last executing test programs: 15m26.746032679s ago: executing program 4 (id=119): unshare(0x5a060800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0xecf86c37d53049cc) close(r1) sendmsg$tipc(r1, &(0x7f0000001c00)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x4}}, 0x10, &(0x7f0000001b80)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0xc1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty, 0xff}}}, 0x108) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x80085) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d614404208000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 15m24.721809249s ago: executing program 4 (id=125): bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) recvfrom(r5, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) syz_open_dev$usbfs(&(0x7f0000000040), 0x7fc0, 0x8000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 15m21.861373488s ago: executing program 4 (id=130): socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() r2 = socket$inet(0x2, 0x801, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) shutdown(r2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r7 = fanotify_init(0x81, 0x40000) fanotify_mark(r7, 0x105, 0x40001032, r6, 0x0) read$FUSE(r7, &(0x7f0000002300)={0x2020}, 0x2020) 15m18.465612136s ago: executing program 4 (id=133): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000c00)='\x00', 0x0, 0x800080, 0x0) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0x317e, 0x4) 15m13.857460525s ago: executing program 4 (id=141): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) syz_io_uring_setup(0x6af9, &(0x7f0000000080)={0x0, 0xe04f, 0xa40, 0x1, 0x272}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[], 0x50) 15m12.231948871s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r1, 0x8, r2) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x40000c16) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(0x0) 14m56.497013506s ago: executing program 32 (id=145): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r1, 0x8, r2) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x40000c16) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(0x0) 5m45.077597411s ago: executing program 3 (id=1183): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x33a0096fd557a9a2, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/211, 0xd3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3fffff) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r4, 0x0, 0x0, 0x4, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 5m42.62364968s ago: executing program 3 (id=1186): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 5m42.208088753s ago: executing program 3 (id=1187): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff}}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 5m39.955146305s ago: executing program 3 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0xee00, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) readv(0xffffffffffffffff, 0x0, 0x0) 5m37.00091649s ago: executing program 3 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r5, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7fc0, 0x8000) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f0000000080)={0xb}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) futex(0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, 0x4002) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a400fe00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5m32.855958253s ago: executing program 3 (id=1202): unshare(0x5a060800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0xecf86c37d53049cc) close(r1) sendmsg$tipc(r1, &(0x7f0000001c00)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x18}]}]}], {0x14}}, 0x29c}}, 0x4048010) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 5m17.01500099s ago: executing program 33 (id=1202): unshare(0x5a060800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0xecf86c37d53049cc) close(r1) sendmsg$tipc(r1, &(0x7f0000001c00)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x18}]}]}], {0x14}}, 0x29c}}, 0x4048010) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m52.583512053s ago: executing program 2 (id=1351): io_uring_setup(0x83e, &(0x7f0000000000)={0x0, 0x3995, 0x1, 0x1, 0x18a}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x23) r3 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x22, &(0x7f0000001b80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="01dea53c7c1e", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0x7, 0x67, 0x0, @private=0xa010100, @local}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) syz_open_dev$dvb_dvr(&(0x7f0000000180), 0x0, 0x2a400) socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000003c0)={r8, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x1000) 3m50.863244648s ago: executing program 2 (id=1354): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() poll(&(0x7f00000001c0)=[{r0, 0x45a}], 0x1, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="2ace3a9d129db99f2964f6c544d9d549499fdb9723306ef3d320e89deeaa9d7f5ca2d7aea5d324563a75fc9843e2f525d53a141d11b62d7dded7da2b601e2245f358e1ca", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b230040000102030109028b00030107600b080b010101ff200509040000000101200009240101800b1500070c24030501035d02008b000309040100000102200009040101010102200006240201003e102401050103030000000309000000cd090501090800040c1d082501813302feff0904020000010220000904020101019b55bab35304c786030410fc082501020c"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000b55800000008000300", @ANYRES32=r6, @ANYBLOB="0400460008000c006400000008000d0000000000080035000000000304000501"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, 0x0, 0x4040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) 3m41.775302359s ago: executing program 2 (id=1366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x7, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x1c}}, 0x0) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) fchdir(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x20) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x5, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x1, 0x200000, 0xfffffffd, 0x47ae1eb}}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe", @ANYRES16], 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) 3m38.402656967s ago: executing program 2 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {0x0}, {0x0}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {0x0}], 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xac49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f0005000000080026000816"], 0x40}}, 0x0) 3m22.291278753s ago: executing program 34 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {0x0}, {0x0}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {0x0}], 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xac49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f0005000000080026000816"], 0x40}}, 0x0) 2m10.528276751s ago: executing program 6 (id=1477): socket$inet_udp(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x22, 0x0, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m4.072121857s ago: executing program 6 (id=1483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {0x0}, {0x0}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {0x0}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f", 0x46}], 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xac49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f0005000000080026000816"], 0x40}}, 0x0) 2m2.459654309s ago: executing program 6 (id=1486): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, 0x0, 0x0, 0x8e90385f0ccb53ea}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8004, 0x0, 0x0, 0xfffffffffffffe9d, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 2m0.86687101s ago: executing program 6 (id=1487): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x33a0096fd557a9a2, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728ffffffff000000000bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa96186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1a402f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479bf34727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1db1908d8e1b361034db56be76acb7654a195bc3e98df3a5d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/211, 0xd3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3fffff) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r4, 0x0, 0x0, 0x4, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1m59.404685897s ago: executing program 6 (id=1490): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0x7, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) 1m57.151514359s ago: executing program 6 (id=1492): socket$inet_udp(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x22, 0x0, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m41.81218289s ago: executing program 35 (id=1492): socket$inet_udp(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5f090930f70e0dd038e7ff7fc6e5539b324c078b089b32333b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f347cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea56777e001cd34e5cb2f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf054135bbafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd731a0bfc1cb1a4c78f9ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b01979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e49336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba80900000000000000d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_emit_ethernet(0x22, 0x0, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.157147705s ago: executing program 1 (id=1637): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.128006167s ago: executing program 1 (id=1639): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x2, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) close_range(r1, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="2ace3a9d129db99f2964f6c544d9d549499fdb9723306ef3d320e89deeaa9d7f5ca2d7aea5d324563a75fc9843e2f525d53a141d11b62d7dded7da2b601e2245f358e1ca", @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b230040000102030109028b00030107600b080b010101ff200509040000000101200009240101800b1500070c24030501035d02008b000309040100000102200009040101010102200006240201003e102401050103030000000309000000cd090501090800040c1d082501813302feff0904020000010220000904020101019b55bab35304c786030410fc082501020c"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000b55800000008000300", @ANYRES32=r7, @ANYBLOB="0400460008000c006400000008000d0000000000080035000000000304000501"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, 0x0, 0x4040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) 8.640272083s ago: executing program 0 (id=1640): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000004000800000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x80000) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0x8000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x90000005}) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xf) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) close(r3) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000640)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0xe7fe, 0x6, 0x0, 0x2b0d, 0xfffffffffffffffb], 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @loopback, 0x8000008, 0x4}, 0x3f, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}], 0x1}, 0x41) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') 7.345059234s ago: executing program 0 (id=1641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1, 0x6, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56d41, 0x82000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x6f575620ad41a027}, @TCA_TBF_BURST={0x8, 0x6, 0x40}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x0, 0x8, 0xfffc, 0x1, 0x1000}, {0x3, 0x2, 0x3, 0x0, 0x2, 0x9}, 0x3, 0x1, 0xb02}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = fanotify_init(0x4, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r5, 0x441, 0x800003b, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xfffffb5b, 0x0, 0x100, 0x400}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r7, 0x0) truncate(&(0x7f0000000080)='./file5\x00', 0x8) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205000905810300"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r9, 0x81, 0x1, &(0x7f0000000180)='a') sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8855) 6.524027331s ago: executing program 1 (id=1642): io_uring_setup(0x30ab, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 6.165653593s ago: executing program 1 (id=1644): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='macsec0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000440)="9de10265", 0x4, 0x40000, 0x0, 0x0) 5.945482589s ago: executing program 1 (id=1646): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x7, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x1c}}, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) fchdir(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x5, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x1, 0x200000, 0xfffffffd, 0x47ae1eb}}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe", @ANYRES16], 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) 2.814946269s ago: executing program 0 (id=1647): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.464456811s ago: executing program 5 (id=1648): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) listen(r0, 0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.17904418s ago: executing program 5 (id=1649): open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc044) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.954475087s ago: executing program 1 (id=1650): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x2, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) close_range(r1, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="2ace3a9d129db99f2964f6c544d9d549499fdb9723306ef3d320e89deeaa9d7f5ca2d7aea5d324563a75fc9843e2f525d53a141d11b62d7dded7da2b601e2245f358e1ca", @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b230040000102030109028b00030107600b080b010101ff200509040000000101200009240101800b1500070c24030501035d02008b000309040100000102200009040101010102200006240201003e102401050103030000000309000000cd090501090800040c1d082501813302feff0904020000010220000904020101019b55bab35304c786030410fc082501020c"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000b55800000008000300", @ANYRES32=r7, @ANYBLOB="0400460008000c006400000008000d0000000000080035000000000304000501"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, 0x0, 0x4040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) 1.86772788s ago: executing program 5 (id=1651): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.55003071s ago: executing program 5 (id=1652): io_uring_setup(0x30ab, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 1.511437511s ago: executing program 0 (id=1653): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108", 0x25}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 1.238837s ago: executing program 5 (id=1654): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0xfffff000) 