last executing test programs: 10m38.055759354s ago: executing program 32 (id=61): openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$sock_int(r1, 0x1, 0x1d, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10m30.203826135s ago: executing program 33 (id=71): io_setup(0x7, &(0x7f0000000280)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8100, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m10.547773481s ago: executing program 0 (id=554): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001540)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x9) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) 6m9.271327484s ago: executing program 0 (id=556): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) 6m6.491719535s ago: executing program 0 (id=559): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2200890, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r0, 0x0, 0x80000000) 6m4.872450129s ago: executing program 0 (id=564): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa10000, 0x7eeee938, 0x7f, r0, 0x0, &(0x7f0000000140)={0x9909de, 0x0, '\x00', @p_u8=&(0x7f0000000000)=0x4}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000003f40)={'veth1_to_team\x00', @ifru_names='vcan0\x00'}) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0x5, &(0x7f0000000340)=0x1002) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002240)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB="3b263dbc6b5e7ee6517de51606f5d51d7b1d4eaf23a2918e8d0117cd0a", @ANYRESDEC], 0x6) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='1', 0x1}], 0x1, 0x0, 0x0, 0x18000}, 0x4040880) 6m1.546161841s ago: executing program 0 (id=568): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4449474954414c3220274d61737465722043617074757265272030303030303030303030303030303030303030300a4d4943202753796e7468272030303030303030303030303030303030303030300a50484f4e45494e0a4f4741494e0a545245424c45202753796e7468204361707475726520537769746368272030303030303030303030303030303030303030300a53594e544820274c696e6527203030303091f804763030303030303030303030300a4f4741494e20274361707475726520537769746368272030303030303030303030303030303030303030300a"], 0xdf) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88000, 0x10, 0x10}, 0x18) connect$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x1}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @remote, 0x0, 0x4, 0x1, 0x0, 0x80, 0x82680167, r6}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xf, 0x80003, 0x3ff) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) dup3(r1, r0, 0x0) 5m59.302100133s ago: executing program 0 (id=573): r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085", @ANYRES16=r1, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000c00000018000380080002000100000008000400f4ad7e1e040001000c00018008000100", @ANYRES32], 0x38}}, 0x0) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, r6) 5m44.21602446s ago: executing program 34 (id=573): r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085", @ANYRES16=r1, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000c00000018000380080002000100000008000400f4ad7e1e040001000c00018008000100", @ANYRES32], 0x38}}, 0x0) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, r6) 4m28.834220742s ago: executing program 2 (id=749): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4449474954414c3220274d61737465722043617074757265272030303030303030303030303030303030303030300a4d4943202753796e7468272030303030303030303030303030303030303030300a50484f4e45494e0a4f4741494e0a545245424c45202753796e7468204361707475726520537769746368272030303030303030303030303030303030303030300a53594e544820274c696e6527203030303091f804763030303030303030303030300a4f4741494e20274361707475726520537769746368272030303030303030303030303030303030303030300a"], 0xdf) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88000, 0x10, 0x10}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @remote, 0x0, 0x4, 0x1, 0x0, 0x80, 0x82680167, r6}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xf, 0x80003, 0x3ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) dup3(r1, r0, 0x0) 4m27.550648644s ago: executing program 2 (id=754): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x20000007) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newlink={0x28, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x12) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000280)={0x2, 0x3, 0xa, {0x7, 0x8, 0x2, 0x90000}}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, 0x0, 0x0, 0xff00) socket$kcm(0x2b, 0x1, 0x0) 4m25.903394859s ago: executing program 2 (id=759): socket$inet6_sctp(0xa, 0x1, 0x84) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = io_uring_setup(0xdac, &(0x7f0000000180)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0xffffdffc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 4m24.219875353s ago: executing program 2 (id=764): mkdir(&(0x7f00000001c0)='./file0\x00', 0x86) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) setxattr$incfs_metadata(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002240)=ANY=[@ANYBLOB="140000003a00290200000000000000000a000000688f94ed1bc69a1dba4ef9f348d545ec12fed1ea60031ffad4d7650cd0e340ce1f929969c651627870bf0a360adddea37264aa91c42b30cb965e7757563a7c41094ec0ebd872ac6b30e172f80efb6e408abaccfa0ff613adb03b71"], 0x14}}, 0x0) 4m21.441103634s ago: executing program 2 (id=771): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$UHID_INPUT(r0, &(0x7f0000001480)={0xfc, {"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", 0xfffffdc3}}, 0x1039) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0xffff}) 4m17.060702149s ago: executing program 2 (id=782): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="280f0000", @ANYRES16=0x0, @ANYBLOB="0102000000000000000003002600140006007369743000"/34], 0x28}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) ftruncate(r4, 0xfbff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f000000000005000000", @ANYRES32=r7], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x17, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002940)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xe60, 0x4, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x3, 0x6}, 0x6, 0x1}, [{0x10000, 0x4, 0x7, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x1285, 0x401, 0xb0d0, 0x9}, {0x6, 0x7f, 0x4, 0x800, 0x4, 0x8}, {0x5, 0x0, 0xa08c, 0x81, 0x4}, {0x800, 0x200, 0x800, 0x4, 0x3, 0x2}, {0xffff, 0xfffffffc, 0x8001, 0x17, 0x4, 0x1}, {0xfffffffd, 0x4, 0x0, 0x4, 0x75, 0x8001}, {0x6, 0x200, 0xffffff00, 0x4, 0x7, 0x1}, {0x6, 0x4, 0x14ba, 0x0, 0x5, 0x5}, {0x9, 0xd, 0x8000, 0x125ee151, 0xffff, 0x2}, {0x9e39, 0x4000, 0x7fffffff, 0x4, 0x0, 0x3ff}, {0x0, 0x5, 0x9, 0x3ff, 0x7, 0x2}, {0x5, 0x8001, 0x7, 0x1000, 0x6, 0x4}, {0x0, 0x1, 0x8, 0x6, 0xfffffffc, 0x6}, {0x2, 0x9, 0x8, 0x9, 0x0, 0x40}, {0x80003, 0x1ff, 0x7, 0x2, 0x6}, {0x1, 0x3, 0x5, 0x5, 0x9, 0x9}, {0x3, 0x80000007, 0x4, 0xfffffffd, 0x9, 0x2}, {0xee4b, 0x1, 0x7f, 0xc494, 0x3, 0x5409}, {0x0, 0xb, 0x3, 0xa, 0x6, 0x7f}, {0x5, 0x401000, 0x0, 0x2, 0x1, 0x9}, {0xa, 0x7, 0x2, 0x8, 0x8, 0xc8}, {0x4, 0x5b90, 0x7f, 0x9, 0x7, 0x7}, {0x7, 0x7fff, 0x3, 0x6, 0x9, 0x5}, {0x2000000, 0x0, 0x3, 0x7, 0x1, 0x9}, {0x4, 0x0, 0x9, 0x80000001, 0x3b, 0x6}, {0x1ff, 0x1, 0x0, 0x2, 0x2, 0x458c}, {0x469, 0xcfe, 0x4, 0xff, 0xf9, 0x1}, {0x2, 0x9, 0x2, 0xa122, 0x8, 0x8001}, {0x80000001, 0x10, 0x81, 0x6, 0x8}, {0x91a, 0xb2, 0x9, 0xd30, 0x401, 0x8001}, {0xfa8f, 0x0, 0x8, 0x8, 0xffff, 0x8001}, {0xcf7, 0x416ad2ec, 0x401, 0x30000, 0x5, 0xd12}, {0x1, 0x2, 0x7, 0x10, 0xfffffff1, 0x275dca9e}, {0x0, 0xffffff44, 0x7ff, 0x7, 0x0, 0x6}, {0xffff, 0x7fff, 0x1fa, 0x8, 0x8, 0x7fffffff}, {0x8, 0x4, 0x100, 0x6, 0x5, 0xfff}, {0xd, 0x2, 0xf38, 0x8, 0x80000001, 0x4}, {0x4, 0x8000, 0x8, 0xddd, 0x1, 0x5}, {0xa, 0x6, 0x7, 0x8, 0x100, 0x400}, {0xc, 0x625f, 0x3, 0x1ff, 0xffff, 0x9}, {0x9, 0x400, 0x8, 0x1000, 0x6, 0x81}, {0x1ff, 0x9, 0xe39, 0x2, 0x5, 0x1004}, {0x80, 0xfffff001, 0x5, 0x1c00000, 0x5, 0x9}, {0x8, 0x6, 0x2, 0x3, 0xacc, 0xffff}, {0x9, 0x7fffffff, 0x8, 0x3, 0x0, 0x3}, {0x2015, 0x0, 0x6c9, 0x3, 0xffffcd26, 0x3}, {0x1, 0x4, 0x3, 0x80, 0x2eba, 0xff}, {0x6, 0x0, 0x401, 0x2, 0x9, 0x3}, {0x93, 0x3, 0x2, 0x4, 0x9, 0xaef6}, {0x3, 0xb3, 0x7, 0x6, 0x800, 0x4}, {0xb, 0x806, 0x5, 0x2, 0xde4, 0x2}, {0x9, 0x4, 0x0, 0x401000, 0xfff}, {0x1, 0x6, 0xc5, 0x401, 0x6}, {0x5, 0x3, 0x9, 0xb6c9, 0xfffffffa, 0xff}, {0x10000, 0x5, 0x9, 0xfffffffa, 0x7, 0x6}, {0x7, 0x6, 0x10000000, 0x4, 0x8, 0xfffffff7}, {0x0, 0xfffffff9, 0x1, 0xfffffffa, 0x3}, {0x1, 0x4, 0x9, 0x5, 0x3, 0xa}, {0x3, 0x0, 0x81, 0x5, 0x7f, 0x2}, {0x3, 0x4, 0x1, 0x802, 0x2, 0xfffffff3}, {0x1cff, 0x1, 0x2, 0x8, 0x3f, 0x5e}, {0x3, 0xffff, 0x4, 0x22, 0x9, 0x59}, {0x3, 0x8, 0xd31, 0x1, 0x5002, 0xbf53}, {0x4, 0x100, 0x5, 0x5, 0x9, 0x9}, {0x1, 0x7, 0x5, 0x0, 0x3}, {0x4, 0x40, 0xfffffffc, 0x9, 0x9aad, 0xdac1}, {0xa1, 0x9, 0x7fffffff, 0x3, 0x800, 0x1}, {0x3, 0x7, 0x1, 0x8, 0x3, 0x6b10165f}, {0xfffffffb, 0xd, 0x6, 0x3, 0x8, 0x56}, {0x3, 0xd2, 0x1, 0x100, 0x0, 0x2}, {0xb, 0x5, 0x200, 0x7fffffff, 0xe, 0xffff}, {0x7f, 0x9, 0x12e842f4, 0x693, 0x5, 0x400}, {0x4, 0x8, 0x0, 0x7, 0x1000, 0x7}, {0xfff, 0x0, 0x3, 0x3, 0x81}, {0x5, 0x9, 0x8, 0x400, 0x401, 0x6}, {0x2, 0x16, 0xdae, 0x4, 0xfffffffc, 0xb9a}, {0x101, 0x8001, 0xff, 0x7, 0x600, 0x5eb}, {0x2, 0x1, 0x6aa8, 0x4000, 0x0, 0x5}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x7}, {0x4008, 0xb4a9, 0x339, 0xfffffff7, 0x8, 0x7}, {0x0, 0x8ef, 0x8000008, 0x7, 0x7, 0x3}, {0x4, 0xe, 0x8, 0x3, 0x3, 0x101}, {0xa, 0x2, 0x4, 0x6, 0x200, 0xfffffffc}, {0x8, 0x498, 0xffffff3a, 0xc000000, 0x4, 0x3633}, {0x1, 0xb7, 0xf, 0xfff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x6, 0x2000000, 0x4c5}, {0x8, 0x1, 0x6, 0xff, 0xffffffff, 0x3ff}, {0x4b, 0x4, 0x7, 0x1, 0x8, 0x200}, {0x81, 0xfffffffa, 0x9, 0x7892, 0x4}, {0x8, 0x800, 0x1, 0x4, 0x7, 0x101}, {0x6, 0x9, 0x80000001, 0x3, 0x21, 0xf49}, {0x0, 0x7, 0x1, 0x6, 0xba6d, 0x8}, {0x5, 0x4a9, 0x1, 0x3, 0xe, 0x5}, {0x3, 0x0, 0x6, 0x2, 0x5, 0x7}, {0x2, 0x40, 0x9bf, 0x3, 0x80, 0x9}, {0x400, 0x3, 0x84f, 0x0, 0x7, 0x7}, {0x0, 0x4, 0x81, 0x8001, 0x8, 0x74}, {0x1ff, 0x0, 0x10000, 0x7, 0xff, 0x5}, {0x8bf, 0x8, 0x200, 0xfffffffb, 0x5, 0x6}, {0x6, 0xac2, 0x5, 0x2, 0x7ff, 0xfffffff8}, {0x1, 0x5, 0x7fffffff, 0x43, 0xfffff001, 0xfb}, {0xe, 0x8cd6, 0x5, 0x0, 0xa, 0x8}, {0x4, 0x0, 0x1, 0x2, 0x101, 0x9}, {0xd, 0x7, 0x3, 0x4, 0x1, 0x4}, {0x8, 0x1, 0x8, 0x8, 0x1, 0x1}, {0xd1b, 0x7f, 0x6, 0x6, 0x4}, {0x1, 0xffff, 0x80000000, 0x800, 0x0, 0x8}, {0x5, 0x0, 0x101, 0x3, 0x3ff, 0xc0e}, {0xc, 0x9, 0xb, 0x8, 0xe00, 0x80000000}, {0x6c4e, 0xf, 0x1, 0x6, 0x2, 0x1}, {0x6, 0x2, 0x8, 0xad2, 0x6, 0x400}, {0x40, 0x8001, 0x9, 0x9, 0x5, 0xffff}, {0x4, 0x5d24, 0x5, 0xf, 0x772, 0x100}, {0x10, 0x5, 0x0, 0x4, 0x6, 0x1}, {0x7, 0x3, 0x800, 0x250, 0x100, 0x9}, {0x6, 0x7f, 0x100, 0x6, 0x8, 0x4}, {0xb61, 0x7, 0x7fff, 0x2, 0xc3, 0x2}, {0x0, 0x9, 0x8, 0xec30, 0x4, 0x2}, {0x10, 0x2000000, 0xd1bcbe4, 0x10000, 0x0, 0x1}, {0x49f, 0x6, 0x3, 0x9, 0x9, 0xffffff01}, {0x4b0, 0x445a3bbc, 0xf39, 0xc0, 0x3ff, 0x5}, {0x80000000, 0x6, 0x4b4, 0xf3, 0x5, 0x4}, {0x9, 0x0, 0x4, 0x0, 0x5, 0xffffffff}, {0x5388, 0x80000001, 0xfffffff9, 0x1, 0x4f, 0x76d}, {0x8, 0x3, 0x4, 0xe, 0x151, 0x2}, {0x2, 0x7224, 0x8, 0xfffff90e, 0x0, 0x7d6a7490}, {0x2b93, 0x0, 0x8, 0x7, 0x0, 0x7}], [{}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {}, {}, {}, {0x5, 0x1cbd97c212d608d4}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0xffcf6d4e6fee8093}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4m1.772656321s ago: executing program 35 (id=782): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="280f0000", @ANYRES16=0x0, @ANYBLOB="0102000000000000000003002600140006007369743000"/34], 0x28}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) ftruncate(r4, 0xfbff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f000000000005000000", @ANYRES32=r7], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x17, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002940)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xe60, 0x4, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x3, 0x6}, 0x6, 0x1}, [{0x10000, 0x4, 0x7, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x1285, 0x401, 0xb0d0, 0x9}, {0x6, 0x7f, 0x4, 0x800, 0x4, 0x8}, {0x5, 0x0, 0xa08c, 0x81, 0x4}, {0x800, 0x200, 0x800, 0x4, 0x3, 0x2}, {0xffff, 0xfffffffc, 0x8001, 0x17, 0x4, 0x1}, {0xfffffffd, 0x4, 0x0, 0x4, 0x75, 0x8001}, {0x6, 0x200, 0xffffff00, 0x4, 0x7, 0x1}, {0x6, 0x4, 0x14ba, 0x0, 0x5, 0x5}, {0x9, 0xd, 0x8000, 0x125ee151, 0xffff, 0x2}, {0x9e39, 0x4000, 0x7fffffff, 0x4, 0x0, 0x3ff}, {0x0, 0x5, 0x9, 0x3ff, 0x7, 0x2}, {0x5, 0x8001, 0x7, 0x1000, 0x6, 0x4}, {0x0, 0x1, 0x8, 0x6, 0xfffffffc, 0x6}, {0x2, 0x9, 0x8, 0x9, 0x0, 0x40}, {0x80003, 0x1ff, 0x7, 0x2, 0x6}, {0x1, 0x3, 0x5, 0x5, 0x9, 0x9}, {0x3, 0x80000007, 0x4, 0xfffffffd, 0x9, 0x2}, {0xee4b, 0x1, 0x7f, 0xc494, 0x3, 0x5409}, {0x0, 0xb, 0x3, 0xa, 0x6, 0x7f}, {0x5, 0x401000, 0x0, 0x2, 0x1, 0x9}, {0xa, 0x7, 0x2, 0x8, 0x8, 0xc8}, {0x4, 0x5b90, 0x7f, 0x9, 0x7, 0x7}, {0x7, 0x7fff, 0x3, 0x6, 0x9, 0x5}, {0x2000000, 0x0, 0x3, 0x7, 0x1, 0x9}, {0x4, 0x0, 0x9, 0x80000001, 0x3b, 0x6}, {0x1ff, 0x1, 0x0, 0x2, 0x2, 0x458c}, {0x469, 0xcfe, 0x4, 0xff, 0xf9, 0x1}, {0x2, 0x9, 0x2, 0xa122, 0x8, 0x8001}, {0x80000001, 0x10, 0x81, 0x6, 0x8}, {0x91a, 0xb2, 0x9, 0xd30, 0x401, 0x8001}, {0xfa8f, 0x0, 0x8, 0x8, 0xffff, 0x8001}, {0xcf7, 0x416ad2ec, 0x401, 0x30000, 0x5, 0xd12}, {0x1, 0x2, 0x7, 0x10, 0xfffffff1, 0x275dca9e}, {0x0, 0xffffff44, 0x7ff, 0x7, 0x0, 0x6}, {0xffff, 0x7fff, 0x1fa, 0x8, 0x8, 0x7fffffff}, {0x8, 0x4, 0x100, 0x6, 0x5, 0xfff}, {0xd, 0x2, 0xf38, 0x8, 0x80000001, 0x4}, {0x4, 0x8000, 0x8, 0xddd, 0x1, 0x5}, {0xa, 0x6, 0x7, 0x8, 0x100, 0x400}, {0xc, 0x625f, 0x3, 0x1ff, 0xffff, 0x9}, {0x9, 0x400, 0x8, 0x1000, 0x6, 0x81}, {0x1ff, 0x9, 0xe39, 0x2, 0x5, 0x1004}, {0x80, 0xfffff001, 0x5, 0x1c00000, 0x5, 0x9}, {0x8, 0x6, 0x2, 0x3, 0xacc, 0xffff}, {0x9, 0x7fffffff, 0x8, 0x3, 0x0, 0x3}, {0x2015, 0x0, 0x6c9, 0x3, 0xffffcd26, 0x3}, {0x1, 0x4, 0x3, 0x80, 0x2eba, 0xff}, {0x6, 0x0, 0x401, 0x2, 0x9, 0x3}, {0x93, 0x3, 0x2, 0x4, 0x9, 0xaef6}, {0x3, 0xb3, 0x7, 0x6, 0x800, 0x4}, {0xb, 0x806, 0x5, 0x2, 0xde4, 0x2}, {0x9, 0x4, 0x0, 0x401000, 0xfff}, {0x1, 0x6, 0xc5, 0x401, 0x6}, {0x5, 0x3, 0x9, 0xb6c9, 0xfffffffa, 0xff}, {0x10000, 0x5, 0x9, 0xfffffffa, 0x7, 0x6}, {0x7, 0x6, 0x10000000, 0x4, 0x8, 0xfffffff7}, {0x0, 0xfffffff9, 0x1, 0xfffffffa, 0x3}, {0x1, 0x4, 0x9, 0x5, 0x3, 0xa}, {0x3, 0x0, 0x81, 0x5, 0x7f, 0x2}, {0x3, 0x4, 0x1, 0x802, 0x2, 0xfffffff3}, {0x1cff, 0x1, 0x2, 0x8, 0x3f, 0x5e}, {0x3, 0xffff, 0x4, 0x22, 0x9, 0x59}, {0x3, 0x8, 0xd31, 0x1, 0x5002, 0xbf53}, {0x4, 0x100, 0x5, 0x5, 0x9, 0x9}, {0x1, 0x7, 0x5, 0x0, 0x3}, {0x4, 0x40, 0xfffffffc, 0x9, 0x9aad, 0xdac1}, {0xa1, 0x9, 0x7fffffff, 0x3, 0x800, 0x1}, {0x3, 0x7, 0x1, 0x8, 0x3, 0x6b10165f}, {0xfffffffb, 0xd, 0x6, 0x3, 0x8, 0x56}, {0x3, 0xd2, 0x1, 0x100, 0x0, 0x2}, {0xb, 0x5, 0x200, 0x7fffffff, 0xe, 0xffff}, {0x7f, 0x9, 0x12e842f4, 0x693, 0x5, 0x400}, {0x4, 0x8, 0x0, 0x7, 0x1000, 0x7}, {0xfff, 0x0, 0x3, 0x3, 0x81}, {0x5, 0x9, 0x8, 0x400, 0x401, 0x6}, {0x2, 0x16, 0xdae, 0x4, 0xfffffffc, 0xb9a}, {0x101, 0x8001, 0xff, 0x7, 0x600, 0x5eb}, {0x2, 0x1, 0x6aa8, 0x4000, 0x0, 0x5}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x7}, {0x4008, 0xb4a9, 0x339, 0xfffffff7, 0x8, 0x7}, {0x0, 0x8ef, 0x8000008, 0x7, 0x7, 0x3}, {0x4, 0xe, 0x8, 0x3, 0x3, 0x101}, {0xa, 0x2, 0x4, 0x6, 0x200, 0xfffffffc}, {0x8, 0x498, 0xffffff3a, 0xc000000, 0x4, 0x3633}, {0x1, 0xb7, 0xf, 0xfff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x6, 0x2000000, 0x4c5}, {0x8, 0x1, 0x6, 0xff, 0xffffffff, 0x3ff}, {0x4b, 0x4, 0x7, 0x1, 0x8, 0x200}, {0x81, 0xfffffffa, 0x9, 0x7892, 0x4}, {0x8, 0x800, 0x1, 0x4, 0x7, 0x101}, {0x6, 0x9, 0x80000001, 0x3, 0x21, 0xf49}, {0x0, 0x7, 0x1, 0x6, 0xba6d, 0x8}, {0x5, 0x4a9, 0x1, 0x3, 0xe, 0x5}, {0x3, 0x0, 0x6, 0x2, 0x5, 0x7}, {0x2, 0x40, 0x9bf, 0x3, 0x80, 0x9}, {0x400, 0x3, 0x84f, 0x0, 0x7, 0x7}, {0x0, 0x4, 0x81, 0x8001, 0x8, 0x74}, {0x1ff, 0x0, 0x10000, 0x7, 0xff, 0x5}, {0x8bf, 0x8, 0x200, 0xfffffffb, 0x5, 0x6}, {0x6, 0xac2, 0x5, 0x2, 0x7ff, 0xfffffff8}, {0x1, 0x5, 0x7fffffff, 0x43, 0xfffff001, 0xfb}, {0xe, 0x8cd6, 0x5, 0x0, 0xa, 0x8}, {0x4, 0x0, 0x1, 0x2, 0x101, 0x9}, {0xd, 0x7, 0x3, 0x4, 0x1, 0x4}, {0x8, 0x1, 0x8, 0x8, 0x1, 0x1}, {0xd1b, 0x7f, 0x6, 0x6, 0x4}, {0x1, 0xffff, 0x80000000, 0x800, 0x0, 0x8}, {0x5, 0x0, 0x101, 0x3, 0x3ff, 0xc0e}, {0xc, 0x9, 0xb, 0x8, 0xe00, 0x80000000}, {0x6c4e, 0xf, 0x1, 0x6, 0x2, 0x1}, {0x6, 0x2, 0x8, 0xad2, 0x6, 0x400}, {0x40, 0x8001, 0x9, 0x9, 0x5, 0xffff}, {0x4, 0x5d24, 0x5, 0xf, 0x772, 0x100}, {0x10, 0x5, 0x0, 0x4, 0x6, 0x1}, {0x7, 0x3, 0x800, 0x250, 0x100, 0x9}, {0x6, 0x7f, 0x100, 0x6, 0x8, 0x4}, {0xb61, 0x7, 0x7fff, 0x2, 0xc3, 0x2}, {0x0, 0x9, 0x8, 0xec30, 0x4, 0x2}, {0x10, 0x2000000, 0xd1bcbe4, 0x10000, 0x0, 0x1}, {0x49f, 0x6, 0x3, 0x9, 0x9, 0xffffff01}, {0x4b0, 0x445a3bbc, 0xf39, 0xc0, 0x3ff, 0x5}, {0x80000000, 0x6, 0x4b4, 0xf3, 0x5, 0x4}, {0x9, 0x0, 0x4, 0x0, 0x5, 0xffffffff}, {0x5388, 0x80000001, 0xfffffff9, 0x1, 0x4f, 0x76d}, {0x8, 0x3, 0x4, 0xe, 0x151, 0x2}, {0x2, 0x7224, 0x8, 0xfffff90e, 0x0, 0x7d6a7490}, {0x2b93, 0x0, 0x8, 0x7, 0x0, 0x7}], [{}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {}, {}, {}, {0x5, 0x1cbd97c212d608d4}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0xffcf6d4e6fee8093}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m26.74064744s ago: executing program 5 (id=877): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3m25.4539185s ago: executing program 5 (id=879): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 3m24.105807601s ago: executing program 5 (id=881): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xdf) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88000, 0x10, 0x10}, 0x18) connect$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x1}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @remote, 0x0, 0x4, 0x1, 0x0, 0x80, 0x82680167}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan0\x00'}, 0x18) 3m23.413773277s ago: executing program 5 (id=883): mkdir(&(0x7f00000001c0)='./file0\x00', 0x86) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002240)=ANY=[@ANYBLOB="140000003a00290200000000000000000a000000688f94ed1bc69a1dba4ef9f348d545ec12fed1ea60031ffad4d7650cd0e340ce1f929969c651627870bf0a360adddea37264aa91c42b30cb965e7757563a7c41094ec0ebd872ac6b30e172f80efb6e408abaccfa0ff613adb03b71"], 0x14}}, 0x0) 3m19.089968007s ago: executing program 5 (id=888): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa10000, 0x7eeee938, 0x7f, r0, 0x0, &(0x7f0000000140)={0x9909de, 