last executing test programs: 9m20.592382194s ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 9m20.434415086s ago: executing program 2 (id=9): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 9m20.294639527s ago: executing program 2 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000040180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000020000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close(0xffffffffffffffff) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m20.052543448s ago: executing program 2 (id=12): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000380)={0xc, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000b, &(0x7f0000000040)='\x00', 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r5, 0x0, 0x0, 0x0) 9m18.108875515s ago: executing program 2 (id=13): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 9m15.08350134s ago: executing program 2 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 9m9.07108562s ago: executing program 4 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 9m7.962129899s ago: executing program 4 (id=35): r0 = socket(0xa, 0x3, 0x3a) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x80000006, 0x0, 0x19, 0x6}, {0x3ff, 0xd, 0x3, 0x8001}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x12, 0x600, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ipv6header={{0x28}, {0x62, 0xde, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x34, 0xc, "112b2fa75af9690ebe17cf96e4a8c2bd167d426ad5cb5669ab19c0e5dd0d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x8002, 0x0) fcntl$dupfd(r7, 0x406, r7) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/80, 0x50, 0x92) openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 9m6.935260088s ago: executing program 4 (id=39): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 9m5.061630433s ago: executing program 4 (id=44): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) 9m4.907956064s ago: executing program 4 (id=46): creat(0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 9m3.371454357s ago: executing program 4 (id=50): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0', [], 0xa, "1b12ce6b13"}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="96"], 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/4153, 0x1039}, 0x100) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 9m0.066607564s ago: executing program 32 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 8m47.870963025s ago: executing program 33 (id=50): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0', [], 0xa, "1b12ce6b13"}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="96"], 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/4153, 0x1039}, 0x100) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 7m53.278128228s ago: executing program 3 (id=296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="5b24f7ca08", 0x5}], 0x1, &(0x7f0000000400)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2b}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x33}}}], 0x30}}], 0x2, 0x931766f6119eed40) 7m51.532544023s ago: executing program 3 (id=299): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x1, @broadcast}, 0x6, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 'vlan0\x00'}) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x700, 0x12) 7m50.067392515s ago: executing program 3 (id=304): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a80)="537eb9f8d6b418d097c30e82bf7225819ec127c93ee0b62cef59c421632aa9448bf5bd16ca751c056ff49e38244880af0192a18af714c6025db7a9a549edda11a0e903c407290de77f413b5c83faab8abf8550b1c01619febda43e6c3eef35ccda1d1b20c0873c2a24c002d76d42618ad2c7c90090ca7d3cb429ed703187d65bde2e9cb11ff1b2cf2409bbbc2207dd2df0ba3f61fb891c1b8a8ad5d33df8596b20c693868f61aecb8bf18407e3bdad7678c3618a1452d0b43886bd2873536c6b2a99278ab17ab37e84ab0877a902ef2a0b73c36c777bd0a1ea7b5b6c42db766b8877288839d1aa90055cb4294ea26733eabfb3f0ed74a583", 0xf8}, {&(0x7f0000000e40)="2bd89a65b69dc707c50426be09c9c0f4805c4790d7a87cd02a660a9ffdf124", 0x1f}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 7m47.551012765s ago: executing program 3 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0xfff, 0x0) execve(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r5 = memfd_create(&(0x7f00000000c0)='macsec\x00', 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={r5, 0x0, 0xa000, 0x10000}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_MAP={0x24, 0xe, {0x0, 0x2, 0x3, 0xf74b, 0x9, 0x6d}}]}, 0x6c}}, 0x0) 7m42.820059425s ago: executing program 3 (id=325): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x60c40) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) 7m42.730160145s ago: executing program 3 (id=327): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x400000000010, 0x800, 0x0) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000200)=0x100, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r4}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x4f24, @remote={0xac, 0xc}}}}, 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000060000001811", @ANYRES32=r2, @ANYBLOB="0000000000000ebbf452d10000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000950000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) unshare(0x68040200) write$tun(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x4e1f, 0x0, 'ovf\x00'}, 0x2c) sendmsg$inet(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e1f, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 7m27.074720785s ago: executing program 34 (id=327): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x400000000010, 0x800, 0x0) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000200)=0x100, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r4}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x4f24, @remote={0xac, 0xc}}}}, 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000060000001811", @ANYRES32=r2, @ANYBLOB="0000000000000ebbf452d10000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000950000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) unshare(0x68040200) write$tun(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x4e1f, 0x0, 'ovf\x00'}, 0x2c) sendmsg$inet(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e1f, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 6m53.8200546s ago: executing program 1 (id=480): r0 = add_key(0x0, &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, 0x0, 0x0) 6m53.679959152s ago: executing program 1 (id=482): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x1, @broadcast}, 0x6, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 'vlan0\x00'}) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x700, 0x12) 6m51.850491707s ago: executing program 1 (id=487): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000400)=[{r4}], 0x1, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) readv(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x10041) 6m48.954409331s ago: executing program 1 (id=493): r0 = add_key(0x0, &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, 0x0, 0x0) 6m47.82883738s ago: executing program 1 (id=495): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0xa42, &(0x7f00000000c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0xde, &(0x7f00000005c0)={@random="02d2e943b271", @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0xa8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x62, 0x0, [], "5ab750c0da8c0569cf50dce943d50cc45536e9f2e947f70897bf87f55cc53d08b118b80e389e1368e4afe946edc980d9c9d443cc4ca54df3b947415d2a8340d9b9828e81091c32b1c120f1125ebaebdab6b0e70237f71061bca23b2c0f87f59c1060"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xd9]}, {0x8, 0x88be, 0x43050010, {{}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}}}}}}}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0x5}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) 6m46.60337209s ago: executing program 1 (id=500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 6m31.074332999s ago: executing program 35 (id=500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 29.767382883s ago: executing program 8 (id=1646): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x4d00, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom(r3, 0x0, 0x0, 0x0, &(0x7f0000005380)=@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc41}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@null, @rose, @remote, @default, @default, @netrom, @null, @netrom]}, &(0x7f0000000140)=0x48, 0x8f7fd493cea23a63) io_setup(0x5, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f00000000c0)=0x1) sendto$packet(r0, &(0x7f0000000a40)="2f031c00", 0x4, 0x24048895, &(0x7f0000000180)={0xc9, 0x8100, r4, 0x1, 0x8, 0x6, @multicast}, 0x14) 24.15399576s ago: executing program 8 (id=1661): execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x0, 0x800) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x0, r1}) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) 16.592075333s ago: executing program 8 (id=1674): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_io_uring_setup(0xd5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x18d}, &(0x7f0000000040), &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 16.455793273s ago: executing program 0 (id=1675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x8003) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) unshare(0x2010000) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, 0x0, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x306, @remote}, 0x2, {0x2, 0x4e20, @multicast2}, 'gre0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x82) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x40000009, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xc, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x1, 0x6, 0xc, 0x2049b29, 0x6, 0x7f, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x7ff, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x3eb, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0xd, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x6, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0x2, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xd, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x88c}}, 0x20040000) 15.918849138s ago: executing program 8 (id=1677): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="142000001000010000000000000000000000000a44000000060a0b840000000000"], 0x6c}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14.865503167s ago: executing program 0 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) creat(&(0x7f0000000a80)='./file0\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$nl80211(0x0, r4) 14.603578779s ago: executing program 8 (id=1683): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000400)=[{r4}], 0x1, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) readv(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x10041) 12.715591754s ago: executing program 0 (id=1684): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000002280)=[{&(0x7f0000000280)="4f9f687b323635ca7bf5768f0d3ef5e05ae57c95e23f2c6d56f5b96ccc045e6c317ae025ba3811c6361828bc75c740f556bf4135c4595a3fcb6404f9b036604a736b29d7f765262f0910e51d3aa9a67c215fb671c2cd682da42beb4e0ec0e93a72617e57d97fb2da877e1095b0e4b3039720022234fb58ddf9cc516d1a8490f05c80585208883a3845e2b475d8eeae71cec15524df7c11f7f6835fd8c4627a4af3127dd32d11c340755dc3b7b0effb9f31129ff74d4dff06b3dfa111b21af36c4010a6d37eb40ccedc464f18decf46417d4d882c56457de15cdc5359ae1487a1402297e95c221b90741fd74a01b7d31a89e3bc529bf485c22af533fca1510c1c41f62d195c47c6affffed773cca524114f11fd200c7dee2113e0e879bb1447813649756329897f9817a80b79228ef2df83c8aa83b8cfad7ea217e6a5de0ac061f4561eb20f5b693e3608c73759521be78d30dee07cf9e6834a2ad32e7c959a47265df8b6c9e452010b11aa6bd2dec7187809b6f0f5f9622126532eb6196038ed5319b73fe8e72ce7ab644db7c709ec06309317dea73ba3122cd4dd57b611f1c2eb86c6c18055c81bf7ff69c3aac31802b05a9ea0a4c8b1df27cdd02cda76f4a426deea010f9b4e878611c5dfb81f06e147a0a36f68ba9b242aa57d6dd7219be23a2cb2047b64bd9454a7caef613dc26db1477bed3e2a45aa80354bffa6abf505da540a324a9bf0dc84bb71bde8ebfb5642c2801daa493c049677f22ba4f8cdc4bc9d0f3231a3d4f2447ca5d4bd0fbfaad0751caef00d3a09108dd7d2c7aa654248b0e1e9dfafe73e5c4bdacd65ab8c8bde3bcc12a7d688f8ed01503a96e6956b86f6ac1116b1c46278c0bae06c7175f52ca2f3dbf6f551a8f7c47e776f314bf992582e702807c099394e10a37d5a558fad954e7b994226f84cb05efdee27535f715a6a0e44cd6aac2212f217015d8e1321a1f7898fe9826d47e34e778394fd8b632eb2771f56a3395d386381118d798cc529001efc67784853d77edf6449106362a0f2acf7a3f3e007df1a555b859369a3905192818d5bb417b4808e52dc88b6802f1aa9ff016bba0844ecfceea14b2717794c588049a1a4bb25cd23d8dc583c66e896fed2b617184ae590d0fbeb394b1145c96677ae8531ce98d654e845b0ffcc675e79d00c9dae28e8d7d88a9bc4ef2504037cde6472113490487b1f71c7ce810c54295a6e8588f7c4741de0baf8e47c8417b88e05d3d742613975f4b4f3ab3ea2061d64758d6950023ea0056211cec13ddce740d68563b01ff4eeae3dbb4ae6cc485dd703815d0013e8b750090fe1904f3ae7082a50b4d6f6406ead9ca4b4711a57c16de1eb8d7ff14f21564bad76951a1fa8708177c98d8cee7ce1497bcca57c69e906294e24aca08f46e8505040f6797e9ae79bb520b5e437d1674d487ef06a51d1e74aa853b480772b526bde38101ecfbf72b1e09288d971c672e3467105017a5bf3ced027b680058643debe9fdd0a58feb96ddb41bdc85367f296cd7477c44a45ca3542d9d999883791aab2624748559da316b71ee474e87d8480a09f442f364d17cf41f6cda54d31661ac70a900229ff7296721c00e9ef1915ad7eb5828cb7485c63f71753e835f784b45ec3215b50f72a9f7f9ef627d5054a6aa4597fa227bc962815e1ae8aec59993bc89a86b2dfef3360fb6f5e514d7e9de57596d73c605199cc8cc97590d6ade02292d15764f54eb6bf89e252fd69bf53a14440cfc38b47af301bb0189d306cd637d92861f4f8022c2d219bd40b9e7d6e3cb0c19b6188c2675248d832a7fc382ef560691fe8f3e0ba6ab7f03602f8fbbf50f74266c396ee1516eb3ecbeb5a8254eb6f0b9b062077c36c1723ff356069d053412040d0b750a2ac4de221d81daeec85007104c856ccd225e95a8d5928da131a61339162f1549f0ed0bf63d070d61fcfa7b7199087b796b873fc1b9ac9250dbe572ef22600fbb689afbd0290baea044ff890fb4bf22ff7e194c6b0293c1d3c35b32b2b80d42103c84ea886cd005fa00f5aca5e821e052109394971f7050bcb61094aa6dbdb395db9e8f233d36e2d3995caf21aeff5ef576ca3ce2aaf06cb61d3ced0735d815ac44428dae5909d6e216470057dacabcb1e3593cbd00c8cdfaa9282bff4a952cf06ad8a22aebcc2ee877d1d4011d64990edb8071ece7216a9d4d2a9d18477a960c2a5f836e285244e466cc68c5c856b06708ddf78cbb9683ccccfb8158704ef26a11291c3c48f7b49ba2094389abf6a9feb57cc03c658a985fb3503f0db56993d167b799ddb05847a46f1527152602164067fa15998d496e3ba6541acb994ec7b8667e0297d20200c04cb5e34394a25ba6991cb6c8555f7ac81d2c470544591bc643aba6e603861cec8ef97fb73801e7737bbe7321c6e4b84e041ae9efa95cf36d5620006eebf296c26936b9a4cd0da4ed0d0d5e9dc23ec84dbb84b4c7ed23751524f84f7b760a68a7fc096f02cc454acfa43e21f02ba96e8d8c6bdefa8a56842f333174256bc66261a732c0872d3998530011ce973fc3b5fd3fd14f57c7228e25d79827cafa51ff6cc66a4003679c5601f4b884a344b4477f08bac9650e7cd1a378b3ef816fb263f74a5f81a0a80071b54c3ad66cf620cea856ae22f9a2382d2f13330ffabc390d77a5c9f23d8ce3754a7ce6cafa0d30043cb3e34b834e84f367af1be6c45f356ebcf2a71dcb2da0cafe89d8be05fde8af05f46eb9e04f09ac766b773ec45a304e4328143c838aa1264e24e9548c7881375e82922295d64d5bd86087a4a038d456a5387f9c72f814c66ef485f1ba1b8e5362a7dc15ec04dcb90d77f8dd879970ef1d4d448469870012f32e7163420f47de3bf33ebc17000e5587548ec69ec021a37f732911b71c6ab894b2d7c883a5bc8318824bdd3e44e0cf63f19f450bce22a74f59def2fe572617f4f0048ad2cb57081c99a37175eb8d48aa448266ddbd2b966dc60902a42fbb2eb50cb570e05a3dad0d2f665ecc35c500dc9dee55b2391509468a3abf305e4b36f8af852fe71c16d65aa232d239b812ff9fa9f044e34c52247b091ca903ea0efc0c35a6a8926ad2f23bb8740f9e0a201adc179614f6fdb274411f47e855d6f8f861f33ba3a45ee28ff1936711f1fd2e828e05bec704d4b0359673a9b75897ec9db3d2761131f9a7100d09533b35c1bfdd2cdd072dd3cc2c4e90188b2faa9e6073522a3eb122d71438fc398449d8c2a2d666aed55766c82c246d2572f5e428f781d135d7b08d83887fa78a6d18bb141fd80eb4b346b4863c7eec4f3be0aa3be9cdcc71502d173a967052c40ea6e011dc3b4ced4f7000dd240f042608a63dcb265ce", 0x954}], 0x1) 12.698999884s ago: executing program 7 (id=1686): execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x0, 0x800) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x0, r1}) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) 7.608083597s ago: executing program 6 (id=1694): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="142000001000010000000000000000000000000a44000000060a0b84000000000000000002000000240004802000018007"], 0x6c}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.504952398s ago: executing program 6 (id=1695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r2, &(0x7f0000000000)='./file0\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x7, 0x0, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) 7.033073371s ago: executing program 5 (id=1696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) creat(&(0x7f0000000a80)='./file0\x00', 0x2) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$nl80211(0x0, r4) 6.988174412s ago: executing program 8 (id=1697): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) ioperm(0x0, 0x82, 0x1f) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x87) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7c5f8f2f92ff25d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) 6.384566857s ago: executing program 6 (id=1698): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f9104", 0xa2, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) chmod(&(0x7f0000000940)='./control\x00', 0x9c32f69e6caa24ef) 5.883243531s ago: executing program 5 (id=1699): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$netlink(0x10, 0x3, 0xb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd, 0x17, 0x20000000, 0x2, 0xc, 0x0, {0x3}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000040)={0x0, [[0x0, 0x300]]}) ppoll(&(0x7f00000025c0)=[{}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@private1, 0x31}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0xfff}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={r5, 0x2, 0x8}, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x0, 0x1e, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x1, 0x0) close(r8) socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)={0x20000004}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x51, 0xb7, 0xf0, 0x20, 0x451, 0x5152, 0xaa6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xec, 0x2, 0x2, 0xaf, 0x3a, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x5, 0x2, 0x400}}]}}]}}]}}, 0x0) 5.776183272s ago: executing program 7 (id=1700): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_io_uring_setup(0xd5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x18d}, &(0x7f0000000040), &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 5.775487812s ago: