ 629.440268][T12498] parity: buckets=458752 sectors=0 fragmented=0 [ 629.440268][T12498] stripe: buckets=0 sectors=0 fragmented=0 [ 629.440268][T12498] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 629.440268][T12498] need_discard: buckets=0 sectors=0 fragmented=0 [ 629.440268][T12498] clock: read=0 [ 629.440268][T12498] clock: write=1280 [ 629.440268][T12498] blacklist: seq=0 [ 629.440268][T12498] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 629.440401][T12498] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 630.222861][ T5833] Bluetooth: hci0: command 0x1407 tx timeout [ 630.229637][ T5835] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 632.021285][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 632.021303][ T29] audit: type=1326 audit(1734519968.949:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5754b85d29 code=0x7fc00000 [ 632.129837][ T29] audit: type=1326 audit(1734519968.967:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.2.1919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5754b85d29 code=0x0 [ 633.070359][ T29] audit: type=1326 audit(1734519969.903:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f5754b85d29 code=0x7fc00000 [ 633.440902][T12537] xt_CT: No such helper "snmp" [ 634.990789][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 635.127033][T12558] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 635.397020][ T46] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 635.856721][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 635.866595][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 635.882466][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.894980][ T9] usb 5-1: Product: syz [ 635.899610][ T9] usb 5-1: Manufacturer: syz [ 635.908858][ T9] usb 5-1: SerialNumber: syz [ 635.915781][ T9] usb 5-1: config 0 descriptor?? [ 636.019208][ T46] usb 8-1: unable to get BOS descriptor or descriptor too short [ 636.039071][ T46] usb 8-1: not running at top speed; connect to a high speed hub [ 636.069141][ T46] usb 8-1: config 4 has an invalid interface number: 111 but max is 0 [ 636.083052][ T46] usb 8-1: config 4 has no interface number 0 [ 636.112916][ T46] usb 8-1: config 4 interface 111 has no altsetting 0 [ 636.144429][ T46] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 636.162916][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.192866][ T46] usb 8-1: Product: syz [ 636.197427][ T46] usb 8-1: Manufacturer: syz [ 636.204881][ T46] usb 8-1: SerialNumber: syz [ 636.366340][ T9] airspy 5-1:0.0: Board ID: 00 [ 636.384671][ T9] airspy 5-1:0.0: Firmware version: [ 637.234721][ T9] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 637.251853][ T9] airspy 5-1:0.0: Registered as swradio24 [ 637.860632][ T9] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 637.869914][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.873830][ T9] usb 5-1: USB disconnect, device number 10 [ 637.951988][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.267494][ T46] pvrusb2: Hardware description: Terratec Grabster AV400 [ 638.291319][ T46] pvrusb2: ********** [ 638.318406][ T46] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 638.344964][ T46] pvrusb2: Important functionality might not be entirely working. [ 638.372748][ T46] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 638.398023][ T46] pvrusb2: ********** [ 638.412249][ T46] usb 8-1: selecting invalid altsetting 0 [ 638.431294][ T2335] pvrusb2: control-write URB failure, status=-71 [ 638.437896][ T2335] pvrusb2: Device being rendered inoperable [ 638.450983][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 638.462466][ T46] usb 8-1: USB disconnect, device number 4 [ 638.490487][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 640.481938][T12602] xt_CT: No such helper "snmp" [ 641.356889][T12607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.415646][ T29] audit: type=1326 audit(1734519977.732:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 641.448787][ T29] audit: type=1326 audit(1734519977.732:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 641.522775][ T29] audit: type=1326 audit(1734519977.816:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12608 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3711b85e5 code=0x7ffc0000 [ 641.567011][ T29] audit: type=1326 audit(1734519977.826:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 641.622279][ T29] audit: type=1326 audit(1734519977.826:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 641.715243][ T29] audit: type=1326 audit(1734519977.882:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 641.773288][ T29] audit: type=1326 audit(1734519977.882:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 641.833678][ T29] audit: type=1326 audit(1734519977.882:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 641.865233][ T29] audit: type=1326 audit(1734519977.882:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 642.132194][ T29] audit: type=1326 audit(1734519977.882:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 642.217921][T12624] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.185597][T12665] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.194831][T12665] loop4: detected capacity change from 0 to 16 [ 648.426109][T12665] erofs (device loop4): mounted with root inode @ nid 36. [ 648.547827][ T5835] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 648.572186][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1963'. [ 648.725092][ T5837] syz-executor: attempt to access beyond end of device [ 648.725092][ T5837] loop4: rw=0, sector=296, nr_sectors = 16 limit=16 [ 648.765234][ T5835] Bluetooth: hci0: command 0x1407 tx timeout [ 648.780750][ T5837] erofs (device loop4): read error -5 @ 0 of nid 36 [ 648.981493][ T5837] erofs (device loop4): fail to readdir of logical block 0 of nid 36 [ 649.900712][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.910074][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.923285][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.931482][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.943737][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 649.951193][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 650.477934][T12679] chnl_net:caif_netlink_parms(): no params data found [ 651.104317][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.121170][T12679] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.131284][T12679] bridge_slave_0: entered allmulticast mode [ 