0x0, '\x00', @p_u8=&(0x7f0000000000)=0x4}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000003f40)={'veth1_to_team\x00', @ifru_names='vcan0\x00'}) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0x5, &(0x7f0000000340)=0x1002) socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002240)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB="3b263dbc6b5e7ee6517de51606f5d51d7b1d4eaf23a2918e8d0117cd0a", @ANYRESDEC], 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='1', 0x1}], 0x1, 0x0, 0x0, 0x18000}, 0x4040880) 3m16.69007227s ago: executing program 5 (id=896): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000280)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000140)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}], [], 0x6b}}) 3m1.223365515s ago: executing program 36 (id=896): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000280)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000140)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}], [], 0x6b}}) 2m44.460109987s ago: executing program 6 (id=943): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4449474954414c3220274d61737465722043617074757265272030303030303030303030303030303030303030300a4d4943202753796e7468272030303030303030303030303030303030303030300a50484f4e45494e0a4f4741494e0a545245424c45202753796e7468204361707475726520537769746368272030303030303030303030303030303030303030300a53594e544820274c696e6527203030303091f804763030303030303030303030300a4f4741494e20274361707475726520537769746368272030303030303030303030303030303030303030300a"], 0xdf) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88000, 0x10, 0x10}, 0x18) connect$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x1}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @remote, 0x0, 0x4, 0x1, 0x0, 0x80, 0x82680167, r5}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xf, 0x80003, 0x3ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) dup3(r1, r0, 0x0) 2m41.131854488s ago: executing program 6 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_open_procfs(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800000}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000480), 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nilfs2\x00', 0x0, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r0, 0x2, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0xb1c}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r5, 0x4) 2m38.577576106s ago: executing program 6 (id=956): syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x101000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x5f, &(0x7f0000001240)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000012c0)='net/netstat\x00') read$char_usb(r2, &(0x7f0000000040)=""/4122, 0x101a) 2m38.089185125s ago: executing program 6 (id=958): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 2m37.959455325s ago: executing program 6 (id=959): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 2m35.852313148s ago: executing program 6 (id=964): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000004a40)={0xb0, 0x0, 0x0, [{{0x3, 0x0, 0x1, 0xb799, 0x55, 0x24, {0x6, 0x7, 0x0, 0x80000001, 0x9, 0xffffffffffff7c7c, 0xe0b, 0xa2, 0x9, 0x2000, 0x5ecc, 0x0, 0x0, 0x1, 0x5}}, {0x6, 0x3, 0x1, 0x9, ']'}}]}, 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) 2m20.437794745s ago: executing program 37 (id=964): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000004a40)={0xb0, 0x0, 0x0, [{{0x3, 0x0, 0x1, 0xb799, 0x55, 0x24, {0x6, 0x7, 0x0, 0x80000001, 0x9, 0xffffffffffff7c7c, 0xe0b, 0xa2, 0x9, 0x2000, 0x5ecc, 0x0, 0x0, 0x1, 0x5}}, {0x6, 0x3, 0x1, 0x9, ']'}}]}, 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) 1m47.149452226s ago: executing program 8 (id=1041): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b5d090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f38306d090890e0879b0a0ac6e70a9b3348959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000001c0)={0x1a3, @tick=0x1, 0xe, {0x60, 0x2}, 0xf9, 0x0, 0x4}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b509000000000000dbaa00fea0000000bf86000000000000070800", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004618f06da6ff76000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1m46.572756863s ago: executing program 8 (id=1044): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000000000001"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) 1m44.316913327s ago: executing program 8 (id=1047): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12c9bc095037d560}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 1m43.03584043s ago: executing program 8 (id=1049): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x20000007) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000002752583c4a36efe1b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x12) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000280)={0x2, 0x3, 0xa, {0x7, 0x8, 0x2, 0x90000}}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, 0x0, 0x0, 0xff00) socket$kcm(0x2b, 0x1, 0x0) 1m41.777062284s ago: executing program 8 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x2000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)={0x1c, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x37}]}]}, 0x54}}, 0x0) 1m39.25451524s ago: executing program 8 (id=1056): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000000000001"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) 1m23.049096365s ago: executing program 38 (id=1056): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000000000001"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) 22.520653636s ago: executing program 4 (id=1189): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001500)={&(0x7f0000000440)="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", &(0x7f0000000300)=""/195, 0x0, &(0x7f0000001440)="4d6a6945484eac2fb63076809202053d49134d2f4b023f474db2cc98a9141b7aa2817b8dc2ba0841bab26dae6c73d7a99e5dbb0184393b7309f33fc1877eab89f76c9f4d3b50bde132d16f5b0bdff1a7345b1bcb114dad8cad37807099", 0x5, r2}, 0x38) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9) 18.225427655s ago: executing program 4 (id=1196): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000001c0)={0x1a3, @tick=0x1, 0xe, {0x60, 0x2}, 0xf9, 0x0, 0x4}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b509000000000000dbaa00fea0000000bf86000000000000070800", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004618f06da6ff76000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 16.707311161s ago: executing program 7 (id=1202): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000008000000000000008000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000180961b884dd8659bf600000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f000001ac140000000000cca5f488b68659fff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) 15.461577786s ago: executing program 7 (id=1204): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r5, 0x400455c8, 0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000005440)=0x6) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.238266803s ago: executing program 9 (id=1205): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x19) 13.996982602s ago: executing program 1 (id=1207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) creat(0x0, 0xecf86c37d5304858) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) 13.745109674s ago: executing program 4 (id=1208): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 13.744302353s ago: executing program 3 (id=1209): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12c9bc095037d560}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12.323791849s ago: executing program 7 (id=1210): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0xb0, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x9e, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="f4f0a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3"]}]}, 0xb0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) 12.107931026s ago: executing program 1 (id=1211): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4449474954414c3220274d61737465722043617074757265272030303030303030303030303030303030303030300a4d4943202753796e7468272030303030303030303030303030303030303030300a50484f4e45494e0a4f4741494e0a545245424c45202753796e7468204361707475726520537769746368272030303030303030303030303030303030303030300a53594e544820274c696e6527203030303091f804763030303030303030303030300a4f4741494e20274361707475726520537769746368272030303030303030303030303030303030303030300a"], 0xdf) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88000, 0x10, 0x10}, 0x18) connect$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x1}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @remote, 0x0, 0x4, 0x1, 0x0, 0x80, 0x82680167, r5}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xf, 0x80003, 0x3ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) dup3(r1, r0, 0x0) 11.830399158s ago: executing program 9 (id=1212): mkdir(&(0x7f00000001c0)='./file0\x00', 0x86) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 11.710743116s ago: executing program 7 (id=1213): socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@private=0xa010100, @in6=@empty, 0x4e23, 0x2, 0x4e24, 0x7, 0x2, 0x80}, {0x8000000000000000, 0xa5, 0xff, 0x9, 0xf26, 0xa, 0x6, 0x6}, {0x9, 0x2, 0x1, 0x8}, 0x7fff, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d3, 0xff}, 0x2, @in=@multicast1, 0x0, 0x2, 0x0, 0x66, 0x1, 0xc468, 0x100009}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.624316307s ago: executing program 4 (id=1214): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000007c0), &(0x7f0000000800)=0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) 11.370913916s ago: executing program 3 (id=1215): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000000440)="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", 0x1000, 0x5}) 10.213020917s ago: executing program 9 (id=1216): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x3) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x200000400000b4e) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 10.003481494s ago: executing program 1 (id=1217): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) 9.94755754s ago: executing program 4 (id=1218): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b5d090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f38306d090890e0879b0a0ac6e70a9b3348959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000001c0)={0x1a3, @tick=0x1, 0xe, {0x60, 0x2}, 0xf9, 0x0, 0x4}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b509000000000000dbaa00fea0000000bf86000000000000070800", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004618f06da6ff76000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 9.778819186s ago: executing program 3 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f00007b2000/0x3000)=nil, 0x3000, 0x1, 0x1010, 0xffffffffffffffff, 0x9c9a1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x3cc, 0x100, 0x2b8, 0x182, 0x100, 0x0, 0x304, 0x3a8, 0x3a8, 0x304, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x1800}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x292}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private2, @private2, [], [], 'macsec0\x00', 'netdevsim0\x00'}, 0x0, 0x1dc, 0x204, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xe, [@mcast2, @dev, @rand_addr=' \x01\x00', @local, @remote, @mcast1, @dev, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @empty, @dev, @mcast1, @loopback, @private0, @empty]}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$RTC_UIE_ON(r5, 0x7003) 8.879741949s ago: executing program 9 (id=1220): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r5, 0x400455c8, 0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000005440)=0x6) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.763729335s ago: executing program 3 (id=1221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) close(r2) 7.030328322s ago: executing program 3 (id=1222): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_setup(0x2f8c, &(0x7f0000000180)={0x0, 0xb0e6, 0x40, 0x1, 0x52}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 7.010419385s ago: executing program 1 (id=1223): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x5, 0x400040) connect$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 6.815796538s ago: executing program 7 (id=1224): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 4.979466866s ago: executing program 3 (id=1225): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 4.970508454s ago: executing program 9 (id=1226): mkdir(&(0x7f00000001c0)='./file0\x00', 0x86) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 4.099599293s ago: executing program 1 (id=1227): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4449474954414c3220274d61737465722043617074757265272030303030303030303030303030303030303030300a4d4943202753796e7468272030303030303030303030303030303030303030300a50484f4e45494e0a4f4741494e0a545245424c45202753796e7468204361707475726520537769746368272030303030303030303030303030303030303030300a53594e544820274c696e6527203030303091f804763030303030303030303030300a4f4741494e20274361707475726520537769746368272030303030303030303030303030303030303030300a"], 0xdf) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88000, 0x10, 0x10}, 0x18) connect$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x1}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @remote, 0x0, 0x4, 0x1, 0x0, 0x80, 0x82680167, r5}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xf, 0x80003, 0x3ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) dup3(r1, r0, 0x0) 4.099058481s ago: executing program 9 (id=1228): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) 3.299669671s ago: executing program 4 (id=1229): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000000440)="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", 0x1000, 0x5}) 72.802786ms ago: executing program 7 (id=1230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 0s ago: executing program 1 (id=1231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x2000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)={0x1c, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x37}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): 88.374688][ T5849] veth0_vlan: entered promiscuous mode [ 88.385794][ T5838] veth0_macvtap: entered promiscuous mode [ 88.408394][ T5849] veth1_vlan: entered promiscuous mode [ 88.418109][ T5838] veth1_macvtap: entered promiscuous mode [ 88.435172][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.444618][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.458668][ T5835] veth0_macvtap: entered promiscuous mode [ 88.488514][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.499176][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.509867][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.520423][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.532569][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.545171][ T5835] veth1_macvtap: entered promiscuous mode [ 88.586449][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.597460][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.607852][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.618719][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.630511][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.642574][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.651502][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.660380][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.670080][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.711057][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.722608][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.735098][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.747891][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.757822][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.768584][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.780233][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.790978][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.801926][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.821216][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.829813][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.877518][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.899812][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.910240][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.921417][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.931597][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.942768][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.954764][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.972824][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.979354][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.995770][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.019375][ T5853] Bluetooth: hci3: command tx timeout [ 89.024863][ T5853] Bluetooth: hci2: command tx timeout [ 89.030740][ T5848] Bluetooth: hci0: command tx timeout [ 89.036304][ T5848] Bluetooth: hci4: command tx timeout [ 89.041785][ T5848] Bluetooth: hci1: command tx timeout [ 89.087141][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.096913][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.105778][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.114907][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.140335][ T5849] veth0_macvtap: entered promiscuous mode [ 89.172553][ T5849] veth1_macvtap: entered promiscuous mode [ 89.207611][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.223436][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.402748][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.487851][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.550649][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.601553][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.656014][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.753660][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.765827][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.802516][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.819788][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.836946][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.871132][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.949669][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.961475][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.983869][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.995790][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.009172][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.020551][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.032415][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.043200][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.056565][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.080478][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.105799][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.107960][ T977] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.203861][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.213171][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.222508][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.244706][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.254000][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.264643][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.327870][ T977] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.358175][ T977] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.386344][ T977] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.421957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.554703][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.626887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.703794][ T5935] 9pnet_fd: Insufficient options for proto=fd [ 91.138788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.210877][ T5147] Bluetooth: hci1: command tx timeout [ 91.219455][ T5147] Bluetooth: hci2: command tx timeout [ 91.220203][ T5927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.224976][ T5147] Bluetooth: hci4: command tx timeout [ 91.240912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.251700][ T5147] Bluetooth: hci0: command tx timeout [ 91.259982][ T5147] Bluetooth: hci3: command tx timeout [ 91.447137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.457367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.569817][ T977] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.063239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.072542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.261935][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.278759][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.324741][ T25] usb 2-1: USB disconnect, device number 2 [ 92.341217][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.349366][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.597759][ T5963] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.726266][ T8] cfg80211: failed to load regulatory.db [ 95.093101][ T5965] futex_wake_op: syz.3.13 tries to shift op by -1; fix this program [ 95.136872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.177000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.885760][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.969366][ T5962] syz.3.13 (5962) used greatest stack depth: 19216 bytes left [ 96.771332][ T5978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.801193][ T5978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'. [ 98.993401][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.601358][ T6004] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 102.592179][ T6009] netlink: 'syz.4.25': attribute type 5 has an invalid length. [ 102.849760][ T6018] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.405297][ T6034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.223392][ T6038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.741472][ T6040] trusted_key: encrypted_key: key user:syz not found [ 108.167682][ T6042] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 109.726583][ T6059] Zero length message leads to an empty skb [ 112.827748][ T6080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.817407][ T6083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.714593][ T6100] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 117.799177][ T6117] trusted_key: encrypted_key: key user:syz not found [ 118.137924][ T6120] ax25_connect(): syz.2.54 uses autobind, please contact jreuter@yaina.de [ 118.230785][ T6122] netlink: 'syz.2.54': attribute type 11 has an invalid length. [ 118.238621][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 118.820703][ T6124] netlink: 2 bytes leftover after parsing attributes in process `syz.1.56'. [ 122.347786][ T6153] overlay: Unknown parameter '/' [ 123.639665][ T5853] Bluetooth: hci4: command tx timeout [ 126.283379][ T6174] NILFS (loop0): device size too small [ 126.789595][ T6178] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.884892][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.891661][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.112229][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807cbb4800: rx timeout, send abort [ 134.126827][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807cbb4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 136.472708][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.481542][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.491789][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.499607][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.509655][ T5853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 136.519413][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.636860][ T6243] input: syz1 as /devices/virtual/input/input5 [ 136.681011][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.928132][ T6236] chnl_net:caif_netlink_parms(): no params data found [ 137.017786][ T6247] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.89'. [ 137.030564][ T6247] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.89'. [ 137.050887][ T6247] netlink: 69 bytes leftover after parsing attributes in process `syz.2.89'. [ 137.316992][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.358982][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.366543][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.378873][ T6236] bridge_slave_0: entered allmulticast mode [ 137.385719][ T6236] bridge_slave_0: entered promiscuous mode [ 137.399663][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.409173][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.416410][ T6236] bridge_slave_1: entered allmulticast mode [ 137.430666][ T6236] bridge_slave_1: entered promiscuous mode [ 137.482462][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.500055][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 137.523361][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.533150][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.570871][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 137.658938][ T5892] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 137.686764][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.725405][ T5892] usb 3-1: Product: syz [ 137.745656][ T5892] usb 3-1: Manufacturer: syz [ 137.772005][ T5892] usb 3-1: SerialNumber: syz [ 137.781695][ T6236] team0: Port device team_slave_0 added [ 137.794815][ T5892] usb 3-1: config 0 descriptor?? [ 137.819561][ T6236] team0: Port device team_slave_1 added [ 137.953045][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.970722][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.063793][ T5892] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 138.097817][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.190003][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.225547][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.251523][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.306095][ T5892] usb 3-1: USB disconnect, device number 2 [ 138.533694][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.813042][ T5147] Bluetooth: hci5: command tx timeout [ 139.071668][ T6236] hsr_slave_0: entered promiscuous mode [ 139.517053][ T6236] hsr_slave_1: entered promiscuous mode [ 139.587034][ T6236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.594820][ T6236] Cannot create hsr debugfs directory [ 141.104306][ T5147] Bluetooth: hci5: command tx timeout [ 143.206732][ T5853] Bluetooth: hci5: command tx timeout [ 143.273602][ T6236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.309316][ T6236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.319627][ T6236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.387504][ T6236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.692967][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 143.708460][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 144.785302][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.256841][ T5853] Bluetooth: hci5: command tx timeout [ 145.329262][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.417057][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.424302][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.451455][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.463029][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.476441][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.574958][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.591329][ T5147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.599183][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.701623][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.708813][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.793743][ T6308] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.104'. [ 146.845936][ T6308] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.104'. [ 146.909682][ T6308] netlink: 69 bytes leftover after parsing attributes in process `syz.0.104'. [ 147.657335][ T5147] Bluetooth: hci4: command tx timeout [ 147.980274][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.195813][ T6299] chnl_net:caif_netlink_parms(): no params data found [ 148.246898][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.427043][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 148.606806][ T5892] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 148.643664][ T5892] usb 4-1: config 0 has no interface number 0 [ 148.875902][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.916919][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.924219][ T6299] bridge_slave_0: entered allmulticast mode [ 148.956851][ T5892] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 148.996300][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.042730][ T6299] bridge_slave_0: entered promiscuous mode [ 149.056400][ T5892] usb 4-1: Product: syz [ 149.098801][ T5892] usb 4-1: Manufacturer: syz [ 149.121400][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.156728][ T5892] usb 4-1: SerialNumber: syz [ 149.198727][ T5892] usb 4-1: config 0 descriptor?? [ 149.221181][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.276909][ T6299] bridge_slave_1: entered allmulticast mode [ 149.298428][ T5892] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 149.487799][ T6299] bridge_slave_1: entered promiscuous mode [ 150.455866][ T5892] pctv452e: pctv452e_power_ctrl: 1 [ 150.455866][ T5892] [ 150.477416][ T5892] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 150.477416][ T5892] [ 150.494455][ T5147] Bluetooth: hci4: command tx timeout [ 151.477012][ T5892] dvb-usb: bulk message failed: -22 (5/0) [ 154.497696][ T6183] sched: DL replenish lagged too much [ 154.909474][ T5147] Bluetooth: hci4: command tx timeout [ 155.004722][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.072326][ T5892] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 155.251512][ T5892] usb 4-1: media controller created [ 155.314201][ T5892] dvb-usb: bulk message failed: -22 (8/0) [ 155.357438][ T5892] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 155.365958][ T5892] dvb-usb: MAC address reading failed. [ 155.401440][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.484367][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.554603][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.801138][ T6299] team0: Port device team_slave_0 added [ 155.851543][ T5892] DVB: Unable to find symbol stb0899_attach() [ 155.889912][ T6299] team0: Port device team_slave_1 added [ 156.070915][ T5892] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 156.944661][ T5147] Bluetooth: hci4: command tx timeout [ 157.006668][ T5892] rc_core: IR keymap rc-tt-1500 not found [ 157.012464][ T5892] Registered IR keymap rc-empty [ 157.197019][ T5892] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 157.208770][ T5892] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 157.254749][ T5892] dvb-usb: schedule remote query interval to 100 msecs. [ 158.200845][ T5892] pctv452e: pctv452e_power_ctrl: 0 [ 158.200845][ T5892] [ 158.216905][ T5892] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 158.251937][ T5892] usb 4-1: USB disconnect, device number 2 [ 158.388048][ T5892] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 158.413024][ T3004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.474786][ T6236] veth0_vlan: entered promiscuous mode [ 158.494517][ T6236] veth1_vlan: entered promiscuous mode [ 159.278031][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.285055][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.311342][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.397246][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.971532][ T3004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.215098][ T6361] futex_wake_op: syz.2.115 tries to shift op by -1; fix this program [ 160.522371][ T6236] veth0_macvtap: entered promiscuous mode [ 160.602186][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.609952][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.636402][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.823657][ T3004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.971472][ T6299] hsr_slave_0: entered promiscuous mode [ 161.292500][ T6299] hsr_slave_1: entered promiscuous mode [ 161.345616][ T6299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.394571][ T6299] Cannot create hsr debugfs directory [ 161.415387][ T6236] veth1_macvtap: entered promiscuous mode [ 161.446862][ T6369] tipc: Started in network mode [ 161.452088][ T6369] tipc: Node identity deaaf944d1fd, cluster identity 4711 [ 161.558628][ T6369] tipc: Enabled bearer , priority 0 [ 162.051905][ T3004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.155397][ T6368] tipc: Disabling bearer [ 162.358278][ T6386] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 162.695999][ T6383] ALSA: mixer_oss: invalid OSS volume '' [ 163.038986][ T6394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.745659][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.776131][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.826866][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.926734][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.110028][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.120664][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.130695][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.141387][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.151281][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.162943][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.215152][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.783191][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.794064][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.825149][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.867541][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.916722][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.964970][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.002228][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.047592][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.072304][ T6417] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 167.176883][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.188541][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.213414][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.264979][ T6404] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 167.275763][ T6404] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 167.280445][ T6236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.342828][ T6236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.371876][ T6236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.434386][ T6236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.737479][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 167.749026][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 168.545958][ T5837] syz-executor (5837) used greatest stack depth: 18896 bytes left [ 168.657183][ T3004] bridge_slave_1: left allmulticast mode [ 168.663014][ T3004] bridge_slave_1: left promiscuous mode [ 168.670205][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.783351][ T3004] bridge_slave_0: left allmulticast mode [ 168.789540][ T3004] bridge_slave_0: left promiscuous mode [ 168.795316][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.844040][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.199164][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.232251][ T3004] bond0 (unregistering): Released all slaves [ 172.286797][ T6451] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 172.448742][ T6299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.537633][ T6299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.583122][ T6299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.017786][ T6299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.443272][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.507950][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.709355][ T3004] hsr_slave_0: left promiscuous mode [ 173.745712][ T3004] hsr_slave_1: left promiscuous mode [ 173.808258][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.815880][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.837622][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.845134][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.889150][ T3004] veth1_macvtap: left promiscuous mode [ 173.895217][ T3004] veth0_macvtap: left promiscuous mode [ 173.901024][ T3004] veth1_vlan: left promiscuous mode [ 173.906827][ T3004] veth0_vlan: left promiscuous mode [ 175.797328][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 175.924721][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 175.994771][ T6497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.475212][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.552378][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.770151][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.860331][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.278909][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.286113][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.411262][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.418478][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.498497][ T6299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.788120][ T6554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.075834][ T6436] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.367796][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.841920][ T6436] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.067655][ T6436] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.058271][ T6597] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.169'. [ 187.492559][ T6597] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.169'. [ 187.505000][ T6597] netlink: 69 bytes leftover after parsing attributes in process `syz.0.169'. [ 187.850555][ T6436] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.520862][ T6299] veth0_vlan: entered promiscuous mode [ 188.555192][ T6299] veth1_vlan: entered promiscuous mode [ 188.723209][ T6299] veth0_macvtap: entered promiscuous mode [ 188.740176][ T6299] veth1_macvtap: entered promiscuous mode [ 190.690827][ T6436] bridge_slave_1: left allmulticast mode [ 190.690902][ T6436] bridge_slave_1: left promiscuous mode [ 190.691067][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.937529][ T6631] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 191.961094][ T6436] bridge_slave_0: left allmulticast mode [ 191.961149][ T6436] bridge_slave_0: left promiscuous mode [ 191.961609][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.134076][ T6630] tty tty20: ldisc open failed (-12), clearing slot 19 [ 194.622747][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.646906][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.784728][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.812003][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.857079][ T6436] bond0 (unregistering): Released all slaves [ 197.740719][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.053616][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.094223][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.119820][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.160376][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.194951][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.224096][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.272793][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.313445][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.370719][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.405618][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.193127][ T6691] ALSA: mixer_oss: invalid OSS volume '' [ 202.229247][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.291494][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.314828][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.389171][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.408022][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.418932][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.429294][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.440178][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.451545][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.462466][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.516730][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.607492][ T6299] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.616270][ T6299] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.666287][ T6299] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.685849][ T6299] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.253773][ T6718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.832876][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.842974][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.881121][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.891036][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.902578][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.912397][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.726639][ T6436] hsr_slave_0: left promiscuous mode [ 206.754895][ T6436] hsr_slave_1: left promiscuous mode [ 206.803501][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.851997][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.867053][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.876074][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.913361][ T6436] veth1_macvtap: left promiscuous mode [ 206.919249][ T6436] veth0_macvtap: left promiscuous mode [ 206.924924][ T6436] veth1_vlan: left promiscuous mode [ 206.931102][ T6436] veth0_vlan: left promiscuous mode [ 207.896855][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 207.897651][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 207.909989][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 208.634359][ T5848] Bluetooth: hci1: command tx timeout [ 210.766946][ T5848] Bluetooth: hci1: command tx timeout [ 211.386132][ T6759] ALSA: mixer_oss: invalid OSS volume '' [ 211.948329][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 212.414122][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 212.794993][ T5848] Bluetooth: hci1: command tx timeout [ 212.895286][ T6770] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.206'. [ 212.933814][ T6770] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.206'. [ 212.986493][ T6770] netlink: 69 bytes leftover after parsing attributes in process `syz.0.206'. [ 214.917424][ T5848] Bluetooth: hci1: command tx timeout [ 215.751228][ T6730] chnl_net:caif_netlink_parms(): no params data found [ 216.944601][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.213'. [ 216.959401][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.213'. [ 217.904083][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.938673][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.948300][ T6730] bridge_slave_0: entered allmulticast mode [ 217.957634][ T6730] bridge_slave_0: entered promiscuous mode [ 219.315949][ T6832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.389088][ T6436] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.439775][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.447186][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.454454][ T6730] bridge_slave_1: entered allmulticast mode [ 220.461674][ T6730] bridge_slave_1: entered promiscuous mode [ 220.758575][ T6436] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.660094][ T6436] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.830001][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.128629][ T6436] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.489050][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.218230][ T6730] team0: Port device team_slave_0 added [ 224.235262][ T6730] team0: Port device team_slave_1 added [ 225.028945][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.035965][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.286844][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.702798][ T6879] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 225.742066][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.750593][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.843141][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.560388][ T6900] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.229'. [ 227.569941][ T6900] netlink: 4580 bytes leftover after parsing attributes in process `syz.2.229'. [ 227.799434][ T6900] netlink: 69 bytes leftover after parsing attributes in process `syz.2.229'. [ 228.757381][ T6730] hsr_slave_0: entered promiscuous mode [ 228.903639][ T6730] hsr_slave_1: entered promiscuous mode [ 228.924718][ T6436] bridge_slave_1: left allmulticast mode [ 228.930866][ T6436] bridge_slave_1: left promiscuous mode [ 229.030879][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.206173][ T6436] bridge_slave_0: left allmulticast mode [ 229.230255][ T6436] bridge_slave_0: left promiscuous mode [ 229.460111][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.062876][ T6927] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 234.903438][ T6950] netlink: 4580 bytes leftover after parsing attributes in process `syz.5.243'. [ 234.926801][ T6950] netlink: 4580 bytes leftover after parsing attributes in process `syz.5.243'. [ 234.954277][ T6950] netlink: 69 bytes leftover after parsing attributes in process `syz.5.243'. [ 235.183583][ T6952] futex_wake_op: syz.2.242 tries to shift op by -1; fix this program [ 235.519490][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.045906][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.146506][ T6436] bond0 (unregistering): Released all slaves [ 237.861129][ T6436] hsr_slave_0: left promiscuous mode [ 238.379561][ T6436] hsr_slave_1: left promiscuous mode [ 238.385813][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.404033][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.445440][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.483303][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.501026][ T6966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.617160][ T6972] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 238.656018][ T6436] veth1_macvtap: left promiscuous mode [ 238.661821][ T6436] veth0_macvtap: left promiscuous mode [ 238.668048][ T6436] veth1_vlan: left promiscuous mode [ 238.673382][ T6436] veth0_vlan: left promiscuous mode [ 240.701192][ T977] IPVS: starting estimator thread 0... [ 240.885266][ T6987] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.253'. [ 240.899959][ T6988] IPVS: using max 18 ests per chain, 43200 per kthread [ 240.989465][ T6987] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.253'. [ 241.100552][ T6987] netlink: 69 bytes leftover after parsing attributes in process `syz.3.253'. [ 245.830785][ T7020] 9pnet_fd: Insufficient options for proto=fd [ 248.271583][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 248.723914][ T35] Bluetooth: hci4: Frame reassembly failed (-84) [ 249.188185][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 249.620663][ T7048] Bluetooth: hci6: Frame reassembly failed (-84) [ 250.778727][ T5853] Bluetooth: hci4: command 0xfc11 tx timeout [ 250.784233][ T5848] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 251.212997][ T7058] syz.5.271: attempt to access beyond end of device [ 251.212997][ T7058] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 251.226225][ T7058] efs: cannot read volume header [ 251.736993][ T5147] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 256.710902][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.717877][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.856843][ T7099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 262.787102][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.294223][ T7157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.293'. [ 263.336770][ T5848] Bluetooth: hci1: command 0x0405 tx timeout [ 265.647738][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.665173][ T5853] Bluetooth: hci1: command 0x0405 tx timeout [ 265.724723][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.738938][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.747908][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.759415][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 265.767117][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.482301][ T7218] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 267.514298][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 267.762220][ T7207] ALSA: mixer_oss: invalid OSS volume '' [ 267.912753][ T5853] Bluetooth: hci4: command tx timeout [ 268.456726][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 268.751132][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.806154][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.834144][ T7174] bridge_slave_0: entered allmulticast mode [ 268.842385][ T7174] bridge_slave_0: entered promiscuous mode [ 269.664119][ T1309] bridge_slave_1: left allmulticast mode [ 269.682367][ T1309] bridge_slave_1: left promiscuous mode [ 269.705474][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.271298][ T5147] Bluetooth: hci4: command tx timeout [ 270.328191][ T1309] bridge_slave_0: left allmulticast mode [ 270.333913][ T1309] bridge_slave_0: left promiscuous mode [ 270.411370][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.536742][ T5147] Bluetooth: hci4: command tx timeout [ 272.909041][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.220549][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.180036][ T1309] bond0 (unregistering): Released all slaves [ 274.452277][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.466754][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.474027][ T7174] bridge_slave_1: entered allmulticast mode [ 274.521981][ T7174] bridge_slave_1: entered promiscuous mode [ 274.617692][ T7267] ALSA: mixer_oss: invalid OSS volume '' [ 274.686730][ T5147] Bluetooth: hci4: command tx timeout [ 275.093496][ T1309] hsr_slave_0: left promiscuous mode [ 276.851021][ T1309] hsr_slave_1: left promiscuous mode [ 276.930175][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.957100][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.349438][ T7312] 9pnet_fd: Insufficient options for proto=fd [ 279.864767][ T7317] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 281.409127][ T7327] ALSA: mixer_oss: invalid OSS volume '' [ 281.872505][ T1309] team0 (unregistering): Port device team_slave_1 removed [ 281.976452][ T1309] team0 (unregistering): Port device team_slave_0 removed [ 283.200418][ T7345] tmpfs: Unknown parameter 'oc' [ 283.221900][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.326218][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.688667][ T7363] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 285.440197][ T7174] team0: Port device team_slave_0 added [ 285.458479][ T7174] team0: Port device team_slave_1 added [ 285.680726][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.706740][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.732749][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.466583][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.481464][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.488738][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.680460][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.533536][ T7403] 9pnet_fd: Insufficient options for proto=fd [ 290.538728][ T7174] hsr_slave_0: entered promiscuous mode [ 290.770462][ T7174] hsr_slave_1: entered promiscuous mode [ 292.511093][ T7409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'. [ 292.817817][ T7418] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 295.441603][ T7435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.374765][ T7439] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 296.898947][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.352'. [ 298.376880][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.356'. [ 298.514010][ T7468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.356'. [ 299.811358][ T7174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.023980][ T7174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.047156][ T7174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.135487][ T7491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.897031][ T7174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 301.171929][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.224428][ T7497] netlink: 71 bytes leftover after parsing attributes in process `syz.3.362'. [ 301.266406][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.303331][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.310516][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.397353][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.404501][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.467284][ T3577] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 301.737691][ T6821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 301.746750][ T7508] futex_wake_op: syz.0.365 tries to shift op by -1; fix this program [ 302.516641][ T3577] usb 6-1: Using ep0 maxpacket: 8 [ 302.528251][ T3577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 302.540858][ T3577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.721387][ T3577] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.731224][ T3577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 302.742633][ T3577] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 302.752951][ T3577] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 302.762264][ T3577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.775584][ T3577] usb 6-1: config 0 descriptor?? [ 302.781962][ T7499] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 302.789311][ T6821] usb 4-1: Using ep0 maxpacket: 32 [ 302.803888][ T6821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.813346][ T6821] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 302.849898][ T6821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.861816][ T6821] usb 4-1: Product: syz [ 302.866581][ T6821] usb 4-1: Manufacturer: syz [ 302.871286][ T6821] usb 4-1: SerialNumber: syz [ 302.882880][ T6821] usb 4-1: config 0 descriptor?? [ 304.137427][ T6821] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 304.144777][ T6821] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 304.323574][ T8] usb 6-1: USB disconnect, device number 2 [ 304.324785][ T5147] Bluetooth: hci1: Opcode 0x0c03 failed: -19 [ 304.555039][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.582906][ T5892] usb 4-1: USB disconnect, device number 3 [ 306.726793][ T7174] veth0_vlan: entered promiscuous mode [ 306.748454][ T7174] veth1_vlan: entered promiscuous mode [ 306.772996][ T7174] veth0_macvtap: entered promiscuous mode [ 306.782379][ T7174] veth1_macvtap: entered promiscuous mode [ 