1.055891046s ago: executing program 0 (id=1655): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffbf, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1001, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0xde5, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x9d, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x1008, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0xa, 0x7, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x7fff, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x52, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000012c0)=0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 663.515438ms ago: executing program 0 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x7, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x1c}}, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) fchdir(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x32}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x5, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x1, 0x200000, 0xfffffffd, 0x47ae1eb}}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe", @ANYRES16], 0x0) 301.32016ms ago: executing program 8 (id=1503): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3004408c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 5 (id=1657): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019300)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x8040) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, 0x0, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="2792", 0x5dc}], 0x1}, 0x0) kernel console output (not intermixed with test programs): istration error -23 [ 844.948607][ T26] audit: type=1326 audit(1778954503.451:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.6.1368" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 845.132032][ T26] audit: type=1326 audit(1778954503.451:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.6.1368" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 847.600748][ T26] audit: type=1326 audit(1778954507.981:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e9d9ce59 code=0x7ffc0000 [ 847.799442][ T26] audit: type=1326 audit(1778954507.981:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb7e9d9ce59 code=0x7ffc0000 [ 847.869243][T10032] NILFS (nullb0): couldn't find nilfs on the device [ 848.443636][T10037] NILFS (nullb0): couldn't find nilfs on the device [ 848.998299][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 848.998450][ T26] audit: type=1326 audit(1778954509.381:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb7e9d9cc57 code=0x7ffc0000 [ 849.452152][ T26] audit: type=1326 audit(1778954509.381:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb7e9d5d68e code=0x7ffc0000 [ 849.536184][ T26] audit: type=1326 audit(1778954509.381:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e9d9ce59 code=0x7ffc0000 [ 849.582358][ T14] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 849.641735][ T26] audit: type=1326 audit(1778954509.381:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e9d9ce59 code=0x7ffc0000 [ 849.733951][ T26] audit: type=1326 audit(1778954509.711:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7e9d9ce59 code=0x7ffc0000 [ 849.794223][ T14] usb 6-1: unable to get BOS descriptor or descriptor too short [ 849.821227][ T14] usb 6-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 849.834349][ T26] audit: type=1326 audit(1778954509.711:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e9d9ce59 code=0x7ffc0000 [ 849.914118][ T14] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.970960][ T26] audit: type=1326 audit(1778954509.711:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.2.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e9d9ce59 code=0x7ffc0000 [ 850.001138][ T14] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 850.047050][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.086974][ T14] usb 6-1: Product: syz [ 850.094699][ T14] usb 6-1: Manufacturer: syz [ 850.099369][ T14] usb 6-1: SerialNumber: syz [ 850.598171][ T26] audit: type=1326 audit(1778954510.941:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.1.1381" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 851.222608][ T14] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 851.247774][ T14] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 851.346862][ T26] audit: type=1326 audit(1778954510.941:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.1.1381" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 851.349275][ T14] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 851.452500][ T26] audit: type=1326 audit(1778954510.951:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.1.1381" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 852.022306][ T14] usb 6-1: USB disconnect, device number 33 [ 852.973600][ T9424] udevd[9424]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.252133][ T4323] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 858.650998][T10096] NILFS (nullb0): couldn't find nilfs on the device [ 859.838334][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 859.838350][ T26] audit: type=1326 audit(1778954520.171:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 859.892271][ T26] audit: type=1326 audit(1778954520.171:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 860.056293][ T26] audit: type=1326 audit(1778954520.171:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 861.382931][ T4323] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 861.420927][ T26] audit: type=1326 audit(1778954520.171:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 861.420978][ T26] audit: type=1326 audit(1778954520.171:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 861.421017][ T26] audit: type=1326 audit(1778954520.171:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 861.421057][ T26] audit: type=1326 audit(1778954520.171:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 861.421098][ T26] audit: type=1326 audit(1778954520.181:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 861.421136][ T26] audit: type=1326 audit(1778954520.181:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 861.421177][ T26] audit: type=1326 audit(1778954520.181:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8edfd9ce59 code=0x7ffc0000 [ 862.936221][T10126] siw: device registration error -23 [ 864.441579][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 864.451659][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 864.462182][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 864.470071][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 864.488820][ T9325] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 864.502589][ T9325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 864.662110][ T4321] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 864.695884][ T4428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.873251][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 864.886455][ T4321] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 865.085515][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1400'. [ 865.094545][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1400'. [ 865.104261][T10141] netlink: 'syz.5.1400': attribute type 15 has an invalid length. [ 865.329752][ T4321] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 865.437865][ T4321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 865.514418][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 865.523472][ T4321] usb 2-1: Product: syz [ 865.527777][ T4321] usb 2-1: Manufacturer: syz [ 865.532870][ T4321] usb 2-1: SerialNumber: syz [ 865.960910][ T4428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.140998][T10135] wg1 speed is unknown, defaulting to 1000 [ 866.295903][ T4428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.931033][ T9325] Bluetooth: hci0: command 0x0409 tx timeout [ 866.935870][ T4321] usb 2-1: USB disconnect, device number 49 [ 867.271630][ T4428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.578940][T10167] NILFS (nullb0): couldn't find nilfs on the device [ 869.072081][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 870.092233][ T4321] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 870.114950][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.121406][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.523017][ T4321] usb 6-1: Using ep0 maxpacket: 16 [ 870.535581][ T4321] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 870.547030][ T4321] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 870.582371][ T4321] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 870.618824][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 870.642006][ T4321] usb 6-1: Product: syz [ 870.646259][ T4321] usb 6-1: Manufacturer: syz [ 870.661157][ T4321] usb 6-1: SerialNumber: syz [ 870.861412][T10135] chnl_net:caif_netlink_parms(): no params data found [ 871.160267][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 871.871202][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.925281][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.629116][ T4321] usb 6-1: USB disconnect, device number 34 [ 872.674067][T10135] device bridge_slave_0 entered promiscuous mode [ 872.942636][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.950580][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.237512][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 873.562153][T10135] device bridge_slave_1 entered promiscuous mode [ 874.741367][ T8231] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 874.793870][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 874.802884][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 874.811794][T10223] netlink: 'syz.0.1412': attribute type 15 has an invalid length. [ 875.051658][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.230720][ T8231] usb 2-1: Using ep0 maxpacket: 16 [ 876.789216][ T8231] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 876.999498][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.312134][ T9325] Bluetooth: hci2: command 0x0406 tx timeout [ 877.411956][ T8231] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 877.424767][ T8231] usb 2-1: string descriptor 0 read error: -71 [ 877.431071][ T8231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 877.440345][ T8231] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 877.450841][ T8231] usb 2-1: can't set config #254, error -71 [ 877.457989][ T8231] usb 2-1: USB disconnect, device number 50 [ 877.820614][ T52] block nbd6: Attempted send on invalid socket [ 877.827052][ T52] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 877.837831][ T52] block nbd6: Attempted send on invalid socket [ 877.844256][ T52] I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 877.853889][T10244] Mount JFS Failure: -5 [ 878.061993][ T8231] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 880.075480][T10135] team0: Port device team_slave_0 added [ 880.794901][T10135] team0: Port device team_slave_1 added [ 881.028618][ T8231] usb 2-1: device descriptor read/all, error -71 [ 881.320588][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.822217][ T8231] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 882.156111][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.196814][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.321990][ T8231] usb 2-1: Using ep0 maxpacket: 16 [ 882.339196][ T8231] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 882.493547][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.500579][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.529711][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.567444][ T8231] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 882.585199][ T8231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 882.602203][ T8231] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 882.623716][ T8231] usb 2-1: Product: syz [ 882.627989][ T8231] usb 2-1: Manufacturer: syz [ 882.655723][ T8231] usb 2-1: SerialNumber: syz [ 883.306756][T10135] device hsr_slave_0 entered promiscuous mode [ 883.343495][T10135] device hsr_slave_1 entered promiscuous mode [ 883.350974][T10135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.359439][T10135] Cannot create hsr debugfs directory [ 884.311199][ T8231] usb 2-1: USB disconnect, device number 52 [ 885.522092][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 885.531010][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 885.540044][T10280] netlink: 'syz.1.1423': attribute type 15 has an invalid length. [ 886.829355][ T4428] device hsr_slave_0 left promiscuous mode [ 887.042049][ T4428] device hsr_slave_1 left promiscuous mode [ 887.081960][ T4259] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 887.119025][T10298] NILFS (nullb0): couldn't find nilfs on the device [ 887.814915][ T4428] batman_adv: batadv0: Interface deactivated: dummy0 [ 887.842384][ T4428] batman_adv: batadv0: Removing interface: dummy0 [ 887.880278][ T4259] usb 2-1: Using ep0 maxpacket: 16 [ 887.888341][ T4259] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 887.916000][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.931320][ T4259] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 887.945348][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.988949][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.998180][ T4259] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 888.381540][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 888.400309][ T4259] usb 2-1: Product: syz [ 888.493070][ T4259] usb 2-1: Manufacturer: syz [ 888.555174][ T4259] usb 2-1: SerialNumber: syz [ 888.603145][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.297456][ T4428] device bridge_slave_1 left promiscuous mode [ 889.316143][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.451605][ T4428] device bridge_slave_0 left promiscuous mode [ 889.495026][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.876784][ T4259] usb 2-1: USB disconnect, device number 53 [ 890.712009][ T9527] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 891.094651][ T9527] usb 6-1: unable to get BOS descriptor or descriptor too short [ 891.105481][ T9527] usb 6-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 891.122534][ T9527] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 891.142939][ T9527] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 891.362310][ T9527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.382530][ T9527] usb 6-1: Product: syz [ 891.386886][ T9527] usb 6-1: Manufacturer: syz [ 891.391529][ T9527] usb 6-1: SerialNumber: syz [ 892.309289][ T9527] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 892.325474][ T9527] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 892.872261][ T9527] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 892.881611][ T9527] usb 6-1: USB disconnect, device number 35 [ 893.313740][ T9303] udevd[9303]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.530960][ T4428] device veth1_macvtap left promiscuous mode [ 893.538316][ T4428] device veth0_macvtap left promiscuous mode [ 893.554056][ T4428] device veth1_vlan left promiscuous mode [ 893.560807][ T4428] device veth0_vlan left promiscuous mode [ 894.202358][ T4259] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 894.422173][ T4259] usb 6-1: Using ep0 maxpacket: 16 [ 894.430560][ T4259] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 894.488108][ T4259] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 894.541584][ T4259] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 894.581639][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 894.612534][ T4259] usb 6-1: Product: syz [ 894.616790][ T4259] usb 6-1: Manufacturer: syz [ 894.621420][ T4259] usb 6-1: SerialNumber: syz [ 894.873620][ T4428] bond7 (unregistering): Released all slaves [ 895.225504][ T4428] bond6 (unregistering): Released all slaves [ 896.009624][ T4428] bond5 (unregistering): Released all slaves [ 896.200735][ T4428] bond4 (unregistering): Released all slaves [ 896.390905][ T4428] bond3 (unregistering): Released all slaves [ 896.577428][ T4428] bond2 (unregistering): Released all slaves [ 896.754076][ T4428] bond1 (unregistering): Released all slaves [ 897.374714][ T4428] team0 (unregistering): Port device team_slave_1 removed [ 897.432446][ T4428] team0 (unregistering): Port device team_slave_0 removed [ 897.490313][ T4428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.556952][ T4428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.998728][ T4428] bond0 (unregistering): Released all slaves [ 898.247006][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 898.256002][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 898.264995][T10342] netlink: 'syz.0.1433': attribute type 15 has an invalid length. [ 898.407789][ T4259] usb 6-1: USB disconnect, device number 36 [ 899.646585][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 899.646603][ T26] audit: type=1326 audit(1778954560.021:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 900.255608][T10135] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 900.302162][ T26] audit: type=1326 audit(1778954560.021:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 900.336531][ T26] audit: type=1326 audit(1778954560.021:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 900.361217][ T26] audit: type=1326 audit(1778954560.021:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 900.415031][T10135] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 901.534444][T10135] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 901.712522][ T5229] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 901.795933][ T26] audit: type=1326 audit(1778954560.021:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 901.921975][ T5229] usb 2-1: Using ep0 maxpacket: 16 [ 901.928952][ T5229] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 901.946356][ T5229] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 901.949135][T10135] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 901.972153][ T5229] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 901.981245][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 902.627119][ T26] audit: type=1326 audit(1778954560.021:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 902.640059][ T5229] usb 2-1: Product: syz [ 902.652130][ T26] audit: type=1326 audit(1778954560.021:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 902.680955][ T26] audit: type=1326 audit(1778954560.021:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 902.705399][ T26] audit: type=1326 audit(1778954560.021:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 902.740022][ T26] audit: type=1326 audit(1778954560.021:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.6.1436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 902.835601][ T5229] usb 2-1: Manufacturer: syz [ 902.862279][ T5229] usb 2-1: SerialNumber: syz [ 903.521986][ T22] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 903.544300][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.673036][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 903.693376][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 903.744813][ T22] usb 7-1: unable to get BOS descriptor or descriptor too short [ 903.754489][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.769944][ T22] usb 7-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 903.820788][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 903.836202][ T22] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 903.856677][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 903.887188][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.894407][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.920441][ T22] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 903.960875][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.989900][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 904.010358][ T22] usb 7-1: Product: syz [ 904.028257][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 904.051244][ T22] usb 7-1: Manufacturer: syz [ 904.069200][ T22] usb 7-1: SerialNumber: syz [ 904.098823][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 904.177091][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.184368][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.212730][ T5229] usb 2-1: USB disconnect, device number 54 [ 904.267701][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 904.980209][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 904.995156][ T22] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 905.007839][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 905.025863][ T22] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 905.331394][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 905.781371][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 905.791097][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 905.801526][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 905.817907][T10135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 905.829344][T10135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 905.844662][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 906.595666][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 906.631324][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 906.663986][ T22] snd-usb-audio: probe of 7-1:1.2 failed with error -22 [ 906.695820][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 906.754196][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 906.833021][ T9424] udevd[9424]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.859286][ T22] usb 7-1: USB disconnect, device number 5 [ 907.208460][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1444'. [ 907.217593][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1444'. [ 907.226703][T10402] netlink: 'syz.6.1444': attribute type 15 has an invalid length. [ 907.962394][ T4323] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 908.358544][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 908.358581][ T26] audit: type=1326 audit(1778954568.711:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 909.052021][ T26] audit: type=1326 audit(1778954568.711:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 909.228094][ T26] audit: type=1326 audit(1778954568.711:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 909.262364][ T4323] usb 2-1: device not accepting address 55, error -71 [ 909.642065][ T26] audit: type=1326 audit(1778954568.711:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 909.666840][ T26] audit: type=1326 audit(1778954568.711:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 909.703202][ T26] audit: type=1326 audit(1778954568.711:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 909.813262][ T26] audit: type=1326 audit(1778954568.711:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 909.856915][ T26] audit: type=1326 audit(1778954568.711:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 910.280939][ T26] audit: type=1326 audit(1778954568.721:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 910.704712][ T26] audit: type=1326 audit(1778954568.721:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.6.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 911.074473][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 911.112942][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 911.145572][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.447791][T10443] siw: device registration error -23 [ 913.551947][ T4323] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 914.449980][ T4323] usb 2-1: Using ep0 maxpacket: 16 [ 914.462621][ T4323] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 914.492336][ T4323] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 914.508695][ T4323] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 914.518405][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 914.551183][ T5229] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 914.622702][ T4323] usb 2-1: Product: syz [ 914.626961][ T4323] usb 2-1: Manufacturer: syz [ 914.631609][ T4323] usb 2-1: SerialNumber: syz [ 914.911046][ T5229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 914.928120][ T4323] usb 2-1: USB disconnect, device number 57 [ 914.944694][ T5229] usb 1-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 914.961940][ T5229] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 914.978831][ T5229] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 914.988803][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.997379][ T5229] usb 1-1: Product: syz [ 915.001562][ T5229] usb 1-1: Manufacturer: syz [ 915.006657][ T5229] usb 1-1: SerialNumber: syz [ 916.013368][ T5229] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 916.026935][ T5229] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 916.081428][ T5229] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 916.174077][ T5229] usb 1-1: USB disconnect, device number 31 [ 916.493860][ T9303] udevd[9303]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 916.632180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 916.670154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 916.743812][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 916.763245][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 916.981795][T10135] device veth0_vlan entered promiscuous mode [ 917.736101][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1455'. [ 917.745169][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1455'. [ 917.754153][T10471] netlink: 'syz.6.1455': attribute type 15 has an invalid length. [ 917.764127][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 917.780262][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.912391][T10135] device veth1_vlan entered promiscuous mode [ 917.978510][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 917.988320][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 918.026562][T10135] device veth0_macvtap entered promiscuous mode [ 918.130185][T10135] device veth1_macvtap entered promiscuous mode [ 919.132091][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 919.156955][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 919.264418][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.313079][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.342429][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.375969][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.441248][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.470361][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.501130][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.537772][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.587803][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.702360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 920.346966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 920.349858][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.349881][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.349893][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.349908][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.349922][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.349936][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.349949][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.349963][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.351238][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.360040][T10135] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.360082][T10135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.360113][T10135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.360144][T10135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.370323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 920.371218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 920.766969][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 920.766988][ T26] audit: type=1326 audit(1778954580.831:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.1.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 920.767035][ T26] audit: type=1326 audit(1778954580.841:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.1.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 920.767074][ T26] audit: type=1326 audit(1778954580.841:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.1.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 920.767112][ T26] audit: type=1326 audit(1778954580.841:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.1.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 920.767150][ T26] audit: type=1326 audit(1778954580.841:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.1.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 920.767189][ T26] audit: type=1326 audit(1778954580.841:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.1.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 920.767235][ T26] audit: type=1326 audit(1778954580.841:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.1.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 920.767274][ T26] audit: type=1326 audit(1778954580.841:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.1.