last executing test programs: 22m15.302339954s ago: executing program 32 (id=1080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000200)=""/234, 0xea, 0x20, &(0x7f0000000000), 0x12) 16m57.735020927s ago: executing program 33 (id=1753): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c000280140005000000000000000000000000000000000205001600"], 0x60}}, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x48, '\x00\x00\b', "b1ae68c504e4a9c1a22d9736d542f2d4708e184d1a92aa8186fc5a5e8366dd21f00edb101ecfffc372e9934ba038fe47cd6527061168587e0639c2e80cca6d0fc2214b0b63f2f708b0d751df7512580b74b60ca3ebf412ad69639f0bb69296306f315c61b154974ec2de25e9a39bc68a291572f405238696acc924f023208c281ffe403822b9aa292231eefcc7e00800000000000000ddefa33dbebd263a0abf5657bfd2493484ad1bef8f3c50a9650cde4f87f10c1b13cb9d977a86b4c17615697225618bb847f2290b2f1d75bfcb6336da206306fe5f4052b7f4c28b141dc06f7e16e4cfee5159179977544267e591e8f8ac74e000"}}, 0x110) 16m48.60903647s ago: executing program 1 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioperm(0x0, 0x6, 0x8000000000004) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c0002800600084000000000050007"], 0x4c}}, 0x0) 16m47.932869427s ago: executing program 34 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioperm(0x0, 0x6, 0x8000000000004) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c0002800600084000000000050007"], 0x4c}}, 0x0) 16m43.223439819s ago: executing program 35 (id=1775): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000a0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x9) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x88, 0x64, 0x0, &(0x7f0000000040)) ioctl$TCSETA(r6, 0x4b6a, &(0x7f0000000340)={0x200b, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x9, 0x69, {0x69, 0x12, "9c41302a60bde09b0d96378ca16d365215048f681409e163a3b22c79111f5481e93e76b0118a470f0283604f17371d234c74978de8558cd75d988ae2b5baf61c577a6ac1006335f607ae02e0a963d91e14d99e5f33f1a934001af4f732987788aa7d57c92bf5b6"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x40, 0x16, 0xaa, "e41aecadfe8b0b626a62fd8baa695d3958c96fd9fe73f186f8bbc89042f6a252daad831a78939f3fb00f088bcbdfb5b8c2683e06db80f1f559824cb9805cefbf9eeb3e0d196c38a78a1505e1c7a9d9d7fbec3543354bafed32a6a448bf67117820a6b0c8aa8fd558436d8926edb69c7d140eac3c796430114875aae10e6ca1a7aa3bfed76d73cbc4cebc29dddb6b0eba9b5348507811ae8acb57891f0ae387d64684cda5fedd0ab64aa3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000100), &(0x7f0000000140)=""/94}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 16m38.945227488s ago: executing program 36 (id=1784): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) 15m22.545053866s ago: executing program 37 (id=1861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) epoll_create(0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) 15m7.082213014s ago: executing program 38 (id=1909): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) getpgid(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff}, 0x80) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xfb, 0x71, 0x1, 0x40, "1dcb7b230d0e25ffec64b0e20b278505", "b4b207d140a0b0693ebe96cdc8d6516f8b22cb3231b2041420518904d908ee7bc68a3fc0324b01972588ea2251f786fc1fc3077a4c603ad89486b5ad70334ed7b4c1b643db337ca04c85c761ccece5cb629ada7016f01c802c5e27a3"}, 0x71, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x60, 0x1403, 0x80, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15m1.919149285s ago: executing program 39 (id=1921): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r4, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=r5, 0x9, 0x0, 0xffff, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)}, 0x40) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x270cc0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 14m11.4139734s ago: executing program 1 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='7', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000029c0)={r3}, &(0x7f0000002a00)={'enc=', 'oaep', ' hash=', {'wp256-generic\x00'}}, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) fstat(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, 0x0, r5) 14m9.789954618s ago: executing program 1 (id=1983): socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 14m8.041393781s ago: executing program 1 (id=1986): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r4, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=r5, 0x9, 0x0, 0xffff, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)}, 0x40) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000800)="e2188fbdead05980e72c2e5d82d15d5e7724c485a98a0c147acf089fd148ed5ebb509754306ef166882d358b377402e2ace15a08750933539f1420e190a505854a9f257666baf3155a243b3ea3060ce6d4902e1eebea99ba02d4286754cb706f871eea018bf1c205bedeb0054023bb5d33af02bad8577123320dc0a6c5db699c79175e2735b6c85c184d", 0x0}, 0x20) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000201200001c00128009000100626f6e64000000000c000280"], 0x3c}}, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x270cc0, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x1) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 14m6.548269761s ago: executing program 1 (id=1989): syz_open_dev$cec(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x804) r3 = memfd_create(&(0x7f0000000480)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xf6\xc0H\xa2\x83\x92\xee\n_\xcc\x1cC\xe5\x9f n\xbe?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\x81\xcfJ\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f', 0x4) r4 = syz_io_uring_setup(0x76c, &(0x7f0000000300)={0x0, 0x2002, 0x0, 0xfffffffe, 0xfffffffc}, &(0x7f0000000380), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x17, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0x3, 0x3ff, 0xcbd, 0x8, 0x9, "224d5cc8631cc824617e4ff8ea61fb77f76a35"}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 14m0.843634724s ago: executing program 1 (id=1998): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioperm(0xdccd, 0xbe, 0x2000000005e) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 13m57.426452097s ago: executing program 40 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') close(r0) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 13m45.027175451s ago: executing program 41 (id=1998): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioperm(0xdccd, 0xbe, 0x2000000005e) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 11m37.897836694s ago: executing program 5 (id=2258): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184d, 0x0, 0x0, 0x0, 0x0) 11m37.628403623s ago: executing program 5 (id=2260): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) 11m36.097919819s ago: executing program 5 (id=2264): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 11m33.067189885s ago: executing program 5 (id=2270): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) getpgid(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001640)={'wlan0\x00'}) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xfb, 0x71, 0x1, 0x40, "1dcb7b230d0e25ffec64b0e20b278505", "b4b207d140a0b0693ebe96cdc8d6516f8b22cb3231b2041420518904d908ee7bc68a3fc0324b01972588ea2251f786fc1fc3077a4c603ad89486b5ad70334ed7b4c1b643db337ca04c85c761ccece5cb629ada7016f01c802c5e27a3"}, 0x71, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x60, 0x1403, 0x80, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11m31.428297912s ago: executing program 5 (id=2274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 11m31.195076968s ago: executing program 5 (id=2276): openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x53, 0x3a, '\xd3-\'!!', 0x3a, '', 0x3a, './file/file0', 0x3a, [0x43, 0x4f]}, 0x33) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) read$midi(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x101000) r3 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) io_uring_enter(r3, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}}, 0x0) unshare(0x10020100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setreuid(0xee01, 0x0) 11m14.351603483s ago: executing program 42 (id=2276): openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x53, 0x3a, '\xd3-\'!!', 0x3a, '', 0x3a, './file/file0', 0x3a, [0x43, 0x4f]}, 0x33) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) read$midi(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x101000) r3 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) io_uring_enter(r3, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}}, 0x0) unshare(0x10020100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setreuid(0xee01, 0x0) 8m26.271473411s ago: executing program 0 (id=2648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) 8m25.745609765s ago: executing program 0 (id=2651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() getpgrp(0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x4000000e) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fe, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 8m21.872307332s ago: executing program 0 (id=2655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40015}, 0x0) 8m21.468944041s ago: executing program 0 (id=2657): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat\x00') socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) 8m18.650150053s ago: executing program 0 (id=2661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x4000000e) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fe, 0x1}}, {0x0, 0x11}}}, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 8m16.72808544s ago: executing program 0 (id=2662): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) epoll_create1(0x0) r0 = socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "37068f776d782a091548c27bb555f23249b3db6b24f77a4018eb64540ca8e858", 0x0, 0x9, 0x3, 0x1ff}, 0x3c) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) write$P9_RLERRORu(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000701000b001c6465762f74747953330002"], 0x18) unshare(0x62040200) 8m1.169891215s ago: executing program 43 (id=2662): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) epoll_create1(0x0) r0 = socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "37068f776d782a091548c27bb555f23249b3db6b24f77a4018eb64540ca8e858", 0x0, 0x9, 0x3, 0x1ff}, 0x3c) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) write$P9_RLERRORu(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000701000b001c6465762f74747953330002"], 0x18) unshare(0x62040200) 3m34.658067141s ago: executing program 3 (id=3107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpgrp(0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fe, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 3m30.087302237s ago: executing program 3 (id=3112): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '^'}]}}}}}}}}, 0x0) 3m27.008397717s ago: executing program 3 (id=3114): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2eec0a3f0028000000000000378a72b24e1ddb4ccb26d771cc0e217e00ae82aadcb8e6d4cc081a3a181ec006573f79d106", 0x31}, {&(0x7f00000000c0)="d3", 0x1}], 0x2}, 0x20000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 3m25.443339072s ago: executing program 3 (id=3119): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x25, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=r3, 0x9, 0x0, 0xffff, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)}, 0x40) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000580)={[{}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x270cc0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) 3m24.550110707s ago: executing program 7 (id=3121): syz_usb_connect$cdc_ncm(0x3, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) 3m20.793474547s ago: executing program 3 (id=3124): socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000380)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{r2, r3+60000000}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) msgget$private(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) 3m19.759336486s ago: executing program 7 (id=3126): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x8094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000003c0)="9272d65d8e705ff3a29093f93b0b5c35328e975a42f6f5c71622397fb37bcc18bffec96b38a6a4cb0429502032138ae5489b1f5f927c589470a3316c2d730b75636ff93235eeedaa90773c88457c36ebf57c131120a74e726603bfddc0c1a2afadbee2179b04059624d38ebedad00874de9aa3ae6db53d7054abc1a5fb7de1e84b0bbff308c805426ac141c5f47aafbf29936de769cb2a11694d73fb4644543ca4ecb34b0c374262217dd9d671dc5c541e12d62197791fc59404021d481db598cd47"}, 0x20) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) iopl(0x3) sysfs$2(0x2, 0x8000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x50000, 0x1, 0x32bb90}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) 3m17.670663414s ago: executing program 7 (id=3128): ppoll(&(0x7f00000000c0), 0x2a, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x23894) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="1b7766", @ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m17.371677987s ago: executing program 3 (id=3130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x8094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000003c0)="9272d65d8e705ff3a29093f93b0b5c35328e975a42f6f5c71622397fb37bcc18bffec96b38a6a4cb0429502032138ae5489b1f5f927c589470a3316c2d730b75636ff93235eeedaa90773c88457c36ebf57c131120a74e726603bfddc0c1a2afadbee2179b04059624d38ebedad00874de9aa3ae6db53d7054abc1a5fb7de1e84b0bbff308c805426ac141c5f47aafbf29936de769cb2a11694d73fb4644543ca4ecb34b0c374262217dd9d671dc5c541e12d62197791fc59404021d481db598cd47"}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) iopl(0x3) sysfs$2(0x2, 0x8000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x50000, 0x1, 0x32bb90}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) 3m14.716165784s ago: executing program 7 (id=3133): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9aea7ec9, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x33fe0}], 0x1}, 0x4000840) 3m13.468600895s ago: executing program 7 (id=3137): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) pipe2$watch_queue(0x0, 0x80) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) io_uring_setup(0x26ce, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="b8a3eb209aa0aaaaaaaaaa0086dd6000010000183afffe800000000000000000000000000000ff020000000000000000000000000001860090780000000000000000000000000000010021000000c0a5f7e42c"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) 3m10.313606781s ago: executing program 7 (id=3140): accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x100000003ff, 0x5, 0x0, 0xd, 0xc15, 0x7, 0xdca, 0x17d8, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0x7, 0x5, 0x4]}) mknod(0x0, 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) poll(0x0, 0x0, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) 3m1.596844029s ago: executing program 44 (id=3130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x8094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000003c0)="9272d65d8e705ff3a29093f93b0b5c35328e975a42f6f5c71622397fb37bcc18bffec96b38a6a4cb0429502032138ae5489b1f5f927c589470a3316c2d730b75636ff93235eeedaa90773c88457c36ebf57c131120a74e726603bfddc0c1a2afadbee2179b04059624d38ebedad00874de9aa3ae6db53d7054abc1a5fb7de1e84b0bbff308c805426ac141c5f47aafbf29936de769cb2a11694d73fb4644543ca4ecb34b0c374262217dd9d671dc5c541e12d62197791fc59404021d481db598cd47"}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) iopl(0x3) sysfs$2(0x2, 0x8000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x50000, 0x1, 0x32bb90}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) 2m54.755291213s ago: executing program 45 (id=3140): accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x100000003ff, 0x5, 0x0, 0xd, 0xc15, 0x7, 0xdca, 0x17d8, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0x7, 0x5, 0x4]}) mknod(0x0, 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) poll(0x0, 0x0, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) 22.389013264s ago: executing program 2 (id=3572): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x4}}, 0x9) 22.122802009s ago: executing program 2 (id=3576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) 20.338557122s ago: executing program 2 (id=3595): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x1, 0x8, 0xb6, 0x80}, {0x5, 0x65, 0xc3, 0x3}, {0xfff, 0x6, 0x1, 0x4}, {0x6ae, 0x2, 0x8, 0xd9}, {0x1ff, 0x8, 0x5, 0x10}, {0x5, 0x3, 0x80, 0x5}]}) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001400)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000240)=0xb, 0x2) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) writev(r1, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed", 0x41}], 0x1) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xb, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000a80)={0x0, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) 18.861951133s ago: executing program 2 (id=3600): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18.382809253s ago: executing program 2 (id=3602): r0 = memfd_create(&(0x7f00000016c0)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x004F\x9f\xba\x10?