executing program 0 (id=1701): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x80000006, 0x0, 0x19, 0x6}, {0x3ff, 0xd, 0x3, 0x8001}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x12, 0x600, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ipv6header={{0x28}, {0x62, 0xde, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x34, 0xc, "112b2fa75af9690ebe17cf96e4a8c2bd167d426ad5cb5669ab19c0e5dd0d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) fcntl$dupfd(r5, 0x406, r5) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/80, 0x50, 0x92) openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 4.321478084s ago: executing program 7 (id=1702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x8003) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) unshare(0x2010000) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, 0x0, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x306, @remote}, 0x2, {0x2, 0x4e20, @multicast2}, 'gre0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x40000009, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xc, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x1, 0x6, 0xc, 0x2049b29, 0x6, 0x7f, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x7ff, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x3eb, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0xd, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x6, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0x2, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xd, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x88c}}, 0x20040000) 4.114725256s ago: executing program 6 (id=1703): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$mouse(0x0, 0x2, 0x101200) io_uring_enter(r0, 0x46ca, 0x6199, 0x26, &(0x7f00000001c0)={[0x1]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) capset(&(0x7f0000000340)={0x19980330, r1}, &(0x7f0000000280)={0x0, 0x0, 0x10}) ioctl$sock_bt_hci(r5, 0x400448e7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) unshare(0x64000600) 4.083588126s ago: executing program 0 (id=1704): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x1a37c1, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd0bb, 0xa400) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x2, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4, &(0x7f0000000480), 0x0, 0xb40c, 0x10, 0x4, 0x0, 0x53}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x9) ioctl$SIOCPNENABLEPIPE(r3, 0x5411, 0x1000000000000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) link(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0\x00') syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) readv(r4, &(0x7f0000000540), 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.513431649s ago: executing program 7 (id=1705): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="142000001000010000000000000000000000000a44000000060a0b84000000000000000002000000240004802000018007"], 0x6c}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.36019853s ago: executing program 5 (id=1706): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) 1.880970224s ago: executing program 6 (id=1707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x8003) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) unshare(0x2010000) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, 0x0, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x306, @remote}, 0x2, {0x2, 0x4e20, @multicast2}, 'gre0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x82) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x40000009, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xc, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x1, 0x6, 0xc, 0x2049b29, 0x6, 0x7f, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x7ff, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x3eb, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0xd, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x6, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0x2, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xd, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x88c}}, 0x20040000) 1.848289285s ago: executing program 5 (id=1708): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) getpeername(r1, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.820325615s ago: executing program 0 (id=1709): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @loopback}, 0xf) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000003d00fb010000000000000000037c00000400fc800c0001800600060008"], 0x28}}, 0x4c000) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f00000011c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f004606"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x4c}, {0x6}]}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 1.560011707s ago: executing program 7 (id=1710): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x10000, 0x0, {0x9}}, 0x14}}, 0x44010) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='\xd0', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_pts(0xffffffffffffffff, 0x40) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4000001) vmsplice(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4) kexec_load(0xf5, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xe8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xd4, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x3, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x3, 0xea3, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe8}}, 0x0) 149.744329ms ago: executing program 5 (id=1711): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 128.327299ms ago: executing program 7 (id=1712): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioperm(0x9, 0x40, 0x5) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xef}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='timer_start\x00', r2}, 0x10) ioperm(0x5e, 0x5, 0x3e73) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', 0x0}) creat(0x0, 0x108) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 106.397379ms ago: executing program 6 (id=1713): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 0s ago: executing program 5 (id=1714): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000092e000/0x2000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): 4583] device veth1_vlan entered promiscuous mode [ 124.493541][ T3144] usb 6-1: Using ep0 maxpacket: 32 [ 124.521200][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.530051][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.551044][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.569798][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.599601][ T4583] device veth0_macvtap entered promiscuous mode [ 124.633967][ T3144] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 124.653587][ T3144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.672163][ T3144] usb 6-1: config 0 descriptor?? [ 124.677267][ T4219] device hsr_slave_0 left promiscuous mode [ 124.697320][ T4219] device hsr_slave_1 left promiscuous mode [ 124.713860][ T4219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.721558][ T4219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.752908][ T3144] usb 6-1: selecting invalid altsetting 3 [ 124.759155][ T3144] comedi comedi0: could not set alternate setting 3 in high speed [ 124.767169][ T3144] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 124.779675][ T4219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.789891][ T3144] usbduxsigma: probe of 6-1:0.0 failed with error -22 [ 124.796844][ T4219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.810170][ T4219] device bridge_slave_1 left promiscuous mode [ 124.818246][ T4219] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.837205][ T4219] device bridge_slave_0 left promiscuous mode [ 124.859535][ T4219] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.875340][ T4219] device hsr_slave_0 left promiscuous mode [ 124.881810][ T4219] device hsr_slave_1 left promiscuous mode [ 124.890106][ T4219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.897634][ T4219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.906418][ T4219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.916394][ T4219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.924413][ T4219] device bridge_slave_1 left promiscuous mode [ 124.930667][ T4219] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.941158][ T4219] device bridge_slave_0 left promiscuous mode [ 124.965386][ T4219] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.983428][ T21] usb 6-1: USB disconnect, device number 2 [ 125.015261][ T4219] device veth1_macvtap left promiscuous mode [ 125.021927][ T4219] device veth0_macvtap left promiscuous mode [ 125.038822][ T4219] device veth1_vlan left promiscuous mode [ 125.048125][ T4219] device veth0_vlan left promiscuous mode [ 125.062135][ T4219] device veth1_macvtap left promiscuous mode [ 125.068393][ T4219] device veth0_macvtap left promiscuous mode [ 125.078944][ T4219] device veth1_vlan left promiscuous mode [ 125.086281][ T4219] device veth0_vlan left promiscuous mode [ 125.606727][ T4219] team0 (unregistering): Port device team_slave_1 removed [ 125.645424][ T4219] team0 (unregistering): Port device team_slave_0 removed [ 125.677191][ T4219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.707500][ T4219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.795226][ T4912] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 125.840845][ T4219] bond0 (unregistering): Released all slaves [ 126.018289][ T4219] team0 (unregistering): Port device team_slave_1 removed [ 126.034585][ T4219] team0 (unregistering): Port device team_slave_0 removed [ 126.053828][ T4219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.069641][ T4219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.168736][ T4219] bond0 (unregistering): Released all slaves [ 126.227206][ T4583] device veth1_macvtap entered promiscuous mode [ 126.247937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.256580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.287646][ T4863] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.304218][ T4863] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.347465][ T4863] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.372671][ T4863] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.416328][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.428946][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.441801][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.460001][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.501041][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.524976][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.535261][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.547452][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.623946][ T4918] syz.3.175 uses obsolete (PF_INET,SOCK_PACKET) [ 126.642231][ T4583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.060852][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.088298][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.239334][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.285672][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.306603][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.322129][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.351108][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.371733][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.410043][ T4583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.421140][ T4583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.448193][ T4583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.530797][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.539707][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.552171][ T4583] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.562836][ T4583] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.571830][ T4583] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.581024][ T4583] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.584022][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 127.790961][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 127.824224][ T4935] loop3: detected capacity change from 0 to 1024 [ 127.834715][ T3144] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.848015][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.858326][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.894018][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.916043][ T4935] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext2 [ 127.929732][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.969018][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.013194][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.222384][ T4969] capability: warning: `syz.3.184' uses deprecated v2 capabilities in a way that may be insecure [ 130.899654][ T4978] loop9: detected capacity change from 0 to 8 [ 130.950517][ T4980] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 130.960743][ T4978] Dev loop9: unable to read RDB block 8 [ 130.988699][ T4978] loop9: unable to read partition table [ 131.029428][ T4978] loop9: partition table beyond EOD, truncated [ 131.059619][ T4978] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 131.441126][ T3144] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 131.468324][ T3144] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.486570][ T4995] loop1: detected capacity change from 0 to 1024 [ 131.540573][ T4999] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 131.581012][ T4995] EXT4-fs (loop1): Mount option "nodioread_nolock" incompatible with ext2 [ 131.698321][ T5001] netlink: 40 bytes leftover after parsing attributes in process `syz.5.193'. [ 131.729179][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.193'. [ 131.922076][ T4176] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 132.133240][ T4253] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.513657][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.536823][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.647468][ T4253] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.759542][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.786930][ T4253] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.826286][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.872754][ T4253] usb 2-1: config 0 descriptor?? [ 133.264399][ T5036] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 133.366025][ T4253] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 133.397592][ T4253] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.725306][ T21] usb 2-1: USB disconnect, device number 4 [ 133.733358][ T4558] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 133.990533][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.999004][ T4558] usb 7-1: Using ep0 maxpacket: 8 [ 134.037390][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.054823][ T5054] loop3: detected capacity change from 0 to 1024 [ 134.128644][ T4558] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 134.161008][ T4558] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.181820][ T4558] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.202454][ T4558] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.256625][ T4558] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.303218][ T4558] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.444663][ T5054] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext2 [ 134.583317][ T4558] usb 7-1: GET_CAPABILITIES returned 0 [ 134.589817][ T4558] usbtmc 7-1:16.0: can't read capabilities [ 134.799282][ T4558] usb 7-1: USB disconnect, device number 2 [ 135.423172][ T4209] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.495995][ T5093] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 135.675692][ T4209] usb 6-1: Using ep0 maxpacket: 16 [ 135.793529][ T4209] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 135.987785][ T4209] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.832227][ T4209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.841109][ T4209] usb 6-1: Product: syz [ 136.845649][ T4209] usb 6-1: Manufacturer: syz [ 136.850267][ T4209] usb 6-1: SerialNumber: syz [ 136.857243][ T4209] usb 6-1: config 0 descriptor?? [ 136.917565][ T4209] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 136.950239][ T4209] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.977728][ T5115] loop0: detected capacity change from 0 to 1024 [ 137.084800][ T5115] EXT4-fs (loop0): Mount option "nodioread_nolock" incompatible with ext2 [ 138.761473][ T4253] usb 6-1: USB disconnect, device number 3 [ 139.245737][ T5142] ODEBUG: Out of memory. ODEBUG disabled [ 140.361043][ T4213] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.823441][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.866640][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.923397][ T4213] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 141.932613][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.000030][ T4213] usb 1-1: config 0 descriptor?? [ 143.225519][ T4213] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 143.232928][ T4213] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 143.241379][ T4213] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 143.263900][ T4213] cm6533_jd 0003:0D8C:0022.000C: No inputs registered, leaving [ 143.339075][ T4213] cm6533_jd 0003:0D8C:0022.