306.800424][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.811103][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.820998][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.831521][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.841556][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.852083][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.862059][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.872650][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.883880][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.893989][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.905237][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.915928][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.926883][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.937780][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.957456][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.967518][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.976432][ T7559] syz.3.374: attempt to access beyond end of device [ 306.976432][ T7559] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 306.988316][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.004110][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.080659][ T7563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.363786][ T7174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.483064][ T7174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.636374][ T7559] efs: cannot read volume header [ 307.643567][ T7174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.797006][ T7174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.536194][ T7574] futex_wake_op: syz.5.376 tries to shift op by -1; fix this program [ 309.059983][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.069728][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.077476][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.085339][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.503093][ T7598] [U] vÔ3 [ 311.259536][ T7610] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 317.517051][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.523433][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.288825][ T7733] netlink: 24 bytes leftover after parsing attributes in process `syz.5.413'. [ 329.655646][ T7747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.407008][ T5890] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 337.425169][ T7817] syz.0.432: attempt to access beyond end of device [ 337.425169][ T7817] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 337.438154][ T7817] efs: cannot read volume header [ 337.596940][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 338.597387][ T5890] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 338.606717][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.619200][ T5890] usb 4-1: config 0 descriptor?? [ 338.640599][ T5890] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 339.885930][ T7839] NILFS (loop0): device size too small [ 340.696005][ T5890] gspca_nw80x: reg_r err -110 [ 340.701993][ T5890] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 341.889485][ T5891] usb 4-1: USB disconnect, device number 4 [ 345.406013][ T7880] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 345.420140][ T7865] ALSA: mixer_oss: invalid OSS volume '' [ 347.629290][ T7913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.342398][ T1333] Bluetooth: hci1: Frame reassembly failed (-84) [ 351.337725][ T5147] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 351.858736][ T7943] ALSA: mixer_oss: invalid OSS volume '' [ 351.985229][ T7952] syz.5.462: attempt to access beyond end of device [ 351.985229][ T7952] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 351.998426][ T7952] efs: cannot read volume header [ 353.151607][ T7962] netlink: 72 bytes leftover after parsing attributes in process `syz.3.463'. [ 359.015502][ T8000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.468361][ T8015] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 360.479342][ T8010] ALSA: mixer_oss: invalid OSS volume '' [ 361.755489][ T8028] syz.0.478: attempt to access beyond end of device [ 361.755489][ T8028] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 361.768490][ T8028] efs: cannot read volume header [ 363.240466][ T5147] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 366.343810][ T8058] No control pipe specified [ 367.209432][ T8061] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 373.761678][ T8117] No control pipe specified [ 375.628294][ T8124] futex_wake_op: syz.6.498 tries to shift op by -1; fix this program [ 378.997131][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.003503][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.544091][ T8187] No control pipe specified [ 383.651676][ T8177] 9pnet_fd: Insufficient options for proto=fd [ 384.740891][ T8201] futex_wake_op: syz.6.516 tries to shift op by -1; fix this program [ 391.937216][ T8269] No control pipe specified [ 393.909425][ T8296] futex_wake_op: syz.5.534 tries to shift op by -1; fix this program [ 403.670768][ T8370] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 404.831410][ T8388] NILFS (loop6): device size too small [ 411.576287][ T8437] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 414.570125][ T8476] mmap: syz.2.575 (8476) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 416.167511][ T8484] trusted_key: encrypted_key: insufficient parameters specified [ 420.431798][ T8488] 9pnet_fd: Insufficient options for proto=fd [ 420.963291][ T8516] futex_wake_op: syz.3.581 tries to shift op by -1; fix this program [ 421.077615][ T8517] syz.5.582: attempt to access beyond end of device [ 421.077615][ T8517] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 421.092303][ T8517] efs: cannot read volume header [ 421.106414][ T8509] @ÿ: renamed from vlan0 (while UP) [ 422.382705][ T8520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.584'. [ 422.406789][ T8520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.584'. [ 428.245695][ T8569] syz.5.595: attempt to access beyond end of device [ 428.245695][ T8569] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 428.261741][ T8569] efs: cannot read volume header [ 429.287250][ T8582] 9pnet_fd: Insufficient options for proto=fd [ 429.995925][ T8589] netlink: 40 bytes leftover after parsing attributes in process `syz.6.600'. [ 429.996453][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.028045][ T8589] netlink: 40 bytes leftover after parsing attributes in process `syz.6.600'. [ 430.443411][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.494295][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.505796][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.513683][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 430.521641][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.478938][ T8597] futex_wake_op: syz.5.599 tries to shift op by -1; fix this program [ 431.916284][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 432.856815][ T5853] Bluetooth: hci1: command tx timeout [ 433.063535][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.140109][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.251452][ T8584] bridge_slave_0: entered allmulticast mode [ 434.295760][ T8584] bridge_slave_0: entered promiscuous mode [ 434.345546][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.363375][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.379512][ T8584] bridge_slave_1: entered allmulticast mode [ 434.396955][ T8584] bridge_slave_1: entered promiscuous mode [ 434.693014][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.706296][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.868637][ T8584] team0: Port device team_slave_0 added [ 434.947118][ T5147] Bluetooth: hci1: command tx timeout [ 435.011763][ T8584] team0: Port device team_slave_1 added [ 435.067268][ T8637] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 435.214148][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.233288][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.323410][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.372342][ T8630] ALSA: mixer_oss: invalid OSS volume '' [ 435.379583][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.412496][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.525087][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.151919][ T8584] hsr_slave_0: entered promiscuous mode [ 436.205320][ T8584] hsr_slave_1: entered promiscuous mode [ 436.459066][ T8584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.748326][ T8584] Cannot create hsr debugfs directory [ 437.026691][ T5147] Bluetooth: hci1: command tx timeout [ 437.051935][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.6.611'. [ 437.404917][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.6.611'. [ 437.895651][ T8664] 9pnet_fd: Insufficient options for proto=fd [ 439.128072][ T5147] Bluetooth: hci1: command tx timeout [ 439.411847][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.684277][ T8689] futex_wake_op: syz.6.617 tries to shift op by -1; fix this program [ 439.713842][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.746962][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 439.775856][ T8584] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 439.830765][ T8584] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 439.912681][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.926931][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 439.998576][ T8584] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.040834][ T8] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 440.064606][ T8584] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.086311][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.115309][ T8] usb 4-1: Product: syz [ 440.144218][ T8] usb 4-1: Manufacturer: syz [ 440.173900][ T8] usb 4-1: SerialNumber: syz [ 440.200860][ T8] usb 4-1: config 0 descriptor?? [ 440.234914][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.397806][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.404986][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.609034][ T8] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 440.621267][ T52] usb 4-1: Failed to submit usb control message: -71 [ 440.642731][ T8] usb 4-1: USB disconnect, device number 5 [ 440.681742][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.693119][ T52] usb 4-1: unable to send the bmi data to the device: -71 [ 440.710114][ T52] usb 4-1: unable to get target info from device [ 440.723986][ T52] usb 4-1: could not get target info (-71) [ 440.747533][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.754645][ T52] usb 4-1: could not probe fw (-71) [ 440.814612][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.822314][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.873056][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.873833][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.096104][ T8584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.164969][ T35] bridge_slave_1: left allmulticast mode [ 441.165003][ T35] bridge_slave_1: left promiscuous mode [ 441.165183][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.174476][ T35] bridge_slave_0: left allmulticast mode [ 441.174507][ T35] bridge_slave_0: left promiscuous mode [ 441.174671][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.460143][ T8711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.527459][ T8728] NILFS (loop3): device size too small [ 444.100735][ T8736] 9pnet_fd: Insufficient options for proto=fd [ 445.833957][ T8767] futex_wake_op: syz.2.628 tries to shift op by -1; fix this program [ 445.867676][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.917123][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.968828][ T35] bond0 (unregistering): Released all slaves [ 446.046042][ T8762] ALSA: mixer_oss: invalid OSS volume '' [ 446.156744][ T35] tipc: Left network mode [ 446.265970][ T35] IPVS: stopping master sync thread 7880 ... [ 446.420951][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.844620][ T8781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.518618][ T35] hsr_slave_0: left promiscuous mode [ 447.536688][ T35] hsr_slave_1: left promiscuous mode [ 447.551422][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.560513][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.630949][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.640429][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.645291][ T8788] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 447.753838][ T35] veth1_macvtap: left promiscuous mode [ 447.759675][ T35] veth0_macvtap: left promiscuous mode [ 447.765539][ T35] veth1_vlan: left promiscuous mode [ 447.771619][ T35] veth0_vlan: left promiscuous mode [ 451.589952][ T8834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.100737][ T35] team0 (unregistering): Port device team_slave_1 removed [ 453.105629][ T8836] ALSA: mixer_oss: invalid OSS volume '' [ 453.479617][ T35] team0 (unregistering): Port device team_slave_0 removed [ 456.491245][ T8869] futex_wake_op: syz.5.650 tries to shift op by -1; fix this program [ 457.382805][ T8584] veth0_vlan: entered promiscuous mode [ 457.660092][ T8584] veth1_vlan: entered promiscuous mode [ 458.462769][ T8584] veth0_macvtap: entered promiscuous mode [ 458.590548][ T8584] veth1_macvtap: entered promiscuous mode [ 458.673256][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.696624][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.706712][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.718241][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.728237][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.738840][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.748963][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.760028][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.772329][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.843529][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.854673][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.865370][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.876823][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.887011][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.897702][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.907703][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.918316][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.929472][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.940903][ T8584] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.949765][ T8584] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.958549][ T8584] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.967985][ T8584] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.845040][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.054636][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.211246][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.259948][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.137273][ T8941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.957926][ T8975] NILFS (loop2): device size too small [ 468.684914][ T8986] netlink: 36 bytes leftover after parsing attributes in process `syz.7.673'. [ 468.792187][ T8994] futex_wake_op: syz.5.675 tries to shift op by -1; fix this program [ 469.654760][ T8986] netlink: 36 bytes leftover after parsing attributes in process `syz.7.673'. [ 471.346693][ T5892] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 472.411005][ T9027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.936534][ T5892] usb 8-1: Using ep0 maxpacket: 8 [ 473.984081][ T9042] netlink: 96 bytes leftover after parsing attributes in process `syz.2.684'. [ 474.848325][ T9047] NILFS (loop3): device size too small [ 476.339073][ T5892] usb 8-1: unable to get BOS descriptor or descriptor too short [ 476.349330][ T5892] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 476.357497][ T5892] usb 8-1: can't read configurations, error -71 [ 477.451208][ T9073] netlink: 36 bytes leftover after parsing attributes in process `syz.5.691'. [ 477.513072][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.5.691'. [ 477.825818][ T9079] futex_wake_op: syz.2.690 tries to shift op by -1; fix this program [ 478.616762][ T9069] ALSA: mixer_oss: invalid OSS volume '' [ 479.320445][ T9091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.835827][ T9101] NILFS (loop6): device size too small [ 481.746297][ T5853] block nbd7: Receive control failed (result -32) [ 481.926614][ T9118] block nbd7: shutting down sockets [ 483.130982][ T9143] futex_wake_op: syz.7.704 tries to shift op by -1; fix this program [ 485.087423][ T9147] ALSA: mixer_oss: invalid OSS volume '' [ 490.256132][ T9211] futex_wake_op: syz.3.719 tries to shift op by -1; fix this program [ 491.880938][ T9213] ALSA: mixer_oss: invalid OSS volume '' [ 492.753269][ T9229] NILFS (loop3): device size too small [ 494.143577][ T9243] efs: device does not support 512 byte blocks [ 494.150800][ T9243] device does not support 512 byte blocks [ 494.150800][ T9243] [ 497.849268][ T9267] futex_wake_op: syz.5.732 tries to shift op by -1; fix this program [ 498.171376][ T9277] syz.6.734: attempt to access beyond end of device [ 498.171376][ T9277] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 498.876674][ T9277] efs: cannot read volume header [ 499.510534][ T9279] ALSA: mixer_oss: invalid OSS volume '' [ 500.731548][ T9306] syz.5.740: attempt to access beyond end of device [ 500.731548][ T9306] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 500.731786][ T9306] efs: cannot read volume header [ 502.446953][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.447054][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.310886][ T9328] futex_wake_op: syz.5.745 tries to shift op by -1; fix this program [ 504.435925][ T9332] ALSA: mixer_oss: invalid OSS volume '' [ 505.781113][ T9358] efs: device does not support 512 byte blocks [ 505.787556][ T9358] device does not support 512 byte blocks [ 505.787556][ T9358] [ 507.898809][ T9377] ALSA: mixer_oss: invalid OSS volume '' [ 508.196999][ T9389] futex_wake_op: syz.7.758 tries to shift op by -1; fix this program [ 510.329398][ T9419] syz.5.766: attempt to access beyond end of device [ 510.329398][ T9419] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 510.342692][ T9419] efs: cannot read volume header [ 516.288318][ T9471] tty tty4: ldisc open failed (-12), clearing slot 3 [ 516.566527][ T9489] futex_wake_op: syz.3.779 tries to shift op by -1; fix this program [ 518.749673][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.782'. [ 518.827726][ T9501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.782'. [ 520.301796][ T9500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.586002][ T9535] bridge0: port 3(syz_tun) entered blocking state [ 522.592864][ T9535] bridge0: port 3(syz_tun) entered disabled state [ 522.599836][ T9535] syz_tun: entered allmulticast mode [ 522.608361][ T9535] syz_tun: entered promiscuous mode [ 522.614556][ T9535] bridge0: port 3(syz_tun) entered blocking state [ 522.622556][ T9535] bridge0: port 3(syz_tun) entered forwarding state [ 525.414321][ T9566] Bluetooth: hci2: Frame reassembly failed (-84) [ 525.604224][ T9568] futex_wake_op: syz.5.798 tries to shift op by -1; fix this program [ 527.537189][ T5853] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 530.649123][ T9620] futex_wake_op: syz.7.810 tries to shift op by -1; fix this program [ 531.979104][ T9633] Bluetooth: hci2: Frame reassembly failed (-84) [ 532.049506][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 533.453045][ T9641] ALSA: mixer_oss: invalid OSS volume '' [ 533.581542][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 533.598744][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 533.613638][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 533.626199][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 533.646318][ T5848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 533.655693][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.056605][ T5853] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 535.080984][ T9645] chnl_net:caif_netlink_parms(): no params data found [ 535.647765][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.683773][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.719749][ T9645] bridge_slave_0: entered allmulticast mode [ 535.738716][ T5848] Bluetooth: hci6: command tx timeout [ 535.751701][ T9645] bridge_slave_0: entered promiscuous mode [ 535.972832][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.992147][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.999660][ T9645] bridge_slave_1: entered allmulticast mode [ 536.007404][ T9645] bridge_slave_1: entered promiscuous mode [ 537.614963][ T9645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.723193][ T9645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.512437][ T5848] Bluetooth: hci6: command tx timeout [ 538.588638][ T9697] ALSA: mixer_oss: invalid OSS volume '' [ 539.084234][ T9710] Bluetooth: hci2: Frame reassembly failed (-84) [ 539.119534][ T1333] Bluetooth: hci2: Frame reassembly failed (-84) [ 539.215634][ T9645] team0: Port device team_slave_0 added [ 539.629065][ T9718] futex_wake_op: syz.3.828 tries to shift op by -1; fix this program [ 539.693814][ T9645] team0: Port device team_slave_1 added [ 540.616316][ T5853] Bluetooth: hci6: command tx timeout [ 541.224570][ T5848] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 541.554869][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.013612][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.326812][ T9737] syz.3.830 uses obsolete (PF_INET,SOCK_PACKET) [ 542.366590][ T9645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.471056][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.557068][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.188929][ T5853] Bluetooth: hci6: command tx timeout [ 543.231080][ T9645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.732884][ T9752] 9pnet_fd: Insufficient options for proto=fd [ 546.905033][ T9765] ALSA: mixer_oss: invalid OSS volume '' [ 547.113701][ T9645] hsr_slave_0: entered promiscuous mode [ 548.129664][ T9771] futex_wake_op: syz.3.839 tries to shift op by -1; fix this program [ 548.357033][ T9645] hsr_slave_1: entered promiscuous mode [ 548.382040][ T9645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.407755][ T9645] Cannot create hsr debugfs directory [ 549.859503][ T9623] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 550.107792][ T9794] overlayfs: failed to clone upperpath [ 550.157365][ T9623] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 550.220253][ T9623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.381434][ T9623] usb 6-1: Product: syz [ 550.439212][ T9623] usb 6-1: Manufacturer: syz [ 550.471895][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 550.584216][ T9623] usb 6-1: SerialNumber: syz [ 550.888725][ T9623] r8152-cfgselector 6-1: Unknown version 0x0000 [ 550.895244][ T9623] r8152-cfgselector 6-1: config 0 descriptor?? [ 550.960364][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.140850][ T9806] 9pnet_fd: Insufficient options for proto=fd [ 552.161384][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.312819][ T9623] r8152-cfgselector 6-1: Unknown version 0x0000 [ 552.321875][ T9623] r8152-cfgselector 6-1: bad CDC descriptors [ 552.497993][ T9623] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 553.197549][ T9645] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 553.521004][ T9827] futex_wake_op: syz.3.851 tries to shift op by -1; fix this program [ 554.229472][ T9645] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 556.974629][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.100135][ T9645] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 557.175548][ T9645] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 558.266929][ T9858] netlink: 32 bytes leftover after parsing attributes in process `syz.7.858'. [ 559.339391][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.509873][ T9879] futex_wake_op: syz.5.861 tries to shift op by -1; fix this program [ 561.235949][ T67] bridge_slave_1: left allmulticast mode [ 561.242551][ T67] bridge_slave_1: left promiscuous mode [ 561.249379][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.266094][ T67] bridge_slave_0: left allmulticast mode [ 561.271944][ T67] bridge_slave_0: left promiscuous mode [ 561.398481][ T9885] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 561.441494][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.519567][ T9885] CIFS mount error: No usable UNC path provided in device string! [ 561.519567][ T9885] [ 561.530981][ T9885] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 563.274928][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.281519][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.995717][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.017978][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.032960][ T67] bond0 (unregistering): Released all slaves [ 565.093531][ T9645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.226751][ T9645] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.272044][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.279271][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.297925][ T67] IPVS: stopping master sync thread 6386 ... [ 565.365743][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.373062][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.717285][ T9940] NILFS (loop5): device size too small [ 566.409281][ T9949] efs: device does not support 512 byte blocks [ 566.477088][ T9949] device does not support 512 byte blocks [ 566.477088][ T9949] [ 566.777330][ T9954] futex_wake_op: syz.3.873 tries to shift op by -1; fix this program [ 569.339372][ T67] hsr_slave_0: left promiscuous mode [ 569.364078][ T67] hsr_slave_1: left promiscuous mode [ 569.692556][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.701848][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.725246][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.732962][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.776123][ T67] veth1_macvtap: left promiscuous mode [ 569.799866][ T67] veth0_macvtap: left promiscuous mode [ 569.815304][ T67] veth1_vlan: left promiscuous mode [ 569.821176][ T67] veth0_vlan: left promiscuous mode [ 573.121299][T10002] 9pnet_fd: Insufficient options for proto=fd [ 573.415955][ T67] team0 (unregistering): Port device team_slave_1 removed [ 573.979039][ T67] team0 (unregistering): Port device team_slave_0 removed [ 576.150978][T10024] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 576.278824][ T9645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.947114][T10048] 9pnet_fd: Insufficient options for proto=fd [ 579.222226][ T9645] veth0_vlan: entered promiscuous mode [ 579.491707][ T67] IPVS: stop unused estimator thread 0... [ 579.499378][ T9645] veth1_vlan: entered promiscuous mode [ 579.607045][ T9645] veth0_macvtap: entered promiscuous mode [ 579.640933][ T9645] veth1_macvtap: entered promiscuous mode [ 579.693926][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.746486][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.782765][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.826467][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.866529][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.907906][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.312976][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.360754][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.621875][ T9645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.879462][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.199694][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.210931][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.221910][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.234549][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.248971][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.260418][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.273011][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.291394][ T9645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.768207][ T9645] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.886492][ T9645] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.895329][ T9645] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.904713][ T9645] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.110654][T10094] NILFS (loop6): device size too small [ 583.212617][T10097] IPVS: stopping master sync thread 7218 ... [ 583.247624][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.263784][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.309683][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.309898][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.625243][T10171] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 592.655676][T10190] IPVS: stopping master sync thread 8015 ... [ 593.231616][T10194] NILFS (loop7): device size too small [ 594.662605][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.688356][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.707083][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.724793][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.776560][ T6236] bridge0: port 3(syz_tun) entered disabled state [ 594.785232][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 594.806822][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 594.898253][ T6236] syz_tun (unregistering): left allmulticast mode [ 594.941544][ T6236] syz_tun (unregistering): left promiscuous mode [ 595.016778][ T6236] bridge0: port 3(syz_tun) entered disabled state [ 596.160432][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.653763][ T29] audit: type=1326 audit(1736034828.521:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10213 comm="syz.6.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7fcb85d29 code=0x0 [ 597.114709][ T5853] Bluetooth: hci2: command tx timeout [ 597.158172][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.861252][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.919303][T10233] bridge0: port 3(syz_tun) entered blocking state [ 598.925901][T10233] bridge0: port 3(syz_tun) entered disabled state [ 598.932795][T10233] syz_tun: entered allmulticast mode [ 598.939581][T10233] syz_tun: entered promiscuous mode [ 598.946776][T10233] bridge0: port 3(syz_tun) entered blocking state [ 598.953311][T10233] bridge0: port 3(syz_tun) entered forwarding state [ 599.305869][ T5853] Bluetooth: hci2: command tx timeout [ 600.058053][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.738111][T10264] IPVS: stopping master sync thread 10024 ... [ 600.760789][T10199] chnl_net:caif_netlink_parms(): no params data found [ 601.377915][ T5853] Bluetooth: hci2: command tx timeout [ 603.417420][ T5853] Bluetooth: hci2: command tx timeout [ 603.481337][ T35] bridge_slave_1: left allmulticast mode [ 603.556539][ T35] bridge_slave_1: left promiscuous mode [ 603.562411][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.895690][ T35] bridge_slave_0: left allmulticast mode [ 603.911030][ T35] bridge_slave_0: left promiscuous mode [ 603.918689][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.328485][ T29] audit: type=1326 audit(1736034835.971:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.7.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f259ab85d29 code=0x0 [ 604.593664][T10291] NILFS (loop8): device size too small [ 605.020896][T10294] efs: device does not support 512 byte blocks [ 605.027364][T10294] device does not support 512 byte blocks [ 605.027364][T10294] [ 610.654352][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.690444][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.708796][ T35] bond0 (unregistering): Released all slaves [ 611.448590][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.464973][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.474769][T10199] bridge_slave_0: entered allmulticast mode [ 611.490102][T10199] bridge_slave_0: entered promiscuous mode [ 611.523271][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.558348][ T35] IPVS: stopping master sync thread 8637 ... [ 611.584727][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.606648][T10199] bridge_slave_1: entered allmulticast mode [ 611.621926][T10199] bridge_slave_1: entered promiscuous mode [ 611.657492][T10302] bridge0: port 3(syz_tun) entered blocking state [ 611.664067][T10302] bridge0: port 3(syz_tun) entered disabled state [ 611.672796][T10302] syz_tun: entered allmulticast mode [ 611.679401][T10302] syz_tun: entered promiscuous mode [ 611.685425][T10302] bridge0: port 3(syz_tun) entered blocking state [ 611.692060][T10302] bridge0: port 3(syz_tun) entered forwarding state [ 612.603756][T10199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.627602][T10199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.859725][T10199] team0: Port device team_slave_0 added [ 613.041500][T10348] NILFS (loop6): device size too small [ 613.427267][T10199] team0: Port device team_slave_1 added [ 613.853575][T10199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.868145][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.935009][T10199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.023699][ T35] hsr_slave_0: left promiscuous mode [ 614.034154][ T35] hsr_slave_1: left promiscuous mode [ 614.055734][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.489366][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.670618][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.697485][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.672023][ T35] veth1_macvtap: left promiscuous mode [ 616.705134][ T35] veth0_macvtap: left promiscuous mode [ 616.728966][ T35] veth1_vlan: left promiscuous mode [ 616.734410][ T35] veth0_vlan: left promiscuous mode [ 618.493747][ T35] team0 (unregistering): Port device team_slave_1 removed [ 618.580138][ T35] team0 (unregistering): Port device team_slave_0 removed [ 619.304479][T10199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.321743][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.383573][T10199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.415303][T10396] bridge0: port 3(syz_tun) entered blocking state [ 619.422836][T10396] bridge0: port 3(syz_tun) entered disabled state [ 619.429535][T10396] syz_tun: entered allmulticast mode [ 619.435744][T10396] syz_tun: entered promiscuous mode [ 619.441535][T10396] bridge0: port 3(syz_tun) entered blocking state [ 619.448138][T10396] bridge0: port 3(syz_tun) entered forwarding state [ 621.298766][T10199] hsr_slave_0: entered promiscuous mode [ 622.197605][T10199] hsr_slave_1: entered promiscuous mode [ 622.218212][T10199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.236753][T10199] Cannot create hsr debugfs directory [ 624.619239][T10199] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 624.727694][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.734212][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.020307][T10199] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 625.496746][T10199] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 625.566873][T10199] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 627.001289][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 629.374477][T10199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.392669][T10199] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.571158][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.578379][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.748423][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.755617][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.651209][T10199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.574781][T10199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.311113][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.321464][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.331183][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.340317][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.349292][ T5147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 635.356895][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.901174][T10199] veth0_vlan: entered promiscuous mode [ 636.652156][T10199] veth1_vlan: entered promiscuous mode [ 637.418111][ T5147] Bluetooth: hci3: command tx timeout [ 637.630435][T10199] veth0_macvtap: entered promiscuous mode [ 637.758737][T10199] veth1_macvtap: entered promiscuous mode [ 