\x14Fi\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x06$\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06\xc4\x92)4n\xe7\xc1\xd4\xb3\x86jm\x87&\xf0\x12\xfd\x99%Z\xfa[5\xe8)\xab\x8f\"\xb5*@\xa6\xf5\r\xe1\xb2\xf6\xc9.n~_\x95a\\\xaem\xb9`\xec\xed\xe8\xbf[\x8aEzT\xe0\xc4m\x81\xee\xbc)K\xc2{a\x88\xa2\xd8J\xc3/\a\xe8\xfc\xc3\x9f%\x8a+\xd6\xc7\xda\xca\xf1\xd34\xf8\xea\v\xee\xbc\x11\xc6\xafj\x19\x18\xba\x05\xb4W\xaf\xed\xed\xea\xcc\x0e', 0x0) r1 = dup(r0) fanotify_mark(0xffffffffffffffff, 0x1, 0x48001079, r1, 0x0) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)="65742b1c6b95", 0x6}], 0x1) 17.539046275s ago: executing program 2 (id=3606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0xd58a14a85e2f18b5, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) 17.167851438s ago: executing program 46 (id=3606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0xd58a14a85e2f18b5, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) 3.877708418s ago: executing program 8 (id=3684): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) 3.618921837s ago: executing program 8 (id=3690): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc0305302, &(0x7f0000000480)) 3.399290252s ago: executing program 4 (id=3692): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x8000020}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0x1fffffff}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0xfb27, 0x0, 0x20, 0x5, r1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) socket$nl_generic(0x10, 0x3, 0x10) 3.139039054s ago: executing program 8 (id=3694): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x1, 0x8, 0xb6, 0x80}, {0x5, 0x65, 0xc3, 0x3}, {0xfff, 0x6, 0x1, 0x4}, {0x6ae, 0x2, 0x8, 0xd9}, {0x1ff, 0x8, 0x5, 0x10}, {0x5, 0x3, 0x80, 0x5}]}) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240)=0xb, 0x2) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) writev(r0, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed", 0x41}], 0x1) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xb, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000a80)={0x0, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) 2.930976722s ago: executing program 6 (id=3695): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 2.74408659s ago: executing program 4 (id=3696): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$BLKTRACESETUP(r0, 0x1276, 0x0) 1.79900905s ago: executing program 6 (id=3698): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendfile(r0, 0xffffffffffffffff, &(0x7f0000002700)=0x1, 0x8) 1.672110636s ago: executing program 8 (id=3699): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f0000000480)}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e22"], 0x2c}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x300, 0x0, 0x101}}) 1.585448376s ago: executing program 6 (id=3700): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000000)="6c097c7df800", 0x6, 0x0, 0x0, 0x0) 1.562666224s ago: executing program 9 (id=3701): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) 1.423104558s ago: executing program 4 (id=3702): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001f540)={0x18, 0x2, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x45, &(0x7f0000000180)=""/69, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x0, 0x53553bae}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) 1.382062808s ago: executing program 9 (id=3703): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc0305302, &(0x7f0000000480)) 1.339407563s ago: executing program 6 (id=3704): setresuid(0x0, 0xee00, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)}], 0x1}, 0x0) 1.219607791s ago: executing program 4 (id=3705): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000002c0)={0x6, 0x8001}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1}}) write(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYRES64=r3, @ANYRES32=r5, @ANYRESDEC=r0, @ANYRES64, @ANYRESDEC=r6, @ANYRESOCT=r6], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = io_uring_setup(0x2375, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r10, 0xf, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r11, &(0x7f0000001240)=""/102400, 0x200000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{0x0}, {0x0}], &(0x7f0000001980)=[0x0, 0x1f], 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) 1.090926524s ago: executing program 6 (id=3706): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000011c0)='./control\x00', &(0x7f0000000100), 0x400092, &(0x7f0000000000)=ANY=[@ANYBLOB='dyn,flock=write']) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) 1.081132117s ago: executing program 9 (id=3707): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 917.357834ms ago: executing program 8 (id=3708): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) acct(0x0) 691.104478ms ago: executing program 9 (id=3709): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendfile(r0, 0xffffffffffffffff, &(0x7f0000002700)=0x1, 0x8) 618.874282ms ago: executing program 9 (id=3710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 446.409509ms ago: executing program 9 (id=3711): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4e24, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xfc, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 392.164418ms ago: executing program 4 (id=3712): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) 295.078185ms ago: executing program 8 (id=3713): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000000)="6c097c7df800", 0x6, 0x0, 0x0, 0x0) 264.112974ms ago: executing program 4 (id=3714): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f00000016c0)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x004F\x9f\xba\x10?\x14Fi\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x06$\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06\xc4\x92)4n\xe7\xc1\xd4\xb3\x86jm\x87&\xf0\x12\xfd\x99%Z\xfa[5\xe8)\xab\x8f\"\xb5*@\xa6\xf5\r\xe1\xb2\xf6\xc9.n~_\x95a\\\xaem\xb9`\xec\xed\xe8\xbf[\x8aEzT\xe0\xc4m\x81\xee\xbc)K\xc2{a\x88\xa2\xd8J\xc3/\a\xe8\xfc\xc3\x9f%\x8a+\xd6\xc7\xda\xca\xf1\xd34\xf8\xea\v\xee\xbc\x11\xc6\xafj\x19\x18\xba\x05\xb4W\xaf\xed\xed\xea\xcc\x0e', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48001079, r2, 0x0) writev(r1, &(0x7f00000012c0), 0x0) 0s ago: executing program 6 (id=3715): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_cswp={0x58, 0x114, 0x9, {{0x40000008, 0xffff7685}, &(0x7f0000000240)=0x351, 0x0, 0x8, 0x9, 0x888, 0x5, 0x60, 0x4}}], 0x58, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): onfig 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1118.649634][T12453] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1118.671618][T12453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.691886][T16526] pim6reg1: entered promiscuous mode [ 1118.697551][T16526] pim6reg1: entered allmulticast mode [ 1118.703650][T12453] usb 4-1: Product: syz [ 1118.713059][T12453] usb 4-1: Manufacturer: syz [ 1118.724873][T12453] usb 4-1: SerialNumber: syz [ 1118.777756][T12453] cdc_ncm 4-1:1.0: skipping garbage [ 1118.803576][T12453] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1118.905059][T12453] cdc_ncm 4-1:1.0: bind() failure [ 1119.627298][T12453] usb 4-1: USB disconnect, device number 24 [ 1119.739473][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2605'. [ 1119.817818][T16548] IPVS: length: 60 != 8 [ 1122.648154][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'. [ 1122.937113][T16569] syz.3.2611: attempt to access beyond end of device [ 1122.937113][T16569] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1133.458078][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'. [ 1133.467619][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2623'. [ 1141.154023][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 1141.163365][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2630'. [ 1143.447576][T16681] kvm: pic: single mode not supported [ 1143.447864][T16681] kvm: pic: level sensitive irq not supported [ 1143.453884][T16681] kvm: pic: single mode not supported [ 1143.460419][T16681] kvm: pic: level sensitive irq not supported [ 1143.529290][T16681] kvm: pic: single mode not supported [ 1143.535505][T16681] kvm: pic: level sensitive irq not supported [ 1143.636504][T16681] kvm: pic: single mode not supported [ 1143.642710][T16681] kvm: pic: level sensitive irq not supported [ 1143.703173][T16681] kvm: pic: single mode not supported [ 1143.709657][T16681] kvm: pic: level sensitive irq not supported [ 1143.761139][T16688] pim6reg1: entered promiscuous mode [ 1143.795401][T16681] kvm: pic: single mode not supported [ 1143.795432][T16681] kvm: pic: level sensitive irq not supported [ 1143.816294][T16681] kvm: pic: single mode not supported [ 1143.822552][T16681] kvm: pic: level sensitive irq not supported [ 1143.841607][T16688] pim6reg1: entered allmulticast mode [ 1144.156498][T16681] kvm: pic: single mode not supported [ 1144.156528][T16681] kvm: pic: level sensitive irq not supported [ 1144.162105][T16681] kvm: pic: single mode not supported [ 1144.168418][T16681] kvm: pic: level sensitive irq not supported [ 1144.174001][T16681] kvm: pic: single mode not supported [ 1144.180216][T16681] kvm: pic: level sensitive irq not supported [ 1148.498119][T16710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2641'. [ 1148.756233][ T5870] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1151.166249][ T5870] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1151.175361][ T5870] usb 10-1: can't read configurations, error -71 [ 1157.510001][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'. [ 1157.519959][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2658'. [ 1158.349293][ T5896] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1159.107107][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.117479][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1160.184641][ T5896] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1164.586540][ T5896] usb 4-1: string descriptor 0 read error: -71 [ 1164.592958][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1164.602280][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.617996][ T5896] usb 4-1: can't set config #1, error -71 [ 1164.625167][ T5896] usb 4-1: USB disconnect, device number 25 [ 1171.556209][ T5871] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1173.116841][T12453] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1173.410570][ T5871] usb 10-1: device descriptor read/all, error -71 [ 1173.442535][T12453] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.453611][T12453] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1173.462674][T12453] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1173.489345][T12453] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1173.504501][T12453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.514087][T12453] usb 4-1: Product: syz [ 1173.531512][T12453] usb 4-1: Manufacturer: syz [ 1173.537658][T12453] usb 4-1: SerialNumber: syz [ 1173.553279][T12453] cdc_ncm 4-1:1.0: skipping garbage [ 1173.573075][T12453] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1173.605552][T12453] cdc_ncm 4-1:1.0: bind() failure [ 1173.874686][T16868] usb 4-1: USB disconnect, device number 26 [ 1177.889755][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.644990][T12206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1178.654724][T12206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1178.835995][T12206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1178.848195][T12206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1178.857340][T12206] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1178.864859][T12206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1180.021924][T16911] Invalid option length (0) for dns_resolver key [ 1182.408683][T16897] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1182.904277][T16926] lo: entered allmulticast mode [ 1184.036869][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1184.145104][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1184.298604][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1184.688947][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1184.696951][ T5823] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1184.744471][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1186.110001][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1186.386406][T15939] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1186.688201][T15939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.734657][T15939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1186.774755][T15939] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1187.048052][T16981] Invalid option length (0) for dns_resolver key [ 1187.846479][ T5823] Bluetooth: hci4: command tx timeout [ 1189.167797][T15939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1189.197898][T15939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.205975][T15939] usb 3-1: Product: syz [ 1189.260004][T16934] chnl_net:caif_netlink_parms(): no params data found [ 1189.276466][T15939] usb 3-1: Manufacturer: syz [ 1189.314121][T15939] usb 3-1: SerialNumber: syz [ 1189.456769][T15939] usb 3-1: can't set config #1, error -71 [ 1189.486423][T15939] usb 3-1: USB disconnect, device number 40 [ 1190.155580][T12206] Bluetooth: hci4: command tx timeout [ 1190.791109][T16991] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1192.876335][ T5823] Bluetooth: hci4: command tx timeout [ 1195.332410][ T5823] Bluetooth: hci4: command tx timeout [ 1196.101050][T17020] syz.9.2699: attempt to access beyond end of device [ 1196.101050][T17020] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1197.095045][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1197.162194][T13517] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.424554][T16934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.432804][T16934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.457227][T16934] bridge_slave_0: entered allmulticast mode [ 1197.487448][T16934] bridge_slave_0: entered promiscuous mode [ 1197.687962][T13517] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.759123][T16934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.798599][T16934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.805926][T16934] bridge_slave_1: entered allmulticast mode [ 1197.874752][T16934] bridge_slave_1: entered promiscuous mode [ 1198.091023][ T5835] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1199.874318][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.884661][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1199.905555][ T5835] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1199.943392][ T5835] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1199.945835][T13517] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.954348][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.099533][ T5835] usb 3-1: Product: syz [ 1200.103784][ T5835] usb 3-1: Manufacturer: syz [ 1200.116222][ T5835] usb 3-1: SerialNumber: syz [ 1200.380863][T13517] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.515773][ T5835] cdc_ncm 3-1:1.0: skipping garbage [ 1200.521237][ T5835] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1200.528848][ T5835] cdc_ncm 3-1:1.0: bind() failure [ 1201.807911][T16934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.851116][T16934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.925841][T17072] lo: entered allmulticast mode [ 1202.510584][ T5835] usb 3-1: USB disconnect, device number 41 [ 1203.225275][T17083] Invalid option length (0) for dns_resolver key [ 1204.207499][T16934] team0: Port device team_slave_0 added [ 1204.797641][T16934] team0: Port device team_slave_1 added [ 1206.028106][T16934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.035125][T16934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.134819][T16934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.204322][T16934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.213955][T16934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.908961][T16934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.042922][T13517] bridge_slave_1: left allmulticast mode [ 1208.067374][T13517] bridge_slave_1: left promiscuous mode [ 1208.087818][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.110522][T13517] bridge_slave_0: left allmulticast mode [ 1208.136448][T13517] bridge_slave_0: left promiscuous mode [ 1208.142342][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.110509][T17105] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1213.633367][T17127] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1216.306409][T17135] No such timeout policy "syz1" [ 1218.720892][T17153] syz.2.2731[17153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.731486][T17149] kvm: pic: single mode not supported [ 1218.743779][T17149] kvm: pic: level sensitive irq not supported [ 1218.803350][T17143] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1218.857226][T17149] kvm: pic: single mode not supported [ 1218.857265][T17149] kvm: pic: level sensitive irq not supported [ 1218.863004][T17149] kvm: pic: level sensitive irq not supported [ 1218.870051][T17149] kvm: pic: level sensitive irq not supported [ 1219.177592][T13517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.194386][T13517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.205428][T13517] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1219.215552][T13517] bond0 (unregistering): Released all slaves [ 1220.159854][T16934] hsr_slave_0: entered promiscuous mode [ 1220.603882][T16934] hsr_slave_1: entered promiscuous mode [ 1220.828292][T16934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.835921][T16934] Cannot create hsr debugfs directory [ 1221.447199][T17177] capability: warning: `syz.3.2736' uses 32-bit capabilities (legacy support in use) [ 1225.521660][T13517] hsr_slave_0: left promiscuous mode [ 1225.966818][T17201] No such timeout policy "syz1" [ 1226.078187][T13517] hsr_slave_1: left promiscuous mode [ 1226.097760][T13517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.156479][T13517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.277053][T13517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.284570][T13517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.548101][T13517] veth1_macvtap: left promiscuous mode [ 1228.578461][T13517] veth0_macvtap: left promiscuous mode [ 1228.617065][T13517] veth1_vlan: left promiscuous mode [ 1228.653088][T13517] veth0_vlan: left promiscuous mode [ 1231.199924][T17234] binder: 17230:17234 ioctl 4018620d 0 returned -22 [ 1233.616590][T12267] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1233.667645][T17250] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1234.025212][T12267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.043349][T12267] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1234.085985][T12267] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1234.196575][T12267] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1234.206203][T12267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.214251][T12267] usb 5-1: Product: syz [ 1234.256595][T12267] usb 5-1: Manufacturer: syz [ 1234.281834][T12267] usb 5-1: SerialNumber: syz [ 1234.299398][T12267] cdc_ncm 5-1:1.0: skipping garbage [ 1234.499046][T12267] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1234.506221][T12267] cdc_ncm 5-1:1.0: bind() failure [ 1235.806310][T12267] usb 5-1: USB disconnect, device number 33 [ 1236.377343][T17261] No such timeout policy "syz1" [ 1239.156546][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.586098][T17276] 9pnet_fd: Insufficient options for proto=fd [ 1240.830353][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1241.061827][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1241.075597][ T8] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1241.141685][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.186127][ T8] usb 4-1: Product: syz [ 1241.196312][ T8] usb 4-1: Manufacturer: syz [ 1241.706443][ T8] usb 4-1: SerialNumber: syz [ 1241.767675][ T8] usb 4-1: config 0 descriptor?? [ 1241.798782][T13517] team0 (unregistering): Port device team_slave_1 removed [ 1242.241766][T13517] team0 (unregistering): Port device team_slave_0 removed [ 1244.849879][T12206] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1244.858987][T12206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1244.867631][T12206] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1244.875508][T12206] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1244.883029][T12206] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1244.890956][T12206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1247.106320][T12206] Bluetooth: hci3: command tx timeout [ 1249.132236][T12206] Bluetooth: hci3: command tx timeout [ 1249.865744][T17331] 9pnet_fd: Insufficient options for proto=fd [ 1251.044161][ T8] rtl8150 4-1:0.0: eth25: rtl8150 is detected [ 1251.077527][ T8] usb 4-1: USB disconnect, device number 27 [ 1251.276277][T12206] Bluetooth: hci3: command tx timeout [ 1253.391356][T12206] Bluetooth: hci3: command tx timeout [ 1253.528472][T17327] team0 (unregistering): Port device team_slave_0 removed [ 1253.581346][T17327] team0 (unregistering): Port device team_slave_1 removed [ 1255.955943][T17361] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1256.865630][T17365] binder: 17362:17365 ioctl 4018620d 0 returned -22 [ 1259.639820][T17386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2789'. [ 1259.699999][T12206] block nbd9: Receive control failed (result -32) [ 1259.763491][T17378] block nbd9: shutting down sockets [ 1259.820849][T17306] chnl_net:caif_netlink_parms(): no params data found [ 1261.533713][T17424] binder: 17416:17424 ioctl 4018620d 0 returned -22 [ 1262.642766][T17306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.696204][T17306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.437343][T17306] bridge_slave_0: entered allmulticast mode [ 1263.549791][T17306] bridge_slave_0: entered promiscuous mode [ 1263.562026][T17306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.569262][T17306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.576526][T17306] bridge_slave_1: entered allmulticast mode [ 1263.583648][T17306] bridge_slave_1: entered promiscuous mode [ 1266.058169][T17306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.071494][T17306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.637915][T13517] bridge_slave_1: left allmulticast mode [ 1267.643818][T13517] bridge_slave_1: left promiscuous mode [ 1267.686684][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.586960][T13517] bridge_slave_0: left allmulticast mode [ 1268.592768][T13517] bridge_slave_0: left promiscuous mode [ 1268.600853][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.290803][T13517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.525305][T13517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.946932][T13517] bond0 (unregistering): Released all slaves [ 1272.239813][T17306] team0: Port device team_slave_0 added [ 1272.266294][T17306] team0: Port device team_slave_1 added [ 1272.689803][T17306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.690689][T17497] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1272.750344][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.009318][T17306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.038663][T17306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.045754][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.072200][T17306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.414859][T13517] hsr_slave_0: left promiscuous mode [ 1274.584820][T13517] hsr_slave_1: left promiscuous mode [ 1274.628038][T13517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.639009][T13517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.781528][T17512] binder: 17506:17512 ioctl 4018620d 0 returned -22 [ 1283.858590][T13517] team0 (unregistering): Port device team_slave_1 removed [ 1283.966696][T13517] team0 (unregistering): Port device team_slave_0 removed [ 1285.756388][T17562] 9pnet_fd: Insufficient options for proto=fd [ 1286.232279][T17568] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1289.066162][T12296] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1290.507294][T17582] team0 (unregistering): Port device team_slave_0 removed [ 1291.460132][T17582] team0 (unregistering): Port device team_slave_1 removed [ 1291.511067][T12296] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1291.518921][T12296] usb 3-1: can't read configurations, error -71 [ 1291.630260][T17306] hsr_slave_0: entered promiscuous mode [ 1291.647147][T17306] hsr_slave_1: entered promiscuous mode [ 1291.713923][T17306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.746324][T17306] Cannot create hsr debugfs directory [ 1292.175483][T17604] 9pnet_fd: Insufficient options for proto=fd [ 1296.606509][T17629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1299.366980][ T5823] Bluetooth: hci3: command 0x0405 tx timeout [ 1299.579800][T17306] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1299.619116][T17306] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1299.650627][T17306] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1299.669337][T17306] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1299.689959][T12296] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1299.895906][ T5871] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1299.906541][T12296] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1299.915014][T12296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.290827][T17306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.322533][T17668] syz.3.2851: attempt to access beyond end of device [ 1300.322533][T17668] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1300.335759][T17306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.437747][ T5871] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.447025][T17306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1300.458368][T17306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1300.463204][ T5871] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1300.489473][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.496672][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.536648][T12296] usb 5-1: config 0 has no interface number 0 [ 1300.542783][T12296] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1300.554005][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.561129][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.601848][ T5871] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.619380][T12296] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1300.644865][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.690919][ T5871] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1300.700936][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.710342][ T5871] usb 10-1: Product: syz [ 1300.715158][T12296] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1300.724675][ T5871] usb 10-1: Manufacturer: syz [ 1300.729525][T12296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.737733][ T5871] usb 10-1: SerialNumber: syz [ 1300.753254][T12296] usb 5-1: Product: syz [ 1300.771105][ T5871] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1300.791423][ T5871] cdc_ncm 10-1:1.0: bind() failure [ 1300.818416][T12296] usb 5-1: Manufacturer: syz [ 1300.823940][T12296] usb 5-1: SerialNumber: syz [ 1300.838273][T12296] usb 5-1: config 0 descriptor?? [ 1301.002917][ T5871] usb 10-1: USB disconnect, device number 9 [ 1301.626399][T12296] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1301.674724][T12296] usb 5-1: USB disconnect, device number 34 [ 1301.718845][T17306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.727293][T17723] kexec: Could not allocate control_code_buffer [ 1306.690814][ T5871] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1307.059775][ T5871] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.35 [ 1307.076172][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1307.084423][ T5871] usb 5-1: Product: syz [ 1307.147252][ T5871] usb 5-1: Manufacturer: syz [ 1307.151937][ T5871] usb 5-1: SerialNumber: syz [ 1307.189508][ T5871] usb 5-1: config 0 descriptor?? [ 1307.224924][ T5871] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1307.440270][T12206] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1307.450077][ T5871] sonixb 5-1:0.0: Error reading register 00: -32 [ 1307.472809][T12206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1307.481260][ T5871] usb 5-1: USB disconnect, device number 35 [ 1307.491253][T12206] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1307.500965][T12206] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1307.707013][T12206] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1307.714484][T12206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1308.475726][T17742] chnl_net:caif_netlink_parms(): no params data found [ 1308.699802][T12453] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1308.936388][T12296] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1308.955515][T12453] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.966651][T12453] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1309.056488][T12453] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1309.083465][T12453] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1309.099094][T17742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.106424][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.113793][T17742] bridge_slave_0: entered allmulticast mode [ 1309.120462][T12453] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.121462][T17742] bridge_slave_0: entered promiscuous mode [ 1309.136883][T17742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.144040][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.156326][T17742] bridge_slave_1: entered allmulticast mode [ 1309.168187][T17742] bridge_slave_1: entered promiscuous mode [ 1309.181611][T12453] usb 10-1: Product: syz [ 1309.230682][T12453] usb 10-1: Manufacturer: syz [ 1309.291772][T12453] usb 10-1: SerialNumber: syz [ 1309.605145][T12296] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1309.613862][T12296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.618561][T12453] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1309.663227][T12296] usb 3-1: config 0 has no interface number 0 [ 1309.682417][T12296] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1309.687383][T12453] cdc_ncm 10-1:1.0: bind() failure [ 1309.736164][T12296] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1309.776295][T17742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.879262][T17779] syz.3.2867: attempt to access beyond end of device [ 1309.879262][T17779] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1309.931671][ T5823] Bluetooth: hci3: command tx timeout [ 1310.092659][T12453] usb 10-1: USB disconnect, device number 10 [ 1310.459106][T17742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.476552][T12296] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1310.498273][T12296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.536227][T12296] usb 3-1: Product: syz [ 1310.540541][T12296] usb 3-1: Manufacturer: syz [ 1310.558374][T12296] usb 3-1: SerialNumber: syz [ 1310.586332][T17784] overlayfs: missing 'workdir' [ 1310.596898][T12296] usb 3-1: config 0 descriptor?? [ 1311.191968][T17789] overlayfs: missing 'workdir' [ 1311.805465][T12296] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1311.873587][T12296] usb 3-1: USB disconnect, device number 44 [ 1311.913567][T17742] team0: Port device team_slave_0 added [ 1312.914347][T17742] team0: Port device team_slave_1 added [ 1312.928862][ T5823] Bluetooth: hci3: command tx timeout [ 1312.997948][T17800] kexec: Could not allocate control_code_buffer [ 1314.933988][T12296] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1314.983014][ T5823] Bluetooth: hci3: command tx timeout [ 1315.126746][T17742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.133877][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.225052][T12296] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.35 [ 1315.236224][T17742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.244116][T12296] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1315.250826][T17742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.263952][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.334933][T17835] binder: 17831:17835 ioctl 4018620d 0 returned -22 [ 1316.239107][T12296] usb 3-1: Product: syz [ 1316.248603][T12296] usb 3-1: Manufacturer: syz [ 1316.262025][T12296] usb 3-1: SerialNumber: syz [ 1316.266341][T17742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.131561][ T5823] Bluetooth: hci3: command tx timeout [ 1317.362227][T12296] usb 3-1: config 0 descriptor?? [ 1317.388420][T12296] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1317.920434][T12296] sonixb 3-1:0.0: Error reading register 00: -71 [ 1317.932131][T12296] usb 3-1: USB disconnect, device number 45 [ 1319.382186][T17742] hsr_slave_0: entered promiscuous mode [ 1320.143566][T17742] hsr_slave_1: entered promiscuous mode [ 1320.246907][T17742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1320.258106][T17742] Cannot create hsr debugfs directory [ 1320.301915][ T29] bridge_slave_1: left allmulticast mode [ 1320.316947][ T29] bridge_slave_1: left promiscuous mode [ 1320.333059][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.575021][ T29] bridge_slave_0: left allmulticast mode [ 1320.609793][ T29] bridge_slave_0: left promiscuous mode [ 1320.666363][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.387079][T12296] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1326.056726][T12296] usb 10-1: device descriptor read/all, error -71 [ 1331.348225][ T5823] block nbd2: Receive control failed (result -32) [ 1331.363701][T17966] block nbd2: shutting down sockets [ 1332.457968][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.492393][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.009376][ T29] bond0 (unregistering): Released all slaves [ 1336.843492][ T29] hsr_slave_0: left promiscuous mode [ 1336.874596][ T29] hsr_slave_1: left promiscuous mode [ 1336.907809][T12453] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1336.999105][T18028] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1337.046493][T12453] usb 3-1: device descriptor read/64, error -71 [ 1337.076335][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.523143][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.615763][ T5823] block nbd9: Receive control failed (result -32) [ 1337.625934][T18030] block nbd9: shutting down sockets [ 1337.813293][T18035] overlayfs: missing 'workdir' [ 1337.856604][T12453] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1338.066354][T12453] usb 3-1: device descriptor read/64, error -71 [ 1338.417324][T12453] usb usb3-port1: attempt power cycle [ 1344.042105][T18078] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1344.521793][ T29] team0 (unregistering): Port device team_slave_1 removed [ 1344.597171][ T5823] block nbd4: Receive control failed (result -32) [ 1344.605250][T18079] block nbd4: shutting down sockets [ 1345.002508][ T29] team0 (unregistering): Port device team_slave_0 removed [ 1346.616470][T12453] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1347.106408][T17640] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1347.336863][T12453] usb 4-1: device descriptor read/64, error -71 [ 1347.426520][T17640] usb 10-1: Using ep0 maxpacket: 8 [ 1347.445201][T17640] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1347.796341][T12453] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1348.139884][T17640] usb 10-1: config 179 has no interface number 0 [ 1348.148636][T17640] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1348.160383][T17640] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1348.172204][T17640] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1348.183362][T17640] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1348.241199][T17640] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1348.268418][T17640] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.286206][T12453] usb 4-1: device descriptor read/64, error -71 [ 1348.322328][T18098] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1348.406562][T12453] usb usb4-port1: attempt power cycle [ 1348.535355][T17640] usb 10-1: USB disconnect, device number 13 [ 1351.690984][T18128] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1354.694202][T18147] kvm: pic: single mode not supported [ 1354.694231][T18147] kvm: pic: level sensitive irq not supported [ 1354.764377][T18147] kvm: pic: single mode not supported [ 1354.770912][T18147] kvm: pic: level sensitive irq not supported [ 1354.806701][T18147] kvm: pic: single mode not supported [ 1354.812921][T18147] kvm: pic: level sensitive irq not supported [ 1354.826386][T18100] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1354.906355][T18147] kvm: pic: single mode not supported [ 1354.906394][T18147] kvm: pic: level sensitive irq not supported [ 1354.938883][T18147] kvm: pic: single mode not supported [ 1354.945168][T18147] kvm: pic: level sensitive irq not supported [ 1354.978065][T18147] kvm: pic: single mode not supported [ 1354.984212][T18147] kvm: pic: level sensitive irq not supported [ 1354.990110][T18147] kvm: pic: single mode not supported [ 1354.996325][T18147] kvm: pic: level sensitive irq not supported [ 1355.001810][T18100] usb 10-1: device descriptor read/64, error -71 [ 1355.015905][T18147] kvm: pic: single mode not supported [ 1355.015933][T18147] kvm: pic: level sensitive irq not supported [ 1355.022069][T18147] kvm: pic: single mode not supported [ 1355.028332][T18147] kvm: pic: level sensitive irq not supported [ 1355.034008][T18147] kvm: pic: single mode not supported [ 1355.040306][T18147] kvm: pic: level sensitive irq not supported [ 1356.554744][T18100] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1356.696946][T18100] usb 10-1: device descriptor read/64, error -71 [ 1356.939620][T18100] usb usb10-port1: attempt power cycle [ 1357.286409][T18100] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1358.027926][T18100] usb 10-1: device descriptor read/8, error -71 [ 1358.845320][T18179] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1358.949689][T17742] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1359.035120][T17742] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1359.127856][T17742] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1359.214496][T17742] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1359.630947][T17742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.749507][T17742] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.865298][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.872479][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.054182][T17742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1360.166419][T17742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.271603][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.278943][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.361378][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.024601][T18210] Bluetooth: MGMT ver 1.23 [ 1363.692991][T18209] tty tty25: ldisc open failed (-12), clearing slot 24 [ 1363.924100][T17742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.633854][T12206] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1368.670879][T18261] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1369.206253][T12206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1369.228288][T12206] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1369.240961][T12206] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1369.250500][T12206] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1369.276479][T12206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1371.412442][ T5823] Bluetooth: hci3: command tx timeout [ 1371.495851][T18265] chnl_net:caif_netlink_parms(): no params data found [ 1373.513890][ T5823] Bluetooth: hci3: command tx timeout [ 1374.202026][T18265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.218288][T18265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.225932][T18265] bridge_slave_0: entered allmulticast mode [ 1374.276246][T18265] bridge_slave_0: entered promiscuous mode [ 1374.301810][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.324668][T18265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.596597][T18265] bridge_slave_1: entered allmulticast mode [ 1374.623076][T18265] bridge_slave_1: entered promiscuous mode [ 1374.784590][T18329] 9pnet_fd: Insufficient options for proto=fd [ 1375.779148][ T5823] Bluetooth: hci3: command tx timeout [ 1377.617032][T18343] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1377.925268][ T5823] Bluetooth: hci3: command tx timeout [ 1378.203871][T18265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.137718][T18265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.330944][T18265] team0: Port device team_slave_0 added [ 1380.466349][ T5979] bridge_slave_1: left allmulticast mode [ 1380.472199][ T5979] bridge_slave_1: left promiscuous mode [ 1380.515681][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.732250][ T5979] bridge_slave_0: left allmulticast mode [ 1381.050149][ T5979] bridge_slave_0: left promiscuous mode [ 1381.057567][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.166527][T12453] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1382.348320][T12453] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1382.369402][T12453] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.392656][T12453] usb 3-1: config 0 has no interface number 0 [ 1382.400592][T12453] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1382.423291][T12453] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1382.492593][T12453] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1382.509016][T12453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.520903][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.536470][T12453] usb 3-1: Product: syz [ 1382.547922][T12453] usb 3-1: Manufacturer: syz [ 1382.554180][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.576586][T12453] usb 3-1: SerialNumber: syz [ 1382.602330][ T5979] bond0 (unregistering): Released all slaves [ 1382.610721][T12453] usb 3-1: config 0 descriptor?? [ 1382.650033][T18265] team0: Port device team_slave_1 added [ 1382.783610][ T5979] hsr_slave_0: left promiscuous mode [ 1382.793752][ T5979] hsr_slave_1: left promiscuous mode [ 1382.805414][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.824822][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.963066][T18379] 9pnet_fd: Insufficient options for proto=fd [ 1383.235206][T18369] overlayfs: failed to resolve '/&.': -2 [ 1383.267956][T12453] usb 3-1: USB disconnect, device number 49 [ 1383.791637][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 1385.295355][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 1386.151068][T18398] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1386.722653][T18401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1387.121897][T18265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.129273][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.163281][T18265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.376737][T18265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.383766][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.410608][T18265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.519806][T18265] hsr_slave_0: entered promiscuous mode [ 1387.585134][T18265] hsr_slave_1: entered promiscuous mode [ 1387.593161][T18265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1387.605404][T18265] Cannot create hsr debugfs directory [ 1388.174834][T18422] 9pnet_fd: Insufficient options for proto=fd [ 1390.028008][T18265] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1391.299391][T18265] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1391.397974][T18265] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1391.549027][T18265] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1393.262295][T18463] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1393.535751][T18463] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1394.541796][T18479] 9pnet_fd: Insufficient options for proto=fd [ 1394.601055][T18265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.670736][T18265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.713179][T18265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1394.723702][T18265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1394.753204][T12073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.760422][T12073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.784353][T12073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.791580][T12073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.397583][T18265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.385594][T18265] veth0_vlan: entered promiscuous mode [ 1399.397543][T18265] veth1_vlan: entered promiscuous mode [ 1399.421700][T18265] veth0_macvtap: entered promiscuous mode [ 1399.430955][T18265] veth1_macvtap: entered promiscuous mode [ 1399.450262][T18265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.466063][T18265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.479813][T18265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.490972][T18265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.501507][T18265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.512798][T18265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.530095][T18265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.556205][T18265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.617089][T18265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.638039][T18548] 9pnet_fd: Insufficient options for proto=fd [ 1399.756684][T18550] fuse: Unknown parameter '0x0000000000000005' [ 1399.857115][T18265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.026715][T18265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.479147][T18265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.493005][T18265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.534853][T18265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.545528][T18265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.555856][T18265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.566865][T18265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.577886][T18265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.747675][T18265] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.776356][T18265] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.795714][T18265] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.814686][T18265] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.592229][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.600333][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.632519][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.664692][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.710266][T18569] pic_ioport_write: 4 callbacks suppressed [ 1401.710291][T18569] kvm: pic: single mode not supported [ 1402.256168][T18590] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 1405.393635][T18600] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1407.730317][T18623] 9pnet_fd: Insufficient options for proto=fd [ 1410.054910][T18602] team0 (unregistering): Port device team_slave_0 removed [ 1410.195885][T18602] team0 (unregistering): Port device team_slave_1 removed [ 1410.260783][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 1412.196179][ T5835] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1412.476116][ T5835] usb 10-1: Using ep0 maxpacket: 32 [ 1412.489589][ T5835] usb 10-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1412.527945][ T5835] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.657541][ T5835] usb 10-1: Product: syz [ 1412.662209][ T5835] usb 10-1: Manufacturer: syz [ 1412.672013][ T5835] usb 10-1: SerialNumber: syz [ 1413.328159][ T5835] usb 10-1: config 0 descriptor?? [ 1414.062950][ T5835] rtl8150 10-1:0.0: eth5: rtl8150 is detected [ 1414.402121][ T5835] usb 10-1: USB disconnect, device number 18 [ 1416.200683][T18699] 9pnet_fd: Insufficient options for proto=fd [ 1416.701625][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3059'. [ 1419.937107][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3065'. [ 1423.552140][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.385786][T18751] 9pnet_fd: Insufficient options for proto=fd [ 1425.508261][T18754] binder: 18750:18754 ioctl 4018620d 0 returned -22 [ 1427.312861][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3074'. [ 1428.076066][T18761] kvm: pic: single mode not supported [ 1435.172373][T18812] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1435.304775][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 1438.500652][T18840] kexec: Could not allocate control_code_buffer [ 1443.161679][T18892] binder: 18886:18892 ioctl 4018620d 0 returned -22 [ 1444.433253][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3106'. [ 1445.910291][T18904] binder: 18901:18904 ioctl 4018620d 0 returned -22 [ 1447.754025][T18914] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3111'. [ 1454.857156][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 1460.404486][T18984] No such timeout policy "syz1" [ 1463.397177][T19015] netlink: 'syz.7.3133': attribute type 8 has an invalid length. [ 1464.016611][T19015] netlink: 163260 bytes leftover after parsing attributes in process `syz.7.3133'. [ 1464.378106][T19022] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1469.627136][T12206] Bluetooth: hci3: command 0x0405 tx timeout [ 1470.596827][T19057] syz.7.3140 (19057): drop_caches: 2 [ 1471.227104][T19058] 9pnet_fd: p9_fd_create_unix (19058): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1472.717124][T19081] binder: 19077:19081 ioctl 4018620d 0 returned -22 [ 1474.003995][T19090] syz.2.3148: attempt to access beyond end of device [ 1474.003995][T19090] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1478.864051][T12206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1478.875066][T12206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1478.883856][T12206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1478.893096][T12206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1478.902423][T12206] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1478.909980][T12206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1480.706087][T12296] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1480.819576][T19110] chnl_net:caif_netlink_parms(): no params data found [ 1480.864150][T12296] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1480.885127][T12296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.928511][T12296] usb 3-1: config 0 has no interface number 0 [ 1480.956192][T12296] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1480.969613][T12206] Bluetooth: hci4: command tx timeout [ 