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 143.490139][ T4245] usb 1-1: USB disconnect, device number 3 [ 145.018932][ T5217] batman_adv: batadv0: Adding interface: dummy0 [ 145.026907][ T5217] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.053059][ T5217] batman_adv: batadv0: Interface activated: dummy0 [ 145.064746][ T5218] batadv0: mtu less than device minimum [ 145.072781][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.085038][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.096882][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.108700][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.120515][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.132308][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.144471][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.156383][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.168213][ T5218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.368538][ T4245] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 145.378328][ T5224] loop0: detected capacity change from 0 to 1024 [ 145.394242][ T4245] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.449357][ T5224] EXT4-fs (loop0): Mount option "nodioread_nolock" incompatible with ext2 [ 146.439776][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 146.439794][ T26] audit: type=1326 audit(1741996702.781:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 146.470492][ T26] audit: type=1326 audit(1741996702.801:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 146.570498][ T26] audit: type=1326 audit(1741996702.801:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 146.716169][ T5244] netlink: 112 bytes leftover after parsing attributes in process `syz.6.256'. [ 146.717615][ T26] audit: type=1326 audit(1741996702.931:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 146.765081][ T26] audit: type=1326 audit(1741996702.931:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 146.871796][ T26] audit: type=1326 audit(1741996702.931:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 146.932300][ T26] audit: type=1326 audit(1741996702.991:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 147.065538][ T26] audit: type=1326 audit(1741996702.991:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 148.158383][ T26] audit: type=1326 audit(1741996702.991:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 148.232735][ T26] audit: type=1326 audit(1741996702.991:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5237 comm="syz.3.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f30b61169 code=0x7ffc0000 [ 149.978812][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.268'. [ 150.226067][ T5291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.268'. [ 150.313961][ T5291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.268'. [ 150.351374][ T5291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.268'. [ 150.591603][ T5305] batman_adv: batadv0: Interface deactivated: dummy0 [ 150.599210][ T5305] batman_adv: batadv0: Removing interface: dummy0 [ 151.123409][ T5310] netlink: 104 bytes leftover after parsing attributes in process `syz.1.273'. [ 151.179557][ T4179] block nbd6: Receive control failed (result -32) [ 151.237465][ T5301] block nbd6: shutting down sockets [ 151.250419][ T5316] ksmbd: Unknown IPC event: 6, ignore. [ 152.352469][ T5329] net_ratelimit: 10 callbacks suppressed [ 152.352487][ T5329] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 152.548960][ T5332] sock: sock_timestamping_bind_phc: sock not bind to device [ 152.559308][ T5332] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 152.567593][ T5332] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 152.576063][ T5332] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 156.329158][ T5379] usb usb1: usbfs: process 5379 (syz.1.289) did not claim interface 0 before use [ 157.014430][ T5363] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.286'. [ 159.081347][ T5419] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 161.276814][ T5448] netlink: 16 bytes leftover after parsing attributes in process `syz.6.305'. [ 163.263321][ T3144] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.386468][ T5471] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 163.495536][ T5454] ksmbd: Unknown IPC event: 6, ignore. [ 163.523122][ T3144] usb 2-1: Using ep0 maxpacket: 16 [ 163.643334][ T3144] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 163.656303][ T3144] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 163.673185][ T3144] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 163.683917][ T3144] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.853448][ T3144] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 163.881912][ T3144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.913238][ T3144] usb 2-1: Product: syz [ 163.917456][ T3144] usb 2-1: Manufacturer: syz [ 163.942483][ T3144] usb 2-1: SerialNumber: syz [ 163.978511][ T3144] usb 2-1: config 0 descriptor?? [ 164.023997][ T5461] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.065404][ T3144] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 164.560492][ T5461] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 164.644571][ T5461] VFS: Can't find a romfs filesystem on dev nullb0. [ 164.644571][ T5461] [ 164.719200][ T5494] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 165.977237][ T3144] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 165.985197][ T3144] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 165.996388][ T3144] usb 2-1: USB disconnect, device number 5 [ 166.139880][ T5508] netlink: 112 bytes leftover after parsing attributes in process `syz.6.318'. [ 167.377425][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.330'. [ 167.489533][ T5525] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.804771][ T5525] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.180215][ T2300] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 168.201253][ T5553] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 168.402906][ T5525] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.597579][ T5525] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.133234][ T2300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.151004][ T2300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.161896][ T2300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.183916][ T2300] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.198393][ T2300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.220026][ T2300] usb 1-1: config 0 descriptor?? [ 169.377575][ T5525] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.392269][ T5525] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.415605][ T5525] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.429112][ T5525] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.547277][ T5571] netlink: 112 bytes leftover after parsing attributes in process `syz.1.334'. [ 171.141343][ T2300] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 171.306105][ T2300] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 171.328354][ T2300] usb 1-1: USB disconnect, device number 4 [ 172.909492][ T5607] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.339'. [ 174.224832][ T5622] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 176.043392][ T2300] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.653172][ T2300] usb 1-1: Using ep0 maxpacket: 32 [ 176.681669][ T5656] netlink: 112 bytes leftover after parsing attributes in process `syz.5.351'. [ 177.083710][ T4209] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 177.124435][ T2300] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 177.650237][ T2300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.693749][ T2300] usb 1-1: config 0 descriptor?? [ 177.804369][ T2300] usb 1-1: selecting invalid altsetting 3 [ 177.831639][ T2300] comedi comedi0: could not set alternate setting 3 in high speed [ 177.858084][ T2300] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 178.051023][ T2300] usbduxsigma: probe of 1-1:0.0 failed with error -22 [ 178.059890][ T2300] usb 1-1: USB disconnect, device number 5 [ 178.086280][ T4209] usb 7-1: Using ep0 maxpacket: 8 [ 178.199146][ T5670] overlayfs: failed to clone upperpath [ 178.383207][ T4209] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 178.391343][ T4209] usb 7-1: config 0 has no interface number 0 [ 178.634093][ T4209] usb 7-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 178.672662][ T4209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.733291][ T4209] usb 7-1: Product: syz [ 178.752447][ T4209] usb 7-1: Manufacturer: syz [ 178.773550][ T4209] usb 7-1: SerialNumber: syz [ 178.811492][ T4209] usb 7-1: config 0 descriptor?? [ 178.875566][ T4209] redrat3 7-1:0.31: Couldn't find all endpoints [ 180.727580][ T4209] usb 7-1: USB disconnect, device number 3 [ 182.292845][ T5710] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.362'. [ 186.446544][ T4245] Bluetooth: hci4: command 0x0409 tx timeout [ 186.706645][ T4245] Bluetooth: hci1: command 0x0406 tx timeout [ 187.215656][ T4578] Bluetooth: hci0: command 0x0406 tx timeout [ 188.524132][ T4578] Bluetooth: hci4: command 0x041b tx timeout [ 189.789553][ T5791] netlink: 666 bytes leftover after parsing attributes in process `syz.5.381'. [ 189.904196][ T5736] chnl_net:caif_netlink_parms(): no params data found [ 191.603112][ T3144] Bluetooth: hci4: command 0x040f tx timeout [ 192.714812][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.740325][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.778792][ T5736] device bridge_slave_0 entered promiscuous mode [ 193.023133][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.059748][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.076133][ T5736] device bridge_slave_1 entered promiscuous mode [ 193.111174][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.818480][ T3144] Bluetooth: hci4: command 0x0419 tx timeout [ 193.985119][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.103836][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.339992][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 194.346874][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364010][ T5865] ======================================================= [ 194.364010][ T5865] WARNING: The mand mount option has been deprecated and [ 194.364010][ T5865] and is ignored by this kernel. Remove the mand [ 194.364010][ T5865] option from the mount to silence this warning. [ 194.364010][ T5865] ======================================================= [ 194.543427][ T13] usb 1-1: config index 0 descriptor too short (expected 59, got 27) [ 194.572066][ T13] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 194.602597][ T13] usb 1-1: config 0 has no interface number 0 [ 194.633533][ T13] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=c7.36 [ 194.642632][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.726341][ T5736] team0: Port device team_slave_0 added [ 194.798568][ T13] usb 1-1: config 0 descriptor?? [ 194.827413][ T5736] team0: Port device team_slave_1 added [ 194.855712][ T13] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 194.888573][ T13] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 195.109841][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.142728][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.478963][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.610574][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.626763][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.716518][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.799958][ T5736] device hsr_slave_0 entered promiscuous mode [ 195.814295][ T5736] device hsr_slave_1 entered promiscuous mode [ 195.824801][ T5736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.832405][ T5736] Cannot create hsr debugfs directory [ 196.167891][ T4209] usb 1-1: USB disconnect, device number 6 [ 196.271159][ T4209] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 196.283691][ T4578] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 196.623273][ T4578] usb 7-1: Using ep0 maxpacket: 16 [ 196.871929][ T4209] kobil_sct 1-1:0.148: device disconnected [ 196.974245][ T4578] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.053381][ T4578] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.093138][ T4578] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 197.160104][ T4578] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.228344][ T4578] usb 7-1: config 0 descriptor?? [ 198.309685][ T5736] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.452168][ T4578] sony 0003:054C:05C4.000F: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 198.514401][ T5736] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.317774][ T5736] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.358964][ T5736] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.365968][ T4578] sony 0003:054C:05C4.000F: failed to claim input [ 199.655378][ T5938] netlink: 112 bytes leftover after parsing attributes in process `syz.5.415'. [ 199.766759][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.930685][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.040319][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.057889][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.108744][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.171337][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.207645][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.214969][ T4843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.251223][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.277989][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.307187][ T2300] usb 7-1: USB disconnect, device number 4 [ 200.355120][ T4843] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.362223][ T4843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.468660][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.523791][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.636088][ T5973] netlink: 112 bytes leftover after parsing attributes in process `syz.6.427'. [ 200.679049][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.821151][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.871633][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.921281][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.981874][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.044778][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.085239][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.378666][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.657465][ T5736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.754916][ T5736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.809566][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.826886][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.122755][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.135077][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.163985][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.223594][ T6032] netlink: 112 bytes leftover after parsing attributes in process `syz.1.438'. [ 206.749951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.789260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.814103][ T6075] 9pnet: Insufficient options for proto=fd [ 206.927721][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.945542][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.991380][ T5736] device veth0_vlan entered promiscuous mode [ 207.012325][ T5736] device veth1_vlan entered promiscuous mode [ 207.064099][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.094246][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.114176][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.233726][ T5736] device veth0_macvtap entered promiscuous mode [ 207.323320][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.331878][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.360358][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.369437][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.649920][ T5736] device veth1_macvtap entered promiscuous mode [ 207.726606][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.800641][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.866524][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.748565][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.800134][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.875017][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.943222][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.980537][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.028642][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.039937][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.067186][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.101524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.246724][ T6114] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 209.377150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.390803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.764141][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.843394][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.872083][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.883146][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.893538][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.906594][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.916978][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.020074][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.030599][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.044870][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.083236][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.096544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.128168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.692787][ T5736] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.762893][ T5736] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.793112][ T5736] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.822252][ T5736] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.183774][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.192554][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.237085][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.318030][ T6143] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 212.852408][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.012165][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.039519][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.528996][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.468'. [ 216.744373][ T6183] vivid-000: disconnect [ 216.751780][ T6183] vivid-000: reconnect [ 217.906008][ T6212] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 221.512986][ C1] sched: RT throttling activated [ 222.787565][ T6281] vivid-002: disconnect [ 223.019425][ T6272] input: syz1 as /devices/virtual/input/input5 [ 223.616623][ T6281] vivid-002: reconnect [ 223.683194][ T4213] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 224.129810][ T6296] loop2: detected capacity change from 0 to 7 [ 224.710004][ T6296] loop2: [POWERTEC] p1 p2 p3 [ 224.717450][ T6296] loop2: p1 size 100663296 extends beyond EOD, truncated [ 224.728103][ T6296] loop2: p2 size 2164130048 extends beyond EOD, truncated [ 224.737288][ T6296] loop2: p3 start 1635021614 is beyond EOD, truncated [ 224.893193][ T4213] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.006754][ T4737] udevd[4737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 