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 922.039694][T10524] siw: device registration error -23 [ 926.028193][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 926.049354][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 926.064387][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 926.086744][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 926.145505][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 926.154961][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 926.290605][ T46] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.542036][ T8231] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 927.235763][ T8231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 927.279186][ T8231] usb 1-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 927.291946][ T46] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.302612][ T8231] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 927.334829][ T8231] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 927.346665][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 927.356129][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 927.365148][T10556] netlink: 'syz.1.1469': attribute type 15 has an invalid length. [ 927.380651][T10541] wg1 speed is unknown, defaulting to 1000 [ 927.774076][ T8231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.875669][ T8231] usb 1-1: Product: syz [ 927.951931][ T8231] usb 1-1: Manufacturer: syz [ 927.956635][ T8231] usb 1-1: SerialNumber: syz [ 928.192557][ T9325] Bluetooth: hci0: command 0x0409 tx timeout [ 928.699311][ T8231] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 928.736503][ T46] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.767126][ T8231] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 928.899834][ T8231] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 928.933155][ T8231] usb 1-1: USB disconnect, device number 32 [ 928.949547][ T46] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.233015][ T9424] udevd[9424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.363913][ T26] audit: type=1326 audit(1778954589.711:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 930.093708][ T26] audit: type=1326 audit(1778954589.711:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 930.156147][ T26] audit: type=1326 audit(1778954589.711:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 930.275795][ T9325] Bluetooth: hci0: command 0x041b tx timeout [ 930.335782][T10585] siw: device registration error -23 [ 930.708608][ T26] audit: type=1326 audit(1778954589.711:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 930.967156][ T26] audit: type=1326 audit(1778954589.711:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 931.062052][ T26] audit: type=1326 audit(1778954589.721:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 931.166087][ T26] audit: type=1326 audit(1778954589.721:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 931.469410][ T26] audit: type=1326 audit(1778954589.721:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 931.559010][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.568871][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.149401][ T26] audit: type=1326 audit(1778954589.721:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 932.284822][T10541] chnl_net:caif_netlink_parms(): no params data found [ 932.351945][ T9325] Bluetooth: hci0: command 0x040f tx timeout [ 932.389099][ T26] audit: type=1326 audit(1778954589.721:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 934.376108][ T26] audit: type=1326 audit(1778954589.721:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 934.401011][ T4259] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 934.482279][ T9325] Bluetooth: hci0: command 0x0419 tx timeout [ 934.631988][ T4259] usb 2-1: Using ep0 maxpacket: 16 [ 934.644231][ T4259] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 934.655204][ T4259] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 934.672583][ T26] audit: type=1326 audit(1778954589.721:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f506dd5d68e code=0x7ffc0000 [ 934.696911][ T26] audit: type=1326 audit(1778954589.721:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f506dd9e157 code=0x7ffc0000 [ 934.721205][ T26] audit: type=1326 audit(1778954589.721:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 934.748134][ T4259] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 934.768733][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 934.777363][ T4259] usb 2-1: Product: syz [ 934.781769][ T4259] usb 2-1: Manufacturer: syz [ 934.802215][ T4259] usb 2-1: SerialNumber: syz [ 934.822324][ T26] audit: type=1326 audit(1778954589.731:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f506dd9e157 code=0x7ffc0000 [ 934.907841][ T26] audit: type=1326 audit(1778954589.731:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f506dd5d68e code=0x7ffc0000 [ 934.964216][ T26] audit: type=1326 audit(1778954589.731:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 937.710489][ T26] audit: type=1326 audit(1778954589.731:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f506dd5d68e code=0x7ffc0000 [ 938.107893][ T4259] usb 2-1: USB disconnect, device number 58 [ 938.288095][ T26] audit: type=1326 audit(1778954589.731:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f506dd9e157 code=0x7ffc0000 [ 938.704601][ T26] audit: type=1326 audit(1778954589.731:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 939.737442][T10634] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 939.746415][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 939.746438][ T26] audit: type=1326 audit(1778954599.551:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 940.092052][ T8231] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 940.248008][T10541] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.255681][T10541] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.267707][ T26] audit: type=1326 audit(1778954599.551:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 940.341595][T10541] device bridge_slave_0 entered promiscuous mode [ 940.794104][ T8231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 940.819717][T10645] siw: device registration error -23 [ 940.826987][ T8231] usb 1-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 940.861996][ T26] audit: type=1326 audit(1778954599.551:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 940.895930][ T8231] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 940.916875][ T26] audit: type=1326 audit(1778954599.551:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 940.923074][ T9527] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 940.960882][ T8231] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 940.977998][ T8231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.987636][ T8231] usb 1-1: Product: syz [ 940.997242][ T8231] usb 1-1: Manufacturer: syz [ 941.006422][ T8231] usb 1-1: SerialNumber: syz [ 941.017563][ T26] audit: type=1326 audit(1778954599.551:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 941.051536][ T26] audit: type=1326 audit(1778954599.561:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 941.086217][ T26] audit: type=1326 audit(1778954599.561:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 941.111052][T10541] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.131048][T10541] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.153365][T10541] device bridge_slave_1 entered promiscuous mode [ 941.181926][ T9527] usb 2-1: Using ep0 maxpacket: 16 [ 941.189084][ T9527] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.201489][ T26] audit: type=1326 audit(1778954599.561:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 941.220979][ T9527] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.251937][ T9527] usb 2-1: config 0 interface 0 has no altsetting 0 [ 941.258791][ T9527] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 941.268023][ T9527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.297398][ T9527] usb 2-1: config 0 descriptor?? [ 941.327270][ T8231] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 941.337609][ T26] audit: type=1326 audit(1778954599.561:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 941.392464][ T26] audit: type=1326 audit(1778954599.561:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10635 comm="syz.6.1483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe71679ce59 code=0x7ffc0000 [ 941.808811][ T8231] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 942.136013][ T9527] usb 2-1: can't set config #0, error -71 [ 942.175529][ T9527] usb 2-1: USB disconnect, device number 59 [ 942.582390][ T8231] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 942.684793][T10541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.822150][ T8231] usb 1-1: USB disconnect, device number 33 [ 943.081317][T10541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.712011][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 943.721000][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 943.730014][T10664] netlink: 'syz.1.1489': attribute type 15 has an invalid length. [ 945.095664][ T9424] udevd[9424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.269292][T10541] team0: Port device team_slave_0 added [ 945.343479][ T52] block nbd1: Attempted send on invalid socket [ 945.349904][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 945.360727][ T52] block nbd1: Attempted send on invalid socket [ 945.367348][ T52] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 945.377691][T10674] Mount JFS Failure: -5 [ 949.610230][T10541] team0: Port device team_slave_1 added [ 950.719861][T10697] NILFS (nullb0): couldn't find nilfs on the device [ 951.380271][T10541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.428616][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.562558][T10705] siw: device registration error -23 [ 952.226833][T10541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.278773][ T46] device hsr_slave_0 left promiscuous mode [ 952.301508][ T46] device hsr_slave_1 left promiscuous mode [ 953.079010][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.079704][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.100039][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.100170][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.116667][ T46] device bridge_slave_1 left promiscuous mode [ 953.117263][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.416933][ T46] device bridge_slave_0 left promiscuous mode [ 953.417055][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.923499][ T4259] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 953.968698][ T46] device veth1_macvtap left promiscuous mode [ 953.968789][ T46] device veth0_macvtap left promiscuous mode [ 953.968874][ T46] device veth1_vlan left promiscuous mode [ 953.968941][ T46] device veth0_vlan left promiscuous mode [ 954.115360][ T4259] usb 6-1: unable to get BOS descriptor or descriptor too short [ 954.144524][ T4259] usb 6-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 954.145258][ T4259] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 954.158999][ T4259] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 954.159215][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.159379][ T4259] usb 6-1: Product: syz [ 954.159534][ T4259] usb 6-1: Manufacturer: syz [ 954.159690][ T4259] usb 6-1: SerialNumber: syz [ 954.421549][ T4259] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 954.459827][ T4259] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 954.644141][ T9527] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 954.681635][ T4259] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 954.685376][ T4259] usb 6-1: USB disconnect, device number 37 [ 954.821973][ T9527] usb 1-1: Using ep0 maxpacket: 16 [ 954.832612][ T9527] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.832649][ T9527] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.832672][ T9527] usb 1-1: config 0 interface 0 has no altsetting 0 [ 954.832703][ T9527] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 954.832729][ T9527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.834649][ T9527] usb 1-1: config 0 descriptor?? [ 954.952986][ T9424] udevd[9424]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.007765][ T46] team0 (unregistering): Port device team_slave_1 removed [ 960.169379][ T46] team0 (unregistering): Port device team_slave_0 removed [ 960.285730][ T9527] usbhid 1-1:0.0: can't add hid device: -32 [ 960.291765][ T9527] usbhid: probe of 1-1:0.0 failed with error -32 [ 960.408549][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.656134][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.306511][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 961.323369][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 961.339457][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 961.359204][ T4272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 961.367327][ T4272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 961.375700][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 961.564271][ T46] bond0 (unregistering): Released all slaves [ 961.681287][T10541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.689197][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.715315][T10541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.732197][T10724] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 961.782933][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1500'. [ 961.791973][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1500'. [ 961.800936][T10733] netlink: 'syz.5.1500': attribute type 15 has an invalid length. [ 961.951221][ T8231] usb 1-1: USB disconnect, device number 34 [ 962.115729][T10541] device hsr_slave_0 entered promiscuous mode [ 962.311298][T10541] device hsr_slave_1 entered promiscuous mode [ 963.155862][T10746] wg1 speed is unknown, defaulting to 1000 [ 963.473059][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 966.093184][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 967.756932][T10746] chnl_net:caif_netlink_parms(): no params data found [ 968.122246][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 968.141993][ T4835] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.320130][ T4835] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.364237][T10746] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.371408][T10746] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.426252][T10746] device bridge_slave_0 entered promiscuous mode [ 968.553946][ T4835] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.622842][T10746] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.630020][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.661965][T10746] device bridge_slave_1 entered promiscuous mode [ 968.711383][ T4835] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.837822][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 969.846925][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 969.856629][T10807] netlink: 'syz.1.1512': attribute type 15 has an invalid length. [ 969.941421][ T4322] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 970.192123][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 970.255457][ T4322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 970.301973][T10746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.388815][ T4322] usb 1-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 970.429795][T10746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.471023][T10811] siw: device registration error -23 [ 970.540717][ T4322] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 970.576247][T10746] team0: Port device team_slave_0 added [ 970.607938][T10746] team0: Port device team_slave_1 added [ 970.707550][ T4322] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 970.828753][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.893313][ T4322] usb 1-1: Product: syz [ 970.915016][ T4322] usb 1-1: Manufacturer: syz [ 970.947165][ T4322] usb 1-1: SerialNumber: syz [ 971.493666][T10541] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 971.561203][T10541] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 971.582947][T10541] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 