last executing test programs: 12m12.365415922s ago: executing program 4 (id=1543): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 12m8.499948151s ago: executing program 4 (id=1546): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x52}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[], 0x0, 0x56, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value}, 0x28) io_setup(0x3, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x100, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3ff, 0x40000000, 0x7fffe, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x3, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x1, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x1c8, 0x1c8, 0x410, 0x130, 0x328, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000300), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0x0, 'ip_vti0\x00', 'vlan0\x00', {}, {}, 0x21, 0x0, 0x44}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x9]}}, @common=@addrtype={{0x30}, {0xf28, 0x10, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x0, 0x2], 0x3}, {0x2, [0x6, 0x2, 0x4, 0x0, 0x2]}}}}, {{@ip={@loopback, @empty, 0xffffffff, 0xff000000, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x73, 0x1, 0x2c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xffffffff], @ipv4=@empty, [0xffff00, 0xff000000, 0xff000000], @ipv6=@empty, [0xff000000, 0xffffff00, 0xff], @ipv4=@local, [0x0, 0xffffff00, 0xff, 0xffffffff], 0x0, 0x5, 0x16, 0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x205a, 0x88}, 0x1, 0x880}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40000000, 0xccb, @remote, 0x4e21}}}, {{@ip={@private=0xa010102, @multicast1, 0x5aabe60e4f786391, 0xffffff00, 'caif0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3d, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 12m6.447182794s ago: executing program 4 (id=1551): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r3 = eventfd(0x1) ioctl$FIONCLEX(r3, 0x5450) syz_open_dev$media(&(0x7f0000000240), 0x9, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) 12m4.242208584s ago: executing program 4 (id=1553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 11m58.732652108s ago: executing program 4 (id=1560): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) r3 = eventfd(0x1) ioctl$FIONCLEX(r3, 0x5450) syz_open_dev$media(&(0x7f0000000240), 0x9, 0x2) mknod$loop(0x0, 0x2480, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) 11m56.188119131s ago: executing program 4 (id=1564): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="db1a0000000000000000030000002c00070073797374656d5f753a6f626a6563745f723a696e6574645f6368696c645f657865635f743a7330001727b2367c5f8df3bb5c4014b47af6458fb18811f57b7858116189217cf82a5d21430b17b84f90ff2e6cd2eb7563d9883dfdd6f48cf12644fc7a5e8240824b62b5df46bae81da612991db251feb7a2754a88044b0721662696a9e774941fcb3b9958aaaea73496906ea963c7678b54311fdf4670cd9ec00f3f10c9d1d40d0a0cbe9529a86dd0d81eff75177ebcd28807be48e393de7f7ec607c2c4e1aea4154ace658843636914d0c61402be218614c43888424eaf640083d74b6da5de72a79d3f88d99efb8e0cc343d8a72666b443040bf972317afd5689905a054e4951d79ac0045b672a7e5eabb5c60911cf03cfaec1cd10a2e85450dd3e6dd1cb70fb2a696689e66925ca525089ba"], 0x40}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000480)=""/74, 0x4a) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x1294}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f00000003c0)=ANY=[]) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) 11m55.657486365s ago: executing program 32 (id=1564): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x40}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000480)=""/74, 0x4a) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x1294}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f00000003c0)=ANY=[]) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) 11m53.637018117s ago: executing program 0 (id=1569): r0 = dup(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x4, &(0x7f0000001d00)=ANY=[@ANYRESDEC=r0], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) 11m52.922298403s ago: executing program 0 (id=1570): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c", 0x71, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x2, 0x24, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) 11m49.667853913s ago: executing program 0 (id=1574): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) gettid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x200, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1000f40000000000"], 0x10}}], 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 11m46.131066341s ago: executing program 0 (id=1579): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 11m44.030678757s ago: executing program 0 (id=1583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10001, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x40) r2 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={&(0x7f0000000340)=""/196, 0xc4}) socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) syz_open_pts(r3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000000c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) getpgid(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(r5, &(0x7f000000b0c0)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, 0x0}}], 0x1, 0x20040080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 11m37.783942106s ago: executing program 0 (id=1592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) gettid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x200, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1000f40000000000"], 0x10}}], 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x0) 11m37.395212741s ago: executing program 33 (id=1592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) gettid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x200, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1000f40000000000"], 0x10}}], 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x0) 10m56.727748891s ago: executing program 6 (id=1649): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x4, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) 10m53.405772039s ago: executing program 6 (id=1656): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x36, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000480)="ba3d2374", 0x4}], 0x1, 0x0, 0x0, 0x844}}], 0x1, 0x814) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 10m51.323839444s ago: executing program 6 (id=1661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) gettid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x200, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1000f40000000000"], 0x10}}], 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x0) 10m47.221742134s ago: executing program 6 (id=1669): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 10m45.241425769s ago: executing program 6 (id=1674): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 10m44.51503082s ago: executing program 6 (id=1675): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f2, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x14, &(0x7f0000000300)={0x23, 0x5, 0x7}) ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000140), 0x1004) 10m43.098550693s ago: executing program 34 (id=1675): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f2, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x14, &(0x7f0000000300)={0x23, 0x5, 0x7}) ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000140), 0x1004) 8m31.764114987s ago: executing program 7 (id=2198): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 8m31.717445185s ago: executing program 7 (id=2199): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 8m31.534370745s ago: executing program 7 (id=2200): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) 8m31.295990314s ago: executing program 7 (id=2201): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3a1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) listen(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 8m31.038979722s ago: executing program 7 (id=2204): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) close(r5) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, 0x0) openat$dsp(0xffffff9c, 0x0, 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000180)=0xef) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x10000) r6 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(r6, 0x107, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40140, 0x0) 8m28.95584963s ago: executing program 7 (id=2213): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d0797ea974269736565b91ddd7ed5ab144acb8f4c23d228b2"], 0x1c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r3, &(0x7f0000000280)='.log\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xce, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x7, 0xff, 0x8, 0x6}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000fc42a40e0000000000ba4c0f8f9b2b3b4ed8c9505ba182000000009110"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) 8m13.835339189s ago: executing program 35 (id=2213): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d0797ea974269736565b91ddd7ed5ab144acb8f4c23d228b2"], 0x1c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r3, &(0x7f0000000280)='.log\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xce, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x7, 0xff, 0x8, 0x6}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000fc42a40e0000000000ba4c0f8f9b2b3b4ed8c9505ba182000000009110"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) 3m12.798335445s ago: executing program 8 (id=3325): socket(0x25, 0x2, 0xfffffffb) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30200, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000500)=@get={0x1, 0x0, 0x6}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006a7000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r6, 0x10000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 2m44.428646744s ago: executing program 8 (id=3325): socket(0x25, 0x2, 0xfffffffb) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30200, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000500)=@get={0x1, 0x0, 0x6}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006a7000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r6, 0x10000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 2m19.134408144s ago: executing program 8 (id=3325): socket(0x25, 0x2, 0xfffffffb) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30200, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000500)=@get={0x1, 0x0, 0x6}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006a7000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r6, 0x10000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1m53.36396543s ago: executing program 8 (id=3325): socket(0x25, 0x2, 0xfffffffb) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30200, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000500)=@get={0x1, 0x0, 0x6}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006a7000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r6, 0x10000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1m26.264927125s ago: executing program 8 (id=3325): socket(0x25, 0x2, 0xfffffffb) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30200, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000500)=@get={0x1, 0x0, 0x6}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006a7000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r6, 0x10000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1m3.354737828s ago: executing program 1 (id=3914): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1m2.583621937s ago: executing program 1 (id=3917): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_create(0xc) socket$inet_sctp(0x2, 0x1, 0x84) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 1m2.171689351s ago: executing program 1 (id=3920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) 1m1.191082098s ago: executing program 1 (id=3924): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 1m0.850077973s ago: executing program 8 (id=3325): socket(0x25, 0x2, 0xfffffffb) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30200, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x1) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000500)=@get={0x1, 0x0, 0x6}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006a7000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r6, 0x10000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 59.489162584s ago: executing program 1 (id=3926): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x7e6, 0x202) write$evdev(r3, &(0x7f0000000100)=[{{}, 0x11, 0x7105, 0x2}], 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) readv(r6, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f00000008c0)={&(0x7f0000000480)={{@host, 0x4}, {@my=0x1, 0x3}, 0x400, "c4cd608d6d0f61530394525cb2ae749387fa48c4f6f597fdb72b1fad275ba7f878a076417ebbe966b54af18afe1019467868f728c9f058a25ad92efde9a45c71ee315cd4fd3c009b5d3b33cc9a2e00dba40563b4075694320a17e4bf9a4cae3811ac0e5cb2edd70bef7119644b6e31a2bd93dcc0cb8742103f0cbbd427786feee5131d0a400ea44b8a4b38c0a1b8ae293255ae3af863d970b13896e08ab3e6b7c39b3d0f4d45d45a2e272a53190336cfac8f20631580a8745bdcaefc8ba5ffbcc72d1dc13cca240b18c08bec3f42d0762f8d5914bd44bd8b7fdbc4b57bc8db2ad2277b9ebb011fdeebe0226efc5a5c8092080cbaebea2b249fa07074b9cb96158321e130daef75a3086e1bd365a198f1c49dcfee24929da5b0ad5aad669c0fa53a7c942acba4d84022371f0328f85900e0f4e4bbfaa0e2b794b9fdef6f607430c32fe507db01d911f0144c4f4c7808679829bd8adb74e7337578c388a97f59492509f8ab58579b893b90dd654e0966e05c15193db41db18103f701ef72524f338cde16b33a4929f33d1a422fd885ee37b39c967d47619056e1de3f5314a16e4f91c7518a015ef564df25e7a341ea2ce3be6c06772fac31c62e242f627839fe86330ef8d6e1da1269023414570040e309948dc2f2e612a92992747f50cc4688117c35e41fcb855671c4d3a9292276cd95abd36997686b49ee156b090c3a657af9321f839c9fea98607db3e6d1247a34ca8eee8c8f6b87030bc100035e883c5847adbb0ecc7cfe094da66c4509a40bbde29e523f59ebbbc27ded4fe04bb516fe6718186ff6fcf3c100eab4582be9fe4fab4d9609f272ea33b288810b7619efa6cd34f8b72a993dc8eac7c8d475361e12e1446eceefa0ef5452b45a3e04c0f501de80d25797f89e8367ccf58100008c98c89c8306e0a392eb83cc6c182cd434f7dd690f7193ba47fdee9115aad982147c1354f57b58e09691ff7cc3e482f0ef233d8fcdc9b96406b7213847897bd0a9dbbb1a0fcfc35e24ea5175be083ccf702ec81cb29703008b5d3375cb3520087a70bb662a70dc82a4f607a95bb433dd082e9130e9e3b6dc3dc578163fbf230f713427885282991c475ef33d2caf72762337fbf8acafc95a8f931ccb4cec43a059b387d506d0cc11398a89296a21c0d280368f091af1fa5b0a9aae5e0fbddda51197906f25d35be1281860a05b2812f78014d3cc2fc7e4e2e78e3b21a4557118b2e16a6a04e7dbbd36e2789821753b1145c44d5dd899999379307789d35e66fd1af6e1d3648e5138db551820c9e4f16174bd5cf8818be2e17da4db9819bb64a5dc9c900626994d08a17b7366549d5459dc5da21c4da0d4b07b1fcc905928338b56cf8052a80a7dd61588bb183937fbce20dd689a30c3090c8718286cb8ede1c1bea8e265b32fdf6491e13e11b41e49c177c902"}, 0x418, 0x7}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2000, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) pipe2$watch_queue(&(0x7f00000000c0), 0x80) sendmsg$nl_route(r0, 0x0, 0x20024090) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x5, 0x4) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 46.970011868s ago: executing program 5 (id=3964): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x1}]}, &(0x7f0000000000)=0x10) 45.910928307s ago: executing program 2 (id=3968): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 45.044883435s ago: executing program 3 (id=3971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 44.961269313s ago: executing program 5 (id=3972): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r4], 0x20}}, 0x0) 44.912916461s ago: executing program 2 (id=3973): unshare(0x2c060000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000010340)='percpu_alloc_percpu\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 44.15320451s ago: executing program 2 (id=3974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x555) semtimedop(r2, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}, {0x4, 0x6}], 0x2, 0x0) unshare(0x2c040000) 43.732959979s ago: executing program 3 (id=3975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x40, 0x2e, 0xb01, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x9, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x40}}, 0x0) 43.654451534s ago: executing program 5 (id=3976): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) 43.311742227s ago: executing program 5 (id=3977): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') syz_io_uring_setup(0x24fc, &(0x7f0000000180)={0x0, 0x6386, 0x10580, 