225.017162][ T4213] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.031981][ T4213] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 225.104225][ T4213] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.122880][ T4213] usb 8-1: config 0 descriptor?? [ 225.137484][ T4254] udevd[4254]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 225.627012][ T4213] hid-generic 0003:1044:7A4D.0010: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.7-1/input0 [ 225.906621][ T4213] usb 8-1: USB disconnect, device number 2 [ 227.482874][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 228.374547][ T6330] vivid-002: disconnect [ 229.196534][ T6335] syz.0.509 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 230.119386][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.508'. [ 230.127699][ T6328] vivid-002: reconnect [ 235.152315][ T1201] block nbd0: Attempted send on invalid socket [ 235.158934][ T1201] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.183612][ T1201] block nbd0: Attempted send on invalid socket [ 235.190016][ T1201] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.201866][ T6405] Mount JFS Failure: -5 [ 236.653069][ T4213] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 236.722599][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.532'. [ 237.173345][ T4213] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 237.204375][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.240136][ T4213] usb 1-1: Product: syz [ 237.987740][ T4213] usb 1-1: Manufacturer: syz [ 237.998899][ T4213] usb 1-1: SerialNumber: syz [ 238.013495][ T4213] usb 1-1: config 0 descriptor?? [ 238.058285][ T4213] usb 1-1: interface 1 not found [ 238.370787][ T21] usb 1-1: USB disconnect, device number 7 [ 238.848614][ T6446] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 239.496551][ T6456] xt_socket: unknown flags 0x4 [ 240.754584][ T150] block nbd0: Attempted send on invalid socket [ 240.761495][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.776812][ T150] block nbd0: Attempted send on invalid socket [ 240.783046][ T150] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.795564][ T6470] Mount JFS Failure: -5 [ 241.565392][ T4207] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 242.833800][ T4207] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 242.863453][ T4207] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.963078][ T4207] usb 8-1: Product: syz [ 243.003872][ T4207] usb 8-1: Manufacturer: syz [ 243.493165][ T4207] usb 8-1: SerialNumber: syz [ 243.525663][ T4207] usb 8-1: config 0 descriptor?? [ 243.633216][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 243.863558][ T4207] usb 8-1: can't set config #0, error -71 [ 243.928917][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.547'. [ 243.952563][ T6472] chnl_net:caif_netlink_parms(): no params data found [ 243.980034][ T4207] usb 8-1: USB disconnect, device number 3 [ 244.077962][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.547'. [ 245.353349][ T150] block nbd7: Attempted send on invalid socket [ 245.359651][ T150] blk_update_request: I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.492082][ T150] block nbd7: Attempted send on invalid socket [ 245.498811][ T150] blk_update_request: I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.510344][ T6520] Mount JFS Failure: -5 [ 247.050511][ T4207] Bluetooth: hci3: command 0x041b tx timeout [ 247.170623][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.183225][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.191579][ T6472] device bridge_slave_0 entered promiscuous mode [ 247.985809][ T6534] crypto_alloc_aead failed rc=-2 [ 248.026172][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.183164][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.382690][ T6472] device bridge_slave_1 entered promiscuous mode [ 248.391838][ T6548] batman_adv: batadv0: Adding interface: dummy0 [ 248.398393][ T6548] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.425671][ T6548] batman_adv: batadv0: Interface activated: dummy0 [ 248.518390][ T6577] netlink: 'syz.6.561': attribute type 1 has an invalid length. [ 248.526166][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.561'. [ 248.587586][ T6561] batadv0: mtu less than device minimum [ 248.650697][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.663707][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.676436][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.689229][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.701914][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.714669][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.727383][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.740064][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.752762][ T6561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.280867][ T4211] Bluetooth: hci3: command 0x040f tx timeout [ 249.320325][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.563'. [ 249.362293][ T6578] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.489080][ T6578] FAT-fs (loop1): unable to read boot sector [ 250.919437][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.449663][ T4211] Bluetooth: hci3: command 0x0419 tx timeout [ 251.680389][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.563'. [ 251.779800][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.973322][ T6472] team0: Port device team_slave_0 added [ 252.024559][ T6472] team0: Port device team_slave_1 added [ 252.363813][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.428910][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.827418][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.676167][ T6632] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 254.371763][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.483154][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.736200][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.985553][ T6472] device hsr_slave_0 entered promiscuous mode [ 254.996152][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.578'. [ 255.024958][ T6472] device hsr_slave_1 entered promiscuous mode [ 255.044815][ T6472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.069574][ T6472] Cannot create hsr debugfs directory [ 255.815760][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.539731][ T6672] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 260.711771][ T6705] netlink: 'syz.7.590': attribute type 21 has an invalid length. [ 261.116615][ T6718] i2c i2c-0: Invalid block write size 34 [ 261.719171][ T6722] netlink: 24576 bytes leftover after parsing attributes in process `syz.7.594'. [ 262.152780][ T1201] block nbd7: Attempted send on invalid socket [ 262.159428][ T1201] blk_update_request: I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.173232][ T1201] block nbd7: Attempted send on invalid socket [ 262.179721][ T1201] blk_update_request: I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.191081][ T6735] Mount JFS Failure: -5 [ 262.638208][ T6472] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 262.654775][ T6472] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 263.571856][ T4213] Bluetooth: hci5: command 0x0406 tx timeout [ 263.637436][ T6472] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 263.831033][ T6472] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 265.278384][ T4209] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 265.378613][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.447772][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.463817][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.499862][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.595658][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.612475][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.501728][ T4290] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 266.511761][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.519524][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.551190][ T4209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.552011][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.571696][ T4209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.583580][ T4209] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 266.592937][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.626511][ T4209] usb 1-1: config 0 descriptor?? [ 266.667808][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.676664][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.711632][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.718741][ T6773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.743307][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.776530][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.881508][ T4290] usb 8-1: Using ep0 maxpacket: 8 [ 266.990564][ T6472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.096320][ T6472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.130959][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.166738][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.373033][ T6787] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 267.895206][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.903851][ T4290] usb 8-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 267.935650][ T4290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.951363][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.990575][ T4290] usb 8-1: Product: syz [ 267.995563][ T4290] usb 8-1: Manufacturer: syz [ 268.001663][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.002392][ T4290] usb 8-1: SerialNumber: syz [ 268.025939][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.026756][ T4290] usb 8-1: config 0 descriptor?? [ 268.058950][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.076330][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.085125][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.090574][ T4290] hub 8-1:0.0: bad descriptor, ignoring hub [ 268.102136][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.109462][ T4290] hub: probe of 8-1:0.0 failed with error -5 [ 268.112710][ T4290] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 268.138309][ T6795] netlink: 'syz.6.612': attribute type 10 has an invalid length. [ 268.411147][ T6795] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 268.590171][ T13] usb 8-1: USB disconnect, device number 4 [ 268.712832][ T4213] usb 1-1: USB disconnect, device number 8 [ 268.786850][ T4169] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 269.269856][ T6816] netlink: 'syz.0.616': attribute type 3 has an invalid length. [ 270.673702][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.695100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.890350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.433266][ T6867] netlink: 'syz.6.630': attribute type 3 has an invalid length. [ 273.552864][ T4169] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 273.866935][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.965701][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.065883][ T6872] ksmbd: Unknown IPC event: 6, ignore. [ 274.266785][ T6472] device veth0_vlan entered promiscuous mode [ 274.382961][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.579869][ T6880] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 274.627200][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.309651][ T6472] device veth1_vlan entered promiscuous mode [ 275.411985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.431093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.511181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.689374][ T150] block nbd6: Attempted send on invalid socket [ 275.695647][ T150] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.348754][ T150] block nbd6: Attempted send on invalid socket [ 276.355330][ T150] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.366390][ T6891] Mount JFS Failure: -5 [ 276.409882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.612357][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.706802][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.217256][ T6472] device veth0_macvtap entered promiscuous mode [ 278.242996][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.393496][ T6922] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 278.545843][ T6472] device veth1_macvtap entered promiscuous mode [ 278.881775][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.924736][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.936783][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.010409][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.063788][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.125822][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.137234][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.362562][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.374631][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.387778][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.335715][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.357394][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.393028][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.419081][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.438136][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.452980][ T6947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.460888][ T6947] IPv6: NLM_F_CREATE should be set when creating new route [ 280.468227][ T6947] IPv6: NLM_F_CREATE should be set when creating new route [ 280.796340][ T6949] program syz.0.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.810096][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.879601][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.932508][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.132906][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.174925][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.186525][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.197081][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.217857][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.032341][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.145205][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.233337][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.305145][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.328447][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.473446][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.624124][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.789124][ T6975] ksmbd: Unknown IPC event: 6, ignore. [ 282.853411][ T6472] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.047173][ T6472] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.056214][ T6472] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.075065][ T6472] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.086126][ T6980] syz.0.663 (6980): attempted to duplicate a private mapping with mremap. This is not supported. [ 283.330660][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.387839][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.408908][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.711457][ T4219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.762417][ T4219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.861505][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.825637][ T7025] fuse: Bad value for 'fd' [ 287.835743][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 287.836132][ T26] audit: type=1326 audit(1741996842.500:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.8.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a4843169 code=0x7ffc0000 [ 288.027904][ T26] audit: type=1326 audit(1741996842.500:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.8.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a4843169 code=0x7ffc0000 [ 288.074578][ T7024] ksmbd: Unknown IPC event: 6, ignore. [ 288.185717][ T26] audit: type=1326 audit(1741996842.500:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.8.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff1a4841b7c code=0x7ffc0000 [ 288.241335][ T26] audit: type=1326 audit(1741996842.500:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.8.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a4843169 code=0x7ffc0000 [ 288.729056][ T26] audit: type=1326 audit(1741996842.500:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.8.