972.787102][T10541] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 972.812788][ T4322] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 972.878292][T10746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.919371][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.945959][ T4322] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 973.029671][T10746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.076851][T10746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.091726][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.094652][ T4322] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 973.134511][T10746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.194221][ T4322] usb 1-1: USB disconnect, device number 35 [ 975.240259][ T9424] udevd[9424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.510106][T10746] device hsr_slave_0 entered promiscuous mode [ 975.882669][T10746] device hsr_slave_1 entered promiscuous mode [ 975.918567][T10746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.974988][T10746] Cannot create hsr debugfs directory [ 976.246918][T10541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.581947][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 976.581992][ T26] audit: type=1326 audit(1778954636.691:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 977.562139][ T1043] block nbd5: Attempted send on invalid socket [ 977.568498][ T1043] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 977.578694][ T1043] block nbd5: Attempted send on invalid socket [ 977.585150][ T1043] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 977.594780][T10852] Mount JFS Failure: -5 [ 977.844289][T10541] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.851432][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 977.859726][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 977.999016][ T26] audit: type=1326 audit(1778954636.691:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 979.164045][ T26] audit: type=1326 audit(1778954636.691:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 979.189895][ T26] audit: type=1326 audit(1778954636.691:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 979.217438][ T26] audit: type=1326 audit(1778954636.701:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 979.242150][ T26] audit: type=1326 audit(1778954636.701:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 979.266687][ T26] audit: type=1326 audit(1778954636.701:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 979.292349][ T26] audit: type=1326 audit(1778954636.701:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f506dd9ce59 code=0x7ffc0000 [ 979.370425][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 979.385035][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 979.407208][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.414460][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.504771][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 980.142082][ T4322] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 980.260649][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 980.293156][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 980.333764][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.340920][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.348119][ T4322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 980.351797][ T4322] usb 1-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 980.390710][ T4322] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 980.434687][ T4322] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 980.448515][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 980.457812][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.486511][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 980.551181][ T4322] usb 1-1: Product: syz [ 980.584778][ T4322] usb 1-1: Manufacturer: syz [ 980.637270][ T4322] usb 1-1: SerialNumber: syz [ 981.024829][ T4322] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 981.176405][ T4322] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 982.187513][ T4322] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 982.289316][ T4322] usb 1-1: USB disconnect, device number 36 [ 982.370556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 982.414468][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 982.481330][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 982.774456][ T9303] udevd[9303]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.949017][T10903] vivid-001: disconnect [ 985.582006][T10895] vivid-001: reconnect [ 986.150111][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 986.160993][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 986.178211][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 986.195791][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 986.203697][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 986.212266][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 986.242188][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 986.415543][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 986.871866][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1535'. [ 987.718599][T10908] wg1 speed is unknown, defaulting to 1000 [ 987.998441][T10931] NILFS (nullb0): couldn't find nilfs on the device [ 988.352062][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 989.207695][ T4835] device hsr_slave_0 left promiscuous mode [ 989.228404][ T4835] device hsr_slave_1 left promiscuous mode [ 989.252321][ T4321] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 989.265497][ T4835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.290980][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.342381][ T4835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.404951][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.432756][ T4835] device bridge_slave_1 left promiscuous mode [ 989.454611][ T4321] usb 6-1: unable to get BOS descriptor or descriptor too short [ 989.461372][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.480543][ T4321] usb 6-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 989.512767][ T4835] device bridge_slave_0 left promiscuous mode [ 989.543299][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.679966][ T4321] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.703201][ T4321] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 989.711625][ T4835] device veth1_macvtap left promiscuous mode [ 989.721864][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.729925][ T4321] usb 6-1: Product: syz [ 989.748426][ T4321] usb 6-1: Manufacturer: syz [ 989.780594][ T4835] device veth0_macvtap left promiscuous mode [ 989.931232][ T4835] device veth1_vlan left promiscuous mode [ 990.019958][ T4835] device veth0_vlan left promiscuous mode [ 990.456880][ T9325] Bluetooth: hci2: command 0x041b tx timeout [ 990.493161][ T4321] usb 6-1: SerialNumber: syz [ 991.460564][ T4321] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 991.513511][ T4321] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 991.576997][ T4321] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 991.597253][ T4321] usb 6-1: USB disconnect, device number 38 [ 991.897684][ T9293] udevd[9293]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.593405][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 993.029872][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.068171][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.814869][ T9325] Bluetooth: hci2: command 0x0419 tx timeout [ 995.668739][ T4835] team0 (unregistering): Port device team_slave_1 removed [ 995.799753][ T4835] team0 (unregistering): Port device team_slave_0 removed [ 995.868376][ T4835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.927780][ T4835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.906246][ T4835] bond0 (unregistering): Released all slaves [ 997.185865][T10746] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 997.228338][T10746] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 997.335468][T10746] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 997.379438][T10746] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 997.414419][T10908] chnl_net:caif_netlink_parms(): no params data found [ 998.093854][T10908] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.102814][ T4259] kernel read not supported for file /dsp (pid: 4259 comm: kworker/1:3) [ 998.142019][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.202797][T10908] device bridge_slave_0 entered promiscuous mode [ 998.278764][T10908] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.291396][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.691952][T10908] device bridge_slave_1 entered promiscuous mode [ 999.718728][T10908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.730644][T10908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.791681][T10908] team0: Port device team_slave_0 added [ 999.875270][T10908] team0: Port device team_slave_1 added [ 999.944550][T10908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.951683][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.978708][T10908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.992354][T10908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.999351][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.231327][T10908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.395335][T11019] (syz.0.1551,11019,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1000.404605][T11019] (syz.0.1551,11019,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1001.073839][T10746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.129423][T10908] device hsr_slave_0 entered promiscuous mode [ 1001.177407][T10908] device hsr_slave_1 entered promiscuous mode [ 1001.217914][T10908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.257540][T10908] Cannot create hsr debugfs directory [ 1001.738811][ T5229] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1001.789045][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1002.162650][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1002.519251][T11029] siw: device registration error -23 [ 1003.723697][T10746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.939346][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1003.953282][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1003.972357][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.979564][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.062544][T11037] device syzkaller0 entered promiscuous mode [ 1004.080563][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1004.094595][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1004.114293][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1004.136364][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.143694][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.172147][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1004.196038][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1004.411477][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1004.441265][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1004.478358][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1004.808038][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1004.823184][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1004.840753][T10746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1007.536168][T10746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1007.906406][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1008.167035][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1008.257560][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1008.282920][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1008.327143][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1008.792845][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1556'. [ 1009.921920][ T4321] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1010.136290][ T4321] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1010.158659][ T4321] usb 6-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 1010.192953][ T4321] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1010.245160][ T4321] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1010.280086][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.302469][ T4321] usb 6-1: Product: syz [ 1010.306725][ T4321] usb 6-1: Manufacturer: syz [ 1010.327791][ T4321] usb 6-1: SerialNumber: syz [ 1010.750133][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1010.761473][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1011.400495][T10746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.629053][T11101] ieee802154 phy0 wpan0: encryption failed: -22 [ 1012.273816][T10908] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1012.385059][T10908] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1012.429531][T10908] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1012.500867][ T4835] device hsr_slave_0 left promiscuous mode [ 1012.544166][ T4835] device hsr_slave_1 left promiscuous mode [ 1012.590620][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.661579][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.713419][ T4835] device bridge_slave_1 left promiscuous mode [ 1012.719814][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.813663][ T4835] device bridge_slave_0 left promiscuous mode [ 1012.851450][ T4321] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1012.883051][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.915274][ T4321] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 1013.097565][ T4321] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 1013.170451][ T4321] usb 6-1: USB disconnect, device number 39 [ 1013.967644][ T9303] udevd[9303]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1014.821978][ T9523] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1015.032081][ T9523] usb 1-1: Using ep0 maxpacket: 16 [ 1015.040571][ T9523] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.111316][ T9523] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1015.134948][ T9523] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1015.177111][ T9523] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1015.201903][ T9523] usb 1-1: Product: syz [ 1015.206155][ T9523] usb 1-1: Manufacturer: syz [ 1015.210788][ T9523] usb 1-1: SerialNumber: syz [ 1015.351212][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1576'. [ 1016.246130][ T4835] team0 (unregistering): Port device team_slave_1 removed [ 1016.305355][ T4835] team0 (unregistering): Port device team_slave_0 removed [ 1016.428190][ T4835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.532170][ T4322] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1016.579406][ T4835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.735321][ T4322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1016.761886][ T4322] usb 6-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 1016.772753][ T4322] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1016.790289][ T4322] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1016.799703][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.807948][ T4322] usb 6-1: Product: syz [ 1016.822026][ T4322] usb 6-1: Manufacturer: syz [ 1016.831966][ T4322] usb 6-1: SerialNumber: syz [ 1018.050749][ T4835] bond0 (unregistering): Released all slaves [ 1018.263953][T10908] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1018.430626][ T9523] usb 1-1: USB disconnect, device number 37 [ 1018.606913][ T4322] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1019.189475][ T4322] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 1019.346573][ T4322] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 1019.357989][T10908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.440605][ T9293] udevd[9293]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.483072][ T4322] usb 6-1: USB disconnect, device number 40 [ 1019.542355][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1019.592347][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1019.623392][T10908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.681714][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1019.702842][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1019.748852][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.756106][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.820428][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1019.900566][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1019.920524][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1019.953250][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.960419][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.002596][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.048868][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1020.085530][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1020.097619][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'. [ 1020.124044][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.160379][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.198253][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.217393][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.411593][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.429193][T11186] siw: device registration error -23 [ 1020.819444][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.851726][T10746] device veth0_vlan entered promiscuous mode [ 1020.871928][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1020.880468][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1020.902532][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.946693][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1021.015535][T10908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.048361][T10908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1021.133686][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1021.156727][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1021.197431][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1021.250042][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1022.852009][T10567] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1023.264099][T10567] usb 1-1: Using ep0 maxpacket: 16 [ 1023.323782][T10567] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.444827][T10567] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1023.813828][T10567] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1023.978519][T10567] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1023.989367][T10567] usb 1-1: Product: syz [ 1023.997042][T10567] usb 1-1: Manufacturer: syz [ 1024.001706][T10567] usb 1-1: SerialNumber: syz [ 1024.202932][ T9325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1024.214267][ T9325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1024.225009][ T9325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1024.270522][ T9325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1024.280995][ T9325] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1024.299087][ T9325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1025.342112][T10567] usb 1-1: USB disconnect, device number 38 [ 1025.407433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1025.427495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1025.448486][T11213] wg1 speed is unknown, defaulting to 1000 [ 1025.605475][T10908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.731941][ T8231] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1025.940784][ T8231] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1025.960074][ T8231] usb 6-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 1025.986955][ T8231] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1026.051708][ T8231] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1026.071888][ T8231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.095191][ T8231] usb 6-1: Product: syz [ 1026.114350][ T8231] usb 6-1: Manufacturer: syz [ 1026.129856][ T8231] usb 6-1: SerialNumber: syz [ 1026.352230][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 1026.713227][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'. [ 1027.279174][T11229] device syzkaller0 entered promiscuous mode [ 1027.322031][ T4259] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1027.549021][ T4259] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1027.572121][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.612732][ T4259] usb 2-1: Product: syz [ 1027.618356][ T4259] usb 2-1: Manufacturer: syz [ 1027.640186][ T4259] usb 2-1: SerialNumber: syz [ 1027.671476][ T4259] usb 2-1: config 0 descriptor?? [ 1027.899296][ T4259] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1028.431981][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 1028.703373][ T8231] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1028.833217][ T8231] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 1029.004156][ T8231] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 1029.102215][ T8231] usb 6-1: USB disconnect, device number 41 [ 1029.179771][ T9293] udevd[9293]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1029.214351][T11213] chnl_net:caif_netlink_parms(): no params data found [ 1029.400155][ T4259] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1029.610644][ T4259] usb 2-1: USB disconnect, device number 61 [ 1029.947979][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.031593][T11213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.096740][T11213] device bridge_slave_0 entered promiscuous mode [ 1030.216957][T11213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.241180][T11213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.263400][T11213] device bridge_slave_1 entered promiscuous mode [ 1030.388167][T11271] Invalid ELF header type: 3 != 1 [ 1030.521877][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 1032.462005][ T8231] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1032.590551][T11213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.602017][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 1032.789266][T11213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.852062][ T8231] usb 2-1: Using ep0 maxpacket: 16 [ 1032.860228][ T8231] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.892002][ T8231] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1032.964297][ T8231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1032.981880][ T8231] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1032.990171][ T8231] usb 2-1: Product: syz [ 1033.009826][ T8231] usb 2-1: Manufacturer: syz [ 1033.041339][ T8231] usb 2-1: SerialNumber: syz [ 1033.116676][T11213] team0: Port device team_slave_0 added [ 1033.243135][T11213] team0: Port device team_slave_1 added [ 1033.261569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1033.301680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1033.690426][ T4429] device hsr_slave_0 left promiscuous mode [ 1033.701256][ T4429] device hsr_slave_1 left promiscuous mode [ 1033.709912][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.718437][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.745040][ T4429] device bridge_slave_1 left promiscuous mode [ 1033.760332][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.771500][ T4429] device bridge_slave_0 left promiscuous mode [ 1033.785762][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.863822][ T4429] device veth0_vlan left promiscuous mode [ 1034.411938][ T4322] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1034.432213][ T8231] usb 2-1: USB disconnect, device number 62 [ 1034.658881][ T4322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1034.687304][ T4322] usb 1-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 1034.858870][ T4322] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1034.895416][ T4322] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1034.923492][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.942055][ T4322] usb 1-1: Product: syz [ 1034.949898][ T4322] usb 1-1: Manufacturer: syz [ 1034.965971][ T4322] usb 1-1: SerialNumber: syz [ 1035.220470][T11299] vivid-001: disconnect [ 1035.288744][T11298] vivid-001: reconnect [ 1035.648358][ T4429] team0 (unregistering): Port device team_slave_1 removed [ 1035.805582][ T4429] team0 (unregistering): Port device team_slave_0 removed [ 1035.928456][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.132773][T11305] Invalid ELF header type: 3 != 1 [ 1036.162269][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.851192][ T4322] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1036.933140][ T4322] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 1036.965402][ T4322] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 1037.013702][ T9424] udevd[9424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.031315][ T4322] usb 1-1: USB disconnect, device number 39 [ 1037.164759][ T4429] bond0 (unregistering): Released all slaves [ 1037.267244][T11213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.274492][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.300678][T11213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.320080][T11213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.329424][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.357605][T11213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.475216][T10908] device veth0_vlan entered promiscuous mode [ 1037.617637][T11213] device hsr_slave_0 entered promiscuous mode [ 1037.672514][T11213] device hsr_slave_1 entered promiscuous mode [ 1037.693492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1037.729147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1037.758971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1038.039284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1038.522271][ T4259] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1038.711927][ T4259] usb 1-1: Using ep0 maxpacket: 16 [ 1038.724700][T10908] device veth1_vlan entered promiscuous mode [ 1038.743241][ T4259] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.789851][ T4259] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1038.813537][ T4259] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1038.832002][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1039.023851][ T4259] usb 1-1: Product: syz [ 1039.028125][ T4259] usb 1-1: Manufacturer: syz [ 1039.035125][ T4259] usb 1-1: SerialNumber: syz [ 1039.127542][T11337] vivid-001: disconnect [ 1039.141086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.143628][T11336] vivid-001: reconnect [ 1039.164109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.275924][T10908] device veth0_macvtap entered promiscuous mode [ 1039.359028][T10908] device veth1_macvtap entered promiscuous mode [ 1039.534222][ T1043] block nbd5: Attempted send on invalid socket [ 1039.540617][ T1043] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.550939][ T1043] block nbd5: Attempted send on invalid socket [ 1039.557252][ T1043] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1039.567083][T11344] Mount JFS Failure: -5 [ 1040.319543][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1040.373721][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1040.483291][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.495473][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.505635][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.516977][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.527350][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.538164][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.550423][T10908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.558431][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1040.593502][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1040.645770][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.657590][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.668099][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.678780][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.689285][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.700755][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.714118][T10908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.814132][ T4259] usb 1-1: USB disconnect, device number 40 [ 1040.891327][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.912884][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.975161][T10908] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.005293][T10908] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.033013][T10908] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.066615][T10908] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.308466][T11358] Invalid ELF header type: 3 != 1 [ 1043.501950][ T128] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1043.712036][ T128] usb 6-1: Using ep0 maxpacket: 16 [ 1043.717484][ T5229] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1043.727514][ T128] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.757158][ T128] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1043.800151][ T128] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1043.810604][ T128] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1043.824516][ T128] usb 6-1: Product: syz [ 1043.828835][ T128] usb 6-1: Manufacturer: syz [ 1043.836799][ T128] usb 6-1: SerialNumber: syz [ 1043.940615][ T5229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1044.070592][ T128] usb 6-1: USB disconnect, device number 42 [ 1044.116096][ T5229] usb 1-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 1044.130947][ T5229] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1044.217014][ T5229] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1044.231624][T11213] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1044.259671][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.303519][ T5229] usb 1-1: Product: syz [ 1044.326706][ T5229] usb 1-1: Manufacturer: syz [ 1044.350550][ T5229] usb 1-1: SerialNumber: syz [ 1044.632607][T11213] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1045.333207][T11373] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 1045.889251][T11213] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1045.902055][T10567] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1045.943550][T11213] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1046.152047][T10567] usb 