0x3}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, &(0x7f0000000080)=r4}, 0x20) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 43.104228539s ago: executing program 5 (id=3978): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 42.735333012s ago: executing program 2 (id=3979): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0x1e0}, {&(0x7f0000001440)}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x81) 42.631520393s ago: executing program 2 (id=3980): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, 0x0, 0x3) 42.405256274s ago: executing program 2 (id=3981): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_tables_targets\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000b}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 41.977367297s ago: executing program 3 (id=3982): socket(0x28, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r3 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0xd127, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 41.806560721s ago: executing program 3 (id=3983): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000000050104000000000000000002000002b60faabcba530961465bb657c56dd69a594eb0e9cc9a2c867116546b59068f038fc7d3d43f360ec448b8b740fcf69aec634c9ac4aa438c4d4b321000bf"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x1, 0x4004041) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 41.618602189s ago: executing program 3 (id=3984): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bda", 0x7) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) 41.617960256s ago: executing program 5 (id=3985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2400c850) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r7, 0x1) flock(r7, 0x2) close(r6) 40.65210712s ago: executing program 3 (id=3986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x2, 0x40) 11.586280105s ago: executing program 36 (id=3981): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_tables_targets\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000b}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 11.504604935s ago: executing program 37 (id=3986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x2, 0x40) 11.447495687s ago: executing program 38 (id=3985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2400c850) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r7, 0x1) flock(r7, 0x2) close(r6) 0s ago: executing program 1 (id=3926): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x7e6, 0x202) write$evdev(r3, &(0x7f0000000100)=[{{}, 0x11, 0x7105, 0x2}], 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) readv(r6, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f00000008c0)={&(0x7f0000000480)={{@host, 0x4}, {@my=0x1, 0x3}, 0x400, "c4cd608d6d0f61530394525cb2ae749387fa48c4f6f597fdb72b1fad275ba7f878a076417ebbe966b54af18afe1019467868f728c9f058a25ad92efde9a45c71ee315cd4fd3c009b5d3b33cc9a2e00dba40563b4075694320a17e4bf9a4cae3811ac0e5cb2edd70bef7119644b6e31a2bd93dcc0cb8742103f0cbbd427786feee5131d0a400ea44b8a4b38c0a1b8ae293255ae3af863d970b13896e08ab3e6b7c39b3d0f4d45d45a2e272a53190336cfac8f20631580a8745bdcaefc8ba5ffbcc72d1dc13cca240b18c08bec3f42d0762f8d5914bd44bd8b7fdbc4b57bc8db2ad2277b9ebb011fdeebe0226efc5a5c8092080cbaebea2b249fa07074b9cb96158321e130daef75a3086e1bd365a198f1c49dcfee24929da5b0ad5aad669c0fa53a7c942acba4d84022371f0328f85900e0f4e4bbfaa0e2b794b9fdef6f607430c32fe507db01d911f0144c4f4c7808679829bd8adb74e7337578c388a97f59492509f8ab58579b893b90dd654e0966e05c15193db41db18103f701ef72524f338cde16b33a4929f33d1a422fd885ee37b39c967d47619056e1de3f5314a16e4f91c7518a015ef564df25e7a341ea2ce3be6c06772fac31c62e242f627839fe86330ef8d6e1da1269023414570040e309948dc2f2e612a92992747f50cc4688117c35e41fcb855671c4d3a9292276cd95abd36997686b49ee156b090c3a657af9321f839c9fea98607db3e6d1247a34ca8eee8c8f6b87030bc100035e883c5847adbb0ecc7cfe094da66c4509a40bbde29e523f59ebbbc27ded4fe04bb516fe6718186ff6fcf3c100eab4582be9fe4fab4d9609f272ea33b288810b7619efa6cd34f8b72a993dc8eac7c8d475361e12e1446eceefa0ef5452b45a3e04c0f501de80d25797f89e8367ccf58100008c98c89c8306e0a392eb83cc6c182cd434f7dd690f7193ba47fdee9115aad982147c1354f57b58e09691ff7cc3e482f0ef233d8fcdc9b96406b7213847897bd0a9dbbb1a0fcfc35e24ea5175be083ccf702ec81cb29703008b5d3375cb3520087a70bb662a70dc82a4f607a95bb433dd082e9130e9e3b6dc3dc578163fbf230f713427885282991c475ef33d2caf72762337fbf8acafc95a8f931ccb4cec43a059b387d506d0cc11398a89296a21c0d280368f091af1fa5b0a9aae5e0fbddda51197906f25d35be1281860a05b2812f78014d3cc2fc7e4e2e78e3b21a4557118b2e16a6a04e7dbbd36e2789821753b1145c44d5dd899999379307789d35e66fd1af6e1d3648e5138db551820c9e4f16174bd5cf8818be2e17da4db9819bb64a5dc9c900626994d08a17b7366549d5459dc5da21c4da0d4b07b1fcc905928338b56cf8052a80a7dd61588bb183937fbce20dd689a30c3090c8718286cb8ede1c1bea8e265b32fdf6491e13e11b41e49c177c902"}, 0x418, 0x7}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2000, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) pipe2$watch_queue(&(0x7f00000000c0), 0x80) sendmsg$nl_route(r0, 0x0, 0x20024090) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x5, 0x4) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): o keep mac addresses unique to avoid problems! [ 1314.253961][T20189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.279079][T20189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.308888][T20496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1314.315451][T20496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1314.317636][T20189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.343451][T20496] vhci_hcd vhci_hcd.0: Device attached [ 1314.404034][T20189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.526714][T20189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.554105][T20189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.591431][T11298] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1314.594808][T20189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.612222][T20189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.624208][T20189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.639203][T20189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.650947][ T5902] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1314.657611][T20189] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.690956][T16290] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1314.719686][T20189] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.733035][T20189] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.753277][T20189] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.885353][ T5902] usb 2-1: config 0 has no interfaces? [ 1314.893367][ T5902] usb 2-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 1314.902767][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.910601][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.942171][T16290] usb 4-1: config 0 has no interfaces? [ 1315.005426][T16290] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1315.025935][ T9092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.037379][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.040850][ T9092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.054485][T16290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.090695][ T5902] usb 2-1: config 0 descriptor?? [ 1315.453000][T16290] usb 4-1: Product: syz [ 1315.457283][T16290] usb 4-1: Manufacturer: syz [ 1315.470012][T16290] usb 4-1: SerialNumber: syz [ 1315.492383][T16290] usb 4-1: config 0 descriptor?? [ 1315.667217][ T8543] usb 2-1: USB disconnect, device number 67 [ 1315.677090][T20498] usb 35-1: recv xbuf, 0 [ 1315.688665][ T1115] vhci_hcd: stop threads [ 1315.695077][ T1115] vhci_hcd: release socket [ 1315.756822][ T1115] vhci_hcd: disconnect device [ 1315.892776][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.008189][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.340374][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.078451][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.458713][ T12] bridge_slave_1: left allmulticast mode [ 1317.481706][ T12] bridge_slave_1: left promiscuous mode [ 1317.500698][T20192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1317.513094][T20192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1317.523774][T20192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1317.534180][T20192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1317.549171][T20192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1317.557508][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.617656][ T12] bridge_slave_0: left allmulticast mode [ 1317.624796][ T12] bridge_slave_0: left promiscuous mode [ 1317.635608][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.135396][ T5825] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1318.217807][T16290] usb 4-1: USB disconnect, device number 87 [ 1318.301057][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 1318.333445][ T5825] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1318.350702][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.365316][ T5825] usb 3-1: Product: syz [ 1318.369548][ T5825] usb 3-1: Manufacturer: syz [ 1318.380069][ T5825] usb 3-1: SerialNumber: syz [ 1318.407602][ T5825] usb 3-1: config 0 descriptor?? [ 1318.419603][ T5825] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1318.455195][ T5825] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1318.502030][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.520436][T17692] udevd[17692]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1318.521529][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.565250][ T12] bond0 (unregistering): Released all slaves [ 1318.572118][ T9090] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1318.900957][ T9090] usb 6-1: Using ep0 maxpacket: 8 [ 1318.907181][T17452] usb 3-1: USB disconnect, device number 77 [ 1318.908345][ T9090] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1318.933675][ T9090] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1319.011679][ T9090] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1319.177141][ T9090] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1319.372080][ T9090] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1319.391073][ T9090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.630974][ T5829] Bluetooth: hci4: command tx timeout [ 1319.710409][ T9090] usb 6-1: GET_CAPABILITIES returned 0 [ 1319.824472][ T9090] usbtmc 6-1:16.0: can't read capabilities [ 1320.089520][ T9090] usb 6-1: USB disconnect, device number 39 [ 1321.254994][T20607] IPv6: NLM_F_CREATE should be specified when creating new route [ 1321.830189][ T5829] Bluetooth: hci4: command tx timeout [ 1322.663937][ T12] hsr_slave_0: left promiscuous mode [ 1322.744875][ T12] hsr_slave_1: left promiscuous mode [ 1322.753287][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.795063][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.821077][ T5902] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1322.836621][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.860920][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.964951][ T12] veth1_macvtap: left promiscuous mode [ 1323.013494][ T5902] usb 2-1: config 0 has no interfaces? [ 1323.022976][ T12] veth0_macvtap: left promiscuous mode [ 1323.028536][ T12] veth1_vlan: left promiscuous mode [ 1323.041719][ T5902] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1323.069878][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.081311][ T12] veth0_vlan: left promiscuous mode [ 1323.118685][ T5902] usb 2-1: Product: syz [ 1323.123212][ T5902] usb 2-1: Manufacturer: syz [ 1323.127844][ T5902] usb 2-1: SerialNumber: syz [ 1323.148425][ T5902] usb 2-1: config 0 descriptor?? [ 1323.473872][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1323.473889][ T30] audit: type=1326 audit(1747018063.932:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1323.587440][ T30] audit: type=1326 audit(1747018063.952:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1323.676719][ T30] audit: type=1326 audit(1747018063.952:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1323.869341][ T5829] Bluetooth: hci4: command tx timeout [ 1323.885067][ T30] audit: type=1326 audit(1747018063.952:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1323.911176][ T30] audit: type=1326 audit(1747018063.952:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1323.935045][ T30] audit: type=1326 audit(1747018063.962:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1324.384210][ T30] audit: type=1326 audit(1747018063.962:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1324.413025][ T30] audit: type=1326 audit(1747018063.962:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1324.805547][ T30] audit: type=1326 audit(1747018063.962:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1324.829936][ T30] audit: type=1326 audit(1747018063.972:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.1.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1325.590263][ T5825] usb 2-1: USB disconnect, device number 68 [ 1325.712745][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1325.759637][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1325.787085][ T5902] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1325.941020][ T5829] Bluetooth: hci4: command tx timeout [ 1325.955008][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 1325.974626][ T5902] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1325.984592][ T5902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1325.995725][ T5902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1326.006127][ T5902] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1326.019196][ T5902] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1326.028539][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.242596][ T5902] usb 6-1: GET_CAPABILITIES returned 0 [ 1326.248274][ T5902] usbtmc 6-1:16.0: can't read capabilities [ 1326.483854][T20551] chnl_net:caif_netlink_parms(): no params data found [ 1326.490985][T17452] usb 6-1: USB disconnect, device number 40 [ 1326.594029][ T5829] Bluetooth: hci0: unexpected event for opcode 0x0c57 [ 1326.664440][T20683] binder: 20682:20683 ioctl c0306201 200000000a40 returned -14 [ 1326.835383][T20551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.857116][T20551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.865069][T20551] bridge_slave_0: entered allmulticast mode [ 1327.205023][T20551] bridge_slave_0: entered promiscuous mode [ 1327.227441][T20551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.235886][T20551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.244679][T20551] bridge_slave_1: entered allmulticast mode [ 1327.251905][T20551] bridge_slave_1: entered promiscuous mode [ 1327.434152][T20551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.483595][T20551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.036663][T20551] team0: Port device team_slave_0 added [ 1328.113643][T20551] team0: Port device team_slave_1 added [ 1328.257280][T20551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.285734][T20551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.335292][T20551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.364776][T20551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.379364][T20551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.464140][T20551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.958850][T20551] hsr_slave_0: entered promiscuous mode [ 1328.967782][T20551] hsr_slave_1: entered promiscuous mode [ 1328.975459][T20551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1328.995343][T20551] Cannot create hsr debugfs directory [ 1331.004782][T20757] input: syz0 as /devices/virtual/input/input175 [ 1331.685451][T20770] hub 8-0:1.0: USB hub found [ 1331.691122][T20770] hub 8-0:1.0: 1 port detected [ 1333.007703][T20551] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1333.035281][T20551] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1333.085928][T20551] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1333.132631][T20551] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1333.361033][T16290] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1333.510605][T20551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.918777][T16290] usb 3-1: config 0 has no interfaces? [ 1333.940977][T16290] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1333.985386][T16290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.034119][T20551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.051059][T16290] usb 3-1: Product: syz [ 1334.065471][T16290] usb 3-1: Manufacturer: syz [ 