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a4843169 code=0x7ffc0000 [ 289.320595][ T9] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.773222][ T9] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.045758][ T26] audit: type=1326 audit(1741996844.577:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae05ce6169 code=0x7ffc0000 [ 290.131667][ T26] audit: type=1326 audit(1741996844.614:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae05ce6169 code=0x7ffc0000 [ 290.161649][ T26] audit: type=1326 audit(1741996844.614:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae05ce6169 code=0x7ffc0000 [ 290.184351][ T26] audit: type=1326 audit(1741996844.614:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae05ce6169 code=0x7ffc0000 [ 290.187528][ T9] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.207647][ T26] audit: type=1326 audit(1741996844.614:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae05ce6169 code=0x7ffc0000 [ 290.626503][ T7044] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 290.917722][ T9] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.302294][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.896530][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.836738][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.876148][ T1106] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 294.911060][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.151187][ T7071] ksmbd: Unknown IPC event: 6, ignore. [ 295.286655][ T1106] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 295.297554][ T1106] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.397648][ T1106] usb 1-1: config 0 has no interface number 0 [ 295.407758][ T1106] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 295.474204][ T1106] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.768166][ T1106] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 295.792668][ T1106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.813221][ T1106] usb 1-1: Product: syz [ 295.821495][ T1106] usb 1-1: Manufacturer: syz [ 295.826301][ T1106] usb 1-1: SerialNumber: syz [ 295.905084][ T1106] usb 1-1: config 0 descriptor?? [ 296.651998][ T4724] usb 1-1: USB disconnect, device number 9 [ 300.020239][ T7134] IPv6: NLM_F_REPLACE set, but no existing node found! [ 304.480307][ T7185] ksmbd: Unknown IPC event: 6, ignore. [ 306.758848][ T7202] netlink: 'syz.5.719': attribute type 4 has an invalid length. [ 306.766749][ T7202] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.719'. [ 309.753809][ T7228] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 310.077793][ T7228] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 310.109819][ T7228] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 310.168377][ T7228] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 310.185810][ T7228] device geneve2 entered promiscuous mode [ 310.525701][ T7251] ksmbd: Unknown IPC event: 6, ignore. [ 312.264615][ T1106] Bluetooth: hci4: command 0x0406 tx timeout [ 314.523705][ T9] device hsr_slave_0 left promiscuous mode [ 314.613797][ T9] device hsr_slave_1 left promiscuous mode [ 314.630081][ T7294] ksmbd: Unknown IPC event: 6, ignore. [ 314.639527][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.647015][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.680771][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.695466][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.742400][ T9] device bridge_slave_1 left promiscuous mode [ 314.751781][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.816428][ T9] device bridge_slave_0 left promiscuous mode [ 314.855349][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.914473][ T2300] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 314.947635][ T9] device hsr_slave_0 left promiscuous mode [ 314.971212][ T9] device hsr_slave_1 left promiscuous mode [ 314.982549][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.996015][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.006113][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.015197][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.023097][ T9] device bridge_slave_1 left promiscuous mode [ 315.029396][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.038372][ T9] device bridge_slave_0 left promiscuous mode [ 315.045138][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.064878][ T9] device veth1_macvtap left promiscuous mode [ 315.071597][ T9] device veth0_macvtap left promiscuous mode [ 315.077933][ T9] device veth1_vlan left promiscuous mode [ 315.083776][ T9] device veth0_vlan left promiscuous mode [ 315.091705][ T9] device veth1_macvtap left promiscuous mode [ 315.098438][ T9] device veth0_macvtap left promiscuous mode [ 315.104500][ T9] device veth1_vlan left promiscuous mode [ 315.110811][ T9] device veth0_vlan left promiscuous mode [ 315.257929][ T4290] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 315.310279][ T2300] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.324853][ T2300] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.346430][ T2300] usb 9-1: config 0 descriptor?? [ 315.388412][ T2300] cp210x 9-1:0.0: cp210x converter detected [ 315.444416][ T9] team0 (unregistering): Port device team_slave_1 removed [ 315.459280][ T9] team0 (unregistering): Port device team_slave_0 removed [ 315.476130][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.494202][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.581590][ T9] bond0 (unregistering): Released all slaves [ 315.652225][ T4290] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.662601][ T4290] usb 7-1: config 0 interface 0 has no altsetting 0 [ 315.740556][ T9] team0 (unregistering): Port device team_slave_1 removed [ 315.755942][ T9] team0 (unregistering): Port device team_slave_0 removed [ 315.769019][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.786380][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.844665][ T4290] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.853779][ T4290] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.873281][ T4290] usb 7-1: Product: syz [ 315.878442][ T4290] usb 7-1: Manufacturer: syz [ 315.883074][ T4290] usb 7-1: SerialNumber: syz [ 315.883703][ T9] bond0 (unregistering): Released all slaves [ 315.895734][ T4290] usb 7-1: config 0 descriptor?? [ 315.956700][ T4290] usb 7-1: selecting invalid altsetting 0 [ 316.091270][ T2300] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 316.100886][ T2300] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 316.167036][ T2300] usb 9-1: cp210x converter now attached to ttyUSB0 [ 316.219501][ T2300] usb 9-1: USB disconnect, device number 2 [ 316.292183][ T2300] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 316.914607][ T4290] usb 7-1: USB disconnect, device number 5 [ 317.156056][ T2300] cp210x 9-1:0.0: device disconnected [ 319.684622][ T4290] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 320.012615][ T5503] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 320.318384][ T4290] usb 8-1: config 0 has an invalid interface number: 224 but max is 0 [ 320.334812][ T4290] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.847834][ T5503] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 320.856048][ T5503] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.905608][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.963239][ T4290] usb 8-1: config 0 has no interface number 0 [ 321.037063][ T5503] usb 9-1: config 0 has no interface number 0 [ 321.050940][ T4290] usb 8-1: string descriptor 0 read error: -71 [ 321.057453][ T4290] usb 8-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 321.088990][ T5503] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 321.104380][ T4290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.123038][ T5503] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.177361][ T4290] usb 8-1: config 0 descriptor?? [ 321.221937][ T4290] usb 8-1: can't set config #0, error -71 [ 321.243107][ T4290] usb 8-1: USB disconnect, device number 5 [ 321.300082][ T7375] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.339890][ T5503] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 321.493372][ T5503] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.510914][ T5503] usb 9-1: Product: syz [ 321.641382][ T5503] usb 9-1: Manufacturer: syz [ 321.646014][ T5503] usb 9-1: SerialNumber: syz [ 321.666752][ T5503] usb 9-1: config 0 descriptor?? [ 321.699066][ T7377] team0: Port device team_slave_1 removed [ 322.088812][ T7375] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.443025][ T7375] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.600978][ T4213] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 323.092928][ T7375] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.139260][ T21] usb 9-1: USB disconnect, device number 3 [ 323.216171][ T7375] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.255305][ T7375] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.270872][ T7375] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.287397][ T7375] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.299088][ T7412] ksmbd: Unknown IPC event: 6, ignore. [ 323.317313][ T4213] usb 7-1: Using ep0 maxpacket: 8 [ 323.456435][ T4213] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 323.485118][ T4213] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 323.526884][ T4213] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.569770][ T4213] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.626647][ T4213] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.662313][ T4213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.108520][ T4213] usb 7-1: GET_CAPABILITIES returned 0 [ 324.115967][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.8.784'. [ 324.129792][ T4213] usbtmc 7-1:16.0: can't read capabilities [ 324.969594][ T4179] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 325.407165][ T7457] ksmbd: Unknown IPC event: 6, ignore. [ 325.591311][ T4290] usb 7-1: USB disconnect, device number 6 [ 325.929864][ T7463] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.933807][ T7468] team0: Port device team_slave_1 removed [ 327.916232][ T7463] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.796711][ T7463] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.052420][ T7463] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.153012][ T7506] netlink: 40 bytes leftover after parsing attributes in process `syz.5.805'. [ 329.208474][ T4213] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 329.283989][ T7463] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.310888][ T7463] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.344919][ T7463] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.435524][ T7463] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.520677][ T4213] usb 8-1: Using ep0 maxpacket: 32 [ 330.405756][ T4213] usb 8-1: config 0 has an invalid interface number: 230 but max is 0 [ 330.618006][ T4213] usb 8-1: config 0 has no interface number 0 [ 330.660277][ T4213] usb 8-1: config 0 interface 230 has no altsetting 0 [ 330.854397][ T4213] usb 8-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 330.877845][ T4213] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.907620][ T4213] usb 8-1: Product: syz [ 330.922841][ T4213] usb 8-1: Manufacturer: syz [ 330.927496][ T4213] usb 8-1: SerialNumber: syz [ 330.972038][ T4213] usb 8-1: config 0 descriptor?? [ 331.041716][ T4213] ums-usbat 8-1:0.230: USB Mass Storage device detected [ 331.679461][ T4213] ums-usbat 8-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 331.703804][ T7512] sd 0:0:1:0: device reset [ 333.499159][ T7552] ksmbd: Unknown IPC event: 6, ignore. [ 333.917092][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 334.013069][ T4213] ums-usbat: probe of 8-1:0.230 failed with error 4 [ 334.609343][ T4213] usb 8-1: USB disconnect, device number 6 [ 338.723050][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.835'. [ 341.597739][ T7670] ksmbd: Unknown IPC event: 6, ignore. [ 347.607883][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 348.126553][ T7712] sd 0:0:1:0: device reset [ 349.985953][ T7743] loop2: detected capacity change from 0 to 7 [ 350.017340][ T7743] Dev loop2: unable to read RDB block 7 [ 350.023226][ T7743] loop2: AHDI p2 p3 [ 350.027612][ T7743] loop2: partition table partially beyond EOD, truncated [ 350.038663][ T7743] loop2: p2 start 2507366258 is beyond EOD, truncated [ 350.065290][ T4211] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 350.355554][ T4211] usb 9-1: Using ep0 maxpacket: 8 [ 350.941934][ T4211] usb 9-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 350.950783][ T4211] usb 9-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 351.026936][ T4211] usb 9-1: config 63 has no interface number 0 [ 351.057789][ T4211] usb 9-1: config 63 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 351.111068][ T4211] usb 9-1: config 63 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 351.163984][ T4211] usb 9-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 351.193929][ T4211] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.286549][ T4211] usb 9-1: probing VID:PID(2201:012C) [ 351.303051][ T4211] usb 9-1: vub300 testing BULK OUT EndPoint(0) 02 [ 351.316477][ T4211] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 351.355973][ T4211] vub300: probe of 9-1:63.19 failed with error -22 [ 351.563642][ T5503] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 351.627950][ T23] usb 9-1: USB disconnect, device number 4 [ 351.808185][ T7788] ksmbd: Unknown IPC event: 6, ignore. [ 351.844464][ T5503] usb 7-1: Using ep0 maxpacket: 8 [ 352.399166][ T5503] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.447223][ T5503] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 352.462659][ T5503] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.490355][ T5503] usb 7-1: config 0 descriptor?? [ 352.579762][ T5503] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 352.803730][ T7796] 9pnet: Insufficient options for proto=fd [ 353.443471][ T5503] gspca_vc032x: reg_r err -71 [ 353.449340][ T5503] vc032x: probe of 7-1:0.0 failed with error -71 [ 353.656310][ T5503] usb 7-1: USB disconnect, device number 7 [ 354.523298][ T5503] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 355.603921][ T5503] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 355.628423][ T5503] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.838064][ T5503] usb 9-1: Product: syz [ 355.843020][ T5503] usb 9-1: Manufacturer: syz [ 355.847833][ T5503] usb 9-1: SerialNumber: syz [ 355.895085][ T5503] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 358.406627][ T5503] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 358.643463][ T2300] usb 9-1: USB disconnect, device number 5 [ 358.649776][ T4211] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 358.919231][ T7905] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 359.181818][ T7910] ksmbd: Unknown IPC event: 6, ignore. [ 359.356214][ T4211] usb 1-1: unable to get BOS descriptor or descriptor too short [ 359.409091][ T4211] usb 1-1: not running at top speed; connect to a high speed hub [ 359.515897][ T4211] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 359.558390][ T5503] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 359.741942][ T5503] ath9k_htc: Failed to initialize the device [ 359.806023][ T2300] usb 9-1: ath9k_htc: USB layer deinitialized [ 360.023823][ T4211] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 360.034078][ T4211] usb 1-1: config 4 has no interface number 0 [ 360.488827][ T4211] usb 1-1: string descriptor 0 read error: -22 [ 360.633622][ T4211] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 360.677915][ T4211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.998644][ T5503] usb 1-1: USB disconnect, device number 10 [ 362.435691][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 364.486382][ T7961] ksmbd: Unknown IPC event: 6, ignore. [ 365.150494][ T7983] devpts: called with bogus options [ 365.168983][ T7983] netlink: 'syz.6.925': attribute type 1 has an invalid length. [ 367.791445][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.935'. [ 367.919686][ T8023] netlink: 168 bytes leftover after parsing attributes in process `syz.8.936'. [ 369.468711][ T21] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 369.541087][ T8053] ksmbd: Unknown IPC event: 6, ignore. [ 369.632208][ T8055] netlink: 'syz.5.944': attribute type 1 has an invalid length. [ 369.639973][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.944'. [ 370.452248][ T21] usb 7-1: Using ep0 maxpacket: 8 [ 370.572299][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.8.946'. [ 370.582842][ T21] usb 7-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 370.604930][ T21] usb 7-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 370.662972][ T21] usb 7-1: config 63 has no interface number 0 [ 370.693678][ T21] usb 7-1: config 63 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 370.739431][ T21] usb 7-1: config 63 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 370.780166][ T21] usb 7-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 370.815688][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.901196][ T4724] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 370.967775][ T21] usb 7-1: probing VID:PID(2201:012C) [ 370.974336][ T21] usb 7-1: vub300 testing BULK OUT EndPoint(0) 02 [ 371.175007][ T21] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 371.196145][ T21] vub300: probe of 7-1:63.19 failed with error -22 [ 371.234728][ T21] usb 7-1: USB disconnect, device number 8 [ 371.342471][ T4724] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.419414][ T4724] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.565246][ T4724] usb 9-1: New USB device found, idVendor=2247, idProduct=0001, bcdDevice= 0.00 [ 371.697446][ T4724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.024589][ T4724] usb 9-1: config 0 descriptor?? [ 373.431231][ T4211] Bluetooth: hci3: command 0x0406 tx timeout [ 373.466956][ T4724] usbhid 9-1:0.0: can't add hid device: -71 [ 373.473095][ T4724] usbhid: probe of 9-1:0.0 failed with error -71 [ 374.123307][ T8102] ksmbd: Unknown IPC event: 6, ignore. [ 374.152340][ T4724] usb 9-1: USB disconnect, device number 6 [ 375.967144][ T8115] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 376.320147][ T8121] netlink: 112 bytes leftover after parsing attributes in process `syz.6.962'. [ 377.987759][ T8135] 8021q: VLANs not supported on caif0 [ 378.168078][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.6.968'. [ 378.287233][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.297560][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.332153][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.5.969'. [ 379.750405][ T8162] ksmbd: Unknown IPC event: 6, ignore. [ 380.758271][ T8186] netlink: 112 bytes leftover after parsing attributes in process `syz.6.978'. [ 381.784740][ T8189] bridge0: port 3(vlan2) entered blocking state [ 381.792307][ T8189] bridge0: port 3(vlan2) entered disabled state [ 381.928577][ T8189] device vlan2 entered promiscuous mode [ 381.936691][ T8189] device batadv0 entered promiscuous mode [ 382.148443][ T8189] bridge0: port 3(vlan2) entered blocking state [ 382.155007][ T8189] bridge0: port 3(vlan2) entered listening state [ 383.443286][ T8202] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 385.857759][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 385.857775][ T26] audit: type=1326 audit(1741996934.066:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a4843169 code=0x7ffc0000 [ 385.963240][ T26] audit: type=1326 audit(1741996934.066:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a4843169 code=0x7ffc0000 [ 385.996258][ T26] audit: type=1326 audit(1741996934.066:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff1a4841b7c code=0x7ffc0000 [ 386.591438][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.179419][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.8.997'. [ 389.190266][ T8255] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 391.023556][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 391.140863][ T8268] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 391.434596][ T8275] ksmbd: Unknown IPC event: 6, ignore. [ 392.765266][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1013'. [ 395.816939][ T8370] ksmbd: Unknown IPC event: 6, ignore. [ 396.538288][ T8378] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1029'. [ 397.898504][ T8411] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1036'. [ 398.227186][ C0] bridge0: port 3(vlan2) entered learning state [ 400.605497][ T8463] ksmbd: Unknown IPC event: 6, ignore. [ 401.529494][ T8482] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 402.032299][ T4724] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 402.342216][ T4724] usb 8-1: Using ep0 maxpacket: 32 [ 402.492713][ T4724] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 402.536588][ T4724] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 402.644403][ T4724] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 402.655483][ T4724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.680628][ T4724] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 402.730213][ T4724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.772937][ T4724] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 402.859399][ T4724] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 402.943251][ T4724] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 402.973395][ T4724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.027508][ T4724] usb 8-1: config 0 descriptor?? [ 403.324737][ T4724] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 404.302002][ T8510] capability: warning: `syz.0.1060' uses 32-bit capabilities (legacy support in use) [ 404.305864][ T21] usb 8-1: USB disconnect, device number 7 [ 404.340646][ T21] usblp0: removed [ 406.904586][ T8550] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 410.123419][ T8591] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 410.705824][ T8601] ksmbd: Unknown IPC event: 6, ignore. [ 413.489136][ T8641] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 414.003909][ T8646] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 414.843281][ C0] bridge0: port 3(vlan2) entered forwarding state [ 414.849791][ C0] bridge0: topology change detected, propagating [ 417.309613][ T8691] netlink: 'syz.0.1106': attribute type 10 has an invalid length. [ 417.318004][ T8691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1106'. [ 417.328162][ T8691] bridge0: port 4(batadv0) entered blocking state [ 417.363548][ T8691] bridge0: port 4(batadv0) entered disabled state [ 417.377950][ T8691] bridge0: port 4(batadv0) entered blocking state [ 417.384596][ T8691] bridge0: port 4(batadv0) entered listening state [ 417.589635][ T8691] batman_adv: batadv0: Adding interface: dummy0 [ 417.596085][ T8691] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.621400][ T8691] batman_adv: batadv0: Interface activated: dummy0 [ 417.628724][ T8691] net_ratelimit: 10 callbacks suppressed [ 417.628770][ T8691] batadv0: mtu less than device minimum [ 417.642672][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.655402][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.668109][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.680868][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.693570][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.706311][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.719016][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.731696][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.744370][ T8691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.043714][ T4341] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 418.053710][ T4341] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 418.251217][ T8697] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 418.364779][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 418.546423][ T4169] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 418.547556][ T8702] netlink: 'syz.0.1108': attribute type 3 has an invalid length. [ 422.471087][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1122'. [ 422.509836][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1123'. [ 422.648570][ T8765] netlink: 'syz.6.1122': attribute type 3 has an invalid length. [ 422.660846][ T4169] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 425.717566][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1139'. [ 425.815754][ T8812] netlink: 'syz.8.1139': attribute type 3 has an invalid length. [ 425.824375][ T4169] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 426.462514][ T8807] ksmbd: Unknown IPC event: 6, ignore. [ 430.347697][ T8865] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 430.433409][ T8866] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1151'. [ 430.672784][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 432.022708][ T8886] net_ratelimit: 10 callbacks suppressed [ 432.022729][ T8886] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 433.296384][ T8895] overlayfs: failed to clone upperpath [ 433.793954][ C1] bridge0: port 4(batadv0) entered learning state [ 433.837804][ T8905] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 436.277839][ T13] libceph: connect (1)[c::]:6789 error -101 [ 436.288560][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 436.305562][ T8930] ceph: No mds server is up or the cluster is laggy [ 436.345613][ T13] libceph: connect (1)[c::]:6789 error -101 [ 436.373058][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 437.318551][ T8951] netlink: 'syz.6.1169': attribute type 1 has an invalid length. [ 437.326442][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1169'. [ 439.659899][ T8971] ksmbd: Unknown IPC event: 6, ignore. [ 442.422236][ T9011] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 442.817354][ T9021] netlink: 'syz.8.1185': attribute type 1 has an invalid length. [ 442.825289][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1185'. [ 444.779140][ T9032] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1190'. [ 445.222259][ T23] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 445.618006][ T23] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 445.649939][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.681984][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.713658][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 445.842531][ T23] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 445.873518][ T23] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 445.895259][ T23] usb 7-1: Manufacturer: syz [ 445.928619][ T23] usb 7-1: config 0 descriptor?? [ 447.010343][ T23] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 447.051951][ T23] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 447.133132][ T23] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 447.174196][ T9071] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1195'. [ 447.886272][ T2300] usb 7-1: USB disconnect, device number 9 [ 448.327714][ T9092] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 448.335589][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 450.216462][ C1] bridge0: port 4(batadv0) entered forwarding state [ 450.223146][ C1] bridge0: topology change detected, propagating [ 453.143720][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.896642][ T9153] futex_wake_op: syz.5.1212 tries to shift op by -1; fix this program [ 459.672858][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 459.760743][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 459.841324][ T9210] netlink: 'syz.5.1227': attribute type 1 has an invalid length. [ 459.849280][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'. [ 460.388073][ T4245] libceph: connect (1)[c::]:6789 error -101 [ 460.407650][ T4245] libceph: mon0 (1)[c::]:6789 connect error [ 461.169406][ T9215] ceph: No mds server is up or the cluster is laggy [ 461.466153][ T4245] libceph: connect (1)[c::]:6789 error -101 [ 461.493549][ T4245] libceph: mon0 (1)[c::]:6789 connect error [ 463.087697][ T4210] libceph: connect (1)[c::]:6789 error -101 [ 463.667152][ T4210] libceph: mon0 (1)[c::]:6789 connect error [ 463.968811][ T9251] VFS: unable to find oldfs superblock on device nullb0 [ 463.998738][ T9253] Scaler: ================= START STATUS ================= [ 464.006937][ T9253] Scaler: ================== END STATUS ================== [ 466.189418][ T9283] netlink: 'syz.6.1243': attribute type 1 has an invalid length. [ 466.197320][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1243'. [ 467.645416][ T9304] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 467.773086][ T9311] ksmbd: Unknown IPC event: 6, ignore. [ 471.235397][ T9340] netlink: 'syz.6.1259': attribute type 8 has an invalid length. [ 471.267397][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 471.282546][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 471.959308][ T9350] netlink: 'syz.8.1260': attribute type 1 has an invalid length. [ 471.967164][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1260'. [ 472.513800][ T2300] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 472.900440][ T2300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.922777][ T2300] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 473.027289][ T4210] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 473.202212][ T2300] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.224175][ T2300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 473.239078][ T2300] usb 1-1: SerialNumber: syz [ 474.418301][ T4210] usb 7-1: Using ep0 maxpacket: 16 [ 474.481690][ T2300] rndis_wlan: probe of 1-1:1.0 failed with error -22 [ 474.489079][ T2300] rndis_host: probe of 1-1:1.0 failed with error -22 [ 474.515953][ T2300] usb 1-1: USB disconnect, device number 11 [ 474.557555][ T4210] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 474.685327][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1271'. [ 474.803529][ T4210] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 474.833590][ T4210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.943762][ T4209] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 474.979405][ T4210] usb 7-1: Product: syz [ 475.016132][ T4210] usb 7-1: Manufacturer: syz [ 475.037717][ T4210] usb 7-1: SerialNumber: syz [ 475.371469][ T4209] usb 9-1: unable to get BOS descriptor or descriptor too short [ 475.500749][ T4209] usb 9-1: config 13 has an invalid interface number: 50 but max is 3 [ 475.829468][ T4210] usb 7-1: config 0 descriptor?? [ 475.855615][ T4209] usb 9-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 475.868200][ T4209] usb 9-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 475.881821][ T4209] usb 9-1: config 13 has no interface number 0 [ 475.889216][ T4209] usb 9-1: config 13 interface 50 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 475.905851][ T4209] usb 9-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.922298][ T4209] usb 9-1: config 13 interface 50 has no altsetting 0 [ 475.925747][ T4210] usb 7-1: can't set config #0, error -71 [ 475.965948][ T4210] usb 7-1: USB disconnect, device number 10 [ 476.270697][ T9421] ksmbd: Unknown IPC event: 6, ignore. [ 476.415898][ T4209] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 476.460252][ T4209] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.469005][ T4209] usb 9-1: Product: syz [ 476.475871][ T4209] usb 9-1: Manufacturer: syz [ 476.482409][ T9425] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 476.490136][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 476.501067][ T4209] usb 9-1: SerialNumber: syz [ 476.775766][ T9384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.744219][ T9449] Scaler: ================= START STATUS ================= [ 478.760064][ T9449] Scaler: ================== END STATUS ================== [ 479.298761][ T4209] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 479.315700][ T9203] usb 9-1: Failed to submit usb control message: -71 [ 479.451855][ T4209] usb 9-1: USB disconnect, device number 7 [ 479.554942][ T9203] usb 9-1: unable to send the bmi data to the device: -71 [ 479.624010][ T9203] usb 9-1: unable to get target info from device [ 479.793278][ T9203] usb 9-1: could not get target info (-71) [ 479.819287][ T9203] usb 9-1: could not probe fw (-71) [ 480.814691][ T9478] ksmbd: Unknown IPC event: 6, ignore. [ 482.679753][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 482.725223][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 482.800036][ T2300] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 483.067229][ T2300] usb 9-1: Using ep0 maxpacket: 8 [ 483.324096][ T2300] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 483.353936][ T2300] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.389816][ T2300] usb 9-1: config 0 descriptor?? [ 483.698253][ T2300] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 485.575171][ T9537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.408094][ T9537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.458517][ T9537] bond0 (unregistering): Released all slaves [ 486.862367][ T2300] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 487.010715][ T2300] asix: probe of 9-1:0.0 failed with error -71 [ 487.067311][ T2300] usb 9-1: USB disconnect, device number 8 [ 488.140241][ T9589] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 488.959483][ T9598] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 488.967345][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 493.684979][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1329'. [ 494.311437][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 494.378053][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 495.533873][ T9658] netlink: 'syz.6.1333': attribute type 1 has an invalid length. [ 495.541718][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1333'. [ 498.359205][ T9687] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1343'. [ 499.457367][ T9700] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1347'. [ 500.623158][ T9715] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 500.684952][ T9717] netlink: 'syz.7.1350': attribute type 1 has an invalid length. [ 500.692801][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1350'. [ 501.337272][ T4245] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 501.505418][ T9724] Scaler: ================= START STATUS ================= [ 501.513583][ T9724] Scaler: ================== END STATUS ================== [ 501.840396][ T4245] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 501.850421][ T4245] usb 1-1: config 0 has no interface number 0 [ 502.235379][ T4245] usb 1-1: config 0 interface 107 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.922154][ T9739] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1358'. [ 503.721590][ T4245] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 503.746654][ T4245] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 503.777325][ T4245] usb 1-1: Product: syz [ 503.781541][ T4245] usb 1-1: Manufacturer: syz [ 503.826258][ T4245] usb 1-1: SerialNumber: syz [ 503.844009][ T9744] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 503.852810][ T4245] usb 1-1: config 0 descriptor?? [ 503.870241][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.878227][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.916761][ T4245] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 503.967561][ T4245] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 504.448445][ T4245] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 88 [ 504.563466][ T4245] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 504.679567][ T4245] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 504.883725][ T4245] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 504.941950][ T4245] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 504.975076][ T4245] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 505.007409][ T4245] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 505.040192][ T4245] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 505.064760][ T4245] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 506.486970][ T1106] usb 1-1: USB disconnect, device number 12 [ 506.533142][ T4558] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 506.714407][ T9767] netlink: 'syz.5.1367': attribute type 1 has an invalid length. [ 506.722225][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1367'. [ 506.817835][ T1106] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 506.912851][ T1106] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 507.046422][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 507.062888][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 507.645688][ T1106] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 507.664159][ T1106] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 507.678667][ T1106] keyspan 1-1:0.107: device disconnected [ 507.786254][ T9788] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1373'. [ 507.887771][ T4558] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.943797][ T4558] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 507.984881][ T4558] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.020063][ T4558] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.244189][ T9761] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 508.500876][ T4558] usb 9-1: can't set config #27, error -71 [ 508.511416][ T4558] usb 9-1: USB disconnect, device number 9 [ 510.075617][ T9812] netlink: 'syz.7.1380': attribute type 1 has an invalid length. [ 510.083968][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1380'. [ 510.985985][ T9824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 513.699017][ T9863] netlink: 'syz.8.1396': attribute type 1 has an invalid length. [ 513.706908][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1396'. [ 513.774875][ T9866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.597177][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1397'. [ 516.641273][ T9899] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1406'. [ 517.669617][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1410'. [ 517.957531][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.491638][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 518.549999][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 520.985735][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1422'. [ 521.243628][ T4210] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 523.774528][ T4210] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.856407][ T4210] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.033815][ T4210] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 524.054863][ T4210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 524.062929][ T4210] usb 9-1: SerialNumber: syz [ 524.312509][ T4210] usb 9-1: can't set config #1, error -71 [ 