1481.004994][T12296] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1481.263559][T12296] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1481.290584][T19110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.299599][T12296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.092694][T12296] usb 3-1: Product: syz [ 1482.097080][T12296] usb 3-1: Manufacturer: syz [ 1482.101832][T12296] usb 3-1: SerialNumber: syz [ 1482.109048][T12296] usb 3-1: config 0 descriptor?? [ 1482.268283][T19110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.275725][T19110] bridge_slave_0: entered allmulticast mode [ 1482.317007][T19110] bridge_slave_0: entered promiscuous mode [ 1482.901709][T19110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.980184][T19110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.987684][T12296] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1483.016624][T19110] bridge_slave_1: entered allmulticast mode [ 1483.023438][T19110] bridge_slave_1: entered promiscuous mode [ 1483.046230][T12206] Bluetooth: hci4: command tx timeout [ 1483.099218][T12296] usb 3-1: USB disconnect, device number 50 [ 1484.996456][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.009338][T19110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.098820][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1485.119800][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1485.128582][ T5823] Bluetooth: hci4: command tx timeout [ 1485.135589][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1485.173487][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1485.217329][T19110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.235409][ T5823] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1485.252465][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1487.004686][T19146] syz.9.3156 (19146): drop_caches: 2 [ 1487.076533][T19110] team0: Port device team_slave_0 added [ 1487.320193][ T5823] Bluetooth: hci4: command tx timeout [ 1487.329165][ T5823] Bluetooth: hci6: command tx timeout [ 1487.742060][T19110] team0: Port device team_slave_1 added [ 1489.176954][T19110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.183942][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.458809][T12206] Bluetooth: hci6: command tx timeout [ 1490.113232][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1490.122749][T19201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1491.170098][T19110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.221619][T19110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.251486][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.316953][T15832] wlan1: Trigger new scan to find an IBSS to join [ 1491.376854][T19110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.417666][T19152] chnl_net:caif_netlink_parms(): no params data found [ 1491.590628][T19037] Bluetooth: hci6: command tx timeout [ 1491.675108][T19152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.750587][T19152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.786206][T19152] bridge_slave_0: entered allmulticast mode [ 1493.756987][T19152] bridge_slave_0: entered promiscuous mode [ 1493.779399][T19152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.786108][T19037] Bluetooth: hci3: command 0x0405 tx timeout [ 1493.792634][T19037] Bluetooth: hci6: command tx timeout [ 1493.804041][T19152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.851209][T19223] kexec: Could not allocate control_code_buffer [ 1493.924656][T19152] bridge_slave_1: entered allmulticast mode [ 1493.942549][T19152] bridge_slave_1: entered promiscuous mode [ 1494.025453][T19224] syz.2.3164: attempt to access beyond end of device [ 1494.025453][T19224] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1495.096468][T19110] hsr_slave_0: entered promiscuous mode [ 1495.556587][T19110] hsr_slave_1: entered promiscuous mode [ 1495.586081][T19110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1495.594541][T19110] Cannot create hsr debugfs directory [ 1496.624285][T19152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.738785][T19152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.433006][T19231] syz.9.3174 (19231): drop_caches: 2 [ 1498.097423][T12073] wlan1: Trigger new scan to find an IBSS to join [ 1502.272779][T12443] wlan1: Creating new IBSS network, BSSID 66:18:e6:20:b5:88 [ 1503.599886][T19309] syz.4.3184: attempt to access beyond end of device [ 1503.599886][T19309] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1503.773933][T19152] team0: Port device team_slave_0 added [ 1503.784922][T19152] team0: Port device team_slave_1 added [ 1504.955592][T12443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.262313][T19302] fuse: Unknown parameter '0x0000000000000005' [ 1505.369452][T19152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.396564][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.515227][T19152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.795727][T12443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.036622][T19311] syz.2.3185 (19311): drop_caches: 2 [ 1506.724727][T19152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.755011][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.781187][T19152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.895052][T12443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.999724][T19152] hsr_slave_0: entered promiscuous mode [ 1507.140767][T19152] hsr_slave_1: entered promiscuous mode [ 1507.169172][T19152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1507.201477][T19152] Cannot create hsr debugfs directory [ 1507.554823][T12443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.719742][T19110] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1508.921071][T19110] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1509.276017][T19110] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1510.127222][T19110] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1510.581632][T12443] bridge_slave_1: left allmulticast mode [ 1510.606666][T12443] bridge_slave_1: left promiscuous mode [ 1510.612635][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.679399][T12443] bridge_slave_0: left allmulticast mode [ 1510.685135][T12443] bridge_slave_0: left promiscuous mode [ 1510.693251][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.589844][T19364] No such timeout policy "syz1" [ 1513.163133][T19380] syz.2.3194 (19380): drop_caches: 2 [ 1513.173073][T19380] syz.2.3194 (19380): drop_caches: 2 [ 1514.547250][T12443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.574760][T12443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.606779][T12443] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1514.664162][T12443] bond0 (unregistering): Released all slaves [ 1515.086094][ T5870] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1515.325794][ T5870] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 1515.334324][ T5870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.372108][ T5870] usb 10-1: config 0 has no interface number 0 [ 1515.537026][ T5870] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1515.557991][ T5870] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1515.637050][ T5870] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1515.646506][ T5870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.674832][ T5870] usb 10-1: Product: syz [ 1515.700581][ T5870] usb 10-1: Manufacturer: syz [ 1515.705366][ T5870] usb 10-1: SerialNumber: syz [ 1515.737889][ T5870] usb 10-1: config 0 descriptor?? [ 1516.758534][T19395] overlayfs: failed to resolve '/&.': -2 [ 1516.766156][ T5870] usbtouchscreen 10-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1516.788600][ T5870] usb 10-1: USB disconnect, device number 19 [ 1517.306735][T12443] hsr_slave_0: left promiscuous mode [ 1517.312828][T12443] hsr_slave_1: left promiscuous mode [ 1517.333545][T12443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.350240][T12443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.128857][T12443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1518.146752][T12443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.267301][T12443] veth1_macvtap: left promiscuous mode [ 1518.295209][T12443] veth0_macvtap: left promiscuous mode [ 1518.314312][T12443] veth1_vlan: left promiscuous mode [ 1518.334563][T12443] veth0_vlan: left promiscuous mode [ 1518.610039][T19438] syz.9.3204 (19438): drop_caches: 2 [ 1518.644983][T19438] syz.9.3204 (19438): drop_caches: 2 [ 1518.703471][T19443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3205'. [ 1525.346066][T18100] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1525.556207][T18100] usb 10-1: Using ep0 maxpacket: 8 [ 1525.575125][T18100] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1525.596254][T18504] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1525.596325][T18100] usb 10-1: config 179 has no interface number 0 [ 1525.637562][T12443] team0 (unregistering): Port device team_slave_1 removed [ 1525.702706][T18100] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1525.729696][T18100] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1525.773567][T18100] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1525.786231][T18504] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1525.814748][T18100] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1525.826177][T18504] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.856870][T18100] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1525.866847][T18100] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.896264][T18504] usb 3-1: config 0 has no interface number 0 [ 1525.902453][T18504] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1525.917775][T19481] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1525.955110][T18504] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1526.036752][T18504] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1526.057026][T18504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.066769][T12443] team0 (unregistering): Port device team_slave_0 removed [ 1526.079400][T18504] usb 3-1: Product: syz [ 1526.083623][T18504] usb 3-1: Manufacturer: syz [ 1526.133298][T18504] usb 3-1: SerialNumber: syz [ 1526.154401][T18504] usb 3-1: config 0 descriptor?? [ 1526.887409][T19485] overlayfs: failed to resolve '/&.': -2 [ 1526.942246][T18504] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1526.955410][T18504] usb 3-1: USB disconnect, device number 51 [ 1528.836877][T19110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.886574][ T46] usb 10-1: USB disconnect, device number 20 [ 1528.927879][T19492] syz.2.3215 (19492): drop_caches: 2 [ 1528.933931][T19110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.934061][T19492] syz.2.3215 (19492): drop_caches: 2 [ 1532.303780][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1532.315787][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.322982][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.363803][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.370992][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.710456][T19521] 9pnet_fd: p9_fd_create_unix (19521): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1533.615636][T19110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1533.827788][T19110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1534.839634][T19525] No such timeout policy "syz1" [ 1535.368689][T19152] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1535.466891][T19152] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1535.479564][T19152] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1535.528758][T19152] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1536.123302][T19110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.644475][T19152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.328592][T19152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.457364][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.464515][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.202474][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.209723][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.804621][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1540.814257][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1540.826298][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1540.835639][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1540.848369][ T5823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1540.855711][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1541.874504][T19152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.214573][ T5823] Bluetooth: hci3: command tx timeout [ 1543.752401][T12206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1543.768704][T12206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1543.784816][T12206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1543.917606][T12206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1543.926517][T12206] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1543.934069][T12206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1545.286353][T12206] Bluetooth: hci3: command tx timeout [ 1546.096896][T12206] Bluetooth: hci4: command tx timeout [ 1546.346619][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.380403][T19579] chnl_net:caif_netlink_parms(): no params data found [ 1547.376165][T12206] Bluetooth: hci3: command tx timeout [ 1548.186063][T12206] Bluetooth: hci4: command tx timeout [ 1548.273660][T19613] chnl_net:caif_netlink_parms(): no params data found [ 1548.327315][ T52] bridge_slave_1: left allmulticast mode [ 1548.333007][ T52] bridge_slave_1: left promiscuous mode [ 1548.339103][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.359975][ T52] bridge_slave_0: left allmulticast mode [ 1548.365680][ T52] bridge_slave_0: left promiscuous mode [ 1548.371607][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.447245][T12206] Bluetooth: hci3: command tx timeout [ 1550.336775][T12206] Bluetooth: hci4: command tx timeout [ 1552.455993][T12206] Bluetooth: hci4: command tx timeout [ 1555.021935][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.084048][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.116593][ T52] bond0 (unregistering): Released all slaves [ 1555.153569][T19579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.163583][T19579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.175373][T19579] bridge_slave_0: entered allmulticast mode [ 1555.193421][T19579] bridge_slave_0: entered promiscuous mode [ 1555.218073][T19579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.239839][T19579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.326310][T19579] bridge_slave_1: entered allmulticast mode [ 1555.342054][T19579] bridge_slave_1: entered promiscuous mode [ 1557.310581][T19579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.407106][T19579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.539803][ T52] hsr_slave_0: left promiscuous mode [ 1557.546739][ T52] hsr_slave_1: left promiscuous mode [ 1557.695814][T19703] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1557.696156][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1557.784416][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.578752][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1558.681639][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1560.198791][T19579] team0: Port device team_slave_0 added [ 1560.210682][T19613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.239493][T19613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.257183][T19613] bridge_slave_0: entered allmulticast mode [ 1560.291150][T19613] bridge_slave_0: entered promiscuous mode [ 1560.308345][T19613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.315497][T19613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.345857][T19613] bridge_slave_1: entered allmulticast mode [ 1560.377173][T19613] bridge_slave_1: entered promiscuous mode [ 1560.391920][T19579] team0: Port device team_slave_1 added [ 1560.517974][ T30] audit: type=1326 audit(1733977737.163:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19732 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04677ff19 code=0x7ffc0000 [ 1560.554041][T19579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.562774][T19579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.593047][ T30] audit: type=1326 audit(1733977737.163:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19732 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04677ff19 code=0x7ffc0000 [ 1560.623252][T19579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.645766][ T30] audit: type=1326 audit(1733977737.163:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19732 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc04677e880 code=0x7ffc0000 [ 1560.692143][ T30] audit: type=1326 audit(1733977737.163:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19732 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04677ff19 code=0x7ffc0000 [ 1560.736166][ T30] audit: type=1326 audit(1733977737.163:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19732 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04677ff19 code=0x7ffc0000 [ 1560.771218][T19613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.794359][ T30] audit: type=1326 audit(1733977737.163:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19732 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fc04677ff19 code=0x7ffc0000 [ 1560.827855][ T30] audit: type=1326 audit(1733977737.163:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19732 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04677ff19 code=0x7ffc0000 [ 1560.850081][ T30] audit: type=1326 audit(1733977737.163:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19732 comm="syz.2.