1334.070113][T16290] usb 3-1: SerialNumber: syz [ 1334.083086][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.090239][ T9092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.119229][T16290] usb 3-1: config 0 descriptor?? [ 1334.130295][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.137611][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.041297][ T5825] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1335.606437][ T5825] usb 4-1: config 0 has no interfaces? [ 1335.629181][ T5825] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1335.696167][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.716216][T20551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.726947][ T5825] usb 4-1: Product: syz [ 1335.737305][ T5825] usb 4-1: Manufacturer: syz [ 1335.749907][ T5825] usb 4-1: SerialNumber: syz [ 1335.789411][ T5825] usb 4-1: config 0 descriptor?? [ 1336.048177][T17452] usb 3-1: USB disconnect, device number 78 [ 1336.098692][ T5825] usb 4-1: USB disconnect, device number 88 [ 1337.406628][T20551] veth0_vlan: entered promiscuous mode [ 1337.444131][T20551] veth1_vlan: entered promiscuous mode [ 1337.491927][T20551] veth0_macvtap: entered promiscuous mode [ 1337.511119][T20551] veth1_macvtap: entered promiscuous mode [ 1337.538970][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.579432][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.645529][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.697314][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.718103][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.740873][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.765559][T20551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.881706][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.903537][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.937677][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.990574][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.049289][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.125812][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.154251][T20551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.180624][T20551] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.207390][T20192] block nbd0: Receive control failed (result -107) [ 1338.221115][T20551] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.229918][T20551] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.239653][T20551] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.291455][T20890] nbd0: detected capacity change from 0 to 32 [ 1338.325605][T17692] block nbd0: Dead connection, failed to find a fallback [ 1338.373909][T17692] block nbd0: shutting down sockets [ 1338.541543][T17692] blk_print_req_error: 24 callbacks suppressed [ 1338.541559][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.600895][ T48] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1338.616647][T17692] buffer_io_error: 23 callbacks suppressed [ 1338.616663][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.637944][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.654129][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.675042][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.688470][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.703489][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.744864][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.773383][ T48] usb 3-1: config 0 has no interfaces? [ 1338.783182][ T48] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1338.796277][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.822908][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.839615][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.852212][ T48] usb 3-1: Product: syz [ 1338.859880][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.869308][ T48] usb 3-1: Manufacturer: syz [ 1338.884777][ T48] usb 3-1: SerialNumber: syz [ 1338.893983][ T9092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.910185][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1338.922636][ T48] usb 3-1: config 0 descriptor?? [ 1338.936554][ T9092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.953732][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1338.984220][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1339.011708][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1339.040851][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1339.058715][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1339.132949][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1339.167013][T17692] ldm_validate_partition_table(): Disk read failed. [ 1339.174123][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1339.218213][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1339.228960][T17692] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1339.238348][T17692] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1339.253226][T17692] Dev nbd0: unable to read RDB block 0 [ 1339.259503][T17692] nbd0: unable to read partition table [ 1339.276225][T17692] ldm_validate_partition_table(): Disk read failed. [ 1339.290163][T17692] Dev nbd0: unable to read RDB block 0 [ 1339.297978][T17692] nbd0: unable to read partition table [ 1339.379809][ T5981] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.654277][ T5981] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.696744][T20908] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1339.703301][T20908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1339.714019][T20908] vhci_hcd vhci_hcd.0: Device attached [ 1339.808119][ T5981] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.936966][ T5981] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.959223][ T5825] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1339.991012][ T48] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1340.149919][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1340.159662][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1340.162638][ T48] usb 4-1: config 0 has no interfaces? [ 1340.176340][ T48] usb 4-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 1340.177898][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1340.185883][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.227388][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1340.237736][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1340.290334][ T48] usb 4-1: config 0 descriptor?? [ 1340.405832][ T5981] bridge_slave_1: left allmulticast mode [ 1340.413322][ T5981] bridge_slave_1: left promiscuous mode [ 1340.419171][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.441211][ T5981] bridge_slave_0: left allmulticast mode [ 1340.461695][ T5981] bridge_slave_0: left promiscuous mode [ 1340.467466][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.518838][ T48] usb 4-1: USB disconnect, device number 89 [ 1340.531907][T20909] vhci_hcd: connection reset by peer [ 1340.545763][ T1158] vhci_hcd: stop threads [ 1340.558240][ T1158] vhci_hcd: release socket [ 1340.578334][ T1158] vhci_hcd: disconnect device [ 1340.861030][ T8543] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1341.178329][ T8543] usb 2-1: Using ep0 maxpacket: 16 [ 1341.198432][ T8543] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1341.234541][ T8543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.246597][ T48] usb 3-1: USB disconnect, device number 79 [ 1341.272324][ T8543] usb 2-1: Product: syz [ 1341.300717][ T8543] usb 2-1: Manufacturer: syz [ 1341.317916][ T8543] usb 2-1: SerialNumber: syz [ 1341.327093][ T8543] usb 2-1: config 0 descriptor?? [ 1341.336855][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1341.336870][ T30] audit: type=1400 audit(1747018081.792:2729): avc: denied { mount } for pid=20944 comm="syz.2.3499" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1341.376326][ T8543] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1341.414145][ T8543] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1341.448733][T17692] udevd[17692]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.591260][T17452] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1341.607335][ T8543] usb 2-1: USB disconnect, device number 69 [ 1341.831082][T17452] usb 4-1: Using ep0 maxpacket: 16 [ 1341.846610][T17452] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1341.868802][T17452] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1342.296853][T17452] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1342.319642][T17452] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1342.345284][T20192] Bluetooth: hci4: command tx timeout [ 1342.366634][T17452] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1342.379296][T17452] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1342.406815][T17452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.439886][T17452] usb 4-1: Product: syz [ 1342.457313][T17452] usb 4-1: Manufacturer: syz [ 1342.476317][T17452] usb 4-1: SerialNumber: syz [ 1342.488712][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.500602][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.515922][T20946] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1342.543139][ T5981] bond0 (unregistering): Released all slaves [ 1342.749581][T20957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1342.772697][T17452] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input176 [ 1342.793176][T20957] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1343.074425][T20962] sctp: [Deprecated]: syz.1.3502 (pid 20962) Use of int in maxseg socket option. [ 1343.074425][T20962] Use struct sctp_assoc_value instead [ 1343.083386][T20957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1343.095152][T20957] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1343.375582][T20957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1343.383896][T20957] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1343.420520][T11298] usb 4-1: USB disconnect, device number 90 [ 1343.420641][ C1] bcm5974 4-1:1.0: trackpad urb failed: -19 [ 1343.433929][T20943] bcm5974 4-1:1.0: could not read from device [ 1343.625482][T20957] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1343.645738][T20957] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1343.728687][T20917] chnl_net:caif_netlink_parms(): no params data found [ 1344.260785][ T30] audit: type=1400 audit(1747018084.702:2730): avc: denied { setopt } for pid=20996 comm="syz.2.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1344.642669][T16290] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1344.707318][T21011] program syz.1.3512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1344.953915][T16290] usb 6-1: Using ep0 maxpacket: 16 [ 1345.046101][T20917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.051023][ T5825] vhci_hcd: vhci_device speed not set [ 1345.067443][T16290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.080195][T20917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.087364][T16290] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1345.087414][T16290] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1345.087438][T16290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.104899][T16290] usb 6-1: config 0 descriptor?? [ 1345.125091][T20917] bridge_slave_0: entered allmulticast mode [ 1345.133495][T20917] bridge_slave_0: entered promiscuous mode [ 1345.185834][T16290] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1345.208743][ T5981] hsr_slave_0: left promiscuous mode [ 1345.227420][ T5981] hsr_slave_1: left promiscuous mode [ 1345.239986][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.250121][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.377078][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.400283][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.748541][ T5981] veth1_macvtap: left promiscuous mode [ 1345.748629][ T5981] veth0_macvtap: left promiscuous mode [ 1345.748760][ T5981] veth1_vlan: left promiscuous mode [ 1345.748865][ T5981] veth0_vlan: left promiscuous mode [ 1347.170003][T17452] usb 6-1: USB disconnect, device number 41 [ 1347.277814][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 1347.507103][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 1347.999243][ T30] audit: type=1400 audit(1747018088.452:2731): avc: denied { setopt } for pid=21054 comm="syz.3.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1348.629148][ T30] audit: type=1400 audit(1747018089.072:2732): avc: denied { mount } for pid=21060 comm="syz.2.3529" name="/" dev="hugetlbfs" ino=73992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1349.120623][ T30] audit: type=1400 audit(1747018089.562:2733): avc: denied { unmount } for pid=18970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1350.961031][T20917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.004397][T20917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.027868][T20917] bridge_slave_1: entered allmulticast mode [ 1351.045310][T20917] bridge_slave_1: entered promiscuous mode [ 1351.115516][T21058] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1351.319698][T21086] input: syz1 as /devices/virtual/input/input177 [ 1351.517163][T20917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.533647][T20917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.510542][T20917] team0: Port device team_slave_0 added [ 1352.569027][T20917] team0: Port device team_slave_1 added [ 1352.627778][T20917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.645164][T20917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.684482][T20917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.803653][T21094] sctp: [Deprecated]: syz.2.3537 (pid 21094) Use of int in maxseg socket option. [ 1352.803653][T21094] Use struct sctp_assoc_value instead [ 1352.834159][T20917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.863741][T20917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.933860][T20917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.256346][T20917] hsr_slave_0: entered promiscuous mode [ 1353.269765][T20917] hsr_slave_1: entered promiscuous mode [ 1353.286257][T20917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1353.306764][T20917] Cannot create hsr debugfs directory [ 1353.887140][T21124] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1353.947753][T21124] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1356.957807][T20917] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1357.303710][T21170] sctp: [Deprecated]: syz.2.3550 (pid 21170) Use of int in maxseg socket option. [ 1357.303710][T21170] Use struct sctp_assoc_value instead [ 1357.352655][T20917] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1357.900480][T20917] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1358.017529][T20917] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1358.019733][T21196] input: syz1 as /devices/virtual/input/input178 [ 1359.331606][T20917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.452486][T20917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.627206][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.634390][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.661189][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.668289][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.003496][T20917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.146490][T21222] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3561'. [ 1360.888893][T21209] syz.5.3558 (21209): drop_caches: 2 [ 1361.466166][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.590014][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.954053][T21179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.258199][T21258] batadv_slave_0: entered promiscuous mode [ 1363.264969][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3567'. [ 1363.343744][T21255] sctp: [Deprecated]: syz.2.3566 (pid 21255) Use of int in maxseg socket option. [ 1363.343744][T21255] Use struct sctp_assoc_value instead [ 1363.452892][T21258] batadv_slave_0 (unregistering): left promiscuous mode [ 1363.589514][T20917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.305181][T21287] input: syz0 as /devices/virtual/input/input179 [ 1364.454421][ T9465] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1364.529531][T20917] veth0_vlan: entered promiscuous mode [ 1364.553244][T20917] veth1_vlan: entered promiscuous mode [ 1364.612386][ T9465] usb 2-1: config 0 has no interfaces? [ 1364.616914][T20917] veth0_macvtap: entered promiscuous mode [ 1364.625278][ T9465] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1364.641421][ T9465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.652002][T20917] veth1_macvtap: entered promiscuous mode [ 1364.661150][ T9465] usb 2-1: Product: syz [ 1364.668977][ T9465] usb 2-1: Manufacturer: syz [ 1364.674446][ T9465] usb 2-1: SerialNumber: syz [ 1364.690569][ T9465] usb 2-1: config 0 descriptor?? [ 1364.941983][T20917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.958151][T20917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.968117][T20917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.017879][T20917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.038331][T20917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.059257][T20917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.080561][T20917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.178277][T20917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.198397][ T30] audit: type=1326 audit(1747018105.632:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1365.247938][T20917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.267920][T20917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.287807][ T30] audit: type=1326 audit(1747018105.632:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1365.325504][T21314] input: syz1 as /devices/virtual/input/input180 [ 1365.335202][T20917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.379668][ T30] audit: type=1326 audit(1747018105.632:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1365.406022][T20917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.422332][ T30] audit: type=1326 audit(1747018105.632:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1365.597156][T20917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.610689][T20917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.650262][ T30] audit: type=1326 audit(1747018105.632:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1365.676949][T20917] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.697190][T20917] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.709272][T20917] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.721529][ T30] audit: type=1326 audit(1747018105.642:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1365.818257][T20917] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.866892][T21325] netlink: 'syz.5.3581': attribute type 12 has an invalid length. [ 1365.881715][ T30] audit: type=1326 audit(1747018105.642:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1365.944676][ T30] audit: type=1326 audit(1747018105.642:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1365.971510][ T30] audit: type=1326 audit(1747018105.682:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1366.129753][ T30] audit: type=1326 audit(1747018105.682:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.1.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38fb8e969 code=0x7ffc0000 [ 1366.371841][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.497551][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.659683][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.773094][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.819538][ T9465] usb 2-1: USB disconnect, device number 70 [ 1367.336751][T21343] sctp: [Deprecated]: syz.5.3584 (pid 21343) Use of int in maxseg socket option. [ 1367.336751][T21343] Use struct sctp_assoc_value instead [ 1368.238878][ T5981] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.524933][ T5981] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.615918][ T5981] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.702931][ T5981] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.848702][ T5981] bridge_slave_1: left allmulticast mode [ 1368.854980][ T5981] bridge_slave_1: left promiscuous mode [ 1368.860667][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.871435][ T5981] bridge_slave_0: left allmulticast mode [ 1368.877182][ T5981] bridge_slave_0: left promiscuous mode [ 1368.882985][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.646759][T21366] input: syz0 as /devices/virtual/input/input181 [ 1371.092804][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1371.123958][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1371.132817][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1371.143496][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1371.153718][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1371.245674][T20192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1371.256308][T20192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1371.265140][T20192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1371.273143][T20192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1371.429324][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.450926][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.688058][T20192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1371.702156][ T5981] bond0 (unregistering): Released all slaves [ 1372.010431][T21405] input: syz1 as /devices/virtual/input/input182 [ 1373.733456][T21427] input: syz0 as /devices/virtual/input/input183 [ 1373.788514][T20192] Bluetooth: hci4: command tx timeout [ 1374.174777][ T5981] hsr_slave_0: left promiscuous mode [ 1374.200483][ T5981] hsr_slave_1: left promiscuous mode [ 1374.209335][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.225131][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.249368][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.276342][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.333712][ T5981] veth1_macvtap: left promiscuous mode [ 1374.351959][ T5981] veth0_macvtap: left promiscuous mode [ 1374.369884][ T5981] veth1_vlan: left promiscuous mode [ 1374.381347][ T5981] veth0_vlan: left promiscuous mode [ 1375.871059][T20192] Bluetooth: hci4: command tx timeout [ 1377.943644][T20192] Bluetooth: hci4: command tx timeout [ 1377.957341][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 1378.024521][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 1379.684250][T21395] chnl_net:caif_netlink_parms(): no params data found [ 1379.890894][ T9090] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1380.032393][T20192] Bluetooth: hci4: command tx timeout [ 1380.058822][ T9090] usb 4-1: Using ep0 maxpacket: 16 [ 1380.082464][ T9090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.103746][ T9090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.124081][ T9090] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1380.181461][ T9090] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1380.195237][T21519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1380.668753][ T9090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.863964][ T9090] usb 4-1: config 0 descriptor?? [ 1381.169316][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1381.203881][T21395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.222521][T21395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.229824][T21395] bridge_slave_0: entered allmulticast mode [ 1381.260976][T21395] bridge_slave_0: entered promiscuous mode [ 1381.275896][T21395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.287644][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1381.295599][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1381.306457][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1381.313791][ T9090] usbhid 4-1:0.0: can't add hid device: -32 [ 1381.319833][ T9090] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1381.356597][ T9090] usb 4-1: USB disconnect, device number 91 [ 1381.363490][T21395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.379820][T21395] bridge_slave_1: entered allmulticast mode [ 1381.395595][T21395] bridge_slave_1: entered promiscuous mode [ 1381.455071][T21395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.487333][T21395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.558105][T21395] team0: Port device team_slave_0 added [ 1381.571967][T21395] team0: Port device team_slave_1 added [ 1381.603691][T21395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.610670][T21395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.636592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1381.798433][T21395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.811776][T21395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.818766][T21395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.848341][T21395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.976582][T21395] hsr_slave_0: entered promiscuous mode [ 1381.983227][T21395] hsr_slave_1: entered promiscuous mode [ 1381.990427][T21395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1382.010474][T21395] Cannot create hsr debugfs directory [ 1383.908138][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 1387.320669][T21630] input: syz0 as /devices/virtual/input/input184 [ 1387.443728][T21395] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1387.475297][T21395] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1387.481699][T21635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30255 sclass=netlink_route_socket pid=21635 comm=syz.5.3658 [ 1387.537021][T21395] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1387.560471][T21395] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1387.906349][T21395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.971675][T21395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.536690][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.543796][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.564360][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.571585][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.928664][T21637] delete_channel: no stack [ 1389.069604][T21395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1390.203306][T21395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.453629][ T5825] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1390.601792][ T5825] usb 4-1: device descriptor read/64, error -71 [ 1390.851044][ T5825] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1391.143584][ T5825] usb 4-1: device descriptor read/64, error -71 [ 1391.251253][ T5825] usb usb4-port1: attempt power cycle [ 1391.317539][T21718] input: syz0 as /devices/virtual/input/input185 [ 1391.331620][T21395] veth0_vlan: entered promiscuous mode [ 1391.368180][T21718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30255 sclass=netlink_route_socket pid=21718 comm=syz.2.3673 [ 1391.372748][T21395] veth1_vlan: entered promiscuous mode [ 1391.525805][T21395] veth0_macvtap: entered promiscuous mode [ 1391.557127][T21395] veth1_macvtap: entered promiscuous mode [ 1391.584697][T21395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.601750][ T5825] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1391.612469][T21395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.651666][ T5825] usb 4-1: device descriptor read/8, error -71 [ 1391.666335][T21395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.714043][T21395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.724544][T21395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.735559][T21395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.746839][T21395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.757914][T21395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.768522][T21395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.778703][T21395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.887269][T21395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.937907][T21395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.994931][T21395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.051666][T21395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.209548][T21395] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.228644][T21395] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.250935][ T5825] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1392.251686][T21395] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.270290][T21395] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.301813][ T5825] usb 4-1: device descriptor read/8, error -71 [ 1392.411392][ T5825] usb usb4-port1: unable to enumerate USB device [ 1392.490008][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.530909][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.586158][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.613222][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.314063][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.661284][ T9465] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1393.675873][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.824833][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.837557][ T9465] usb 6-1: config 0 has no interfaces? [ 1393.854287][ T9465] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1393.896033][ T9465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.915080][ T9465] usb 6-1: Product: syz [ 1393.919285][ T9465] usb 6-1: Manufacturer: syz [ 1393.927771][ T9465] usb 6-1: SerialNumber: syz [ 1393.943777][ T9465] usb 6-1: config 0 descriptor?? [ 1394.140640][T21772] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3680'. [ 1394.260255][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1394.260272][ T30] audit: type=1326 audit(1747018134.712:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1394.325576][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.783245][ T30] audit: type=1326 audit(1747018134.712:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1395.010913][ T30] audit: type=1326 audit(1747018134.712:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1395.129959][ T30] audit: type=1326 audit(1747018134.712:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1395.249996][ T36] bridge_slave_1: left allmulticast mode [ 1395.252920][ T30] audit: type=1326 audit(1747018134.712:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1395.269097][ T36] bridge_slave_1: left promiscuous mode [ 1395.340020][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.342616][ T30] audit: type=1326 audit(1747018134.772:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1395.376113][ T36] bridge_slave_0: left allmulticast mode [ 1395.384491][ T36] bridge_slave_0: left promiscuous mode [ 1395.392152][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.447592][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1395.464448][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1395.474482][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1395.484407][ T30] audit: type=1326 audit(1747018134.772:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1395.484561][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1395.517245][ T30] audit: type=1326 audit(1747018134.772:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1395.517435][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1395.549252][ T30] audit: type=1326 audit(1747018134.772:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1395.612124][ T30] audit: type=1326 audit(1747018134.772:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fbd8e969 code=0x7ffc0000 [ 1396.147750][ T5825] usb 6-1: USB disconnect, device number 42 [ 1397.179819][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.191894][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.202348][ T36] bond0 (unregistering): Released all slaves [ 1397.622965][T20192] Bluetooth: hci4: command tx timeout [ 1398.613332][T21819] program syz.3.3689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1399.344796][T21841] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1399.423027][ T36] hsr_slave_0: left promiscuous mode [ 1399.446419][ T36] hsr_slave_1: left promiscuous mode [ 1399.459861][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.491101][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.510449][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.518129][ T9465] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1399.534634][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.586471][ T36] veth1_macvtap: left promiscuous mode [ 1399.635570][ T36] veth0_macvtap: left promiscuous mode [ 1399.644121][ T36] veth1_vlan: left promiscuous mode [ 1399.649461][ T36] veth0_vlan: left promiscuous mode [ 1399.660982][ T9465] usb 4-1: device descriptor read/64, error -71 [ 1399.703759][T20192] Bluetooth: hci4: command tx timeout [ 1399.921869][ T9465] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1400.210936][ T9465] usb 4-1: device descriptor read/64, error -71 [ 1400.321381][ T9465] usb usb4-port1: attempt power cycle [ 1400.869621][ T9465] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1400.901685][ T9465] usb 4-1: device descriptor read/8, error -71 [ 1401.201025][ T9465] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1401.683211][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1401.683230][ T30] audit: type=1400 audit(1747018141.672:2804): avc: denied { accept } for pid=21859 comm="syz.1.