525.791112][T10008] 9pnet: Insufficient options for proto=fd [ 525.803523][ T4210] usb 9-1: USB disconnect, device number 10 [ 525.843558][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 528.110105][T10037] overlayfs: failed to clone upperpath [ 528.856943][T10056] Scaler: ================= START STATUS ================= [ 528.864428][T10056] Scaler: ================== END STATUS ================== [ 529.009750][T10059] netlink: 'syz.8.1449': attribute type 1 has an invalid length. [ 529.017582][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1449'. [ 531.094932][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 531.151565][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 531.307313][T10080] overlayfs: failed to resolve './file1': -2 [ 533.575952][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1460'. [ 534.447279][T10113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.600923][T10116] Scaler: ================= START STATUS ================= [ 535.608318][T10116] Scaler: ================== END STATUS ================== [ 536.625764][T10125] overlayfs: failed to resolve './file1': -2 [ 537.754033][T10128] tmpfs: Bad value for 'mpol' [ 538.708462][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1471'. [ 539.054771][T10159] overlayfs: failed to resolve './file1': -2 [ 540.053106][T10167] ksmbd: Unknown IPC event: 6, ignore. [ 541.889400][T10184] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 541.908423][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 541.923506][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 541.939769][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1484'. [ 542.001789][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1482'. [ 542.384032][T10200] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1490'. [ 543.251640][T10211] overlayfs: failed to resolve './file0': -2 [ 544.063505][T10208] Scaler: ================= START STATUS ================= [ 544.071067][T10208] Scaler: ================== END STATUS ================== [ 546.204762][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1496'. [ 547.735336][ T5503] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 547.899009][T10240] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 547.906213][T10240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 547.914789][T10240] vhci_hcd vhci_hcd.0: Device attached [ 548.141340][ T5503] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 548.171887][ T5503] usb 9-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 548.306861][ T4558] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 548.332729][ T5503] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.351038][T10257] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1505'. [ 548.361927][ T4169] Bluetooth: Wrong link type (-71) [ 549.378284][ T5503] usb 9-1: config 0 descriptor?? [ 549.403391][T10243] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 550.069227][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1509'. [ 550.382610][T10242] vhci_hcd: connection reset by peer [ 550.412644][ T4340] vhci_hcd: stop threads [ 550.417633][ T4340] vhci_hcd: release socket [ 550.430844][ T4340] vhci_hcd: disconnect device [ 550.439492][ T5503] usbhid 9-1:0.0: can't add hid device: -71 [ 550.446454][ T5503] usbhid: probe of 9-1:0.0 failed with error -71 [ 551.266419][ T5503] usb 9-1: USB disconnect, device number 11 [ 552.073002][ T4169] Bluetooth: Wrong link type (-71) [ 552.859280][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 552.921261][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 553.173170][T10303] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1521'. [ 553.881845][ T4558] vhci_hcd: vhci_device speed not set [ 553.985902][T10308] Scaler: ================= START STATUS ================= [ 553.994457][T10308] Scaler: ================== END STATUS ================== [ 555.588705][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1523'. [ 556.269193][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 556.285949][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 558.478737][ T4213] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 558.521478][ T4209] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 558.629535][T10342] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1532'. [ 558.799968][ T4209] usb 7-1: Using ep0 maxpacket: 16 [ 559.121075][ T4209] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 559.193156][ T4209] usb 7-1: config 0 has no interface number 0 [ 559.200138][ T4209] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 559.269825][ T4209] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 559.441926][ T4209] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 559.494201][ T4209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.512507][ T4169] Bluetooth: hci0: ACL packet too small [ 559.558410][ T4209] usb 7-1: Product: syz [ 559.728650][ T4209] usb 7-1: Manufacturer: syz [ 560.861552][ T4209] usb 7-1: SerialNumber: syz [ 560.879778][ T4209] usb 7-1: config 0 descriptor?? [ 560.971189][ T4209] usb 7-1: can't set config #0, error -71 [ 560.995318][ T4209] usb 7-1: USB disconnect, device number 11 [ 563.284238][T10384] Scaler: ================= START STATUS ================= [ 563.292168][T10384] Scaler: ================== END STATUS ================== [ 564.018933][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 564.080135][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 564.116840][ T4213] usb 9-1: unable to get BOS descriptor or descriptor too short [ 564.213159][T10388] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1547'. [ 564.315814][ T4213] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 564.334625][ T4213] usb 9-1: can't read configurations, error -71 [ 564.913004][ T1201] block nbd0: Attempted send on invalid socket [ 564.925486][ T1201] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 564.939483][ T1201] block nbd0: Attempted send on invalid socket [ 564.950478][ T1201] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 564.972979][T10396] Mount JFS Failure: -5 [ 565.810985][T10406] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1560'. [ 568.144902][ T4213] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 569.028194][T10414] ALSA: mixer_oss: invalid OSS volume 'L' [ 569.137215][ T4213] usb 9-1: Using ep0 maxpacket: 32 [ 569.298031][ T4213] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.314350][ T4213] usb 9-1: config 0 has no interface number 0 [ 569.348606][ T4213] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.642653][T10428] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 569.688843][ T4213] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.743830][ T4213] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 569.756367][ T4213] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.782958][ T4213] usb 9-1: config 0 descriptor?? [ 570.390578][ T4213] usb 9-1: can't set config #0, error -71 [ 571.244876][ T4213] usb 9-1: USB disconnect, device number 14 [ 571.737418][T10452] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1563'. [ 571.791224][T10454] Scaler: ================= START STATUS ================= [ 571.798649][T10454] Scaler: ================== END STATUS ================== [ 572.480066][T10459] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 572.763528][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1572'. [ 572.955193][T10472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.880230][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 575.986321][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 576.514779][T10510] Scaler: ================= START STATUS ================= [ 576.522222][T10510] Scaler: ================== END STATUS ================== [ 576.875699][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1583'. [ 577.524411][T10523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 578.196144][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 578.211184][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 579.162091][T10534] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 579.913467][T10545] overlayfs: failed to clone upperpath [ 580.849410][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1596'. [ 581.689074][T10569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.642766][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.390579][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1610'. [ 587.196451][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 587.310438][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 587.762276][T10619] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 591.866834][T10636] lo speed is unknown, defaulting to 1000 [ 591.877563][T10636] lo speed is unknown, defaulting to 1000 [ 591.886336][T10636] lo speed is unknown, defaulting to 1000 [ 591.989042][T10636] infiniband syz2: set active [ 591.994445][T10636] infiniband syz2: added lo [ 592.100462][T10642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 592.155200][T10636] RDS/IB: syz2: added [ 592.161062][T10636] smc: adding ib device syz2 with port count 1 [ 592.167814][T10636] smc: ib device syz2 port 1 has pnetid [ 592.178994][T10636] lo speed is unknown, defaulting to 1000 [ 592.286000][T10636] lo speed is unknown, defaulting to 1000 [ 592.391805][T10636] lo speed is unknown, defaulting to 1000 [ 592.497947][T10636] lo speed is unknown, defaulting to 1000 [ 592.846767][T10636] lo speed is unknown, defaulting to 1000 [ 592.952785][T10636] lo speed is unknown, defaulting to 1000 [ 593.281610][T10636] lo speed is unknown, defaulting to 1000 [ 593.728322][ T4213] lo speed is unknown, defaulting to 1000 [ 593.737863][ T4245] lo speed is unknown, defaulting to 1000 [ 594.395611][T10646] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1623'. [ 597.147479][ T1106] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 597.414573][ T1106] usb 7-1: Using ep0 maxpacket: 16 [ 597.575299][ T1106] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 597.596010][T10685] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 597.789105][ T1106] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 597.831781][ T1106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.864191][ T1106] usb 7-1: Product: syz [ 597.868396][ T1106] usb 7-1: Manufacturer: syz [ 597.873042][ T1106] usb 7-1: SerialNumber: syz [ 597.966249][ T1106] usb 7-1: config 0 descriptor?? [ 598.137077][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1636'. [ 598.249603][T10689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1637'. [ 599.564981][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 599.635651][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 599.694573][ T1106] usb 7-1: USB disconnect, device number 12 [ 600.467054][T10715] overlayfs: failed to clone upperpath [ 601.103239][ T1106] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 601.877716][T10733] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 602.268332][ T1106] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.290114][ T1106] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 602.357665][T10735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.418948][ T1106] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 602.487766][ T1106] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.602084][T10723] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 603.055207][T10723] hsr0: VLAN not yet supported [ 603.735799][T10748] lo speed is unknown, defaulting to 1000 [ 604.717834][ T4210] usb 9-1: USB disconnect, device number 15 [ 611.243091][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 611.289791][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 612.346379][T10829] lo speed is unknown, defaulting to 1000 [ 613.844739][T10826] Scaler: ================= START STATUS ================= [ 613.853191][T10826] Scaler: ================== END STATUS ================== [ 614.659402][T10845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 615.590079][T10850] lo speed is unknown, defaulting to 1000 [ 616.028996][T10862] overlayfs: failed to clone upperpath [ 619.460437][T10886] lo speed is unknown, defaulting to 1000 [ 620.912493][T10893] Scaler: ================= START STATUS ================= [ 620.919986][T10893] Scaler: ================== END STATUS ================== [ 621.928573][T10900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 622.652516][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 622.687055][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 622.697389][T10905] lo speed is unknown, defaulting to 1000 [ 626.681502][T10943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.779291][T10938] Scaler: ================= START STATUS ================= [ 627.787155][T10938] Scaler: ================== END STATUS ================== [ 630.405456][T10965] ksmbd: Unknown IPC event: 6, ignore. [ 630.443643][ C0] ------------[ cut here ]------------ [ 630.443711][ C0] [ 630.443717][ C0] ====================================================== [ 630.443723][ C0] WARNING: possible circular locking dependency detected [ 630.443728][ C0] 5.15.179-syzkaller #0 Not tainted [ 630.443739][ C0] ------------------------------------------------------ [ 630.443745][ C0] kworker/0:8/4290 is trying to acquire lock: [ 630.443756][ C0] ffffffff8c9fbd38 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 630.443809][ C0] [ 630.443809][ C0] but task is already holding lock: [ 630.443815][ C0] ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 630.443859][ C0] [ 630.443859][ C0] which lock already depends on the new lock. [ 630.443859][ C0] [ 630.443865][ C0] [ 630.443865][ C0] the existing dependency chain (in reverse order) is: [ 630.443890][ C0] [ 630.443890][ C0] -> #3 (&base->lock){-.-.}-{2:2}: [ 630.443915][ C0] lock_acquire+0x1db/0x4f0 [ 630.443933][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 630.443952][ C0] lock_timer_base+0x120/0x260 [ 630.443972][ C0] __mod_timer+0x1d6/0xeb0 [ 630.443991][ C0] queue_delayed_work_on+0x156/0x250 [ 630.444018][ C0] enqueue_task+0x28d/0x2e0 [ 630.444037][ C0] wake_up_new_task+0x515/0xb60 [ 630.444058][ C0] kernel_clone+0x44e/0x960 [ 630.444075][ C0] kernel_thread+0x12e/0x1a0 [ 630.444092][ C0] rest_init+0x21/0x330 [ 630.444107][ C0] start_kernel+0x48c/0x540 [ 630.444125][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 630.444147][ C0] [ 630.444147][ C0] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 630.444171][ C0] lock_acquire+0x1db/0x4f0 [ 630.444186][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 630.444203][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 630.444223][ C0] task_fork_fair+0x5d/0x350 [ 630.444240][ C0] sched_cgroup_fork+0x2d3/0x330 [ 630.444260][ C0] copy_process+0x224a/0x3ef0 [ 630.444277][ C0] kernel_clone+0x210/0x960 [ 630.444294][ C0] kernel_thread+0x12e/0x1a0 [ 630.444310][ C0] rest_init+0x21/0x330 [ 630.444325][ C0] start_kernel+0x48c/0x540 [ 630.444342][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 630.444362][ C0] [ 630.444362][ C0] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 630.444385][ C0] lock_acquire+0x1db/0x4f0 [ 630.444400][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 630.444417][ C0] try_to_wake_up+0xae/0x12c0 [ 630.444436][ C0] up+0x6e/0x90 [ 630.444453][ C0] __up_console_sem+0x11a/0x1e0 [ 630.444471][ C0] console_unlock+0x1145/0x12b0 [ 630.444487][ C0] vprintk_emit+0xbf/0x150 [ 630.444503][ C0] _printk+0xd1/0x120 [ 630.444519][ C0] __dev_set_promiscuity+0x1df/0x5d0 [ 630.444538][ C0] dev_set_promiscuity+0x4d/0xd0 [ 630.444555][ C0] hsr_del_port+0x196/0x1f0 [ 630.444574][ C0] hsr_del_ports+0x2d/0x90 [ 630.444589][ C0] hsr_dellink+0x3f/0x70 [ 630.444605][ C0] default_device_exit_batch+0x2ef/0x3f0 [ 630.444626][ C0] cleanup_net+0x886/0xc90 [ 630.444643][ C0] process_one_work+0x8a1/0x10c0 [ 630.444662][ C0] worker_thread+0xaca/0x1280 [ 630.444680][ C0] kthread+0x3f6/0x4f0 [ 630.444696][ C0] ret_from_fork+0x1f/0x30 [ 630.444714][ C0] [ 630.444714][ C0] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 630.444737][ C0] validate_chain+0x1649/0x5930 [ 630.444755][ C0] __lock_acquire+0x1295/0x1ff0 [ 630.444772][ C0] lock_acquire+0x1db/0x4f0 [ 630.444787][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 630.444804][ C0] down_trylock+0x1c/0xa0 [ 630.444821][ C0] __down_trylock_console_sem+0x105/0x250 [ 630.444840][ C0] console_trylock_spinning+0x8a/0x3f0 [ 630.444855][ C0] vprintk_emit+0xa6/0x150 [ 630.444870][ C0] _printk+0xd1/0x120 [ 630.444883][ C0] report_bug+0x1e5/0x2e0 [ 630.444901][ C0] handle_bug+0x3d/0x70 [ 630.444917][ C0] exc_invalid_op+0x16/0x40 [ 630.444935][ C0] asm_exc_invalid_op+0x16/0x20 [ 630.444952][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 630.444971][ C0] bpf_probe_read_user+0x26/0x70 [ 630.444987][ C0] bpf_prog_690f12e098ef46de+0x32/0x1fc [ 630.445002][ C0] bpf_trace_run3+0x1d1/0x380 [ 630.445027][ C0] enqueue_timer+0x3ae/0x540 [ 630.445043][ C0] __mod_timer+0xa60/0xeb0 [ 630.445062][ C0] dsp_cmx_send+0x21bb/0x2240 [ 630.445078][ C0] call_timer_fn+0x16d/0x560 [ 630.445094][ C0] __run_timers+0x67c/0x890 [ 630.445110][ C0] run_timer_softirq+0x63/0xf0 [ 630.445130][ C0] handle_softirqs+0x3a7/0x930 [ 630.445147][ C0] __irq_exit_rcu+0x157/0x240 [ 630.445164][ C0] irq_exit_rcu+0x5/0x20 [ 630.445179][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 630.445199][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.445217][ C0] lockdep_unregister_key+0x54e/0x5c0 [ 630.445234][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 630.445254][ C0] process_one_work+0x8a1/0x10c0 [ 630.445274][ C0] worker_thread+0xaca/0x1280 [ 630.445292][ C0] kthread+0x3f6/0x4f0 [ 630.445308][ C0] ret_from_fork+0x1f/0x30 [ 630.445326][ C0] [ 630.445326][ C0] other info that might help us debug this: [ 630.445326][ C0] [ 630.445331][ C0] Chain exists of: [ 630.445331][ C0] (console_sem).lock --> &rq->__lock --> &base->lock [ 630.445331][ C0] [ 630.445361][ C0] Possible unsafe locking scenario: [ 630.445361][ C0] [ 630.445365][ C0] CPU0 CPU1 [ 630.445370][ C0] ---- ---- [ 630.445375][ C0] lock(&base->lock); [ 630.445386][ C0] lock(&rq->__lock); [ 630.445398][ C0] lock(&base->lock); [ 630.445410][ C0] lock((console_sem).lock); [ 630.445422][ C0] [ 630.445422][ C0] *** DEADLOCK *** [ 630.445422][ C0] [ 630.445426][ C0] 6 locks held by kworker/0:8/4290: [ 630.445437][ C0] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 630.445485][ C0] #1: ffffc900032c7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 630.445533][ C0] #2: ffffc90000007be0 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 630.445575][ C0] #3: ffffffff8d9f1f38 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x22/0x2240 [ 630.445614][ C0] #4: ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 630.445658][ C0] #5: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 630.445699][ C0] [ 630.445699][ C0] stack backtrace: [ 630.445704][ C0] CPU: 0 PID: 4290 Comm: kworker/0:8 Not tainted 5.15.179-syzkaller #0 [ 630.445722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 630.445734][ C0] Workqueue: events pwq_unbound_release_workfn [ 630.445764][ C0] Call Trace: [ 630.445770][ C0] [ 630.445776][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 630.445799][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 630.445825][ C0] ? print_circular_bug+0x12b/0x1a0 [ 630.445847][ C0] check_noncircular+0x2f8/0x3b0 [ 630.445870][ C0] ? add_chain_block+0x850/0x850 [ 630.445889][ C0] ? lockdep_lock+0x11f/0x2a0 [ 630.445908][ C0] ? validate_chain+0x112/0x5930 [ 630.445928][ C0] ? reacquire_held_locks+0x660/0x660 [ 630.445951][ C0] validate_chain+0x1649/0x5930 [ 630.445982][ C0] ? reacquire_held_locks+0x660/0x660 [ 630.446001][ C0] ? data_push_tail+0x693/0x700 [ 630.446034][ C0] ? desc_read+0x3d0/0x3d0 [ 630.446058][ C0] ? cpufreq_update_util+0x94/0x250 [ 630.446083][ C0] ? mark_lock+0x98/0x340 [ 630.446102][ C0] __lock_acquire+0x1295/0x1ff0 [ 630.446127][ C0] lock_acquire+0x1db/0x4f0 [ 630.446144][ C0] ? down_trylock+0x1c/0xa0 [ 630.446164][ C0] ? vsnprintf+0x1c70/0x1c70 [ 630.446187][ C0] ? read_lock_is_recursive+0x10/0x10 [ 630.446205][ C0] ? memcpy+0x3c/0x60 [ 630.446225][ C0] ? vsnprintf+0x1b93/0x1c70 [ 630.446247][ C0] ? _prb_commit+0x30a/0x3e0 [ 630.446269][ C0] ? prb_reserve+0x1240/0x1240 [ 630.446290][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 630.446308][ C0] ? down_trylock+0x1c/0xa0 [ 630.446328][ C0] ? _raw_spin_lock+0x40/0x40 [ 630.446348][ C0] ? vprintk_store+0xf1b/0x1300 [ 630.446368][ C0] down_trylock+0x1c/0xa0 [ 630.446391][ C0] __down_trylock_console_sem+0x105/0x250 [ 630.446413][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 630.446431][ C0] ? vprintk_emit+0xa6/0x150 [ 630.446447][ C0] ? console_trylock+0x70/0x70 [ 630.446465][ C0] ? ieee80211_rx_handlers+0x915a/0x91c0 [ 630.446492][ C0] ? vprintk_emit+0xa6/0x150 [ 630.446516][ C0] console_trylock_spinning+0x8a/0x3f0 [ 630.446536][ C0] ? vprintk_emit+0x150/0x150 [ 630.446552][ C0] ? validate_chain+0x112/0x5930 [ 630.446569][ C0] ? reacquire_held_locks+0x660/0x660 [ 630.446590][ C0] ? validate_chain+0x112/0x5930 [ 630.446610][ C0] vprintk_emit+0xa6/0x150 [ 630.446629][ C0] _printk+0xd1/0x120 [ 630.446648][ C0] ? report_bug+0x16e/0x2e0 [ 630.446668][ C0] ? panic+0x860/0x860 [ 630.446687][ C0] ? find_bug+0x9c/0x350 [ 630.446708][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 630.446726][ C0] report_bug+0x1e5/0x2e0 [ 630.446751][ C0] handle_bug+0x3d/0x70 [ 630.446771][ C0] exc_invalid_op+0x16/0x40 [ 630.446790][ C0] asm_exc_invalid_op+0x16/0x20 [ 630.446809][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 630.446831][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 630.446854][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 630.446871][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff888026ab9dc0 [ 630.446885][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.446897][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: fffffbfff2131e19 [ 630.446912][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 630.446924][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900000077e8 [ 630.446939][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 630.446956][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 630.446979][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 630.446997][ C0] bpf_probe_read_user+0x26/0x70 [ 630.447024][ C0] bpf_prog_690f12e098ef46de+0x32/0x1fc [ 630.447040][ C0] bpf_trace_run3+0x1d1/0x380 [ 630.447059][ C0] ? bpf_trace_run2+0x340/0x340 [ 630.447078][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 630.447097][ C0] ? _raw_spin_lock+0x40/0x40 [ 630.447118][ C0] enqueue_timer+0x3ae/0x540 [ 630.447139][ C0] __mod_timer+0xa60/0xeb0 [ 630.447160][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 630.447184][ C0] ? mod_timer_pending+0x20/0x20 [ 630.447206][ C0] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 630.447224][ C0] ? _raw_read_unlock+0x40/0x40 [ 630.447240][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 630.447258][ C0] ? _raw_spin_lock+0x40/0x40 [ 630.447276][ C0] ? ktime_get+0x242/0x270 [ 630.447293][ C0] dsp_cmx_send+0x21bb/0x2240 [ 630.447312][ C0] ? read_lock_is_recursive+0x10/0x10 [ 630.447330][ C0] ? call_timer_fn+0x1fb/0x560 [ 630.447363][ C0] call_timer_fn+0x16d/0x560 [ 630.447381][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 630.447399][ C0] ? __run_timers+0x890/0x890 [ 630.447418][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 630.447438][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 630.447455][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 630.447472][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 630.447495][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 630.447513][ C0] __run_timers+0x67c/0x890 [ 630.447536][ C0] ? detach_timer+0x2f0/0x2f0 [ 630.447552][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 630.447575][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 630.447598][ C0] run_timer_softirq+0x63/0xf0 [ 630.447620][ C0] handle_softirqs+0x3a7/0x930 [ 630.447642][ C0] ? __irq_exit_rcu+0x157/0x240 [ 630.447663][ C0] ? do_softirq+0x240/0x240 [ 630.447683][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 630.447708][ C0] __irq_exit_rcu+0x157/0x240 [ 630.447727][ C0] ? irq_exit_rcu+0x20/0x20 [ 630.447751][ C0] irq_exit_rcu+0x5/0x20 [ 630.447768][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 630.447792][ C0] [ 630.447797][ C0] [ 630.447803][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.447825][ C0] RIP: 0010:lockdep_unregister_key+0x54e/0x5c0 [ 630.447846][ C0] Code: 00 00 00 0f 85 8b 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3f ce dc 08 41 f7 c4 00 02 00 00 74 86 fb 45 84 f6 <75> 85 eb 96 0f 0b 45 31 f6 e9 1a ff ff ff 0f 0b e9 5a fe ff ff 0f [ 630.447863][ C0] RSP: 0018:ffffc900032c7b40 EFLAGS: 00000246 [ 630.447880][ C0] RAX: dffffc0000000000 RBX: 1ffff92000658f70 RCX: ffffffff96a95f03 [ 630.447895][ C0] RDX: 0000000000000001 RSI: ffffffff8aab3860 RDI: ffffffff8af9fa80 [ 630.447909][ C0] RBP: ffffc900032c7c08 R08: dffffc0000000000 R09: fffffbfff2128205 [ 630.447923][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000202 [ 630.447936][ C0] R13: 1ffff92000658f6c R14: 0000000000000000 R15: ffffc900032c7b80 [ 630.447961][ C0] ? lockdep_reset_lock+0x3f0/0x3f0 [ 630.447982][ C0] ? print_irqtrace_events+0x210/0x210 [ 630.448004][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 630.448041][ C0] process_one_work+0x8a1/0x10c0 [ 630.448069][ C0] ? worker_detach_from_pool+0x260/0x260 [ 630.448094][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 630.448113][ C0] ? kthread_data+0x4e/0xc0 [ 630.448132][ C0] ? wq_worker_running+0x97/0x170 [ 630.448153][ C0] worker_thread+0xaca/0x1280 [ 630.448186][ C0] kthread+0x3f6/0x4f0 [ 630.448205][ C0] ? rcu_lock_release+0x20/0x20 [ 630.448225][ C0] ? kthread_blkcg+0xd0/0xd0 [ 630.448244][ C0] ret_from_fork+0x1f/0x30 [ 630.448271][ C0] [ 631.805089][ C0] WARNING: CPU: 0 PID: 4290 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 631.814376][ C0] Modules linked in: [ 631.818275][ C0] CPU: 0 PID: 4290 Comm: kworker/0:8 Not tainted 5.15.179-syzkaller #0 [ 631.826506][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 631.836555][ C0] Workqueue: events pwq_unbound_release_workfn [ 631.842710][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 631.848859][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 631.868470][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 631.874633][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff888026ab9dc0 [ 631.882598][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.890562][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: fffffbfff2131e19 [ 631.898529][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 631.906496][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900000077e8 [ 631.914459][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 631.923379][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.929955][ C0] CR2: ffffffffde000000 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 631.937921][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 631.945908][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 631.953984][ C0] Call Trace: [ 631.957257][ C0] [ 631.960098][ C0] ? __warn+0x15b/0x300 [ 631.964250][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 631.969788][ C0] ? report_bug+0x1b7/0x2e0 [ 631.974289][ C0] ? handle_bug+0x3d/0x70 [ 631.978611][ C0] ? exc_invalid_op+0x16/0x40 [ 631.983278][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 631.988298][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 631.993860][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 631.999426][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 632.005239][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 632.010788][ C0] bpf_probe_read_user+0x26/0x70 [ 632.015724][ C0] bpf_prog_690f12e098ef46de+0x32/0x1fc [ 632.021261][ C0] bpf_trace_run3+0x1d1/0x380 [ 632.025938][ C0] ? bpf_trace_run2+0x340/0x340 [ 632.030806][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 632.036265][ C0] ? _raw_spin_lock+0x40/0x40 [ 632.040958][ C0] enqueue_timer+0x3ae/0x540 [ 632.045543][ C0] __mod_timer+0xa60/0xeb0 [ 632.049954][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 632.056191][ C0] ? mod_timer_pending+0x20/0x20 [ 632.061123][ C0] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 632.067009][ C0] ? _raw_read_unlock+0x40/0x40 [ 632.071858][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 632.077320][ C0] ? _raw_spin_lock+0x40/0x40 [ 632.081991][ C0] ? ktime_get+0x242/0x270 [ 632.086398][ C0] dsp_cmx_send+0x21bb/0x2240 [ 632.091070][ C0] ? read_lock_is_recursive+0x10/0x10 [ 632.096436][ C0] ? call_timer_fn+0x1fb/0x560 [ 632.101200][ C0] call_timer_fn+0x16d/0x560 [ 632.105782][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 632.110887][ C0] ? __run_timers+0x890/0x890 [ 632.115564][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 632.120759][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 632.125980][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 632.131087][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 632.136286][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 632.141390][ C0] __run_timers+0x67c/0x890 [ 632.145890][ C0] ? detach_timer+0x2f0/0x2f0 [ 632.150580][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 632.156558][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 632.162130][ C0] run_timer_softirq+0x63/0xf0 [ 632.166891][ C0] handle_softirqs+0x3a7/0x930 [ 632.171737][ C0] ? __irq_exit_rcu+0x157/0x240 [ 632.176593][ C0] ? do_softirq+0x240/0x240 [ 632.181174][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 632.186545][ C0] __irq_exit_rcu+0x157/0x240 [ 632.191215][ C0] ? irq_exit_rcu+0x20/0x20 [ 632.195716][ C0] irq_exit_rcu+0x5/0x20 [ 632.199949][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 632.205667][ C0] [ 632.208594][ C0] [ 632.211519][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 632.217506][ C0] RIP: 0010:lockdep_unregister_key+0x54e/0x5c0 [ 632.223837][ C0] Code: 00 00 00 0f 85 8b 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3f ce dc 08 41 f7 c4 00 02 00 00 74 86 fb 45 84 f6 <75> 85 eb 96 0f 0b 45 31 f6 e9 1a ff ff ff 0f 0b e9 5a fe ff ff 0f [ 632.243437][ C0] RSP: 0018:ffffc900032c7b40 EFLAGS: 00000246 [ 632.249499][ C0] RAX: dffffc0000000000 RBX: 1ffff92000658f70 RCX: ffffffff96a95f03 [ 632.257477][ C0] RDX: 0000000000000001 RSI: ffffffff8aab3860 RDI: ffffffff8af9fa80 [ 632.265802][ C0] RBP: ffffc900032c7c08 R08: dffffc0000000000 R09: fffffbfff2128205 [ 632.273790][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000202 [ 632.281763][ C0] R13: 1ffff92000658f6c R14: 0000000000000000 R15: ffffc900032c7b80 [ 632.289745][ C0] ? lockdep_reset_lock+0x3f0/0x3f0 [ 632.294946][ C0] ? print_irqtrace_events+0x210/0x210 [ 632.300399][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 632.306117][ C0] process_one_work+0x8a1/0x10c0 [ 632.311058][ C0] ? worker_detach_from_pool+0x260/0x260 [ 632.316687][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 632.322249][ C0] ? kthread_data+0x4e/0xc0 [ 632.326749][ C0] ? wq_worker_running+0x97/0x170 [ 632.331879][ C0] worker_thread+0xaca/0x1280 [ 632.336561][ C0] kthread+0x3f6/0x4f0 [ 632.340621][ C0] ? rcu_lock_release+0x20/0x20 [ 632.345466][ C0] ? kthread_blkcg+0xd0/0xd0 [ 632.350051][ C0] ret_from_fork+0x1f/0x30 [ 632.354467][ C0] [ 632.357501][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 632.364861][ C0] CPU: 0 PID: 4290 Comm: kworker/0:8 Not tainted 5.15.179-syzkaller #0 [ 632.373092][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 632.383244][ C0] Workqueue: events pwq_unbound_release_workfn [ 632.389490][ C0] Call Trace: [ 632.392864][ C0] [ 632.395705][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 632.400468][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 632.406122][ C0] ? panic+0x860/0x860 [ 632.410189][ C0] ? panic+0x860/0x860 [ 632.414524][ C0] ? copy_from_user_nofault+0x120/0x1c0 [ 632.420146][ C0] ? copy_from_user_nofault+0x120/0x1c0 [ 632.425713][ C0] panic+0x318/0x860 [ 632.429604][ C0] ? __warn+0x16a/0x300 [ 632.433758][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 632.438952][ C0] ? ret_from_fork+0x1f/0x30 [ 632.443535][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 632.449084][ C0] __warn+0x2b2/0x300 [ 632.453068][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 632.458613][ C0] report_bug+0x1b7/0x2e0 [ 632.462941][ C0] handle_bug+0x3d/0x70 [ 632.467092][ C0] exc_invalid_op+0x16/0x40 [ 632.471591][ C0] asm_exc_invalid_op+0x16/0x20 [ 632.476437][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 632.482584][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 632.502288][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 632.508375][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff888026ab9dc0 [ 632.516356][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 632.524325][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: fffffbfff2131e19 [ 632.532294][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 632.540261][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900000077e8 [ 632.548230][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 632.553705][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 632.559247][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 632.564791][ C0] bpf_probe_read_user+0x26/0x70 [ 632.569732][ C0] bpf_prog_690f12e098ef46de+0x32/0x1fc [ 632.575370][ C0] bpf_trace_run3+0x1d1/0x380 [ 632.580042][ C0] ? bpf_trace_run2+0x340/0x340 [ 632.584896][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 632.590370][ C0] ? _raw_spin_lock+0x40/0x40 [ 632.595176][ C0] enqueue_timer+0x3ae/0x540 [ 632.599772][ C0] __mod_timer+0xa60/0xeb0 [ 632.604192][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 632.610429][ C0] ? mod_timer_pending+0x20/0x20 [ 632.615360][ C0] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 632.621249][ C0] ? _raw_read_unlock+0x40/0x40 [ 632.626089][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 632.631536][ C0] ? _raw_spin_lock+0x40/0x40 [ 632.636290][ C0] ? ktime_get+0x242/0x270 [ 632.640700][ C0] dsp_cmx_send+0x21bb/0x2240 [ 632.645368][ C0] ? read_lock_is_recursive+0x10/0x10 [ 632.650733][ C0] ? call_timer_fn+0x1fb/0x560 [ 632.655582][ C0] call_timer_fn+0x16d/0x560 [ 632.660165][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 632.665377][ C0] ? __run_timers+0x890/0x890 [ 632.670051][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 632.675246][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 632.680448][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 632.685579][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 632.690782][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 632.695900][ C0] __run_timers+0x67c/0x890 [ 632.700422][ C0] ? detach_timer+0x2f0/0x2f0 [ 632.705197][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 632.711182][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 632.716480][ C0] run_timer_softirq+0x63/0xf0 [ 632.721243][ C0] handle_softirqs+0x3a7/0x930 [ 632.726020][ C0] ? __irq_exit_rcu+0x157/0x240 [ 632.730878][ C0] ? do_softirq+0x240/0x240 [ 632.735406][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 632.740609][ C0] __irq_exit_rcu+0x157/0x240 [ 632.745278][ C0] ? irq_exit_rcu+0x20/0x20 [ 632.749790][ C0] irq_exit_rcu+0x5/0x20 [ 632.754023][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 632.759658][ C0] [ 632.762580][ C0] [ 632.765501][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 632.771477][ C0] RIP: 0010:lockdep_unregister_key+0x54e/0x5c0 [ 632.777716][ C0] Code: 00 00 00 0f 85 8b 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3f ce dc 08 41 f7 c4 00 02 00 00 74 86 fb 45 84 f6 <75> 85 eb 96 0f 0b 45 31 f6 e9 1a ff ff ff 0f 0b e9 5a fe ff ff 0f [ 632.797400][ C0] RSP: 0018:ffffc900032c7b40 EFLAGS: 00000246 [ 632.803461][ C0] RAX: dffffc0000000000 RBX: 1ffff92000658f70 RCX: ffffffff96a95f03 [ 632.811423][ C0] RDX: 0000000000000001 RSI: ffffffff8aab3860 RDI: ffffffff8af9fa80 [ 632.819415][ C0] RBP: ffffc900032c7c08 R08: dffffc0000000000 R09: fffffbfff2128205 [ 632.827389][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000202 [ 632.835370][ C0] R13: 1ffff92000658f6c R14: 0000000000000000 R15: ffffc900032c7b80 [ 632.843353][ C0] ? lockdep_reset_lock+0x3f0/0x3f0 [ 632.848552][ C0] ? print_irqtrace_events+0x210/0x210 [ 632.854016][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 632.859765][ C0] process_one_work+0x8a1/0x10c0 [ 632.864724][ C0] ? worker_detach_from_pool+0x260/0x260 [ 632.870364][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 632.875906][ C0] ? kthread_data+0x4e/0xc0 [ 632.880518][ C0] ? wq_worker_running+0x97/0x170 [ 632.885655][ C0] worker_thread+0xaca/0x1280 [ 632.890450][ C0] kthread+0x3f6/0x4f0 [ 632.894509][ C0] ? rcu_lock_release+0x20/0x20 [ 632.899363][ C0] ? kthread_blkcg+0xd0/0xd0 [ 632.903945][ C0] ret_from_fork+0x1f/0x30 [ 632.908360][ C0] [ 632.911635][ C0] Kernel Offset: disabled