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04677ff19 code=0x7ffc0000 [ 1560.886666][T19579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.901516][T19579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.938977][T19749] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 1560.954583][T19579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.052466][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3273'. [ 1561.085516][T19613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.378766][T19579] hsr_slave_0: entered promiscuous mode [ 1561.393555][T19579] hsr_slave_1: entered promiscuous mode [ 1561.427558][T19756] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3275'. [ 1561.460394][T19758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.494412][T19758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.505446][T19758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.516900][T19758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.527481][T19758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.542959][T19758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.555971][T19758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.863731][T19758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1562.336791][T19758] batadv_slave_1: entered promiscuous mode [ 1562.357391][T19613] team0: Port device team_slave_0 added [ 1562.377577][T19613] team0: Port device team_slave_1 added [ 1564.256210][ T46] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1564.422012][T19613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.426148][ T46] usb 10-1: Using ep0 maxpacket: 8 [ 1564.437825][ T46] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1564.447516][ T46] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1564.455748][T19613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.458596][ T46] usb 10-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 1564.492899][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.499135][T19613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1564.508639][ T46] usb 10-1: Product: syz [ 1564.524310][ T46] usb 10-1: Manufacturer: syz [ 1564.529551][T19613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.538949][ T46] usb 10-1: SerialNumber: syz [ 1564.546482][T19613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.548641][ T5835] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1564.592719][T19613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.739956][T19613] hsr_slave_0: entered promiscuous mode [ 1564.749725][T19613] hsr_slave_1: entered promiscuous mode [ 1564.756392][T19613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1564.765391][T19613] Cannot create hsr debugfs directory [ 1564.772075][T15939] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1564.776203][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 1564.807955][ T5835] usb 5-1: config 4 has an invalid interface number: 63 but max is 0 [ 1564.831814][ T46] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input49 [ 1564.843655][ T5835] usb 5-1: config 4 has no interface number 0 [ 1564.863993][ T5178] bcm5974 10-1:1.0: could not read from device [ 1564.890814][ T5835] usb 5-1: config 4 interface 63 altsetting 71 bulk endpoint 0x1 has invalid maxpacket 16 [ 1564.903345][ T5178] bcm5974 10-1:1.0: could not read from device [ 1564.910576][ T46] usb 10-1: USB disconnect, device number 21 [ 1564.923377][ T5835] usb 5-1: config 4 interface 63 has no altsetting 0 [ 1564.934429][ T5835] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 1564.956933][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.957267][T15939] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1564.964967][ T5835] usb 5-1: Product: syz [ 1564.964991][ T5835] usb 5-1: Manufacturer: syz [ 1564.965009][ T5835] usb 5-1: SerialNumber: syz [ 1565.014839][T15939] usb 3-1: config 0 has no interface number 0 [ 1565.022214][T15939] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1565.032371][T19780] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1565.041079][T15939] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1565.052124][T15939] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1565.068821][T15939] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1565.091907][ T5835] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1565.107223][T15939] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1565.125948][T15939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.167365][T15939] usb 3-1: config 0 descriptor?? [ 1565.189902][T15939] hub 3-1:0.3: bad descriptor, ignoring hub [ 1565.223696][T15939] hub 3-1:0.3: probe with driver hub failed with error -5 [ 1565.247208][T15939] sierra 3-1:0.3: Sierra USB modem converter detected [ 1565.424809][ T29] bridge_slave_1: left allmulticast mode [ 1565.431095][ T29] bridge_slave_1: left promiscuous mode [ 1565.441329][ T5835] usb 5-1: USB disconnect, device number 36 [ 1565.449845][ T1161] usb 5-1: Failed to submit usb control message: -71 [ 1565.462469][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.473003][ T1161] usb 5-1: unable to send the bmi data to the device: -71 [ 1565.481662][ T1161] usb 5-1: unable to get target info from device [ 1565.491093][ T1161] usb 5-1: could not get target info (-71) [ 1565.491915][ T29] bridge_slave_0: left allmulticast mode [ 1565.503153][ T29] bridge_slave_0: left promiscuous mode [ 1565.503810][ T1161] usb 5-1: could not probe fw (-71) [ 1565.513572][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.983807][T19800] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3286'. [ 1567.205530][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.231261][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.280348][ T29] bond0 (unregistering): Released all slaves [ 1567.371112][T19784] tipc: Enabling of bearer rejected, failed to enable media [ 1567.490633][T15939] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1567.519091][T15939] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 1567.551768][T15939] usb 3-1: USB disconnect, device number 52 [ 1567.626227][ T29] hsr_slave_0: left promiscuous mode [ 1567.698714][ T29] hsr_slave_1: left promiscuous mode [ 1567.756663][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.799534][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.968562][T19815] random: crng reseeded on system resumption [ 1568.020402][T15939] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1568.062364][T15939] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1568.071785][T15939] sierra 3-1:0.3: device disconnected [ 1569.103392][ T29] team0 (unregistering): Port device team_slave_1 removed [ 1569.227388][ T29] team0 (unregistering): Port device team_slave_0 removed [ 1569.275494][T19836] netlink: 'syz.9.3300': attribute type 27 has an invalid length. [ 1571.932834][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1571.935788][T19834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1571.950481][T19834] IPv6: NLM_F_CREATE should be set when creating new route [ 1572.084836][T19836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.092198][T19836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.219309][T19836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.244108][T19836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.382993][T19836] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.392369][T19836] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.401857][T19836] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.411446][T19836] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.568794][T19836] batadv_slave_1: left promiscuous mode [ 1572.638628][T19836] syz.9.3300 (19836) used greatest stack depth: 18480 bytes left [ 1575.377019][T19897] openvswitch: netlink: IP tunnel dst address not specified [ 1575.391617][T19613] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1575.457336][T19613] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1575.508166][T19613] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1575.549681][T19613] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1575.643254][T19579] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1575.687388][T19579] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1575.709144][T19579] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1575.743503][T19613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.756606][T19579] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1575.802072][T19613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.857565][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.864831][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.878922][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.886159][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.100805][T19579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.158984][T19579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.182903][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.190126][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.253534][T17001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.260820][T17001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.408464][T19613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.641510][T17218] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.799806][T17218] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.851987][T19941] netlink: 'syz.9.3332': attribute type 1 has an invalid length. [ 1577.862117][T19941] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3332'. [ 1577.931993][T17218] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.098393][T17218] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.279446][T19579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.470395][T19613] veth0_vlan: entered promiscuous mode [ 1578.601653][T19613] veth1_vlan: entered promiscuous mode [ 1578.683555][T17218] bridge_slave_1: left allmulticast mode [ 1578.708905][T17218] bridge_slave_1: left promiscuous mode [ 1578.742450][T17218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.778813][T17218] bridge_slave_0: left allmulticast mode [ 1578.805075][T17218] bridge_slave_0: left promiscuous mode [ 1578.846361][T17218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.274828][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c461c00: rx timeout, send abort [ 1580.286347][ C1] vcan0: j1939_tp_rxtimer: 0xffff888063496000: rx timeout, send abort [ 1580.294838][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c461c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1580.309797][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888063496000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1581.522077][T17218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.534278][T17218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.544684][T17218] bond0 (unregistering): Released all slaves [ 1581.665827][T19613] veth0_macvtap: entered promiscuous mode [ 1581.929460][T19613] veth1_macvtap: entered promiscuous mode [ 1581.989710][T19579] veth0_vlan: entered promiscuous mode [ 1583.031780][T19579] veth1_vlan: entered promiscuous mode [ 1583.048800][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.060098][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.070110][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.087856][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.098380][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.110299][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.124161][T19613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.210249][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.228792][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.238874][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.249486][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.259459][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.269975][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.281022][T19613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.302729][T19579] veth0_macvtap: entered promiscuous mode [ 1583.600290][T17218] hsr_slave_0: left promiscuous mode [ 1583.794672][T17218] hsr_slave_1: left promiscuous mode [ 1583.856252][T17218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.864273][T17218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.927298][T17218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.957252][T17218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.034968][T17218] veth1_macvtap: left promiscuous mode [ 1584.046093][T17218] veth0_macvtap: left promiscuous mode [ 1584.062093][T17218] veth1_vlan: left promiscuous mode [ 1584.076119][T17218] veth0_vlan: left promiscuous mode [ 1584.318287][T12296] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1584.479096][T12296] usb 5-1: Using ep0 maxpacket: 8 [ 1584.499850][T12296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1584.520240][T12296] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1584.553316][T12296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.588144][T12296] usb 5-1: config 0 descriptor?? [ 1584.808619][T12296] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1585.308726][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'. [ 1585.404509][T20012] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3358'. [ 1585.580633][T18100] usb 5-1: USB disconnect, device number 37 [ 1586.071857][T17218] team0 (unregistering): Port device team_slave_1 removed [ 1586.150935][T17218] team0 (unregistering): Port device team_slave_0 removed [ 1586.673666][T20044] netlink: 'syz.9.3369': attribute type 10 has an invalid length. [ 1586.823418][T15939] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1586.986498][T15939] usb 5-1: Using ep0 maxpacket: 32 [ 1587.000968][T15939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.015782][T15939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.029867][T19613] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.039968][T19613] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.048783][T15939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.048828][T15939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1587.048879][T15939] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1587.048907][T15939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.090443][T19613] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.091952][T15939] usb 5-1: config 0 descriptor?? [ 1587.099310][T19613] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.115504][T19579] veth1_macvtap: entered promiscuous mode [ 1587.189180][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.223130][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.243839][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.257124][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.268531][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1587.280304][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.293200][T19579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.342848][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.361773][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.375395][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.397453][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.413923][T20054] openvswitch: netlink: Flow key attr not present in new flow. [ 1587.426264][T19579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.446650][T19579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.461479][T19579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.508403][T19579] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.526301][T19579] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.535090][T19579] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.551832][T19579] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.580801][T15939] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 1587.599893][T12206] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 1587.604223][T15939] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 1587.625982][T15939] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 1587.632937][T15939] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 1587.651600][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.686979][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.690689][T15939] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 1587.796151][T15939] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 1587.826019][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.836097][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.896463][T15939] usb 5-1: USB disconnect, device number 38 [ 1587.911107][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.926849][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.974516][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.018415][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.017025][T20119] 9p: Unknown access argument 18446744073709551615: -34 [ 1592.167532][T20125] netlink: 'syz.6.3396': attribute type 3 has an invalid length. [ 1592.548788][ T30] audit: type=1326 audit(1733977769.193:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20136 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1592.589852][ T30] audit: type=1326 audit(1733977769.193:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20136 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1592.653832][ T30] audit: type=1326 audit(1733977769.193:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20136 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1592.730366][ T30] audit: type=1326 audit(1733977769.193:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20136 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1592.796259][ T30] audit: type=1326 audit(1733977769.193:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20136 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1592.842788][ T30] audit: type=1326 audit(1733977769.193:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20136 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1592.864574][ T30] audit: type=1326 audit(1733977769.193:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20136 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1592.886379][ T30] audit: type=1326 audit(1733977769.193:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20136 comm="syz.8.