2-1: Using ep0 maxpacket: 16 [ 1046.186383][T10567] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.242092][T10567] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.300633][T10567] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1046.336900][T10567] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1046.352284][T10567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.430223][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1046.441650][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1046.452931][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1046.472315][T10567] usb 2-1: config 0 descriptor?? [ 1046.478749][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1046.494923][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1046.502596][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1046.713074][T11382] wg1 speed is unknown, defaulting to 1000 [ 1046.890685][ T4403] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.904722][T10567] usbhid 2-1:0.0: can't add hid device: -71 [ 1046.924637][T10567] usbhid: probe of 2-1:0.0 failed with error -71 [ 1046.969990][T10567] usb 2-1: USB disconnect, device number 63 [ 1047.159443][ T5229] usb 1-1: can't set config #1, error -71 [ 1047.176244][ T4403] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.228425][ T5229] usb 1-1: USB disconnect, device number 41 [ 1048.358755][ T4403] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.546166][ T9325] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1048.558688][ T9325] CPU: 1 PID: 9325 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1048.566321][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1048.576435][ T9325] Workqueue: hci1 hci_rx_work [ 1048.581255][ T9325] Call Trace: [ 1048.584645][ T9325] [ 1048.587696][ T9325] dump_stack_lvl+0x188/0x24e [ 1048.592518][ T9325] ? show_regs_print_info+0x12/0x12 [ 1048.597778][ T9325] ? load_image+0x400/0x400 [ 1048.602380][ T9325] sysfs_create_dir_ns+0x26a/0x290 [ 1048.607572][ T9325] ? sysfs_warn_dup+0xa0/0xa0 [ 1048.612274][ T9325] ? do_raw_spin_unlock+0x11d/0x230 [ 1048.617505][ T9325] kobject_add_internal+0x61c/0xcc0 [ 1048.622743][ T9325] kobject_add+0x160/0x230 [ 1048.627180][ T9325] ? kobject_init+0x1d0/0x1d0 [ 1048.631897][ T9325] ? klist_children_get+0x50/0x50 [ 1048.637047][ T9325] ? get_device_parent+0x121/0x3f0 [ 1048.642225][ T9325] device_add+0x483/0xfb0 [ 1048.646627][ T9325] ? kmem_cache_free+0xf7/0x290 [ 1048.651629][ T9325] hci_conn_add_sysfs+0xd1/0x1e0 [ 1048.656659][ T9325] le_conn_complete_evt+0x1062/0x1670 [ 1048.662071][ T9325] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1048.668339][ T9325] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1048.674076][ T9325] ? skb_pull_data+0xf7/0x200 [ 1048.678787][ T9325] hci_le_conn_complete_evt+0x183/0x440 [ 1048.684380][ T9325] ? hci_remote_host_features_evt+0x270/0x270 [ 1048.690534][ T9325] hci_event_packet+0x7b9/0x1280 [ 1048.695539][ T9325] ? bis_list+0x280/0x280 [ 1048.699914][ T9325] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1048.705855][ T9325] ? kcov_remote_start+0x4c7/0x7e0 [ 1048.711009][ T9325] ? patch_conexant_auto+0x1260/0x1650 [ 1048.716567][ T9325] ? hci_send_to_monitor+0x9c/0x4a0 [ 1048.721840][ T9325] hci_rx_work+0x3eb/0xd40 [ 1048.726311][ T9325] ? _raw_spin_unlock+0x40/0x40 [ 1048.731214][ T9325] ? process_one_work+0x7b0/0x1160 [ 1048.736449][ T9325] process_one_work+0x8a2/0x1160 [ 1048.741434][ T9325] ? worker_detach_from_pool+0x240/0x240 [ 1048.747106][ T9325] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1048.752165][ T9325] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1048.757744][ T9325] ? kthread_data+0x4b/0xc0 [ 1048.762294][ T9325] worker_thread+0xaa2/0x1270 [ 1048.767024][ T9325] ? __kthread_parkme+0x162/0x1c0 [ 1048.772092][ T9325] kthread+0x29d/0x330 [ 1048.776260][ T9325] ? worker_clr_flags+0x1a0/0x1a0 [ 1048.781318][ T9325] ? kthread_blkcg+0xd0/0xd0 [ 1048.785951][ T9325] ret_from_fork+0x1f/0x30 [ 1048.790441][ T9325] [ 1048.793938][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 1048.810202][ T9325] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1048.824544][ T9325] Bluetooth: hci1: failed to register connection device [ 1048.834605][ T9325] Bluetooth: hci1: link tx timeout [ 1048.840089][ T9325] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1048.848142][ T9325] Bluetooth: hci1: link tx timeout [ 1048.853436][ T9325] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1048.995946][ T4403] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.047333][T11213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.176441][T11213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.187941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1049.213289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.242099][ T4323] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1049.657934][ T4323] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 1049.742204][ T5229] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1049.805742][ T4323] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1049.932038][ T5229] usb 6-1: Using ep0 maxpacket: 16 [ 1049.940503][ T5229] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.984876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1050.013673][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.022832][ T5229] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1050.038645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1050.067219][ T4323] usb 1-1: Product: syz [ 1050.085972][ T5229] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1050.096197][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.104122][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.121872][ T4323] usb 1-1: Manufacturer: syz [ 1050.135971][ T4323] usb 1-1: SerialNumber: syz [ 1050.151078][ T5229] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1050.170481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1050.189617][ T5229] usb 6-1: Product: syz [ 1050.197369][ T5229] usb 6-1: Manufacturer: syz [ 1050.207633][ T4323] usb 1-1: config 0 descriptor?? [ 1050.219523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1050.237140][ T5229] usb 6-1: SerialNumber: syz [ 1050.267736][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.274977][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.283221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1050.292534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1050.301712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1050.332884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1050.348741][ T4323] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 1050.360479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1050.370002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1050.380318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1050.389774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1050.399842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.426476][T11213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1050.503475][ T9412] udevd[9412]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.521118][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.532743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1050.557411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.580340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.612186][ T4321] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1050.723437][T11382] chnl_net:caif_netlink_parms(): no params data found [ 1050.821948][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 1050.852139][ T9325] Bluetooth: hci2: command 0x041b tx timeout [ 1050.863536][ T4321] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.912250][ T4321] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1050.946078][ T4321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1050.960572][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1050.971561][ T4321] usb 2-1: Product: syz [ 1050.977252][ T9325] Bluetooth: hci1: command 0x0406 tx timeout [ 1050.993246][ T4321] usb 2-1: Manufacturer: syz [ 1051.026022][ T4321] usb 2-1: SerialNumber: syz [ 1051.609172][ T4321] usb 2-1: USB disconnect, device number 64 [ 1052.104136][ T5229] usb 6-1: USB disconnect, device number 43 [ 1052.432936][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.476179][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.551746][T11382] device bridge_slave_0 entered promiscuous mode [ 1052.588608][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.642046][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.674802][T11382] device bridge_slave_1 entered promiscuous mode [ 1052.805295][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.815649][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.825032][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.834313][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.843568][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.852754][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.861930][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.871076][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.880223][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.889515][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1052.978342][ T5229] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1052.986297][ T9325] Bluetooth: hci2: command 0x040f tx timeout [ 1053.207242][ T5229] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1053.227409][ T5229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.265480][ T5229] usb 6-1: Product: syz [ 1053.279960][ T5229] usb 6-1: Manufacturer: syz [ 1053.290078][ T5229] usb 6-1: SerialNumber: syz [ 1053.338279][ T5229] usb 6-1: config 0 descriptor?? [ 1053.595904][ T8231] usb 1-1: USB disconnect, device number 42 [ 1053.631919][ T5229] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1053.666960][T11382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.696044][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1053.723177][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1053.759238][T11382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.790184][T11213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.974131][T11443] netlink: 'syz.0.1640': attribute type 13 has an invalid length. [ 1054.002156][ T4321] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1054.105796][T11443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1054.145149][T11443] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1054.166353][T11443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1054.188176][T11443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1054.244506][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1054.257575][ T4321] usb 2-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 1054.268609][ T4321] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1054.294718][ T4321] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1054.304213][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.312459][ T4321] usb 2-1: Product: syz [ 1054.316669][ T4321] usb 2-1: Manufacturer: syz [ 1054.321301][ T4321] usb 2-1: SerialNumber: syz [ 1054.435087][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.441464][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.468019][T11382] team0: Port device team_slave_0 added [ 1054.508450][T11382] team0: Port device team_slave_1 added [ 1054.555967][ T4321] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1054.595952][ T4321] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1054.640181][T11382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.675878][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.725495][ T4321] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1054.743745][ T4321] usb 2-1: USB disconnect, device number 65 [ 1054.750100][T11382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.826205][T11382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.849104][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.882434][T11382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.984576][ T9303] udevd[9303]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1055.052076][ T5229] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1055.073674][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 1055.241441][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 1055.260734][ T5229] usb 6-1: USB disconnect, device number 44 [ 1055.317647][ T4403] device hsr_slave_0 left promiscuous mode [ 1055.347975][ T4403] device hsr_slave_1 left promiscuous mode [ 1055.377476][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.414624][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.511551][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.658644][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.662668][ T4321] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1055.683724][ T4403] device bridge_slave_1 left promiscuous mode [ 1055.690160][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.751619][ T4403] device bridge_slave_0 left promiscuous mode [ 1055.772003][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.032130][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 1056.039263][ T4321] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.106341][ T4321] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.132110][ T4321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1056.149072][ T4321] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1056.179441][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.220633][ T4321] usb 1-1: config 0 descriptor?? [ 1056.227965][ T4403] device veth1_macvtap left promiscuous mode [ 1056.235119][ T4403] device veth0_macvtap left promiscuous mode [ 1056.262699][ T4403] device veth1_vlan left promiscuous mode [ 1056.268604][ T4403] device veth0_vlan left promiscuous mode [ 1057.501975][ T128] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1057.522313][T10567] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1057.702052][ T128] usb 2-1: Using ep0 maxpacket: 16 [ 1057.711339][ T128] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.734810][T10567] usb 6-1: Using ep0 maxpacket: 16 [ 1057.740133][ T128] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1057.750043][T10567] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.755182][ T128] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1057.778783][T10567] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1057.778796][ T128] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1057.778820][ T128] usb 2-1: Product: syz [ 1057.795291][T10567] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1057.798731][ T128] usb 2-1: Manufacturer: syz [ 1057.816822][ T128] usb 2-1: SerialNumber: syz [ 1057.817085][T10567] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1057.838828][T10567] usb 6-1: Product: syz [ 1057.844846][T10567] usb 6-1: Manufacturer: syz [ 1057.849577][T10567] usb 6-1: SerialNumber: syz [ 1058.254982][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 1058.336599][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 