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1401.733036][ T9465] usb 4-1: device descriptor read/8, error -71 [ 1401.781252][T20192] Bluetooth: hci4: command tx timeout [ 1401.841191][ T9465] usb usb4-port1: unable to enumerate USB device [ 1402.044294][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1402.130257][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1402.264261][T21871] netlink: 'syz.3.3699': attribute type 10 has an invalid length. [ 1403.562819][T21871] team0: Device ipvlan1 failed to register rx_handler [ 1403.637689][T21789] chnl_net:caif_netlink_parms(): no params data found [ 1403.794860][ T30] audit: type=1400 audit(1747018144.182:2805): avc: denied { create } for pid=21878 comm="syz.5.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1403.873245][T20192] Bluetooth: hci4: command tx timeout [ 1404.370577][T21789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.388555][T21789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.422212][T21789] bridge_slave_0: entered allmulticast mode [ 1404.556706][T21789] bridge_slave_0: entered promiscuous mode [ 1404.775199][T21789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.785895][T21789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.793935][T21789] bridge_slave_1: entered allmulticast mode [ 1404.800901][T21789] bridge_slave_1: entered promiscuous mode [ 1405.348630][T21789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.366662][T21789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.440775][T21789] team0: Port device team_slave_0 added [ 1405.456811][T21789] team0: Port device team_slave_1 added [ 1405.676943][T21789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.705401][T21789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.931812][T21789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.093886][T21789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.105939][T21789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.131825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1406.142139][T21789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.918543][T21789] hsr_slave_0: entered promiscuous mode [ 1406.956193][T21789] hsr_slave_1: entered promiscuous mode [ 1406.988209][T21789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1407.040862][T21789] Cannot create hsr debugfs directory [ 1407.161333][T21929] program syz.3.3709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1409.836512][T21972] hub 8-0:1.0: USB hub found [ 1409.841380][T21972] hub 8-0:1.0: 1 port detected [ 1410.348115][T21789] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1410.389444][T21789] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1410.470933][T21789] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1410.604324][T21789] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1410.836333][T21936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.914886][T21789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.311638][T21789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.347330][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.354528][T10380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.380328][T21789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1412.490930][T21789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1412.547678][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.554808][T10380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.276240][T21789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.679995][T21789] veth0_vlan: entered promiscuous mode [ 1414.692775][T21789] veth1_vlan: entered promiscuous mode [ 1414.720398][T21789] veth0_macvtap: entered promiscuous mode [ 1414.730378][T21789] veth1_macvtap: entered promiscuous mode [ 1414.856157][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.911057][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.931163][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.943989][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.976013][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.008113][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.009342][T21789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.016717][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.016738][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.016747][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.016760][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.016770][T21789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.016782][T21789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.017747][T21789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1415.087134][T21789] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.241946][T21789] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.251697][T21789] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.267452][T21789] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.898339][T22092] hub 8-0:1.0: USB hub found [ 1415.903303][T22092] hub 8-0:1.0: 1 port detected [ 1416.025420][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3739'. [ 1416.046756][T21522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.058858][T22091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.076977][T21522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.300257][T22091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.483967][ T5981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.510742][ T5981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.490962][ T5825] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1418.823511][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 1418.838558][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.890569][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.046902][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.057239][ T5825] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1419.067069][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.088934][ T5825] usb 6-1: config 0 descriptor?? [ 1419.274912][ T30] audit: type=1400 audit(1747018159.702:2806): avc: denied { watch_mount } for pid=22136 comm="syz.2.3749" path="/166" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1419.471501][ T30] audit: type=1400 audit(1747018159.712:2807): avc: denied { getopt } for pid=22136 comm="syz.2.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1419.506146][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.596991][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.631315][ T5825] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 1419.672902][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.823280][ T5825] corsair 0003:1B1C:1B02.0010: Failed to get K90 initial state (error -71). [ 1419.854129][ T5825] usb 6-1: USB disconnect, device number 43 [ 1419.919849][ T36] bridge_slave_1: left allmulticast mode [ 1419.929549][ T36] bridge_slave_1: left promiscuous mode [ 1419.939865][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.949693][ T36] bridge_slave_0: left allmulticast mode [ 1419.956552][ T36] bridge_slave_0: left promiscuous mode [ 1419.962396][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.434842][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1421.446946][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1421.457234][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1421.481734][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1421.489325][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1421.661798][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.671100][ T8543] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1421.683668][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.698822][ T36] bond0 (unregistering): Released all slaves [ 1421.820989][ T8543] usb 4-1: device descriptor read/64, error -71 [ 1422.061414][ T8543] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1422.668304][ T8543] usb 4-1: device descriptor read/64, error -71 [ 1422.792873][ T8543] usb usb4-port1: attempt power cycle [ 1422.908422][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.929541][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.157900][ T8543] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1423.243022][ T8543] usb 4-1: device descriptor read/8, error -71 [ 1423.470479][ T36] hsr_slave_0: left promiscuous mode [ 1423.502527][ T8543] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1423.536779][ T36] hsr_slave_1: left promiscuous mode [ 1423.548080][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.555952][ T5829] Bluetooth: hci4: command tx timeout [ 1423.566980][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.574471][ T8543] usb 4-1: device descriptor read/8, error -71 [ 1423.581983][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.589643][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.620565][ T36] veth1_macvtap: left promiscuous mode [ 1423.626406][ T36] veth0_macvtap: left promiscuous mode [ 1423.645204][ T36] veth1_vlan: left promiscuous mode [ 1423.674579][ T36] veth0_vlan: left promiscuous mode [ 1423.691605][ T8543] usb usb4-port1: unable to enumerate USB device [ 1425.158215][T22234] program syz.3.3765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1425.510919][T22180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.621092][ T5829] Bluetooth: hci4: command tx timeout [ 1426.185327][T22248] hub 8-0:1.0: USB hub found [ 1426.190486][T22248] hub 8-0:1.0: 1 port detected [ 1427.057491][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1427.114431][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1427.292121][T22258] program syz.2.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1427.711063][ T5829] Bluetooth: hci4: command tx timeout [ 1427.775314][T22186] chnl_net:caif_netlink_parms(): no params data found [ 1428.453928][ T30] audit: type=1400 audit(1747018168.652:2808): avc: denied { ioctl } for pid=22264 comm="syz.5.3775" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1429.269641][T22186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.302215][T22186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.465217][T22186] bridge_slave_0: entered allmulticast mode [ 1429.553582][T22186] bridge_slave_0: entered promiscuous mode [ 1429.793119][ T5829] Bluetooth: hci4: command tx timeout [ 1429.985162][T22186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.992571][T22186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.999772][T22186] bridge_slave_1: entered allmulticast mode [ 1430.022441][T22186] bridge_slave_1: entered promiscuous mode [ 1430.383388][T22186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.438840][T22186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.676409][T22186] team0: Port device team_slave_0 added [ 1430.699310][T22186] team0: Port device team_slave_1 added [ 1431.276574][T22186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.290898][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.325961][T22186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.351267][T22186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.358278][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.399006][T22186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.779678][T22186] hsr_slave_0: entered promiscuous mode [ 1431.814467][T22186] hsr_slave_1: entered promiscuous mode [ 1431.995802][T22186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1432.024643][T22186] Cannot create hsr debugfs directory [ 1432.040552][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1432.866201][T22363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3802'. [ 1435.033607][T22186] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1435.075931][T22186] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1435.088333][T22186] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1435.104169][T22186] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1435.513809][T22186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.589672][T22186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.624502][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.631640][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.941352][ T5869] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1435.980074][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.987211][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.090994][ T5869] usb 2-1: device descriptor read/64, error -71 [ 1436.407110][ T5869] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1437.071005][ T5869] usb 2-1: device descriptor read/64, error -71 [ 1437.744708][ T5869] usb usb2-port1: attempt power cycle [ 1437.860330][T22186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1438.170015][T22447] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1438.528058][ T5869] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1438.744113][T22454] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3822'. [ 1438.900389][T22457] input: syz0 as /devices/virtual/input/input186 [ 1439.497498][ T30] audit: type=1400 audit(1747018179.952:2809): avc: denied { bind } for pid=22462 comm="syz.3.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1439.534760][ T5869] usb 2-1: device descriptor read/8, error -71 [ 1439.678718][T22186] veth0_vlan: entered promiscuous mode [ 1439.724134][T22186] veth1_vlan: entered promiscuous mode [ 1439.802566][T22186] veth0_macvtap: entered promiscuous mode [ 1439.828800][T22186] veth1_macvtap: entered promiscuous mode [ 1439.905092][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1439.929708][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.953547][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1439.968345][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.980051][T22186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.018217][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1440.034467][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.044965][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1440.060485][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.086037][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1440.147357][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.197864][T22186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.650916][T22186] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.659752][T22186] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.668906][T22186] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.679394][T22186] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.832173][T22498] input: syz0 as /devices/virtual/input/input187 [ 1442.341388][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.370172][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.766842][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.809767][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.817554][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 1442.863733][T22514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.131757][T22514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.960889][ T9090] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1445.487405][ T9090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.519710][ T9090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1445.548752][ T9090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1445.607666][T22549] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3846'. [ 1445.617900][ T9090] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1445.634937][ T9090] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1445.644467][ T9090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.729189][ T9090] usb 4-1: config 0 descriptor?? [ 1445.743478][ T9090] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1445.781447][ T9090] usb 4-1: MIDIStreaming interface descriptor not found [ 1446.266806][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.522631][T17452] usb 4-1: USB disconnect, device number 104 [ 1446.602527][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.785349][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.054066][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.254754][ T12] bridge_slave_1: left allmulticast mode [ 1447.268322][ T12] bridge_slave_1: left promiscuous mode [ 