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1593.073961][T20152] 9p: Unknown access argument 18446744073709551615: -34 [ 1593.716085][ T5835] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1593.909960][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 1593.956316][ T5835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1594.126051][ T5835] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1594.135214][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1594.137012][T20168] [U] [ 1594.145975][ T5835] usb 7-1: Product: syz [ 1594.146119][T20168] [U] [ 1594.150260][ T5835] usb 7-1: Manufacturer: syz [ 1594.152957][T20168] [U] [ 1594.152998][T20168] [U] [ 1594.163738][ T5835] usb 7-1: SerialNumber: syz [ 1594.171215][ T5835] usb 7-1: config 0 descriptor?? [ 1594.180330][T20147] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1594.195564][T20168] [U] [ 1594.198360][T20168] [U] [ 1594.201103][T20168] [U] [ 1594.203838][T20168] [U] [ 1594.215266][T20168] [U] [ 1594.218060][T20168] [U] [ 1594.220805][T20168] [U] [ 1594.227311][T20166] [U] [ 1595.579369][T18504] usb 7-1: USB disconnect, device number 4 [ 1596.241237][T20190] netlink: 'syz.8.3423': attribute type 10 has an invalid length. [ 1596.293684][T20190] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1596.982720][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 1597.008055][T20220] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1597.034688][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 1597.107056][T20224] No such timeout policy "syz0" [ 1597.274310][T20226] tipc: Started in network mode [ 1597.283074][T20226] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1597.293047][T20226] tipc: Enabled bearer , priority 0 [ 1597.526187][T18504] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 1597.730501][T18504] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1598.547281][T18504] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1598.556188][T18504] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1598.565138][T18504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1598.575999][T15939] tipc: Node number set to 11578026 [ 1598.630364][T18504] usb 5-1: string descriptor 0 read error: -22 [ 1598.636864][T18504] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=ff.ff [ 1598.666236][T18504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.663635][T18504] usb 5-1: config 0 descriptor?? [ 1599.709621][T20232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1600.616222][T18504] hub 5-1:0.0: bad descriptor, ignoring hub [ 1600.622227][T18504] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1600.634084][T18504] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input50 [ 1600.702525][T18504] usb 5-1: USB disconnect, device number 39 [ 1603.037721][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1603.366265][ T5870] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1604.036657][ T5870] usb 7-1: Using ep0 maxpacket: 8 [ 1604.656610][T20320] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3466'. [ 1604.671952][T20320] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1604.681373][T20320] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1604.690166][T20320] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1604.699910][T20320] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1604.767144][ T5870] usb 7-1: config 3 has an invalid interface number: 188 but max is 0 [ 1604.775574][ T5870] usb 7-1: config 3 has no interface number 0 [ 1604.806069][ T5870] usb 7-1: config 3 interface 188 has no altsetting 0 [ 1604.951319][ T5870] usb 7-1: New USB device found, idVendor=0458, idProduct=704c, bcdDevice=58.7e [ 1604.994432][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.040542][ T5870] usb 7-1: Product: syz [ 1605.065297][ T5870] usb 7-1: Manufacturer: syz [ 1605.093787][ T5870] usb 7-1: SerialNumber: syz [ 1605.659856][ T5870] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704c [ 1605.668228][ T5870] gspca_sn9c20x: Write register 1000 failed -71 [ 1605.674583][ T5870] gspca_sn9c20x: Device initialization failed [ 1605.680974][ T5870] gspca_sn9c20x 7-1:3.188: probe with driver gspca_sn9c20x failed with error -71 [ 1606.309923][ T5870] usb 7-1: USB disconnect, device number 5 [ 1610.360041][T20380] netlink: 'syz.8.3485': attribute type 29 has an invalid length. [ 1610.371640][T20380] netlink: 'syz.8.3485': attribute type 29 has an invalid length. [ 1615.596025][T20444] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 1616.440347][T20444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1616.499748][T12206] Bluetooth: Wrong link type (-22) [ 1616.703003][T20450] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1616.757371][T20450] bond1: (slave batadv1): making interface the new active one [ 1616.766920][T20450] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1616.782233][T20447] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1616.808576][T20447] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 1617.253295][T20452] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1617.280102][T20452] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 1617.973460][T20476] fuse: Bad value for 'fd' [ 1620.234333][T20497] hub 9-0:1.0: USB hub found [ 1620.252271][T20497] hub 9-0:1.0: 1 port detected [ 1620.485439][T20496] ptrace attach of "./syz-executor exec"[12977] was attempted by "./syz-executor exec"[20496] [ 1627.667404][T20561] openvswitch: netlink: Flow actions attr not present in new flow. [ 1628.257065][T18504] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1628.547651][T18504] usb 3-1: Using ep0 maxpacket: 32 [ 1628.796426][T18504] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.042957][T18504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.064852][T18504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.075505][T18504] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1629.089258][T18504] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1629.098713][T18504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.977205][T18504] usb 3-1: config 0 descriptor?? [ 1629.982973][T18504] usb 3-1: can't set config #0, error -71 [ 1629.990836][T18504] usb 3-1: USB disconnect, device number 53 [ 1630.945040][T20606] openvswitch: netlink: Flow actions attr not present in new flow. [ 1632.366769][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3562'. [ 1633.192521][T12296] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1633.566186][T12296] usb 5-1: Using ep0 maxpacket: 32 [ 1633.591728][T12296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.620300][T12296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.631343][T12296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1633.641176][T12296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1633.655474][T12296] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1633.669075][T12296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.697018][T12296] usb 5-1: config 0 descriptor?? [ 1634.525783][T12296] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 1634.543219][T12296] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 1634.550599][T12296] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 1634.557759][T12296] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 1634.564813][T12296] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 1635.116140][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1635.353912][T12296] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 1635.371947][T12296] usb 5-1: USB disconnect, device number 40 [ 1636.206057][T12296] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1636.368408][T12296] usb 5-1: Using ep0 maxpacket: 32 [ 1636.383553][T12296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.402169][T12296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.418483][T12296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.438286][T12296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1636.468684][T12296] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1636.488301][T12296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.509779][T12296] usb 5-1: config 0 descriptor?? [ 1636.707486][ T30] audit: type=1326 audit(1733977813.353:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1636.729041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.741209][ T30] audit: type=1326 audit(1733977813.383:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1636.762715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.822041][ T30] audit: type=1326 audit(1733977813.383:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1636.843601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.857380][T20692] netlink: 'syz.9.3587': attribute type 4 has an invalid length. [ 1636.873124][ T30] audit: type=1326 audit(1733977813.443:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1636.894650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.901584][ T30] audit: type=1326 audit(1733977813.443:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1636.944863][T12296] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1636.952558][T12296] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1636.960923][T12296] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1636.971916][T12296] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1636.979793][T12296] ntrig 0003:1B96:000A.0004: unknown main item tag 0x0 [ 1636.996466][T12296] ntrig 0003:1B96:000A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 1637.016077][ T30] audit: type=1326 audit(1733977813.453:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1637.066045][ T30] audit: type=1326 audit(1733977813.453:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1637.109180][ T30] audit: type=1326 audit(1733977813.453:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1637.130987][ T30] audit: type=1326 audit(1733977813.453:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1637.152662][ T30] audit: type=1326 audit(1733977813.453:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20691 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1637.165311][T12296] usb 5-1: USB disconnect, device number 41 [ 1640.497614][T17001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.792592][T17001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.927265][T12267] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1641.373552][T17001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.856089][T12267] usb 5-1: Using ep0 maxpacket: 32 [ 1641.943095][T12267] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.991325][T12267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.002499][T12267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.012568][T12267] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1642.025659][T12267] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1642.035148][T12267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.097970][T17001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.116684][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1642.128158][T12267] usb 5-1: config 0 descriptor?? [ 1642.139408][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1642.182005][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1642.228267][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1642.237139][ T5823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1642.244876][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1642.540419][T17001] bridge_slave_1: left allmulticast mode [ 1642.546265][T17001] bridge_slave_1: left promiscuous mode [ 1642.552177][T17001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.562677][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 1642.562697][ T30] audit: type=1326 audit(1733977819.183:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1642.591719][ T30] audit: type=1326 audit(1733977819.183:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1642.661691][ T30] audit: type=1326 audit(1733977819.303:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1642.695313][T17001] bridge_slave_0: left allmulticast mode [ 1642.703207][T17001] bridge_slave_0: left promiscuous mode [ 1642.719395][T17001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.756428][ T30] audit: type=1326 audit(1733977819.303:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1642.758859][T12267] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 1642.785830][T12267] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 1642.793454][T12267] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 1642.800626][T12267] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 1642.808330][T12267] ntrig 0003:1B96:000A.0005: unknown main item tag 0x0 [ 1642.818530][T12267] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 1642.846021][ T30] audit: type=1326 audit(1733977819.303:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1642.974012][ T30] audit: type=1326 audit(1733977819.303:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1643.218779][T12267] usb 5-1: USB disconnect, device number 42 [ 1643.509922][ T30] audit: type=1326 audit(1733977819.303:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1643.585196][ T30] audit: type=1326 audit(1733977819.303:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1643.608883][ T30] audit: type=1326 audit(1733977819.323:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1643.636889][ T30] audit: type=1326 audit(1733977819.323:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20759 comm="syz.9.