1058.410836][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.490012][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.986249][ T4403] bond0 (unregistering): Released all slaves [ 1059.136490][T11458] tunl0: Caught tx_queue_len zero misconfig [ 1059.144956][T11458] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 1059.171279][T10567] usb 6-1: USB disconnect, device number 45 [ 1059.255970][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1059.296031][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1059.336751][T11382] device hsr_slave_0 entered promiscuous mode [ 1059.352025][ T4321] usbhid 1-1:0.0: can't add hid device: -71 [ 1059.363589][T11382] device hsr_slave_1 entered promiscuous mode [ 1059.375843][ T4321] usbhid: probe of 1-1:0.0 failed with error -71 [ 1059.386053][ T4321] usb 1-1: USB disconnect, device number 43 [ 1059.418122][T11382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1059.450859][T11382] Cannot create hsr debugfs directory [ 1059.575853][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1059.594377][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1059.624606][T11213] device veth0_vlan entered promiscuous mode [ 1059.631606][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1059.648380][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1059.834921][T11213] device veth1_vlan entered promiscuous mode [ 1060.015969][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1060.027732][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1060.041219][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1060.075353][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1060.122318][T11213] device veth0_macvtap entered promiscuous mode [ 1060.193727][ T4272] Bluetooth: hci5: Unknown advertising packet type: 0x3030 [ 1060.193812][ T4272] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1060.227441][ T128] usb 2-1: USB disconnect, device number 66 [ 1060.313586][T11213] device veth1_macvtap entered promiscuous mode [ 1060.322143][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1060.342336][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1060.437425][T11213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.458633][T11213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.470456][T11213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.483092][T11213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.493285][T11213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.504080][T11213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.523333][T11213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.575294][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1060.589748][ T4322] kernel write not supported for file /dsp (pid: 4322 comm: kworker/0:5) [ 1060.590732][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1060.615745][T11213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.627522][T11213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.638045][T11213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.665060][T11213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.743347][T11213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.010429][T11213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.046627][T11213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.092189][ T9523] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1061.137678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1061.163076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1061.179691][T11213] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.199586][T11213] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.210199][T11213] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.220389][T11213] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.315167][ T9523] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1061.343759][ T9523] usb 2-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 1061.360877][ T9523] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1061.413192][ T9523] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1061.422691][ T9523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.430738][ T9523] usb 2-1: Product: syz [ 1061.435127][ T9523] usb 2-1: Manufacturer: syz [ 1061.439770][ T9523] usb 2-1: SerialNumber: syz [ 1061.547753][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.575125][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.584618][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1061.642408][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.672060][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.686605][ T9523] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1061.712502][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1061.747401][ T9523] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1061.960099][ T9523] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1062.019735][ T9523] usb 2-1: USB disconnect, device number 67 [ 1062.047923][T11382] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1062.257081][T11382] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1062.264324][ T4322] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1168.611770][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1168.618470][ C1] rcu: 1-...!: (10500 ticks this GP) idle=dffc/0/0x1 softirq=53249/53249 fqs=0 [ 1168.629050][ C1] (t=10500 jiffies g=79293 q=130 ncpus=2) [ 1168.634912][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g79293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1168.647276][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=54382 [ 1168.655201][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g79293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1168.666614][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1168.676628][ C1] rcu: RCU grace-period kthread stack dump: [ 1168.682551][ C1] task:rcu_preempt state:I stack:26768 pid:16 ppid:2 flags:0x00004000 [ 1168.691812][ C1] Call Trace: [ 1168.695127][ C1] [ 1168.698105][ C1] __schedule+0x11d1/0x40e0 [ 1168.702671][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1168.708614][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1168.714570][ C1] ? __sched_text_start+0x8/0x8 [ 1168.719478][ C1] ? __mod_timer+0x91e/0xd00 [ 1168.724126][ C1] schedule+0xb9/0x180 [ 1168.728251][ C1] schedule_timeout+0x184/0x2d0 [ 1168.733153][ C1] ? console_conditional_schedule+0x40/0x40 [ 1168.739094][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1168.745166][ C1] ? update_process_times+0x1b0/0x1b0 [ 1168.750585][ C1] ? prepare_to_swait_event+0x335/0x350 [ 1168.756192][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 1168.761205][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1168.766102][ C1] ? preempt_schedule+0xbc/0xd0 [ 1168.771015][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1168.776317][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 1168.781129][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1168.786565][ C1] rcu_gp_kthread+0x99/0x3b0 [ 1168.791218][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1168.796400][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1168.802364][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1168.807454][ C1] kthread+0x29d/0x330 [ 1168.811582][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1168.816743][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1168.821403][ C1] ret_from_fork+0x1f/0x30 [ 1168.825883][ C1] [ 1168.828939][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1168.835296][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1168.842355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1168.852443][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1168.857521][ C1] Code: 48 89 df e8 d7 a4 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d a7 ba 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1168.877254][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1168.883440][ C1] RAX: 09a17b49057b5b00 RBX: ffffffff8a37f307 RCX: 09a17b49057b5b00 [ 1168.891454][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 1168.901658][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1168.909684][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 1168.917702][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffff9200002efc8 [ 1168.925713][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1168.934690][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.941311][ C1] CR2: 00007f18059316a2 CR3: 0000000060686000 CR4: 00000000003506e0 [ 1168.949331][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1168.957349][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1168.965366][ C1] Call Trace: [ 1168.968682][ C1] [ 1168.971650][ C1] default_idle_call+0x84/0xc0 [ 1168.976469][ C1] do_idle+0x3a2/0x680 [ 1168.980598][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1168.985855][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1168.992065][ C1] ? schedule_idle+0x57/0x90 [ 1168.996709][ C1] cpu_startup_entry+0x3f/0x60 [ 1169.001522][ C1] start_secondary+0xe4/0xf0 [ 1169.006158][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1169.012118][ C1] [ 1169.015206][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1169.020454][ C0] NMI backtrace for cpu 0 [ 1169.020465][ C0] CPU: 0 PID: 11503 Comm: syz.8.1503 Not tainted syzkaller #0 [ 1169.020482][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1169.020517][ C0] RIP: 0010:lock_release+0x565/0x920 [ 1169.020546][ C0] Code: 24 10 48 8b 54 24 30 e8 29 6d 00 00 4c 8b 7c 24 18 48 c7 c7 20 2b 8c 8a e8 a8 35 c9 08 b8 ff ff ff ff 65 0f c1 05 cb a3 9d 7e <83> f8 01 75 7f 43 c6 44 2f 04 00 48 c7 84 24 80 00 00 00 00 00 00 [ 1169.020574][ C0] RSP: 0018:ffffc90000007b80 EFLAGS: 00000057 [ 1169.020590][ C0] RAX: 0000000000000001 RBX: 4e622595c03359dc RCX: 0b3d60b9ffa79400 [ 1169.020603][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c2b20 RDI: ffffffff8adf1ba0 [ 1169.020616][ C0] RBP: ffffc90000007c90 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 1169.020629][ C0] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: ffff88802b410b08 [ 1169.020642][ C0] R13: dffffc0000000000 R14: ffff88802b410ad0 R15: 1ffff92000000f7c [ 1169.020654][ C0] FS: 00007fe2f81816c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1169.020670][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1169.020682][ C0] CR2: 000000110c2cb844 CR3: 0000000060686000 CR4: 00000000003506f0 [ 1169.020697][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1169.020707][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1169.020718][ C0] Call Trace: [ 1169.020725][ C0] [ 1169.020732][ C0] ? __hrtimer_run_queues+0x2d5/0xd50 [ 1169.020756][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1169.020782][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1169.020802][ C0] ? _raw_spin_lock+0x40/0x40 [ 1169.020822][ C0] _raw_spin_unlock_irqrestore+0x6d/0x120 [ 1169.020843][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1169.020862][ C0] ? debug_object_deactivate+0x62/0x390 [ 1169.020960][ C0] __hrtimer_run_queues+0x2d5/0xd50 [ 1169.020988][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1169.021012][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 1169.021044][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1169.021072][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1169.021092][ C0] [ 1169.021103][ C0] [ 1169.021109][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1169.021133][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 1169.021153][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 5e c1 2c f7 48 89 df e8 a6 89 2d f7 e8 81 e0 50 f7 fb bf 01 00 00 00 f6 ed 20 f7 65 8b 05 f7 5f ca 75 85 c0 74 02 5b c3 e8 44 74 c8 [ 1169.021167][ C0] RSP: 0018:ffffc90003657b98 EFLAGS: 00000282 [ 1169.021181][ C0] RAX: 0b3d60b9ffa79400 RBX: ffff888075ad40c0 RCX: 0b3d60b9ffa79400 [ 1169.021193][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 1169.021205][ C0] RBP: ffff888075ad4558 R08: ffff888075ad40c3 R09: 1ffff1100eb5a818 [ 1169.021217][ C0] R10: dffffc0000000000 R11: ffffed100eb5a819 R12: 1ffff1100eb5a8ab [ 1169.021229][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 1169.021248][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1169.021266][ C0] get_signal+0x1163/0x1350 [ 1169.021353][ C0] arch_do_signal_or_restart+0xc4/0x1350 [ 1169.021401][ C0] ? __ia32_sys_rt_sigreturn+0x619/0x760 [ 1169.021426][ C0] ? load_gs_index+0x130/0x130 [ 1169.021446][ C0] ? get_sigframe_size+0x10/0x10 [ 1169.021479][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1169.021506][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1169.021533][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1169.021559][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1169.021578][ C0] do_syscall_64+0x58/0xa0 [ 1169.021603][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1169.021625][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1169.021648][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1169.021670][ C0] RIP: 0033:0x7fe2f739ce57 [ 1169.021691][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1169.021705][ C0] RSP: 002b:00007fe2f81810e8 EFLAGS: 00000246 [ 1169.021718][ C0] RAX: 00000000000000ca RBX: 00007fe2f7615fa8 RCX: 00007fe2f739ce59 [ 1169.021729][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2f7615fa8 [ 1169.021740][ C0] RBP: 00007fe2f7615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.021751][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.021760][ C0] R13: 00007fe2f7616038 R14: 00007fff63a10100 R15: 00007fff63a101e8 [ 1169.021780][ C0] [ 1169.022452][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1169.459574][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1169.469648][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1169.474710][ C1] Code: 48 89 df e8 d7 a4 9b f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d a7 ba 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1169.494322][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1169.500398][ C1] RAX: 09a17b49057b5b00 RBX: ffffffff8a37f307 RCX: 09a17b49057b5b00 [ 1169.508377][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 1169.516360][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1169.524342][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 1169.532342][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffff9200002efc8 [ 1169.540322][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1169.549256][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1169.555850][ C1] CR2: 00007f18059316a2 CR3: 0000000060686000 CR4: 00000000003506e0 [ 1169.563845][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1169.571843][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1169.579825][ C1] Call Trace: [ 1169.583108][ C1] [ 1169.586043][ C1] default_idle_call+0x84/0xc0 [ 1169.590824][ C1] do_idle+0x3a2/0x680 [ 1169.594912][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1169.600140][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1169.606337][ C1] ? schedule_idle+0x57/0x90 [ 1169.610964][ C1] cpu_startup_entry+0x3f/0x60 [ 1169.615753][ C1] start_secondary+0xe4/0xf0 [ 1169.620357][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1169.626278][ C1]