651.166755][T12679] bridge_slave_0: entered promiscuous mode [ 651.205780][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.227625][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.274257][T12679] bridge_slave_1: entered allmulticast mode [ 651.294113][T12679] bridge_slave_1: entered promiscuous mode [ 651.490160][T12679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.553440][T12679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.841767][T12679] team0: Port device team_slave_0 added [ 652.128634][ T5835] Bluetooth: hci3: command tx timeout [ 652.206494][T12679] team0: Port device team_slave_1 added [ 652.761128][T12679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.768113][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.793975][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.845708][T12679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.872009][T12679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.879438][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.927524][T12679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.043413][T12713] tipc: Enabling of bearer rejected, failed to enable media [ 654.080976][T12679] hsr_slave_0: entered promiscuous mode [ 654.095771][ T5833] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 654.102031][ T5833] Bluetooth: hci0: command 0x1407 tx timeout [ 654.108272][ T5882] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 654.118615][T12679] hsr_slave_1: entered promiscuous mode [ 654.124938][T12679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.133289][T12679] Cannot create hsr debugfs directory [ 654.168448][ T977] hid-generic 0001:0000:0000.001E: unknown main item tag 0x0 [ 654.253979][ T977] hid-generic 0001:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 654.297965][ T5882] usb 8-1: Using ep0 maxpacket: 8 [ 654.320494][ T5882] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 654.329916][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.337938][ T5882] usb 8-1: Product: syz [ 654.342568][ T5835] Bluetooth: hci3: command tx timeout [ 654.349753][ T5882] usb 8-1: Manufacturer: syz [ 654.354858][ T5882] usb 8-1: SerialNumber: syz [ 654.366280][ T5882] usb 8-1: config 0 descriptor?? [ 654.667964][T12679] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 654.752976][ T5882] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 654.755166][T12679] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 654.801923][T12724] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 654.842512][T12679] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 654.903369][T12679] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 655.181408][T12679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.196563][T12679] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.213218][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.220425][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.360113][T12679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 655.370853][T12679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.585541][ T5835] Bluetooth: hci0: command 0x1407 tx timeout [ 656.591618][ T5835] Bluetooth: hci3: command tx timeout [ 656.780124][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.787268][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.975359][ T5882] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 656.989219][ T5882] usb 8-1: USB disconnect, device number 5 [ 658.413265][T12679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.437593][ T5833] Bluetooth: hci3: command tx timeout [ 660.996079][T12679] veth0_vlan: entered promiscuous mode [ 661.001824][ T977] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 661.033959][T12679] veth1_vlan: entered promiscuous mode [ 661.095565][T12679] veth0_macvtap: entered promiscuous mode [ 661.108053][T11575] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 661.129736][T12679] veth1_macvtap: entered promiscuous mode [ 661.161334][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 661.178230][ T977] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 661.201278][ T977] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 661.211513][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.237938][ T977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 661.289245][ T977] usb 3-1: config 1 has no interface number 0 [ 661.387397][T11575] usb 5-1: Using ep0 maxpacket: 8 [ 661.431282][T11575] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 661.477393][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.940021][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.960001][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.970595][ T977] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 661.971819][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.981824][T11575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.001655][ T977] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 662.011636][T11575] usb 5-1: Product: syz [ 662.015910][ T977] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 662.022359][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.029581][T11575] usb 5-1: Manufacturer: syz [ 662.044241][ T977] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 662.054235][T11575] usb 5-1: SerialNumber: syz [ 662.068935][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.094188][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.110741][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.130623][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.142745][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.162874][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.178531][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.199892][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.222542][T12679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.238627][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.256735][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.266287][T11575] usb 5-1: config 0 descriptor?? [ 662.268035][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.280886][ T977] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 662.286648][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.300750][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.310989][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.394100][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.445999][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.715749][ T977] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 662.765535][T11575] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 662.783281][ T977] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 662.798343][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.849803][ T977] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 662.862499][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.873024][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.883283][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.894857][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.898305][ T5879] usb 3-1: USB disconnect, device number 15 [ 662.904935][T12679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.928489][T12679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.940210][T12679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.962507][T12777] tipc: Enabling of bearer rejected, failed to enable media [ 663.063888][T12679] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.074659][T12679] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.086640][T12679] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.095397][T12679] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.237544][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.245663][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.293369][ T6395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.301798][ T6395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.360437][T12789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.417077][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 663.417095][ T29] audit: type=1326 audit(1734519998.302:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bb385d29 code=0x7ffc0000 [ 663.445510][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.496983][ T29] audit: type=1326 audit(1734519998.302:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f84bb385d29 code=0x7ffc0000 [ 663.529152][ T29] audit: type=1326 audit(1734519998.423:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bb385d29 code=0x7ffc0000 [ 663.551522][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.558221][ T29] audit: type=1326 audit(1734519998.423:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12792 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f84bb3b85e5 code=0x7ffc0000 [ 664.031360][ T29] audit: type=1326 audit(1734519998.891:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12792 comm="syz.7.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f84bb385d29 code=0x7ffc0000 [ 664.228055][T11575] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 664.240679][T11575] usb 5-1: USB disconnect, device number 11 [ 664.657105][ T5879] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 664.829841][ T5879] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.876952][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 664.925594][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 664.967045][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 665.139833][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 665.849299][ T5879] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.858470][ T5879] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.866787][ T5879] usb 9-1: Manufacturer: syz [ 665.874351][ T5879] usb 9-1: config 0 descriptor?? [ 666.038520][ T5879] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 666.607290][ T5910] usb 9-1: USB disconnect, device number 2 [ 669.475855][T12833] tipc: Enabling of bearer rejected, failed to enable media [ 670.301412][T12840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.322676][ T29] audit: type=1326 audit(1734520004.775:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 670.416287][ T29] audit: type=1326 audit(1734520004.775:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 670.463721][ T29] audit: type=1326 audit(1734520004.821:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3711b85e5 code=0x7ffc0000 [ 670.718748][ T29] audit: type=1326 audit(1734520004.859:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 670.785674][ T29] audit: type=1326 audit(1734520004.859:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 671.024317][ T29] audit: type=1326 audit(1734520005.055:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12845 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 671.047191][ T29] audit: type=1326 audit(1734520005.093:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 671.070317][ T29] audit: type=1326 audit(1734520005.093:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 671.092985][ T29] audit: type=1326 audit(1734520005.093:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 671.115552][ T29] audit: type=1326 audit(1734520005.102:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12839 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa371185d29 code=0x7ffc0000 [ 674.642648][T12862] loop6: detected capacity change from 0 to 32768 [ 674.670229][T12862] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 674.670229][T12862] clean (size 2912): [ 674.670229][T12862] flags: 0 [ 674.670229][T12862] journal_seq: 10 [ 674.670229][T12862] usage: type=inodes v=8 [ 674.670229][T12862] usage: type=key_version v=0 [ 674.670229][T12862] usage: type=reserved v=0 [ 674.670229][T12862] usage: type=reserved v=0 [ 674.670229][T12862] usage: type=reserved v=0 [ 674.670229][T12862] usage: type=reserved v=0 [ 674.670229][T12862] data_usage: btree: 1/1 [0]=2816 [ 674.670229][T12862] data_usage: journal: 1/1 [0]=0 [ 674.670229][T12862] data_usage: user: 1/1 [0]=16 [ 674.670229][T12862] dev_usage: dev=0 [ 674.670229][T12862] free: buckets=83 sectors=0 fragmented=0 [ 674.670229][T12862] sb: buckets=25 sectors=6152 fragmented=248 [ 674.670229][T12862] journal: buckets=8 sectors=2048 fragmented=0 [ 674.670229][T12862] btree: buckets=11 sectors=2816 fragmented=0 [ 674.670229][T12862] user: buckets=1 sectors=16 fragmented=240 [ 674.670229][T12862] cached: buckets=0 sectors=0 fragmented=0 [ 674.670229][T12862] parity: buckets=458752 sectors=0 fragmented=0 [ 674.670229][T12862] stripe: buckets=0 sectors=0 fragmented=0 [ 674.670229][T12862] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 674.670229][T12862] need_discard: buckets=0 sectors=0 fragmented=0 [ 674.670229][T12862] clock: read=0 [ 674.670229][T12862] clock: write=1280 [ 674.670229][T12862] blacklist: seq=0 [ 674.670229][T12862] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 674.670415][T12862] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 