1447.274817][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.285488][ T12] bridge_slave_0: left allmulticast mode [ 1447.294187][ T12] bridge_slave_0: left promiscuous mode [ 1447.299948][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.061900][T20192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1450.072941][T20192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1450.082099][T20192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1450.108235][T20192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1450.115844][T20192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1450.340955][ T8543] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1450.515346][ T8543] usb 4-1: Using ep0 maxpacket: 16 [ 1450.524495][ T8543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.547499][ T8543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.578548][ T8543] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1450.596232][ T8543] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1450.605655][ T8543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.626813][ T8543] usb 4-1: config 0 descriptor?? [ 1451.151488][ T8543] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1451.159051][ T8543] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1451.166522][ T8543] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1451.174013][ T8543] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1451.196479][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.197820][ T8543] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 1451.219800][ T8543] input: HID 0955:7214 Haptics as /devices/virtual/input/input188 [ 1451.230576][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.263122][ T8543] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 1451.283742][ T8543] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1451.308881][ T12] bond0 (unregistering): Released all slaves [ 1451.365033][T17452] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1451.396874][ T8543] usb 4-1: USB disconnect, device number 105 [ 1451.505688][T17452] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1451.524793][ T5825] thermal thermal_zone0: Temperature check failed (-19) [ 1451.536780][T17452] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1451.590402][T17452] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1452.191010][ T5829] Bluetooth: hci4: command tx timeout [ 1452.851175][T17452] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1453.235139][T17452] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.249357][T17452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1453.274265][T17452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1453.292636][ T8543] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1453.312175][ T12] hsr_slave_0: left promiscuous mode [ 1453.315603][T17452] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1453.336223][ T12] hsr_slave_1: left promiscuous mode [ 1453.345504][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.366087][T17452] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1453.375970][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.396302][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.400150][T17452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.412097][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.445112][T17452] usb 6-1: config 0 descriptor?? [ 1453.467376][ T12] veth1_macvtap: left promiscuous mode [ 1453.470785][T17452] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1453.480031][T17452] usb 6-1: MIDIStreaming interface descriptor not found [ 1453.494743][ T12] veth0_macvtap: left promiscuous mode [ 1453.511082][ T12] veth1_vlan: left promiscuous mode [ 1453.513296][ T8543] usb 3-1: Using ep0 maxpacket: 16 [ 1453.516397][ T12] veth0_vlan: left promiscuous mode [ 1453.541037][ T8543] usb 3-1: config 0 has no interfaces? [ 1453.559320][ T8543] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1453.645190][ T8543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.656754][ T8543] usb 3-1: config 0 descriptor?? [ 1454.507015][ T8543] usb 3-1: USB disconnect, device number 80 [ 1454.513954][ T5829] Bluetooth: hci4: command tx timeout [ 1455.177904][ T9090] usb 6-1: USB disconnect, device number 44 [ 1455.554243][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1455.649434][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1455.741075][ T30] audit: type=1400 audit(1747018196.192:2810): avc: denied { getopt } for pid=22692 comm="syz.1.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1456.581145][ T5829] Bluetooth: hci4: command tx timeout [ 1457.560309][T22613] chnl_net:caif_netlink_parms(): no params data found [ 1458.236979][T22740] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1458.633469][T22613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.651089][T22613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.661217][ T5829] Bluetooth: hci4: command tx timeout [ 1458.678990][T22613] bridge_slave_0: entered allmulticast mode [ 1458.681167][ T9090] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1458.694555][T22613] bridge_slave_0: entered promiscuous mode [ 1458.737148][T22613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.886217][T22613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.898256][T22613] bridge_slave_1: entered allmulticast mode [ 1458.927639][T22613] bridge_slave_1: entered promiscuous mode [ 1459.431458][ T9090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.805635][ T9090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1459.845773][T22613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1459.893759][T22613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1459.958906][T22613] team0: Port device team_slave_0 added [ 1460.017207][ T9090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1460.035300][T22613] team0: Port device team_slave_1 added [ 1460.041291][ T9090] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1460.068881][ T9090] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1460.080133][ T9090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.176258][ T9090] usb 6-1: config 0 descriptor?? [ 1460.227404][ T9090] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.237727][ T9090] usb 6-1: MIDIStreaming interface descriptor not found [ 1460.360247][T22613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.372905][T22613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.445637][T22613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.775288][T22613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.784338][T22613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1461.938869][T22613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.217360][ T5869] usb 6-1: USB disconnect, device number 45 [ 1462.260722][T22613] hsr_slave_0: entered promiscuous mode [ 1462.310086][T22613] hsr_slave_1: entered promiscuous mode [ 1462.364317][T22613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1462.390337][T22613] Cannot create hsr debugfs directory [ 1462.954710][T22813] program syz.3.3894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.018404][T22831] netlink: 'syz.1.3898': attribute type 4 has an invalid length. [ 1464.181523][T22837] netlink: 'syz.1.3898': attribute type 4 has an invalid length. [ 1465.040883][ T9090] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1465.345633][ T9090] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.378518][ T9090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1465.397634][ T9090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1465.410409][ T9090] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1465.453280][T22613] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1465.453981][ T9090] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1465.512637][T22613] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1465.518286][ T9090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.562597][ T9090] usb 2-1: config 0 descriptor?? [ 1465.608432][ T9090] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1465.630512][ T9090] usb 2-1: MIDIStreaming interface descriptor not found [ 1465.695274][T22613] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1465.921488][T22613] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1466.178542][T22807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.449139][T22885] program syz.3.3906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1466.892494][T22613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.050721][T22613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.120752][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.127911][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.199238][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.206475][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.847612][ T9465] usb 2-1: USB disconnect, device number 75 [ 1468.662589][T22613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.332312][T22613] veth0_vlan: entered promiscuous mode [ 1469.336602][T22613] veth1_vlan: entered promiscuous mode [ 1469.413966][T22613] veth0_macvtap: entered promiscuous mode [ 1469.426659][T22613] veth1_macvtap: entered promiscuous mode [ 1469.442508][T22613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.442524][T22613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.443457][T22613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.447956][T22613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.447969][T22613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.447976][T22613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.447984][T22613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.447990][T22613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.447998][T22613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.448948][T22613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.523756][T22613] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.523794][T22613] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.523822][T22613] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.523849][T22613] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.747936][T22937] program syz.1.3917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1469.904025][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.919282][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.023918][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.210969][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.250895][ T9465] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1471.476110][ T9465] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.524028][ T9465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1471.573646][ T9465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1471.631318][ T9465] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1471.658539][ T1115] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.711088][ T9465] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1471.866034][ T1115] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.890257][ T9465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.974352][ T1115] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.043834][ T9465] usb 3-1: config 0 descriptor?? [ 1472.079764][ T9465] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1472.090496][ T9465] usb 3-1: MIDIStreaming interface descriptor not found [ 1472.233636][ T1115] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.406794][ T1115] bridge_slave_1: left allmulticast mode [ 1472.449797][ T1115] bridge_slave_1: left promiscuous mode [ 1472.486409][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.539276][ T1115] bridge_slave_0: left allmulticast mode [ 1472.566979][ T1115] bridge_slave_0: left promiscuous mode [ 1472.591091][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.835259][T22985] program syz.5.3930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1473.947235][T16290] usb 3-1: USB disconnect, device number 81 [ 1473.964131][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1473.982183][T18971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1473.993735][T18971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1474.002684][T18971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1474.010699][T18971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1474.018404][T18971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1474.032949][T18971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1474.045554][T18971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1474.084887][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1474.096450][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1474.434842][T23001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1475.340948][T17452] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1475.445613][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.448354][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.450046][ T1115] bond0 (unregistering): Released all slaves [ 1475.495806][T17452] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.551446][T17452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1475.551479][T17452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1475.551501][T17452] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1475.551579][T17452] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1475.551602][T17452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.554168][T17452] usb 6-1: config 0 descriptor?? [ 1475.557967][T17452] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1475.557995][T17452] usb 6-1: MIDIStreaming interface descriptor not found [ 1475.992985][ T5869] usb 6-1: USB disconnect, device number 46 [ 1476.105171][ T5829] Bluetooth: hci4: command tx timeout [ 1476.180935][ T5829] Bluetooth: hci2: command tx timeout [ 1476.779181][ T1115] hsr_slave_0: left promiscuous mode [ 1476.806339][ T1115] hsr_slave_1: left promiscuous mode [ 1476.845683][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.859754][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.884653][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.315548][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.406823][ T1115] veth1_macvtap: left promiscuous mode [ 1477.425998][ T1115] veth0_macvtap: left promiscuous mode [ 1477.445187][ T1115] veth1_vlan: left promiscuous mode [ 1477.450550][ T1115] veth0_vlan: left promiscuous mode [ 1478.182244][ T5829] Bluetooth: hci4: command tx timeout [ 1478.262606][ T5829] Bluetooth: hci2: command tx timeout [ 1478.693064][T23060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3944'. [ 1479.086509][ T30] audit: type=1400 audit(1747018219.532:2811): avc: denied { connect } for pid=23062 comm="syz.2.