637.776732][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.787283][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.797298][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.807813][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.817743][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.828389][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.838480][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.849192][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.861570][T10199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.871486][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.882085][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.892046][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.902704][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.912635][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.923191][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.933097][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.943648][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.955673][T10199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.965774][T10199] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.974637][T10199] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.983540][T10199] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.992344][T10199] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.460695][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.469588][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.479351][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.489484][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.740783][T10538] chnl_net:caif_netlink_parms(): no params data found [ 639.508791][ T5147] Bluetooth: hci3: command tx timeout [ 639.889388][T10538] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.903148][T10538] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.951294][T10538] bridge_slave_0: entered allmulticast mode [ 639.991869][T10538] bridge_slave_0: entered promiscuous mode [ 640.044326][T10538] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.782766][T10538] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.851890][T10538] bridge_slave_1: entered allmulticast mode [ 640.890052][T10538] bridge_slave_1: entered promiscuous mode [ 641.586723][ T5147] Bluetooth: hci3: command tx timeout [ 642.624563][T10538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.709190][T10538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.894603][T10622] syz.9.1005: attempt to access beyond end of device [ 642.894603][T10622] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 642.907850][T10622] efs: cannot read volume header [ 643.414118][T10538] team0: Port device team_slave_0 added [ 643.465299][T10538] team0: Port device team_slave_1 added [ 643.758028][ T5147] Bluetooth: hci3: command tx timeout [ 644.605023][T10643] Bluetooth: hci5: Frame reassembly failed (-84) [ 644.682206][T10538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.710083][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.844796][T10538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.876812][T10538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.884111][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.938879][T10538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.371317][T10538] hsr_slave_0: entered promiscuous mode [ 645.416856][T10538] hsr_slave_1: entered promiscuous mode [ 645.427240][T10538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.455049][T10538] Cannot create hsr debugfs directory [ 646.986292][ T5147] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 653.656547][ T29] audit: type=1326 audit(1736034884.461:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10707 comm="syz.3.1021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3644385d29 code=0x0 [ 654.115986][T10720] Bluetooth: hci5: Frame reassembly failed (-84) [ 656.513918][T10538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 656.984277][T10538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 657.624336][T10538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 658.396927][T10538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 660.692735][T10538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.815133][T10538] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.869488][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.876696][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.056921][ T29] audit: type=1326 audit(1736034893.391:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.8.1032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f558e385d29 code=0x0 [ 663.114474][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.121992][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.055574][T10538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 664.066086][T10538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 666.808647][T10538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.686170][T10827] efs: device does not support 512 byte blocks [ 667.692599][T10827] device does not support 512 byte blocks [ 667.692599][T10827] [ 668.217790][ T5853] Bluetooth: hci6: command 0x0405 tx timeout [ 670.241128][ T29] audit: type=1326 audit(1736034902.141:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.3.1048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3644385d29 code=0x0 [ 671.387898][T10538] veth0_vlan: entered promiscuous mode [ 671.548580][T10538] veth1_vlan: entered promiscuous mode [ 672.324225][T10538] veth0_macvtap: entered promiscuous mode [ 672.400117][T10538] veth1_macvtap: entered promiscuous mode [ 672.507730][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.546022][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.578269][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.589499][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.599567][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.610467][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.620515][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.631237][ T9623] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 672.639164][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.656857][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.676804][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.698067][T10538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.734812][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.774036][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.825356][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.836445][ T9623] usb 10-1: Using ep0 maxpacket: 32 [ 672.861866][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.877434][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.888290][ T9623] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 672.900088][ T9623] usb 10-1: config 0 has no interface number 0 [ 672.910222][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.991931][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.005174][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.026193][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.102744][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.142155][T10538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.147594][ T9623] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 673.158747][ T9623] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.177328][ T9623] usb 10-1: Product: syz [ 673.183670][ T9623] usb 10-1: Manufacturer: syz [ 673.191874][ T9623] usb 10-1: SerialNumber: syz [ 673.682240][ T9623] usb 10-1: config 0 descriptor?? [ 673.853934][T10538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.894122][ T9623] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 673.905000][T10538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.914827][T10538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.923735][T10538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.831616][T10877] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 675.839856][T10877] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 675.850220][T10877] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 675.858204][T10877] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 675.890305][ T9623] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 675.953044][ T9623] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 675.982006][T10877] wlan1 speed is unknown, defaulting to 1000 [ 675.992324][T10877] wlan1 speed is unknown, defaulting to 1000 [ 676.001814][T10877] wlan1 speed is unknown, defaulting to 1000 [ 676.133804][T10877] infiniband syz0: set active [ 676.139030][T10877] infiniband syz0: added wlan1 [ 676.213110][T10877] RDS/IB: syz0: added [ 676.217964][T10877] smc: adding ib device syz0 with port count 1 [ 676.224340][T10877] smc: ib device syz0 port 1 has pnetid [ 676.254391][ T977] wlan1 speed is unknown, defaulting to 1000 [ 676.305969][T10877] wlan1 speed is unknown, defaulting to 1000 [ 676.314228][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 676.314636][ T25] usb 10-1: USB disconnect, device number 2 [ 676.332288][ T5891] wlan1 speed is unknown, defaulting to 1000 [ 676.344826][ T6997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.391829][ T6997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.658097][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 676.673340][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 676.684961][ T25] quatech2 10-1:0.51: device disconnected [ 676.737562][T10877] wlan1 speed is unknown, defaulting to 1000 [ 677.683711][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.747550][T10887] wlan1 speed is unknown, defaulting to 1000 [ 677.919248][T10877] wlan1 speed is unknown, defaulting to 1000 [ 678.056452][T10877] wlan1 speed is unknown, defaulting to 1000 [ 678.169778][T10877] wlan1 speed is unknown, defaulting to 1000 [ 678.245461][T10877] wlan1 speed is unknown, defaulting to 1000 [ 678.414283][ T29] audit: type=1326 audit(1736034909.291:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.3.1059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3644385d29 code=0x0 [ 678.428616][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.248790][T10906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.605709][ T29] audit: type=1326 audit(1736034914.501:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.4.1071" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0465d85d29 code=0x0 [ 682.744972][T10925] wlan1 speed is unknown, defaulting to 1000 [ 685.901192][T10952] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1076'. [ 686.225964][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.233020][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.589647][T10967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.078768][T10965] Bluetooth: hci5: Frame reassembly failed (-84) [ 691.536201][T10996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 691.688526][T10997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 691.704195][T10997] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 691.720903][T10997] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 691.766918][T10997] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 691.804043][T10997] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 691.820145][T10997] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 692.020201][T10994] wlan1 speed is unknown, defaulting to 1000 [ 692.136520][ T5147] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 693.938188][ T5147] Bluetooth: hci7: command tx timeout [ 693.994120][T11020] efs: device does not support 512 byte blocks [ 694.000535][T11020] device does not support 512 byte blocks [ 694.000535][T11020] [ 694.340154][T10994] chnl_net:caif_netlink_parms(): no params data found [ 695.897659][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 695.976951][ T5147] Bluetooth: hci7: command tx timeout [ 696.041519][T10873] bridge0: port 3(syz_tun) entered disabled state [ 696.060472][ T5891] usb 5-1: no configurations [ 696.065145][ T5891] usb 5-1: can't read configurations, error -22 [ 696.139659][T10873] syz_tun (unregistering): left allmulticast mode [ 696.163548][T10873] syz_tun (unregistering): left promiscuous mode [ 696.186091][T10873] bridge0: port 3(syz_tun) entered disabled state [ 696.236744][ T5891] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 697.138832][ T5891] usb 5-1: no configurations [ 697.155405][ T5891] usb 5-1: can't read configurations, error -22 [ 697.163332][ T5891] usb usb5-port1: attempt power cycle [ 697.220952][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.245315][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.256741][T10994] bridge_slave_0: entered allmulticast mode [ 697.272300][T10994] bridge_slave_0: entered promiscuous mode [ 697.313541][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.334731][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.365117][T10994] bridge_slave_1: entered allmulticast mode [ 697.389352][T10994] bridge_slave_1: entered promiscuous mode [ 697.777470][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.958467][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.057286][ T5147] Bluetooth: hci7: command tx timeout [ 698.169903][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.508134][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.611323][T11076] Bluetooth: hci5: Frame reassembly failed (-84) [ 698.710446][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 698.795424][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.159391][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.440108][T10994] team0: Port device team_slave_0 added [ 699.471358][T10994] team0: Port device team_slave_1 added [ 700.256457][ T5853] Bluetooth: hci7: command tx timeout [ 700.449854][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.486021][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.550698][T11100] overlayfs: failed to clone upperpath [ 700.556698][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.615103][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.645557][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.693587][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.707018][ T5147] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 702.377450][T10994] hsr_slave_0: entered promiscuous mode [ 703.007557][T10994] hsr_slave_1: entered promiscuous mode [ 703.139848][T10994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.159057][T10994] Cannot create hsr debugfs directory [ 703.217187][ T12] bridge_slave_1: left allmulticast mode [ 703.223130][ T12] bridge_slave_1: left promiscuous mode [ 703.235710][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.307208][ T12] bridge_slave_0: left allmulticast mode [ 704.314641][ T12] bridge_slave_0: left promiscuous mode [ 704.321127][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.732006][T11147] netlink: 'syz.3.1112': attribute type 8 has an invalid length. [ 705.740062][T11147] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1112'. [ 706.727579][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.799863][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.853183][ T12] bond0 (unregistering): Released all slaves [ 707.054492][ T12] IPVS: stopping master sync thread 10171 ... [ 712.636187][ T5920] IPVS: starting estimator thread 0... [ 712.746998][T11212] IPVS: using max 18 ests per chain, 43200 per kthread [ 713.655887][ T12] hsr_slave_0: left promiscuous mode [ 713.665966][ T12] hsr_slave_1: left promiscuous mode [ 713.686977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.713282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.742961][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.768667][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.999267][ T12] veth1_macvtap: left promiscuous mode [ 714.016951][ T12] veth0_macvtap: left promiscuous mode [ 714.022656][ T12] veth1_vlan: left promiscuous mode [ 714.826563][ T12] veth0_vlan: left promiscuous mode [ 717.289124][T11248] Bluetooth: hci5: Frame reassembly failed (-84) [ 717.301641][ T6931] Bluetooth: hci5: Frame reassembly failed (-84) [ 717.701478][T11254] NILFS (loop9): device size too small [ 719.033777][T10997] Bluetooth: hci2: command 0x0406 tx timeout [ 719.336980][ T5147] Bluetooth: hci5: command 0xfc11 tx timeout [ 719.343520][ T5853] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 720.762409][ T12] team0 (unregistering): Port device team_slave_1 removed [ 720.984145][ T12] team0 (unregistering): Port device team_slave_0 removed [ 723.070992][T11224] bridge0: port 3(syz_tun) entered blocking state [ 723.080099][T11224] bridge0: port 3(syz_tun) entered disabled state [ 723.086849][T11224] syz_tun: entered allmulticast mode [ 723.094333][T11224] syz_tun: entered promiscuous mode [ 723.101157][T11224] bridge0: port 3(syz_tun) entered blocking state [ 723.107816][T11224] bridge0: port 3(syz_tun) entered forwarding state [ 727.982755][T11332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.136258][T10994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 728.235780][T10994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 728.332172][T10994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 729.775361][T10994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.377217][T10994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.478975][T10994] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.557604][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.564935][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.668248][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.675542][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.731169][T10994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 730.741763][T10994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.044299][T11367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.842697][ T29] audit: type=1326 audit(1736034963.661:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.4.1154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0465d85d29 code=0x0 [ 732.729322][T11374] wlan1 speed is unknown, defaulting to 1000 [ 734.066669][T11383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.083235][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.533647][T10994] veth0_vlan: entered promiscuous mode [ 738.578252][T10994] veth1_vlan: entered promiscuous mode [ 738.601935][T10994] veth0_macvtap: entered promiscuous mode [ 738.611088][T10994] veth1_macvtap: entered promiscuous mode [ 738.627702][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.638301][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.648369][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.730167][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.740495][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.751131][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.761311][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.771910][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.782409][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.793179][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.806086][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.058932][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.097006][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.160550][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.275311][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.379425][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.393154][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.407126][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.570774][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.700172][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.708352][T11439] overlayfs: failed to clone upperpath [ 739.774740][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.796021][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.829184][T10994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.847655][T10994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.863894][T10994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.886460][T10994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.247541][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.309930][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.887404][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.895304][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.317326][T11457] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 741.702998][T11453] ALSA: mixer_oss: invalid OSS volume '' [ 745.296598][ T5890] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 745.556883][ T5890] usb 10-1: Using ep0 maxpacket: 8 [ 746.007802][ T5890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 746.092712][ T5890] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 747.666508][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.203193][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.213592][ T5890] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 748.232536][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.242454][ T5890] usb 10-1: Product: syz [ 748.284301][ T5890] usb 10-1: config 0 descriptor?? [ 748.297823][ T5890] usb 10-1: can't set config #0, error -71 [ 748.404789][ T5890] usb 10-1: USB disconnect, device number 3 [ 748.885303][T11516] ALSA: mixer_oss: invalid OSS volume '' [ 748.942391][T11519] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 749.048040][T11527] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1183'. [ 755.376200][T11586] ALSA: mixer_oss: invalid OSS volume '' [ 758.305129][T11637] Bluetooth: hci5: Frame reassembly failed (-84) [ 758.537721][ T2953] Bluetooth: hci5: Frame reassembly failed (-84) [ 760.286443][T10997] Bluetooth: hci3: command 0x0406 tx timeout [ 760.503134][ T5147] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 761.025306][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 764.799350][T11703] Bluetooth: hci5: Frame reassembly failed (-84) [ 767.452523][ T5853] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 768.077393][ T5891] IPVS: starting estimator thread 0... [ 768.182222][T11723] IPVS: using max 23 ests per chain, 55200 per kthread [ 773.387491][ T30] INFO: task syz.6.964:10399 blocked for more than 143 seconds. [ 773.495317][ T30] Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 773.502876][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.512088][ T30] task:syz.6.964 state:D stack:21048 pid:10399 tgid:10398 ppid:7174 flags:0x00004004 [ 773.522741][ T30] Call Trace: [ 773.526533][ T30] [ 773.529955][ T30] __schedule+0x189f/0x4c80 [ 773.535286][ T30] ? __pfx___schedule+0x10/0x10 [ 773.541259][ T30] ? __pfx_lock_release+0x10/0x10 [ 773.546669][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 773.552326][ T30] ? schedule+0x90/0x320 [ 773.557026][ T30] schedule+0x14b/0x320 [ 773.561615][ T30] bit_wait+0x12/0xd0 [ 773.565899][ T30] __wait_on_bit+0xb0/0x2f0 [ 773.570909][ T30] ? __pfx_bit_wait+0x10/0x10 [ 773.576497][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 773.584382][ T30] ? __pfx_bit_wait+0x10/0x10 [ 773.589596][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 773.596064][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 773.602895][ T30] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 773.608823][ T30] netfs_unbuffered_read_iter_locked+0xd83/0x1540 [ 773.616504][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 773.622388][ T30] __kernel_read+0x52e/0xa00 [ 773.627284][ T30] ? do_sys_openat2+0x13e/0x1d0 [ 773.632388][ T30] ? __pfx___kernel_read+0x10/0x10 [ 773.638112][ T30] integrity_kernel_read+0xb0/0x100 [ 773.643851][ T30] ? __pfx_integrity_kernel_read+0x10/0x10 [ 773.649976][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 773.655760][ T30] ? ima_calc_file_hash+0xaae/0x1b30 [ 773.661406][ T30] ima_calc_file_hash+0xae6/0x1b30 [ 773.666821][ T30] ? stack_depot_save_flags+0x7b4/0x940 [ 773.672549][ T30] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 773.678326][ T30] ? kasan_save_track+0x51/0x80 [ 773.683542][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 773.690367][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 773.695844][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 773.701302][ T30] ? v9fs_vfs_getattr+0x2b7/0x370 [ 773.706572][ T30] ? kfree+0x196/0x430 [ 773.710934][ T30] ? v9fs_vfs_getattr+0x2b7/0x370 [ 773.716143][ T30] ? v9fs_vfs_getattr+0x2b7/0x370 [ 773.721411][ T30] ima_collect_measurement+0x520/0xb10 [ 773.727106][ T30] ? __pfx_ima_collect_measurement+0x10/0x10 [ 773.733253][ T30] ? rcu_is_watching+0x15/0xb0 [ 773.738720][ T30] ? trace_contention_end+0x3c/0x120 [ 773.744528][ T30] ? __asan_memset+0x23/0x50 [ 773.749382][ T30] ? ima_get_hash_algo+0x156/0x4d0 [ 773.754661][ T30] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 773.760346][ T30] process_measurement+0x1351/0x1fb0 [ 773.765803][ T30] ? __pfx_process_measurement+0x10/0x10 [ 773.771719][ T30] ? __pfx_lock_release+0x10/0x10 [ 773.776950][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 773.782187][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 773.787655][ T30] ? file_set_fsnotify_mode+0x12a/0x510 [ 773.793551][ T30] ? inode_to_bdi+0x69/0xf0 [ 773.798288][ T30] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 773.804860][ T30] ima_file_check+0xd9/0x120 [ 773.809734][ T30] ? __pfx_ima_file_check+0x10/0x10 [ 773.815108][ T30] security_file_post_open+0xb9/0x280 [ 773.820716][ T30] path_openat+0x2cbd/0x3580 [ 773.825516][ T30] ? __pfx_path_openat+0x10/0x10 [ 773.830678][ T30] do_filp_open+0x27f/0x4e0 [ 773.835451][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 773.841099][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 773.846723][ T30] do_sys_openat2+0x13e/0x1d0 [ 773.851591][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 773.857005][ T30] ? __se_sys_mount+0x379/0x3c0 [ 773.862035][ T30] __x64_sys_openat+0x247/0x2a0 [ 773.867213][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 773.872757][ T30] ? do_syscall_64+0x100/0x230 [ 773.877750][ T30] ? do_syscall_64+0xb6/0x230 [ 773.882584][ T30] do_syscall_64+0xf3/0x230 [ 773.887337][ T30] ? clear_bhb_loop+0x35/0x90 [ 773.892180][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.898442][ T30] RIP: 0033:0x7fc7fcb85d29 [ 773.903013][ T30] RSP: 002b:00007fc7fd99a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 773.911621][ T30] RAX: ffffffffffffffda RBX: 00007fc7fcd75fa0 RCX: 00007fc7fcb85d29 [ 773.919834][ T30] RDX: 0000000000020842 RSI: 000000002000c380 RDI: ffffffffffffff9c [ 773.929227][ T30] RBP: 00007fc7fcc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 773.937606][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.946401][ T30] R13: 0000000000000000 R14: 00007fc7fcd75fa0 R15: 00007fff129a3458 [ 773.954438][ T30] [ 773.957662][ T30] [ 773.957662][ T30] Showing all locks held in the system: [ 773.965408][ T30] 2 locks held by kworker/u8:0/11: [ 773.970694][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 773.982706][ T30] #1: ffffc90000107c60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 773.995165][ T30] 2 locks held by kworker/u8:1/12: [ 774.000377][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 774.012266][ T30] #1: ffffc90000117c60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 774.024616][ T30] 1 lock held by khungtaskd/30: [ 774.029577][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 774.039755][ T30] 2 locks held by kworker/u8:2/35: [ 774.045758][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 774.057755][ T30] #1: ffffc90000ab7c60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 774.070055][ T30] 2 locks held by kworker/u8:4/67: [ 774.075213][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 774.087156][ T30] #1: ffffc9000214fc60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 774.099454][ T30] 2 locks held by kworker/0:2/875: [ 774.104620][ T30] 2 locks held by kworker/u8:5/1309: [ 774.110054][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 774.121912][ T30] #1: ffffc9000468fc60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 774.134311][ T30] 2 locks held by kworker/u8:6/1333: [ 774.139807][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 774.152062][ T30] #1: ffffc9000474fc60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 774.164751][ T30] 2 locks held by kworker/u8:7/2953: [ 774.170824][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 774.182824][ T30] #1: ffffc9000bdf7c60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 774.226456][ T30] 2 locks held by kworker/u8:8/3004: [ 774.236440][ T30] 2 locks held by getty/5592: [ 774.241172][ T30] #0: ffff88814d7cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 774.276459][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 774.311549][ T30] 4 locks held by syz-executor/5835: [ 774.321212][ T30] 2 locks held by kworker/u8:9/6072: [ 774.332065][ T30] 2 locks held by kworker/u8:13/6931: [ 774.346398][ T30] 2 locks held by kworker/u8:14/6997: [ 774.353291][ T30] 2 locks held by syz-executor/8584: [ 774.360527][ T30] 2 locks held by syz.6.964/10399: [ 774.365720][ T30] #0: ffff88803315bc18 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7a6/0x1fb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 774.377134][ T30] #1: ffff888079ba0148 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 774.388550][ T30] 1 lock held by kworker/u8:7/11751: [ 774.393878][ T30] 3 locks held by modprobe/11783: [ 774.398993][ T30] #0: ffff8880b863e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 774.409181][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 774.421730][ T30] #2: ffff88801b3e2f78 (&sig->wait_chldexit){....}-{3:3}, at: __wake_up_common_lock+0x25/0x1e0 [ 774.432377][ T30] 1 lock held by modprobe/11793: [ 774.437452][ T30] [ 774.439914][ T30] ============================================= [ 774.439914][ T30] [ 774.448733][ T30] NMI backtrace for cpu 1 [ 774.448759][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 774.448788][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 774.448801][ T30] Call Trace: [ 774.448808][ T30] [ 774.448818][ T30] dump_stack_lvl+0x241/0x360 [ 774.448849][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.448872][ T30] ? __pfx__printk+0x10/0x10 [ 774.448918][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 774.448953][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 774.448979][ T30] ? _printk+0xd5/0x120 [ 774.449012][ T30] ? __pfx__printk+0x10/0x10 [ 774.449045][ T30] ? __wake_up_klogd+0xcc/0x110 [ 774.449072][ T30] ? __pfx__printk+0x10/0x10 [ 774.449108][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 774.449139][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 774.449166][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 774.449197][ T30] watchdog+0xff6/0x1040 [ 774.449228][ T30] ? watchdog+0x1ea/0x1040 [ 774.449261][ T30] ? __pfx_watchdog+0x10/0x10 [ 774.449288][ T30] kthread+0x7a9/0x920 [ 774.449317][ T30] ? __pfx_kthread+0x10/0x10 [ 774.449349][ T30] ? __pfx_watchdog+0x10/0x10 [ 774.449378][ T30] ? __pfx_kthread+0x10/0x10 [ 774.449406][ T30] ? __pfx_kthread+0x10/0x10 [ 774.449439][ T30] ? __pfx_kthread+0x10/0x10 [ 774.449467][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 774.449497][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 774.449529][ T30] ? __pfx_kthread+0x10/0x10 [ 774.449561][ T30] ret_from_fork+0x4b/0x80 [ 774.449587][ T30] ? __pfx_kthread+0x10/0x10 [ 774.449616][ T30] ret_from_fork_asm+0x1a/0x30 [ 774.449667][ T30] [ 774.449676][ T30] Sending NMI from CPU 1 to CPUs 0: [ 774.623066][ C0] NMI backtrace for cpu 0 [ 774.623083][ C0] CPU: 0 UID: 0 PID: 11798 Comm: modprobe Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 774.623104][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 774.623116][ C0] RIP: 0010:mt_validate+0x44ce/0x4b30 [ 774.623140][ C0] Code: 01 00 00 e8 c4 d3 d4 f5 49 8d 5d 08 eb 07 e8 b9 d3 d4 f5 31 db 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ef e8 18 4f 3b f6 49 8b 45 00 48 c7 c1 00 ff ff ff 48 [ 774.623156][ C0] RSP: 0018:ffffc90003697280 EFLAGS: 00000246 [ 774.623174][ C0] RAX: 1ffff1100d068080 RBX: ffff888068340408 RCX: dffffc0000000000 [ 774.623188][ C0] RDX: 0000000000000000 RSI: ffffffff9001ca90 RDI: 0000000000000001 [ 774.623201][ C0] RBP: ffffc90003697490 R08: 0000000000000005 R09: ffffffff8bea5004 [ 774.623214][ C0] R10: 0000000000000003 R11: ffff888030c55a00 R12: 1ffff920006d2e73 [ 774.623227][ C0] R13: ffff888068340400 R14: 0000000000000001 R15: ffff888033ea0e98 [ 774.623240][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 774.623256][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.623269][ C0] CR2: 00007f521ceaf3b0 CR3: 000000001ea84000 CR4: 00000000003526f0 [ 774.623284][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.623295][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 774.623307][ C0] Call Trace: [ 774.623313][ C0] [ 774.623320][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 774.623344][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 774.623371][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 774.623394][ C0] ? nmi_handle+0x2a/0x5a0 [ 774.623429][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 774.623451][ C0] ? nmi_handle+0x14f/0x5a0 [ 774.623476][ C0] ? nmi_handle+0x2a/0x5a0 [ 774.623503][ C0] ? mt_validate+0x44ce/0x4b30 [ 774.623519][ C0] ? default_do_nmi+0x63/0x160 [ 774.623541][ C0] ? exc_nmi+0x123/0x1f0 [ 774.623562][ C0] ? end_repeat_nmi+0xf/0x53 [ 774.623590][ C0] ? mt_validate+0x4454/0x4b30 [ 774.623609][ C0] ? mt_validate+0x44ce/0x4b30 [ 774.623627][ C0] ? mt_validate+0x44ce/0x4b30 [ 774.623645][ C0] ? mt_validate+0x44ce/0x4b30 [ 774.623663][ C0] [ 774.623668][ C0] [ 774.623675][ C0] ? kasan_save_stack+0x4f/0x60 [ 774.623707][ C0] ? __pfx_mt_validate+0x10/0x10 [ 774.623733][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 774.623763][ C0] validate_mm+0xf1/0x590 [ 774.623787][ C0] ? call_rcu+0x799/0xac0 [ 774.623804][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 774.623834][ C0] ? __pfx_validate_mm+0x10/0x10 [ 774.623873][ C0] ? percpu_counter_add_batch+0xff/0x1f0 [ 774.623903][ C0] vms_complete_munmap_vmas+0x6e8/0x8f0 [ 774.623937][ C0] __mmap_region+0x17d3/0x2d30 [ 774.623970][ C0] ? __pfx___mmap_region+0x10/0x10 [ 774.624021][ C0] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 774.624054][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 774.624088][ C0] mmap_region+0x23b/0x360 [ 774.624113][ C0] do_mmap+0xecc/0x13a0 [ 774.624136][ C0] ? ima_file_mmap+0xd6/0x220 [ 774.624157][ C0] ? __pfx_do_mmap+0x10/0x10 [ 774.624175][ C0] ? down_write_killable+0x19e/0x260 [ 774.624195][ C0] ? vm_mmap_pgoff+0x182/0x430 [ 774.624217][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 774.624237][ C0] ? apparmor_mmap_file+0xc3/0xe0 [ 774.624267][ C0] vm_mmap_pgoff+0x214/0x430 [ 774.624294][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 774.624316][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 774.624340][ C0] ? exc_page_fault+0x590/0x8b0 [ 774.624364][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 774.624384][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 774.624410][ C0] do_syscall_64+0xf3/0x230 [ 774.624427][ C0] ? clear_bhb_loop+0x35/0x90 [ 774.624453][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.624477][ C0] RIP: 0033:0x7f0a6cd22b74 [ 774.624491][ C0] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 774.624506][ C0] RSP: 002b:00007ffe3e98c738 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 774.624524][ C0] RAX: ffffffffffffffda RBX: 00007ffe3e98c7e8 RCX: 00007f0a6cd22b74 [ 774.624537][ C0] RDX: 0000000000000003 RSI: 000000000000cdd0 RDI: 00007f0a6cc2f000 [ 774.624549][ C0] RBP: 00007ffe3e98ced0 R08: 00000000ffffffff R09: 0000000000000000 [ 774.624561][ C0] R10: 0000000000000032 R11: 0000000000000246 R12: 00007f0a6ccff5c0 [ 774.624573][ C0] R13: 00007ffe3e98cf58 R14: 00007f0a6cc3bdd0 R15: 00007f0a6cc2f000 [ 774.624594][ C0] [ 774.625401][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 775.080918][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 775.090925][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 775.100995][ T30] Call Trace: [ 775.104283][ T30] [ 775.107235][ T30] dump_stack_lvl+0x241/0x360 [ 775.111930][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.117141][ T30] ? __pfx__printk+0x10/0x10 [ 775.121745][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 775.127749][ T30] ? vscnprintf+0x5d/0x90 [ 775.132095][ T30] panic+0x349/0x880 [ 775.136008][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 775.142178][ T30] ? __pfx_panic+0x10/0x10 [ 775.146612][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 775.151997][ T30] ? __irq_work_queue_local+0x137/0x410 [ 775.157558][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 775.162951][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 775.169118][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 775.175316][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 775.181597][ T30] watchdog+0x1035/0x1040 [ 775.185959][ T30] ? watchdog+0x1ea/0x1040 [ 775.190504][ T30] ? __pfx_watchdog+0x10/0x10 [ 775.195215][ T30] kthread+0x7a9/0x920 [ 775.199311][ T30] ? __pfx_kthread+0x10/0x10 [ 775.203940][ T30] ? __pfx_watchdog+0x10/0x10 [ 775.208723][ T30] ? __pfx_kthread+0x10/0x10 [ 775.213329][ T30] ? __pfx_kthread+0x10/0x10 [ 775.217937][ T30] ? __pfx_kthread+0x10/0x10 [ 775.222541][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 775.227756][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 775.232973][ T30] ? __pfx_kthread+0x10/0x10 [ 775.237580][ T30] ret_from_fork+0x4b/0x80 [ 775.242009][ T30] ? __pfx_kthread+0x10/0x10 [ 775.246616][ T30] ret_from_fork_asm+0x1a/0x30 [ 775.251404][ T30] [ 775.254831][ T30] Kernel Offset: disabled [ 775.259159][ T30] Rebooting in 86400 seconds..