674.849888][T12883] xt_CT: No such helper "snmp" [ 675.234133][T12891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.732630][T12901] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2027'. [ 676.770227][T12911] autofs: Bad value for 'fd' [ 679.011334][T12930] TCP: out of memory -- consider tuning tcp_mem [ 679.101816][T12937] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2040'. [ 679.330407][T12942] autofs: Bad value for 'fd' [ 680.404265][T11575] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 681.344605][T11575] usb 9-1: Using ep0 maxpacket: 32 [ 681.737155][T11575] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 681.746477][T11575] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 681.785994][T11575] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 681.869033][T11575] usb 9-1: config 1 has no interface number 0 [ 681.875570][T11575] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.011925][T11575] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 682.068799][T11575] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 682.422956][T11575] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.560470][T11575] usb 9-1: can't set config #1, error -71 [ 682.695654][T11575] usb 9-1: USB disconnect, device number 3 [ 683.499395][T12964] TCP: out of memory -- consider tuning tcp_mem [ 683.642332][T12975] autofs: Bad value for 'fd' [ 683.987673][T12979] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2057'. [ 685.236529][ T5878] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 685.771001][ T5878] usb 9-1: Using ep0 maxpacket: 32 [ 686.014845][ T5878] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 686.092445][ T5878] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 686.174037][ T5878] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 686.284266][ T5878] usb 9-1: config 1 has no interface number 0 [ 686.290516][ T5878] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.345394][ T5878] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 686.381147][ T5878] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 686.390242][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.447729][ T5878] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 686.646919][T13007] autofs: Unknown parameter '0x0000000000000000' [ 686.935465][ T5878] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 687.670099][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 688.386808][ T5878] usb 9-1: USB disconnect, device number 4 [ 688.437147][ T5878] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 688.730488][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.914173][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 688.945457][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 688.969072][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 688.979097][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 689.138010][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 689.216087][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 689.288203][ T9] usb 3-1: Manufacturer: syz [ 689.361391][ T9] usb 3-1: config 0 descriptor?? [ 689.391625][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 689.624573][T11575] usb 3-1: USB disconnect, device number 16 [ 690.638641][T13047] autofs: Unknown parameter '0x0000000000000000' [ 694.456241][T13083] autofs: Unknown parameter '0x0000000000000000' [ 696.530507][T13111] xt_nat: multiple ranges no longer supported [ 698.089816][T13119] autofs: Unknown parameter '0x0000000000000000' [ 698.833971][ T5910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 699.047445][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 699.270887][ T5910] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 699.279614][ T5910] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 699.303717][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 699.313375][ T5910] usb 3-1: config 1 has no interface number 0 [ 700.580613][ T5910] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.591703][ T5910] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 700.605314][ T5910] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 700.614590][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.793700][ T5910] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 703.612326][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.853953][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 705.677533][ T5910] snd_usb_pod 3-1:1.1: set_interface failed [ 705.683872][ T5910] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 705.693308][ T5910] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 705.726709][ T5910] usb 3-1: USB disconnect, device number 17 [ 706.378344][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 706.392215][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 706.454493][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 706.497324][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 706.556129][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 706.587710][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 709.272457][ T54] Bluetooth: hci6: command tx timeout [ 709.527438][T13197] Invalid source name [ 709.874440][T13169] chnl_net:caif_netlink_parms(): no params data found [ 710.466429][ T5879] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 711.289808][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 711.385954][ T5879] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 711.401735][ T5879] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 711.416964][ T5879] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 711.458221][T13169] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.465684][ T5879] usb 8-1: config 1 has no interface number 0 [ 711.476373][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.483579][ T54] Bluetooth: hci6: command tx timeout [ 711.490446][ T5879] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.505441][ T5879] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 711.529929][ T5879] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 711.546016][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.576012][T13169] bridge_slave_0: entered allmulticast mode [ 711.584312][ T5879] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 711.605075][T13169] bridge_slave_0: entered promiscuous mode [ 711.627737][T13169] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.651319][T13169] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.696326][T13169] bridge_slave_1: entered allmulticast mode [ 711.720268][T13169] bridge_slave_1: entered promiscuous mode [ 711.784426][T13169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.809369][T13169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.873301][T13169] team0: Port device team_slave_0 added [ 711.892612][T13169] team0: Port device team_slave_1 added [ 712.035006][ T5879] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 712.052853][ T6147] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.132250][T13169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.156467][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.227880][T13169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.266484][ T5878] usb 8-1: USB disconnect, device number 6 [ 712.273231][ T5878] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 712.285162][T13169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.314105][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.350752][T13169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.870981][ T6147] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.223406][ T6147] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.449188][T13169] hsr_slave_0: entered promiscuous mode [ 713.467247][T13169] hsr_slave_1: entered promiscuous mode [ 713.513625][T13169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.554422][T13169] Cannot create hsr debugfs directory [ 713.713533][ T54] Bluetooth: hci6: command tx timeout [ 714.099642][ T6147] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.577084][T13238] sp0: Synchronizing with TNC [ 715.708309][ T6147] bridge_slave_1: left allmulticast mode [ 715.714011][ T6147] bridge_slave_1: left promiscuous mode [ 715.756416][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.855522][ T6147] bridge_slave_0: left allmulticast mode [ 715.861552][ T6147] bridge_slave_0: left promiscuous mode [ 715.869006][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.921328][ T54] Bluetooth: hci6: command tx timeout [ 718.775214][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.851468][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.892115][ T6147] bond0 (unregistering): Released all slaves [ 718.957265][T13265] netlink: 'syz.6.2149': attribute type 29 has an invalid length. [ 719.028995][T13169] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 719.376036][T13169] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 719.459857][T13169] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 719.482776][T13169] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 719.766588][T13169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.867116][T13169] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.890740][ T6147] hsr_slave_0: left promiscuous mode [ 719.952523][ T6147] hsr_slave_1: left promiscuous mode [ 720.248374][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.280463][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.345133][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.352621][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.454448][ T6147] veth1_macvtap: left promiscuous mode [ 720.519728][ T6147] veth0_macvtap: left promiscuous mode [ 720.569204][ T6147] veth1_vlan: left promiscuous mode [ 720.574883][ T6147] veth0_vlan: left promiscuous mode [ 723.174953][T13305] Falling back ldisc for ttynull. [ 726.678865][ T6147] team0 (unregistering): Port device team_slave_1 removed [ 727.734676][ T6147] team0 (unregistering): Port device team_slave_0 removed [ 729.251907][T13349] sp0: Synchronizing with TNC [ 730.523162][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.530364][ T6423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.566257][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.573482][ T6423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.768175][T13169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 731.953863][T13169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.989092][T13364] netlink: 'syz.2.2176': attribute type 29 has an invalid length. [ 732.908214][T13365] netlink: 'syz.2.2176': attribute type 29 has an invalid length. [ 732.916419][T13366] netlink: 'syz.2.2176': attribute type 29 has an invalid length. [ 732.932945][T13375] netlink: 'syz.2.2176': attribute type 29 has an invalid length. [ 732.963403][T13364] netlink: 'syz.2.2176': attribute type 29 has an invalid length. [ 733.055704][T13364] netlink: 'syz.2.2176': attribute type 29 has an invalid length. [ 733.400784][T13169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.089516][T13405] sp0: Synchronizing with TNC [ 736.298840][T13169] veth0_vlan: entered promiscuous mode [ 737.164088][T13169] veth1_vlan: entered promiscuous mode [ 737.288709][T13169] veth0_macvtap: entered promiscuous mode [ 737.569164][T13169] veth1_macvtap: entered promiscuous mode [ 737.585420][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.595976][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.606013][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.616583][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.626595][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.663711][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.685788][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.705377][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.719336][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.736253][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.748139][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.762746][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.780147][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.795466][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.826437][T13169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.910358][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.926588][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.936527][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.949483][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.959539][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.970038][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.981336][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.992251][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.002169][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.012948][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.022989][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.033550][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.043456][T13169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.054238][T13169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.065377][T13169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.983206][T13169] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.022427][T13169] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.049605][T13169] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.070226][T13169] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.031157][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.048191][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.049842][ T6395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.068554][ T6395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.631810][T13543] IPv6: Can't replace route, no match found [ 754.510252][T13581] 9pnet_fd: p9_fd_create_unix (13581): problem connecting socket: ./cgroup: -111 [ 754.522744][T13581] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2245'. [ 757.345919][T13609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.546132][T13610] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 761.474531][T13678] Invalid source name [ 762.945100][T13708] netlink: 'syz.7.2289': attribute type 1 has an invalid length. [ 762.986796][T13708] netlink: 'syz.7.2289': attribute type 2 has an invalid length. [ 764.111445][T13720] Invalid source name [ 767.597746][ T46] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 768.815962][ T46] usb 10-1: Using ep0 maxpacket: 32 [ 768.831616][ T46] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 768.852409][ T46] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 768.875113][T13764] Invalid source name [ 769.037375][ T46] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 769.202858][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 769.210598][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 769.256025][ T46] usb 10-1: config 1 has no interface number 0 [ 769.262284][ T46] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.292955][ T46] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 769.328560][ T46] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 769.385020][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.641570][ T46] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 769.740206][ T46] snd_usb_pod 10-1:1.1: set_interface failed [ 769.746631][ T46] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 769.755013][ T46] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 769.790754][ T46] usb 10-1: USB disconnect, device number 2 [ 770.992535][T13790] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2314'. [ 772.956961][T13806] Invalid source name [ 775.175604][T13843] Invalid source name [ 780.071373][T13919] netlink: 'syz.7.2364': attribute type 16 has an invalid length. [ 780.082345][T13919] netlink: 'syz.7.2364': attribute type 3 has an invalid length. [ 780.158382][T13919] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.2364'. [ 780.405646][T13933] Illegal XDP return value 4294967274 on prog (id 485) dev N/A, expect packet loss! [ 780.950852][ T5881] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 781.804899][ T5881] usb 8-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 781.823586][ T5881] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 781.860920][ T5881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 781.982254][ T5881] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 781.992027][ T5881] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 782.004908][ T5881] usb 8-1: Manufacturer: syz [ 782.010925][ T5881] usb 8-1: config 0 descriptor?? [ 782.018371][T13931] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 782.308808][ T5881] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 782.376689][ T5881] usb 8-1: USB disconnect, device number 7 [ 785.354055][ T977] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 785.997043][ T977] usb 8-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 786.013060][ T977] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 786.043367][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 786.080250][ T977] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 786.148531][ T977] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 786.869537][ T977] usb 8-1: Manufacturer: syz [ 786.894992][ T977] usb 8-1: config 0 descriptor?? [ 786.900886][T13991] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 788.001419][ T977] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 788.011080][ T977] usb 8-1: USB disconnect, device number 8 [ 797.495295][ T5881] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 797.894134][ T5881] usb 8-1: Using ep0 maxpacket: 8 [ 797.933430][ T5881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.981766][ T5881] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 798.070543][ T5881] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 798.079780][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.106707][ T5881] usb 8-1: Product: syz [ 798.111373][ T5881] usb 8-1: Manufacturer: syz [ 798.116096][ T5881] usb 8-1: SerialNumber: syz [ 798.123338][ T5881] usb 8-1: config 0 descriptor?? [ 798.131439][ T5881] streamzap 8-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 798.372642][ T5881] usb 8-1: USB disconnect, device number 9 [ 799.191719][T14172] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 799.230092][T14172] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.240100][T14172] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.265436][T14172] bridge0: entered allmulticast mode [ 800.453729][T14191] bridge0: entered promiscuous mode [ 800.483428][T14191] bridge0: port 3(macsec1) entered blocking state [ 800.503040][T14191] bridge0: port 3(macsec1) entered disabled state [ 800.510019][T14191] macsec1: entered allmulticast mode [ 800.566989][T14191] bridge0: entered allmulticast mode [ 800.579722][T14191] macsec1: left allmulticast mode [ 800.591607][T14191] bridge0: left allmulticast mode [ 800.607092][T14191] bridge0: left promiscuous mode [ 803.416596][ T30] INFO: task syz.3.1921:12537 blocked for more than 143 seconds. [ 803.428383][ T30] Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 803.435665][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 803.444513][ T30] task:syz.3.1921 state:D stack:21008 pid:12537 tgid:12536 ppid:5829 flags:0x00004006 [ 803.454874][ T30] Call Trace: [ 803.458174][ T30] [ 803.461130][ T30] __schedule+0x189f/0x4c80 [ 803.465825][ T30] ? __pfx___schedule+0x10/0x10 [ 803.471159][ T30] ? __pfx_lock_release+0x10/0x10 [ 803.476531][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 803.481771][ T30] ? schedule+0x90/0x320 [ 803.486181][ T30] schedule+0x14b/0x320 [ 803.490370][ T30] bit_wait+0x12/0xd0 [ 803.494381][ T30] __wait_on_bit+0xb0/0x2f0 [ 803.499019][ T30] ? __pfx_bit_wait+0x10/0x10 [ 803.503727][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 803.509347][ T30] ? __pfx_bit_wait+0x10/0x10 [ 803.514060][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 803.520295][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 803.525956][ T30] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 803.531601][ T30] netfs_unbuffered_read_iter_locked+0xd83/0x1540 [ 803.538062][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 803.543846][ T30] __kernel_read+0x52e/0xa00 [ 803.548464][ T30] ? do_sys_openat2+0x13e/0x1d0 [ 803.553414][ T30] ? __pfx___kernel_read+0x10/0x10 [ 803.558578][ T30] integrity_kernel_read+0xb0/0x100 [ 803.563858][ T30] ? __pfx_integrity_kernel_read+0x10/0x10 [ 803.569698][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 803.575362][ T30] ? ima_calc_file_hash+0xaae/0x1b30 [ 803.581105][ T30] ima_calc_file_hash+0xae6/0x1b30 [ 803.586434][ T30] ? p9_client_stat+0x1be/0x280 [ 803.591397][ T30] ? v9fs_vfs_getattr+0x1c0/0x370 [ 803.596521][ T30] ? ima_collect_measurement+0x2b1/0xb10 [ 803.604091][ T30] ? process_measurement+0x1351/0x1fb0 [ 803.624197][ T30] ? ima_file_check+0xd9/0x120 [ 803.629026][ T30] ? security_file_post_open+0xb9/0x280 [ 803.634608][ T30] ? path_openat+0x2cbd/0x3580 [ 803.639589][ T30] ? do_filp_open+0x27f/0x4e0 [ 803.644300][ T30] ? __x64_sys_openat+0x247/0x2a0 [ 803.649430][ T30] ? do_syscall_64+0xf3/0x230 [ 803.654203][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.660401][ T30] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 803.666148][ T30] ? p9_client_stat+0x1be/0x280 [ 803.671346][ T30] ? kfree+0x196/0x430 [ 803.675513][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 803.681605][ T30] ? p9_client_stat+0x1be/0x280 [ 803.918207][ T30] ? p9_client_stat+0x1be/0x280 [ 803.935249][ T30] ? __pfx_p9_client_stat+0x10/0x10 [ 803.956249][ T30] ? v9fs_fid_lookup+0x1b2/0xf30 [ 804.052739][ T30] ? v9fs_vfs_getattr+0x2eb/0x370 [ 804.156638][ T30] ima_collect_measurement+0x520/0xb10 [ 804.200478][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2491'. [ 804.290723][ T30] ? __pfx_ima_collect_measurement+0x10/0x10 [ 804.350023][ T30] ? rcu_is_watching+0x15/0xb0 [ 804.368422][ T30] ? trace_contention_end+0x3c/0x120 [ 804.393971][ T30] ? __asan_memset+0x23/0x50 [ 804.399530][ T30] ? ima_get_hash_algo+0x156/0x4d0 [ 804.459638][ T30] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 804.480564][ T30] process_measurement+0x1351/0x1fb0 [ 804.487965][T14262] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 804.493018][ T30] ? __pfx_process_measurement+0x10/0x10 [ 804.512205][ T30] ? __pfx_lock_release+0x10/0x10 [ 804.527075][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 804.532315][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 804.541647][ T30] ? file_set_fsnotify_mode+0x12a/0x510 [ 804.548295][ T30] ? inode_to_bdi+0x69/0xf0 [ 804.553303][ T30] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 804.566531][ T30] ima_file_check+0xd9/0x120 [ 804.586591][ T30] ? __pfx_ima_file_check+0x10/0x10 [ 804.607830][ T30] security_file_post_open+0xb9/0x280 [ 804.620097][ T30] path_openat+0x2cbd/0x3580 [ 804.629920][ T30] ? __pfx_path_openat+0x10/0x10 [ 804.635008][ T30] do_filp_open+0x27f/0x4e0 [ 804.640007][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 804.646982][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 804.652144][ T30] do_sys_openat2+0x13e/0x1d0 [ 804.657996][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 804.663646][ T30] ? __se_sys_mount+0x379/0x3c0 [ 804.668628][ T30] __x64_sys_openat+0x247/0x2a0 [ 804.679153][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 804.686950][ T30] ? do_syscall_64+0x100/0x230 [ 804.692495][ T30] ? do_syscall_64+0xb6/0x230 [ 804.697539][ T30] do_syscall_64+0xf3/0x230 [ 804.702084][ T30] ? clear_bhb_loop+0x35/0x90 [ 804.710941][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.720055][ T30] RIP: 0033:0x7f41f5585d29 [ 804.725481][ T30] RSP: 002b:00007f41f6442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 804.735631][ T30] RAX: ffffffffffffffda RBX: 00007f41f5775fa0 RCX: 00007f41f5585d29 [ 804.743910][ T30] RDX: 0000000000020842 RSI: 000000002000c380 RDI: ffffffffffffff9c [ 804.752390][ T30] RBP: 00007f41f5601a20 R08: 0000000000000000 R09: 0000000000000000 [ 804.765496][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.790227][ T30] R13: 0000000000000000 R14: 00007f41f5775fa0 R15: 00007ffc83739e28 [ 804.816527][ T30] [ 804.886336][ T30] [ 804.886336][ T30] Showing all locks held in the system: [ 804.894774][ T30] 3 locks held by kworker/0:1/9: [ 804.927814][ T30] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 804.966073][ T30] #1: ffffc900000e7c60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 804.989548][ T30] #2: ffff88801b35e240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x2d1/0x4130 [ 805.014074][ T30] 1 lock held by khungtaskd/30: [ 805.022634][ T30] #0: ffffffff8e937d20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 805.055732][ T30] 2 locks held by getty/5583: [ 805.062587][ T30] #0: ffff8880353da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 805.088851][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 805.109716][ T30] 2 locks held by syz.3.1921/12537: [ 805.115833][ T30] #0: ffff8880791ed178 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7a6/0x1fb0 [ 805.128563][ T30] #1: ffff88807f058148 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 805.185070][ T30] [ 805.188953][ T30] ============================================= [ 805.188953][ T30] [ 805.206482][ T30] NMI backtrace for cpu 1 [ 805.206505][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 805.206528][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 805.206539][ T30] Call Trace: [ 805.206545][ T30] [ 805.206553][ T30] dump_stack_lvl+0x241/0x360 [ 805.206579][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.206597][ T30] ? __pfx__printk+0x10/0x10 [ 805.206630][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 805.206656][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 805.206672][ T30] ? _printk+0xd5/0x120 [ 805.206693][ T30] ? __pfx__printk+0x10/0x10 [ 805.206716][ T30] ? __wake_up_klogd+0xcc/0x110 [ 805.206743][ T30] ? __pfx__printk+0x10/0x10 [ 805.206767][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 805.206789][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 805.206810][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 805.206834][ T30] watchdog+0xff6/0x1040 [ 805.206856][ T30] ? watchdog+0x1ea/0x1040 [ 805.206879][ T30] ? __pfx_watchdog+0x10/0x10 [ 805.206897][ T30] kthread+0x7a9/0x920 [ 805.206917][ T30] ? __pfx_kthread+0x10/0x10 [ 805.206939][ T30] ? __pfx_watchdog+0x10/0x10 [ 805.206959][ T30] ? __pfx_kthread+0x10/0x10 [ 805.206978][ T30] ? __pfx_kthread+0x10/0x10 [ 805.207003][ T30] ? __pfx_kthread+0x10/0x10 [ 805.207022][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.207044][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 805.207067][ T30] ? __pfx_kthread+0x10/0x10 [ 805.207089][ T30] ret_from_fork+0x4b/0x80 [ 805.207109][ T30] ? __pfx_kthread+0x10/0x10 [ 805.207131][ T30] ret_from_fork_asm+0x1a/0x30 [ 805.207163][ T30] [ 805.207171][ T30] Sending NMI from CPU 1 to CPUs 0: [ 805.379902][ C0] NMI backtrace for cpu 0 [ 805.379916][ C0] CPU: 0 UID: 0 PID: 6156 Comm: kworker/u8:13 Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 805.379934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 805.379944][ C0] Workqueue: bat_events batadv_nc_worker [ 805.379967][ C0] RIP: 0010:__lock_acquire+0x714/0x2100 [ 805.379988][ C0] Code: 04 24 8b 28 41 89 ec ff cd 0f 88 a5 00 00 00 89 eb 83 fd 31 73 7b 48 8d 04 9b 48 8d 5c c6 20 48 89 d8 48 c1 e8 03 0f b6 04 10 <84> c0 75 18 8b 1b 41 0f b6 04 16 84 c0 75 32 41 33 1f f7 c3 00 60 [ 805.380001][ C0] RSP: 0018:ffffc9000b247850 EFLAGS: 00000802 [ 805.380014][ C0] RAX: 0000000000000000 RBX: ffff88802824e508 RCX: 0000000000000001 [ 805.380025][ C0] RDX: dffffc0000000000 RSI: ffff88802824e4e8 RDI: ffffffff942d1840 [ 805.380037][ C0] RBP: 0000000000000000 R08: ffffffff942d1847 R09: 1ffffffff285a308 [ 805.380048][ C0] R10: dffffc0000000000 R11: fffffbfff285a309 R12: 0000000000000001 [ 805.380059][ C0] R13: ffff88802824da00 R14: 1ffff11005049cab R15: ffff88802824e558 [ 805.380071][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 805.380084][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 805.380095][ C0] CR2: 00007f6b00747ab8 CR3: 0000000033bb8000 CR4: 00000000003526f0 [ 805.380109][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 805.380119][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 805.380129][ C0] Call Trace: [ 805.380134][ C0] [ 805.380140][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 805.380158][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 805.380177][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 805.380199][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 805.380222][ C0] ? nmi_handle+0x14f/0x5a0 [ 805.380242][ C0] ? nmi_handle+0x2a/0x5a0 [ 805.380261][ C0] ? __lock_acquire+0x714/0x2100 [ 805.380278][ C0] ? default_do_nmi+0x63/0x160 [ 805.380295][ C0] ? exc_nmi+0x123/0x1f0 [ 805.380311][ C0] ? end_repeat_nmi+0xf/0x53 [ 805.380333][ C0] ? __lock_acquire+0x714/0x2100 [ 805.380351][ C0] ? __lock_acquire+0x714/0x2100 [ 805.380368][ C0] ? __lock_acquire+0x714/0x2100 [ 805.380386][ C0] [ 805.380391][ C0] [ 805.380402][ C0] lock_acquire+0x1ed/0x550 [ 805.380419][ C0] ? batadv_nc_worker+0xcb/0x610 [ 805.380437][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 805.380456][ C0] ? batadv_nc_worker+0xcb/0x610 [ 805.380471][ C0] ? __pfx_lock_release+0x10/0x10 [ 805.380490][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 805.380511][ C0] batadv_nc_worker+0xec/0x610 [ 805.380526][ C0] ? batadv_nc_worker+0xcb/0x610 [ 805.380542][ C0] ? batadv_nc_worker+0xcb/0x610 [ 805.380558][ C0] ? process_scheduled_works+0x976/0x1840 [ 805.380575][ C0] process_scheduled_works+0xa66/0x1840 [ 805.380600][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 805.380619][ C0] ? assign_work+0x364/0x3d0 [ 805.380636][ C0] worker_thread+0x870/0xd30 [ 805.380657][ C0] ? __kthread_parkme+0x169/0x1d0 [ 805.380676][ C0] ? __pfx_worker_thread+0x10/0x10 [ 805.380691][ C0] kthread+0x7a9/0x920 [ 805.380709][ C0] ? __pfx_kthread+0x10/0x10 [ 805.380736][ C0] ? __pfx_worker_thread+0x10/0x10 [ 805.380752][ C0] ? __pfx_kthread+0x10/0x10 [ 805.380769][ C0] ? __pfx_kthread+0x10/0x10 [ 805.380788][ C0] ? __pfx_kthread+0x10/0x10 [ 805.380804][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.380822][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 805.380840][ C0] ? __pfx_kthread+0x10/0x10 [ 805.380858][ C0] ret_from_fork+0x4b/0x80 [ 805.380875][ C0] ? __pfx_kthread+0x10/0x10 [ 805.380892][ C0] ret_from_fork_asm+0x1a/0x30 [ 805.380914][ C0] [ 805.416503][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 805.416523][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 805.416545][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 805.416563][ T30] Call Trace: [ 805.416571][ T30] [ 805.416580][ T30] dump_stack_lvl+0x241/0x360 [ 805.416607][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.416626][ T30] ? __pfx__printk+0x10/0x10 [ 805.416649][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 805.416678][ T30] ? vscnprintf+0x5d/0x90 [ 805.416702][ T30] panic+0x349/0x880 [ 805.416734][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 805.416758][ T30] ? __pfx_panic+0x10/0x10 [ 805.416780][ T30] ? __pfx_delay_tsc+0x10/0x10 [ 805.416799][ T30] ? nmi_trigger_cpumask_backtrace+0x1d4/0x320 [ 805.416824][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 805.416847][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 805.416867][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 805.416891][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 805.416915][ T30] watchdog+0x1035/0x1040 [ 805.416938][ T30] ? watchdog+0x1ea/0x1040 [ 805.416963][ T30] ? __pfx_watchdog+0x10/0x10 [ 805.416985][ T30] kthread+0x7a9/0x920 [ 805.417005][ T30] ? __pfx_kthread+0x10/0x10 [ 805.417029][ T30] ? __pfx_watchdog+0x10/0x10 [ 805.417050][ T30] ? __pfx_kthread+0x10/0x10 [ 805.417071][ T30] ? __pfx_kthread+0x10/0x10 [ 805.417095][ T30] ? __pfx_kthread+0x10/0x10 [ 805.417115][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.417137][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 805.417159][ T30] ? __pfx_kthread+0x10/0x10 [ 805.417182][ T30] ret_from_fork+0x4b/0x80 [ 805.417203][ T30] ? __pfx_kthread+0x10/0x10 [ 805.417226][ T30] ret_from_fork_asm+0x1a/0x30 [ 805.417258][ T30] [ 805.923795][ T30] Kernel Offset: disabled [ 805.928106][ T30] Rebooting in 86400 seconds..