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1479.515084][ T5869] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1479.696098][ T5869] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.717187][ T5869] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1479.731481][ T5869] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1479.740589][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.759620][ T5869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1479.801384][ T5869] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1479.821414][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 1479.841650][T21331] udevd[21331]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1479.954247][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 1479.984372][ T5869] usb 6-1: USB disconnect, device number 47 [ 1480.261142][ T5829] Bluetooth: hci4: command tx timeout [ 1480.342300][ T5829] Bluetooth: hci2: command tx timeout [ 1480.717388][T22988] chnl_net:caif_netlink_parms(): no params data found [ 1481.252600][T22988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.267746][T22988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.702231][T22988] bridge_slave_0: entered allmulticast mode [ 1481.709667][T22988] bridge_slave_0: entered promiscuous mode [ 1481.788436][T22988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.813045][T22988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.846910][T22988] bridge_slave_1: entered allmulticast mode [ 1481.882435][T22988] bridge_slave_1: entered promiscuous mode [ 1481.893030][T22990] chnl_net:caif_netlink_parms(): no params data found [ 1482.341131][ T5829] Bluetooth: hci4: command tx timeout [ 1482.460713][ T5824] Bluetooth: hci2: command tx timeout [ 1482.527397][T23120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3957'. [ 1482.567783][T23120] netlink: 'syz.3.3957': attribute type 10 has an invalid length. [ 1482.619032][T23126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3957'. [ 1482.667330][T23120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.688161][T23120] team0: Port device bond0 added [ 1482.739261][T22988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.184198][T23126] team0 (unregistering): Port device team_slave_0 removed [ 1483.223999][T23126] team0 (unregistering): Port device team_slave_1 removed [ 1483.239575][T23126] team0 (unregistering): Port device bond0 removed [ 1483.363925][T22988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.406878][T22990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.435631][T22990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.464095][T22990] bridge_slave_0: entered allmulticast mode [ 1483.500081][T22990] bridge_slave_0: entered promiscuous mode [ 1483.601718][T22990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.615377][T22990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.623557][T22990] bridge_slave_1: entered allmulticast mode [ 1483.631553][T22990] bridge_slave_1: entered promiscuous mode [ 1483.666058][ T1115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.796521][T22988] team0: Port device team_slave_0 added [ 1483.812066][T22988] team0: Port device team_slave_1 added [ 1484.349556][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.356279][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.366811][ T1115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.435113][T22990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.601502][T23153] netlink: 'syz.3.3961': attribute type 1 has an invalid length. [ 1484.609676][T23153] netlink: 'syz.3.3961': attribute type 3 has an invalid length. [ 1484.624176][T23153] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1484.833139][T22990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.922930][ T1115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.953877][T22988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.981189][T22988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.052159][T22988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.073493][T22988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.080746][T22988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.081070][ T5869] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1485.194068][T22988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.197340][T23162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3963'. [ 1485.236991][T22990] team0: Port device team_slave_0 added [ 1485.297250][ T5869] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.321409][ T5869] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1485.344260][ T5869] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1485.377875][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.414432][ T1115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.435917][ T5869] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1485.485296][T22990] team0: Port device team_slave_1 added [ 1485.553993][ T5869] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1485.638835][ T5869] usb 3-1: USB disconnect, device number 82 [ 1485.772712][T22990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.779786][T22990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.825250][T22990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.895377][T22990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.923318][T22990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.983898][T22990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.043275][T22988] hsr_slave_0: entered promiscuous mode [ 1486.072306][T22988] hsr_slave_1: entered promiscuous mode [ 1486.082525][T22988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1486.098605][T22988] Cannot create hsr debugfs directory [ 1486.956826][T22990] hsr_slave_0: entered promiscuous mode [ 1486.975877][T22990] hsr_slave_1: entered promiscuous mode [ 1486.993403][T22990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1487.009505][T22990] Cannot create hsr debugfs directory [ 1487.301072][T23197] netlink: 'syz.5.3972': attribute type 1 has an invalid length. [ 1487.349693][T23199] netlink: 'syz.2.3973': attribute type 10 has an invalid length. [ 1487.398681][T23200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3972'. [ 1487.468521][T23199] team0: Device ipvlan1 failed to register rx_handler [ 1488.210413][T23203] syz.3.3971 (23203): drop_caches: 2 [ 1488.433506][ T1115] bridge_slave_1: left allmulticast mode [ 1488.439171][ T1115] bridge_slave_1: left promiscuous mode [ 1488.465627][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.515104][ T1115] bridge_slave_0: left allmulticast mode [ 1488.537056][ T1115] bridge_slave_0: left promiscuous mode [ 1488.552655][T23210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1488.563157][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.320677][ T9465] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1489.521188][ T9465] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.538002][ T9465] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1489.570883][ T9465] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1489.599155][ T9465] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1489.630941][ T9465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.661716][ T9465] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1489.831721][ T9465] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1489.930106][T17452] usb 6-1: USB disconnect, device number 48 [ 1490.019594][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.037991][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.057976][ T1115] bond0 (unregistering): Released all slaves [ 1490.703823][ T1115] hsr_slave_0: left promiscuous mode [ 1490.715578][ T1115] hsr_slave_1: left promiscuous mode [ 1491.145338][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.999886][T23237] sched: DL replenish lagged too much [ 1520.487114][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.561255][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1520.641215][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1520.908720][ T1115] veth1_macvtap: left promiscuous mode [ 1520.936545][ T1115] veth0_macvtap: left promiscuous mode [ 1520.961363][ T1115] veth1_vlan: left promiscuous mode [ 1520.971778][ T1115] veth0_vlan: left promiscuous mode [ 1521.409875][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1521.441242][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1521.451472][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1521.482118][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1521.489946][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1521.566807][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1521.577644][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1521.585921][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1521.593646][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1521.620002][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1521.783809][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1521.800645][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1521.810481][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1521.824147][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1521.839800][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1522.138749][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 1522.188176][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 1523.076702][T23256] chnl_net:caif_netlink_parms(): no params data found [ 1523.197408][T23256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.206874][T23256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.214538][T23256] bridge_slave_0: entered allmulticast mode [ 1523.221883][T23256] bridge_slave_0: entered promiscuous mode [ 1523.235004][T23256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.242146][T23256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.249377][T23256] bridge_slave_1: entered allmulticast mode [ 1523.256379][T23256] bridge_slave_1: entered promiscuous mode [ 1523.367090][T22988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1523.530323][T22988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1523.541166][ T5824] Bluetooth: hci1: command tx timeout [ 1523.564704][T23256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.579710][T23259] chnl_net:caif_netlink_parms(): no params data found [ 1523.698392][T22988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1523.701237][ T5824] Bluetooth: hci3: command tx timeout [ 1523.727834][T23256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.778143][T22988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1523.870610][T23261] chnl_net:caif_netlink_parms(): no params data found [ 1523.929713][T23256] team0: Port device team_slave_0 added [ 1523.941825][ T5824] Bluetooth: hci0: command tx timeout [ 1523.972844][ T1115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.004194][T23256] team0: Port device team_slave_1 added [ 1524.136506][ T1115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.177193][T23256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.186042][T23256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.212298][T23256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.228199][T23256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.236145][T23256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.264305][T23256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1524.289021][T23259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.296310][T23259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.304010][T23259] bridge_slave_0: entered allmulticast mode [ 1524.314846][T23259] bridge_slave_0: entered promiscuous mode [ 1524.354133][ T1115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.408281][T23261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.415850][T23261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.423455][T23261] bridge_slave_0: entered allmulticast mode [ 1524.430282][T23261] bridge_slave_0: entered promiscuous mode [ 1524.437504][T23259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.445978][T23259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.453464][T23259] bridge_slave_1: entered allmulticast mode [ 1524.460624][T23259] bridge_slave_1: entered promiscuous mode [ 1524.496181][T23259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.519849][T23256] hsr_slave_0: entered promiscuous mode [ 1524.526343][T23256] hsr_slave_1: entered promiscuous mode [ 1524.532917][T23256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1524.540479][T23256] Cannot create hsr debugfs directory [ 1524.561089][ T1115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.576234][T23261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.583952][T23261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.591772][T23261] bridge_slave_1: entered allmulticast mode [ 1524.598558][T23261] bridge_slave_1: entered promiscuous mode [ 1524.622218][T23259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.659944][T23261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.716475][T23259] team0: Port device team_slave_0 added [ 1524.725780][T23261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.771511][T23259] team0: Port device team_slave_1 added [ 1524.778974][T22990] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1524.850627][T22990] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1524.863130][T23261] team0: Port device team_slave_0 added [ 1524.917095][T22990] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1524.935776][T23261] team0: Port device team_slave_1 added [ 1524.968051][T23259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.976280][T23259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.003307][T23259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.014118][T22990] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1525.044802][T23261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.051887][T23261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.079109][T23261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.112395][T23259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.119423][T23259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.145661][T23259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.192726][T23261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.199687][T23261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.226553][T23261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.258253][T23259] hsr_slave_0: entered promiscuous mode [ 1525.268180][T23259] hsr_slave_1: entered promiscuous mode [ 1525.274830][T23259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1525.282577][T23259] Cannot create hsr debugfs directory [ 1525.348221][ T1115] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.395661][T22988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.435867][T23261] hsr_slave_0: entered promiscuous mode [ 1525.442496][T23261] hsr_slave_1: entered promiscuous mode [ 1525.448843][T23261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1525.458311][T23261] Cannot create hsr debugfs directory [ 1525.495936][ T1115] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.589312][ T1115] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.620974][ T5824] Bluetooth: hci1: command tx timeout [ 1525.737415][ T1115] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.780935][ T5824] Bluetooth: hci3: command tx timeout [ 1525.798085][T22988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.878458][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.885590][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.003050][T23256] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1526.020001][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.027130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.043188][ T5824] Bluetooth: hci0: command tx timeout [ 1526.058631][T23256] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1526.071320][T23256] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1526.091307][T23256] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1526.108954][T22990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.163261][T22990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.228096][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.235345][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.283994][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.291165][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.318612][ T1115] bridge_slave_1: left allmulticast mode [ 1526.324461][ T1115] bridge_slave_1: left promiscuous mode [ 1526.330169][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.346571][ T1115] bridge_slave_0: left allmulticast mode [ 1526.353342][ T1115] bridge_slave_0: left promiscuous mode [ 1526.359122][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.375559][ T1115] bridge_slave_1: left allmulticast mode [ 1526.381338][ T1115] bridge_slave_1: left promiscuous mode [ 1526.386998][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.397220][ T1115] bridge_slave_0: left allmulticast mode [ 1526.403340][ T1115] bridge_slave_0: left promiscuous mode [ 1526.408983][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.270669][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.280764][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.290676][ T1115] bond0 (unregistering): Released all slaves [ 1527.427660][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.437949][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.447974][ T1115] bond0 (unregistering): Released all slaves [ 1527.702561][ T5824] Bluetooth: hci1: command tx timeout [ 1527.866191][ T5824] Bluetooth: hci3: command tx timeout [ 1527.933383][T23256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.987496][T23256] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.049007][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.056183][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.066271][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.073460][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.101177][ T5824] Bluetooth: hci0: command tx timeout [ 1528.163605][T22988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.419083][T23256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1528.432903][T23256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1528.472570][ T1115] hsr_slave_0: left promiscuous mode [ 1528.480133][ T1115] hsr_slave_1: left promiscuous mode [ 1528.488377][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.501823][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.515492][ T1115] hsr_slave_0: left promiscuous mode [ 1528.527784][ T1115] hsr_slave_1: left promiscuous mode [ 1528.534082][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.546832][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.599713][ T1115] veth1_macvtap: left promiscuous mode [ 1528.610416][ T1115] veth0_macvtap: left promiscuous mode [ 1528.616693][ T1115] veth1_vlan: left promiscuous mode [ 1528.627541][ T1115] veth0_vlan: left promiscuous mode [ 1528.646304][ T1115] veth1_macvtap: left promiscuous mode [ 1528.651899][ T1115] veth0_macvtap: left promiscuous mode [ 1528.657517][ T1115] veth1_vlan: left promiscuous mode [ 1528.668239][ T1115] veth0_vlan: left promiscuous mode [ 1529.142301][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 1529.187052][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 1529.781753][ T5824] Bluetooth: hci1: command tx timeout [ 1529.943561][ T5824] Bluetooth: hci3: command tx timeout [ 1530.176651][T23259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1530.186163][T23259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1530.193216][ T5824] Bluetooth: hci0: command tx timeout [ 1530.202031][T23259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1530.373107][T23259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1530.448604][T22990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.757568][T22988] veth0_vlan: entered promiscuous mode [ 1530.822953][T23256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.963775][T22988] veth1_vlan: entered promiscuous mode [ 1531.068981][T23259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.237847][T23259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.259357][T22990] veth0_vlan: entered promiscuous mode [ 1531.304737][T22988] veth0_macvtap: entered promiscuous mode [ 1531.320280][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.327453][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.345060][T22990] veth1_vlan: entered promiscuous mode [ 1531.355586][T22988] veth1_macvtap: entered promiscuous mode [ 1531.377160][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.384282][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.409995][T22988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.438614][T22988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1531.454546][T22988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.466010][T22988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.475161][T22988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.484839][T22988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.532262][T23261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1531.542370][T23261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1531.556380][T23261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1531.571889][T23256] veth0_vlan: entered promiscuous mode [ 1531.585544][T23261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1531.623158][T23259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1531.657160][T23256] veth1_vlan: entered promiscuous mode [ 1531.695621][T22990] veth0_macvtap: entered promiscuous mode [ 1531.779123][T22990] veth1_macvtap: entered promiscuous mode [ 1531.807614][T23256] veth0_macvtap: entered promiscuous mode [ 1531.815336][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.839604][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.854152][T23256] veth1_macvtap: entered promiscuous mode [ 1531.879851][T22990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.902962][T22990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.916737][T22990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.944735][T22990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.962847][T22990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.975832][T22990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.009663][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.016000][T23259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1532.024853][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.028616][T22990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.042619][T22990] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.053254][T22990] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.062399][T22990] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.076563][T23261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.124677][T23256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.141988][ C1] ================================================================== [ 1532.143650][T23256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.150071][ C1] BUG: KASAN: global-out-of-bounds in __find_rr_leaf+0xbcb/0xe00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1532.160134][T23256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.167537][ C1] Read of size 4 at addr ffffffff9af98524 by task kworker/1:7/5924 [ 1532.167555][ C1] [ 1532.167578][ C1] CPU: 1 UID: 0 PID: 5924 Comm: kworker/1:7 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1532.167604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1532.167620][ C1] Workqueue: mld mld_ifc_work [ 1532.167657][ C1] Call Trace: [ 1532.167665][ C1] [ 1532.167677][ C1] dump_stack_lvl+0x116/0x1f0 [ 1532.167711][ C1] print_report+0xc3/0x670 [ 1532.167733][ C1] ? __virt_addr_valid+0x5e/0x590 [ 1532.167762][ C1] ? __phys_addr+0xc6/0x150 [ 1532.167791][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 1532.167816][ C1] kasan_report+0xe0/0x110 [ 1532.167839][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 1532.167868][ C1] __find_rr_leaf+0xbcb/0xe00 [ 1532.167895][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 1532.167921][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 1532.167947][ C1] ? fib6_node_lookup+0x12d/0x190 [ 1532.167970][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1532.167993][ C1] ? find_held_lock+0x2b/0x80 [ 1532.168028][ C1] fib6_table_lookup+0x7b3/0xa30 [ 1532.168061][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1532.168095][ C1] ip6_pol_route+0x1cc/0x1230 [ 1532.168124][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 1532.168151][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.168184][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.168217][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1532.168244][ C1] fib6_rule_lookup+0x536/0x720 [ 1532.168269][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.168300][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1532.168324][ C1] ? lock_acquire+0x179/0x350 [ 1532.168360][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.168390][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1532.168428][ C1] ip6_route_input+0x662/0xc00 [ 1532.168458][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 1532.168485][ C1] ? lock_acquire+0x179/0x350 [ 1532.168525][ C1] ? sock_wfree+0x46a/0x880 [ 1532.168547][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1532.168579][ C1] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 1532.168610][ C1] ipv6_rcv+0x1e8/0x680 [ 1532.168638][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1532.168664][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1532.168699][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1532.168735][ C1] ? lock_acquire+0x179/0x350 [ 1532.168768][ C1] ? process_backlog+0x3f0/0x15e0 [ 1532.168800][ C1] __netif_receive_skb+0x1d/0x160 [ 1532.168833][ C1] process_backlog+0x442/0x15e0 [ 1532.168869][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 1532.168905][ C1] net_rx_action+0xa97/0x1010 [ 1532.168930][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1532.168964][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1532.168991][ C1] ? sched_clock+0x38/0x60 [ 1532.169026][ C1] ? sched_clock_cpu+0x6c/0x530 [ 1532.169057][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1532.169091][ C1] ? mark_held_locks+0x49/0x80 [ 1532.169123][ C1] handle_softirqs+0x216/0x8e0 [ 1532.169153][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1532.169180][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 1532.169212][ C1] do_softirq+0xb2/0xf0 [ 1532.169237][ C1] [ 1532.169244][ C1] [ 1532.169251][ C1] __local_bh_enable_ip+0x100/0x120 [ 1532.169278][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 1532.169309][ C1] __dev_queue_xmit+0x8ab/0x43e0 [ 1532.169344][ C1] ? ip6mr_fib_lookup+0x136/0x1a0 [ 1532.169370][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1532.169402][ C1] ? register_lock_class+0x41/0x4c0 [ 1532.169435][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.169468][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 1532.169506][ C1] ? find_held_lock+0x2b/0x80 [ 1532.169535][ C1] ip6_finish_output2+0xe98/0x2020 [ 1532.169567][ C1] ip6_finish_output+0x3f9/0x1360 [ 1532.169597][ C1] ip6_output+0x1f9/0x540 [ 1532.169624][ C1] mld_sendpack+0x9e9/0x1220 [ 1532.169656][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 1532.169694][ C1] mld_ifc_work+0x740/0xca0 [ 1532.169726][ C1] process_one_work+0x9cc/0x1b70 [ 1532.169754][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1532.169781][ C1] ? assign_work+0x1a0/0x250 [ 1532.169803][ C1] worker_thread+0x6c8/0xf10 [ 1532.169831][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1532.169854][ C1] kthread+0x3c2/0x780 [ 1532.169874][ C1] ? __pfx_kthread+0x10/0x10 [ 1532.169892][ C1] ? __pfx_kthread+0x10/0x10 [ 1532.169911][ C1] ? __pfx_kthread+0x10/0x10 [ 1532.169930][ C1] ? __pfx_kthread+0x10/0x10 [ 1532.169949][ C1] ? rcu_is_watching+0x12/0xc0 [ 1532.169974][ C1] ? __pfx_kthread+0x10/0x10 [ 1532.169994][ C1] ret_from_fork+0x45/0x80 [ 1532.170018][ C1] ? __pfx_kthread+0x10/0x10 [ 1532.170038][ C1] ret_from_fork_asm+0x1a/0x30 [ 1532.170076][ C1] [ 1532.170084][ C1] [ 1532.184415][T23256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.185894][ C1] The buggy address belongs to the variable: [ 1532.189612][T23256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1532.198485][ C1] binder_deferred_list+0x24/0x40 [ 1532.198517][ C1] [ 1532.198522][ C1] The buggy address belongs to the physical page: [ 1532.198538][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af98 [ 1532.677891][ C1] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1532.685780][ C1] raw: 00fff00000002000 ffffea00006be608 ffffea00006be608 0000000000000000 [ 1532.694372][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1532.702942][ C1] page dumped because: kasan: bad access detected [ 1532.709339][ C1] page_owner info is not present (never set?) [ 1532.715386][ C1] [ 1532.717700][ C1] Memory state around the buggy address: [ 1532.723320][ C1] ffffffff9af98400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1532.731414][ C1] ffffffff9af98480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1532.739457][ C1] >ffffffff9af98500: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 1532.747502][ C1] ^ [ 1532.752592][ C1] ffffffff9af98580: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 1532.760640][ C1] ffffffff9af98600: 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 00 00 f9 f9 [ 1532.768683][ C1] ================================================================== [ 1532.776829][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1532.784041][ C1] CPU: 1 UID: 0 PID: 5924 Comm: kworker/1:7 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1532.794380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1532.804432][ C1] Workqueue: mld mld_ifc_work [ 1532.809114][ C1] Call Trace: [ 1532.812407][ C1] [ 1532.815237][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1532.820011][ C1] panic+0x71c/0x800 [ 1532.823904][ C1] ? __pfx_panic+0x10/0x10 [ 1532.828314][ C1] ? irqentry_exit+0x3b/0x90 [ 1532.832898][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1532.838089][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 1532.842933][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1532.848042][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 1532.852882][ C1] check_panic_on_warn+0xab/0xb0 [ 1532.857815][ C1] end_report+0x107/0x170 [ 1532.862144][ C1] kasan_report+0xee/0x110 [ 1532.866548][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 1532.871389][ C1] __find_rr_leaf+0xbcb/0xe00 [ 1532.876058][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 1532.881350][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 1532.886568][ C1] ? fib6_node_lookup+0x12d/0x190 [ 1532.891860][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1532.897227][ C1] ? find_held_lock+0x2b/0x80 [ 1532.901925][ C1] fib6_table_lookup+0x7b3/0xa30 [ 1532.906862][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1532.912318][ C1] ip6_pol_route+0x1cc/0x1230 [ 1532.916988][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 1532.922098][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.927033][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.931990][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1532.937613][ C1] fib6_rule_lookup+0x536/0x720 [ 1532.942449][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.947377][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1532.952756][ C1] ? lock_acquire+0x179/0x350 [ 1532.957431][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1532.962369][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1532.968276][ C1] ip6_route_input+0x662/0xc00 [ 1532.973051][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 1532.978344][ C1] ? lock_acquire+0x179/0x350 [ 1532.983040][ C1] ? sock_wfree+0x46a/0x880 [ 1532.987536][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1532.992737][ C1] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 1532.998891][ C1] ipv6_rcv+0x1e8/0x680 [ 1533.003040][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1533.007705][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1533.013613][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1533.020046][ C1] ? lock_acquire+0x179/0x350 [ 1533.024728][ C1] ? process_backlog+0x3f0/0x15e0 [ 1533.029750][ C1] __netif_receive_skb+0x1d/0x160 [ 1533.034790][ C1] process_backlog+0x442/0x15e0 [ 1533.039650][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 1533.045042][ C1] net_rx_action+0xa97/0x1010 [ 1533.049721][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1533.054833][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1533.060023][ C1] ? sched_clock+0x38/0x60 [ 1533.064431][ C1] ? sched_clock_cpu+0x6c/0x530 [ 1533.069288][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1533.075103][ C1] ? mark_held_locks+0x49/0x80 [ 1533.079868][ C1] handle_softirqs+0x216/0x8e0 [ 1533.084627][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1533.090262][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 1533.095370][ C1] do_softirq+0xb2/0xf0 [ 1533.099516][ C1] [ 1533.102430][ C1] [ 1533.105344][ C1] __local_bh_enable_ip+0x100/0x120 [ 1533.110537][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 1533.115735][ C1] __dev_queue_xmit+0x8ab/0x43e0 [ 1533.120759][ C1] ? ip6mr_fib_lookup+0x136/0x1a0 [ 1533.125778][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1533.131162][ C1] ? register_lock_class+0x41/0x4c0 [ 1533.136361][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1533.141294][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 1533.146232][ C1] ? find_held_lock+0x2b/0x80 [ 1533.150900][ C1] ip6_finish_output2+0xe98/0x2020 [ 1533.156012][ C1] ip6_finish_output+0x3f9/0x1360 [ 1533.161051][ C1] ip6_output+0x1f9/0x540 [ 1533.165377][ C1] mld_sendpack+0x9e9/0x1220 [ 1533.169963][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 1533.175009][ C1] mld_ifc_work+0x740/0xca0 [ 1533.179510][ C1] process_one_work+0x9cc/0x1b70 [ 1533.184528][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1533.189910][ C1] ? assign_work+0x1a0/0x250 [ 1533.194494][ C1] worker_thread+0x6c8/0xf10 [ 1533.199076][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1533.204182][ C1] kthread+0x3c2/0x780 [ 1533.208254][ C1] ? __pfx_kthread+0x10/0x10 [ 1533.212829][ C1] ? __pfx_kthread+0x10/0x10 [ 1533.217453][ C1] ? __pfx_kthread+0x10/0x10 [ 1533.222043][ C1] ? __pfx_kthread+0x10/0x10 [ 1533.226645][ C1] ? rcu_is_watching+0x12/0xc0 [ 1533.231409][ C1] ? __pfx_kthread+0x10/0x10 [ 1533.236077][ C1] ret_from_fork+0x45/0x80 [ 1533.240484][ C1] ? __pfx_kthread+0x10/0x10 [ 1533.245058][ C1] ret_from_fork_asm+0x1a/0x30 [ 1533.249821][ C1] [ 1533.253077][ C1] Kernel Offset: disabled [ 1533.257382][ C1] Rebooting in 86400 seconds..