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36497ff19 code=0x7ffc0000 [ 1643.701955][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3619'. [ 1644.074179][T20779] program syz.8.3622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1644.414257][T12206] Bluetooth: hci2: command tx timeout [ 1644.517234][T17001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1644.560503][T17001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1644.619640][T17001] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1644.647016][T17001] bond0 (unregistering): Released all slaves [ 1644.781803][T20774] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1644.792404][T20774] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1644.903674][T20749] chnl_net:caif_netlink_parms(): no params data found [ 1645.517470][T20749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.558633][T20749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.608313][T20749] bridge_slave_0: entered allmulticast mode [ 1645.996171][T20749] bridge_slave_0: entered promiscuous mode [ 1646.199495][T20749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.241921][T20749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.278936][T20749] bridge_slave_1: entered allmulticast mode [ 1646.303359][T20749] bridge_slave_1: entered promiscuous mode [ 1646.437455][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3642'. [ 1646.491174][T12206] Bluetooth: hci2: command tx timeout [ 1646.559761][T20833] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1646.589104][T20749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1646.606194][T20833] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1646.629542][T20749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1646.700823][T17001] hsr_slave_0: left promiscuous mode [ 1646.723355][T17001] hsr_slave_1: left promiscuous mode [ 1646.732109][T17001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1646.746747][T17001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1646.767110][T17001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1646.774601][T17001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1646.932286][T17001] veth1_macvtap: left promiscuous mode [ 1646.938085][T17001] veth0_macvtap: left promiscuous mode [ 1646.943799][T17001] veth1_vlan: left promiscuous mode [ 1646.949948][T17001] veth0_vlan: left promiscuous mode [ 1648.666094][T12206] Bluetooth: hci2: command tx timeout [ 1650.727055][T12206] Bluetooth: hci2: command tx timeout [ 1651.059893][T20749] team0: Port device team_slave_0 added [ 1651.085275][T20749] team0: Port device team_slave_1 added [ 1651.314867][T20749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.510538][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.556706][T20749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.570218][T20749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.577325][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.605556][T20749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.685358][T20749] hsr_slave_0: entered promiscuous mode [ 1652.713813][T20749] hsr_slave_1: entered promiscuous mode [ 1652.736176][T20749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1652.786137][T20749] Cannot create hsr debugfs directory [ 1653.068193][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.844483][T20940] openvswitch: netlink: Flow key attr not present in new flow. [ 1654.362015][T20749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1654.457198][T20749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1654.552469][T20749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1654.656752][T20749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1654.768333][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1654.768354][ T30] audit: type=1326 audit(1733977831.413:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1654.913157][ T30] audit: type=1326 audit(1733977831.413:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1655.009698][ T30] audit: type=1326 audit(1733977831.413:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1655.041083][ T30] audit: type=1326 audit(1733977831.413:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1655.062998][ T30] audit: type=1326 audit(1733977831.413:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1655.727439][T20749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.820722][T20749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.871910][ T30] audit: type=1326 audit(1733977831.423:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1655.998830][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.006047][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.013676][ T30] audit: type=1326 audit(1733977831.423:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1656.039234][T20973] block device autoloading is deprecated and will be removed. [ 1656.086658][ T30] audit: type=1326 audit(1733977831.423:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1656.088223][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.115449][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.154065][ T30] audit: type=1326 audit(1733977831.423:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1656.234844][ T30] audit: type=1326 audit(1733977831.423:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.8.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529377ff19 code=0x7ffc0000 [ 1656.262618][T20749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1656.509230][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3699'. [ 1656.668534][T20749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.697555][T20999] ALSA: seq fatal error: cannot create timer (-16) [ 1656.991464][T20749] veth0_vlan: entered promiscuous mode [ 1657.080464][T20749] veth1_vlan: entered promiscuous mode [ 1657.150851][T20749] veth0_macvtap: entered promiscuous mode [ 1657.161604][T20749] veth1_macvtap: entered promiscuous mode [ 1657.221364][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.245998][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.276679][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.297928][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.324478][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.366076][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.397409][T20749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.419930][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.446018][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.463702][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.495947][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.505920][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.516502][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.527759][T20749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.541744][T20749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.550586][T20749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.559434][T20749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.568251][T20749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.702499][T21019] ------------[ cut here ]------------ [ 1657.708093][T21019] WARNING: CPU: 1 PID: 21019 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 1657.717660][T21019] Modules linked in: [ 1657.721603][T21019] CPU: 1 UID: 0 PID: 21019 Comm: syz.9.3711 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1657.732471][T21019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1657.742644][T21019] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 1657.748475][T21019] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 fa fc 1a f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 aa f8 1a f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 d8 fc 1a f8 85 ed 0f 8e 49 [ 1657.768215][T21019] RSP: 0018:ffffc90010027078 EFLAGS: 00010287 [ 1657.774356][T21019] RAX: ffffffff89846546 RBX: 00000000fffbffea RCX: 0000000000080000 [ 1657.782448][T21019] RDX: ffffc90012976000 RSI: 000000000002d7ec RDI: 000000000002d7ed [ 1657.790522][T21019] RBP: dffffc0000000000 R08: ffffffff89846536 R09: 1ffff1100c14995c [ 1657.798613][T21019] R10: dffffc0000000000 R11: ffffed100c14995d R12: dffffc0000000000 [ 1657.806695][T21019] R13: ffff888060a4ca00 R14: 00000000ffffffea R15: 0000000000000000 [ 1657.814727][T21019] FS: 00007fc3627f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1657.823774][T21019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1657.830463][T21019] CR2: 000000110c339cda CR3: 000000005ceb6000 CR4: 00000000003526f0 [ 1657.838542][T21019] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1657.846622][T21019] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1657.854649][T21019] Call Trace: [ 1657.858038][T21019] [ 1657.861021][T21019] ? __warn+0x165/0x4d0 [ 1657.865290][T21019] ? sk_skb_reason_drop+0x87/0x380 [ 1657.870531][T21019] ? report_bug+0x2b3/0x500 [ 1657.875106][T21019] ? sk_skb_reason_drop+0x87/0x380 [ 1657.880347][T21019] ? handle_bug+0x60/0x90 [ 1657.884752][T21019] ? exc_invalid_op+0x1a/0x50 [ 1657.889557][T21019] ? asm_exc_invalid_op+0x1a/0x20 [ 1657.894655][T21019] ? sk_skb_reason_drop+0x76/0x380 [ 1657.899873][T21019] ? sk_skb_reason_drop+0x86/0x380 [ 1657.905051][T21019] ? sk_skb_reason_drop+0x87/0x380 [ 1657.910294][T21019] ? sk_skb_reason_drop+0x86/0x380 [ 1657.915473][T21019] ? ip_rcv_finish_core+0x129f/0x1b50 [ 1657.920976][T21019] ip_rcv_finish_core+0xfde/0x1b50 [ 1657.926241][T21019] ip_sublist_rcv+0x3b1/0xab0 [ 1657.931011][T21019] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 1657.936371][T21019] ? skb_orphan+0xae/0xd0 [ 1657.940777][T21019] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1657.946017][T21019] ip_list_rcv+0x42b/0x480 [ 1657.950508][T21019] ? __pfx_ip_list_rcv+0x10/0x10 [ 1657.955521][T21019] ? __pfx_ip_list_rcv+0x10/0x10 [ 1657.960581][T21019] __netif_receive_skb_list_core+0x94e/0x980 [ 1657.966681][T21019] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1657.973347][T21019] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1657.979998][T21019] ? read_tsc+0x9/0x20 [ 1657.984140][T21019] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 1657.990592][T21019] netif_receive_skb_list_internal+0xa51/0xe30 [ 1657.996912][T21019] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 1658.003310][T21019] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1658.010104][T21019] ? __pfx_eth_type_trans+0x10/0x10 [ 1658.015444][T21019] ? __phys_addr+0xba/0x170 [ 1658.020073][T21019] ? build_skb_around+0x111/0x260 [ 1658.025166][T21019] ? __xdp_build_skb_from_frame+0x313/0x650 [ 1658.031198][T21019] netif_receive_skb_list+0x55/0x4b0 [ 1658.036790][T21019] bpf_test_run_xdp_live+0x1b9f/0x21f0 [ 1658.042398][T21019] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 1658.048564][T21019] ? bpf_test_run_xdp_live+0x5d6/0x21f0 [ 1658.054181][T21019] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1658.060108][T21019] ? synchronize_rcu+0x11b/0x360 [ 1658.065121][T21019] ? __pfx_synchronize_rcu+0x10/0x10 [ 1658.070579][T21019] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 1658.076971][T21019] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1658.082951][T21019] ? _copy_from_user+0x99/0xc0 [ 1658.087846][T21019] ? bpf_test_init+0x15a/0x180 [ 1658.092677][T21019] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1658.098242][T21019] bpf_prog_test_run_xdp+0x805/0x11e0 [ 1658.103673][T21019] ? __pfx_lock_release+0x10/0x10 [ 1658.108816][T21019] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1658.114681][T21019] ? __fget_files+0x2a/0x410 [ 1658.119379][T21019] ? __fget_files+0x2a/0x410 [ 1658.124039][T21019] ? fput+0x21b/0x290 [ 1658.128148][T21019] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1658.134025][T21019] bpf_prog_test_run+0x2e4/0x360 [ 1658.139085][T21019] __sys_bpf+0x48d/0x810 [ 1658.143393][T21019] ? __pfx___sys_bpf+0x10/0x10 [ 1658.148289][T21019] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1658.154342][T21019] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1658.160785][T21019] ? do_syscall_64+0x100/0x230 [ 1658.165624][T21019] __x64_sys_bpf+0x7c/0x90 [ 1658.170164][T21019] do_syscall_64+0xf3/0x230 [ 1658.174737][T21019] ? clear_bhb_loop+0x35/0x90 [ 1658.179552][T21019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.185519][T21019] RIP: 0033:0x7fc36497ff19 [ 1658.190042][T21019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1658.209853][T21019] RSP: 002b:00007fc3627f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1658.218390][T21019] RAX: ffffffffffffffda RBX: 00007fc364b46080 RCX: 00007fc36497ff19 [ 1658.226467][T21019] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1658.234494][T21019] RBP: 00007fc3649f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1658.242622][T21019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1658.250725][T21019] R13: 0000000000000000 R14: 00007fc364b46080 R15: 00007ffce158eba8 [ 1658.258837][T21019] [ 1658.261952][T21019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1658.269258][T21019] CPU: 1 UID: 0 PID: 21019 Comm: syz.9.3711 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1658.280383][T21019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1658.290452][T21019] Call Trace: [ 1658.293746][T21019] [ 1658.296691][T21019] dump_stack_lvl+0x241/0x360 [ 1658.301418][T21019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1658.306668][T21019] ? __pfx__printk+0x10/0x10 [ 1658.311289][T21019] ? vscnprintf+0x5d/0x90 [ 1658.315635][T21019] panic+0x349/0x880 [ 1658.319556][T21019] ? __warn+0x174/0x4d0 [ 1658.323820][T21019] ? __pfx_panic+0x10/0x10 [ 1658.328268][T21019] __warn+0x344/0x4d0 [ 1658.332263][T21019] ? sk_skb_reason_drop+0x87/0x380 [ 1658.337393][T21019] report_bug+0x2b3/0x500 [ 1658.341748][T21019] ? sk_skb_reason_drop+0x87/0x380 [ 1658.346880][T21019] handle_bug+0x60/0x90 [ 1658.351056][T21019] exc_invalid_op+0x1a/0x50 [ 1658.355600][T21019] asm_exc_invalid_op+0x1a/0x20 [ 1658.360484][T21019] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 1658.366235][T21019] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 fa fc 1a f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 aa f8 1a f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 d8 fc 1a f8 85 ed 0f 8e 49 [ 1658.385907][T21019] RSP: 0018:ffffc90010027078 EFLAGS: 00010287 [ 1658.392001][T21019] RAX: ffffffff89846546 RBX: 00000000fffbffea RCX: 0000000000080000 [ 1658.400341][T21019] RDX: ffffc90012976000 RSI: 000000000002d7ec RDI: 000000000002d7ed [ 1658.408328][T21019] RBP: dffffc0000000000 R08: ffffffff89846536 R09: 1ffff1100c14995c [ 1658.416361][T21019] R10: dffffc0000000000 R11: ffffed100c14995d R12: dffffc0000000000 [ 1658.424361][T21019] R13: ffff888060a4ca00 R14: 00000000ffffffea R15: 0000000000000000 [ 1658.432389][T21019] ? sk_skb_reason_drop+0x76/0x380 [ 1658.437520][T21019] ? sk_skb_reason_drop+0x86/0x380 [ 1658.442652][T21019] ? sk_skb_reason_drop+0x86/0x380 [ 1658.447774][T21019] ? ip_rcv_finish_core+0x129f/0x1b50 [ 1658.453168][T21019] ip_rcv_finish_core+0xfde/0x1b50 [ 1658.458341][T21019] ip_sublist_rcv+0x3b1/0xab0 [ 1658.463070][T21019] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 1658.468321][T21019] ? skb_orphan+0xae/0xd0 [ 1658.472763][T21019] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1658.477904][T21019] ip_list_rcv+0x42b/0x480 [ 1658.482352][T21019] ? __pfx_ip_list_rcv+0x10/0x10 [ 1658.487313][T21019] ? __pfx_ip_list_rcv+0x10/0x10 [ 1658.492295][T21019] __netif_receive_skb_list_core+0x94e/0x980 [ 1658.498299][T21019] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1658.504907][T21019] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1658.511540][T21019] ? read_tsc+0x9/0x20 [ 1658.515631][T21019] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 1658.521980][T21019] netif_receive_skb_list_internal+0xa51/0xe30 [ 1658.528172][T21019] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 1658.534522][T21019] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1658.541215][T21019] ? __pfx_eth_type_trans+0x10/0x10 [ 1658.546435][T21019] ? __phys_addr+0xba/0x170 [ 1658.550962][T21019] ? build_skb_around+0x111/0x260 [ 1658.556001][T21019] ? __xdp_build_skb_from_frame+0x313/0x650 [ 1658.561928][T21019] netif_receive_skb_list+0x55/0x4b0 [ 1658.567256][T21019] bpf_test_run_xdp_live+0x1b9f/0x21f0 [ 1658.572734][T21019] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 1658.578669][T21019] ? bpf_test_run_xdp_live+0x5d6/0x21f0 [ 1658.584231][T21019] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1658.590048][T21019] ? synchronize_rcu+0x11b/0x360 [ 1658.595030][T21019] ? __pfx_synchronize_rcu+0x10/0x10 [ 1658.600443][T21019] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 1658.606747][T21019] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1658.612849][T21019] ? _copy_from_user+0x99/0xc0 [ 1658.617639][T21019] ? bpf_test_init+0x15a/0x180 [ 1658.622458][T21019] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1658.627936][T21019] bpf_prog_test_run_xdp+0x805/0x11e0 [ 1658.633335][T21019] ? __pfx_lock_release+0x10/0x10 [ 1658.638386][T21019] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1658.644213][T21019] ? __fget_files+0x2a/0x410 [ 1658.648830][T21019] ? __fget_files+0x2a/0x410 [ 1658.653443][T21019] ? fput+0x21b/0x290 [ 1658.657449][T21019] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1658.663275][T21019] bpf_prog_test_run+0x2e4/0x360 [ 1658.668238][T21019] __sys_bpf+0x48d/0x810 [ 1658.672499][T21019] ? __pfx___sys_bpf+0x10/0x10 [ 1658.677285][T21019] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1658.683280][T21019] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1658.689621][T21019] ? do_syscall_64+0x100/0x230 [ 1658.694408][T21019] __x64_sys_bpf+0x7c/0x90 [ 1658.698851][T21019] do_syscall_64+0xf3/0x230 [ 1658.703373][T21019] ? clear_bhb_loop+0x35/0x90 [ 1658.708075][T21019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.713988][T21019] RIP: 0033:0x7fc36497ff19 [ 1658.718506][T21019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1658.738126][T21019] RSP: 002b:00007fc3627f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1658.746556][T21019] RAX: ffffffffffffffda RBX: 00007fc364b46080 RCX: 00007fc36497ff19 [ 1658.754560][T21019] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1658.762539][T21019] RBP: 00007fc3649f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1658.770528][T21019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1658.778522][T21019] R13: 0000000000000000 R14: 00007fc364b46080 R15: 00007ffce158eba8 [ 1658.786544][T21019] [ 1658.789961][T21019] Kernel Offset: disabled [ 1658.794293][T21019] Rebooting in 86400 seconds..