last executing test programs: 28m50.977991211s ago: executing program 32 (id=167): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x3fffffffffffd17, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) getpid() openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 25m21.235047247s ago: executing program 33 (id=538): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(r0, 0xf) accept4$unix(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 22m30.713079316s ago: executing program 34 (id=845): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 15m58.334907043s ago: executing program 5 (id=1601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000003c0)="48884ca234cd083c2a1f5cec81c91b9547c12f4abadf96f767a95b76c144118ac35b7071638f3111825c1d0cd3b04dcdb4a437a9ec099c09c1691fc81300a10699e1a1a400000000000900"/84, 0xf000}, {0x0}], 0x60) r3 = socket(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0x8, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xd805}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x6b, 0x30f, 0x5, 0x2, 0x5, 0x6}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x68}}]}, 0x70}}, 0x45080) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000"]) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz1\x00', 0x4}, 0x1, 0x30000024, 0x7b, 0x0, 0x0, 0x4, 'syz1\x00', 0x0}) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000006c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 15m56.44147558s ago: executing program 5 (id=1603): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 15m53.495179398s ago: executing program 5 (id=1608): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) io_setup(0x6, &(0x7f0000001380)) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000003c0)="48884ca234cd083c2a1f5cec81c91b9547c12f4abadf96f767a95b76c144118ac35b7071638f3111825c1d0cd3b04dcdb4a437a9ec099c09c1691fc81300a10699e1a1a4000000000009000000000000000000", 0x53}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0x8, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xd805}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x6b, 0x30f, 0x5, 0x2, 0x5, 0x6}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x68}}]}, 0x70}}, 0x45080) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 15m52.859574793s ago: executing program 5 (id=1612): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f00000003c0), 0x0) 15m44.690585467s ago: executing program 5 (id=1624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x5aa, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, 0x0}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$sysctl(0xffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x24081) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) io_uring_setup(0x5f45, &(0x7f0000000440)={0x0, 0xfffffffe, 0x400, 0x1, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01ff22010000bfa90d2c0826364f080001"], 0x1c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 15m43.703204294s ago: executing program 5 (id=1627): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 15m28.42868655s ago: executing program 35 (id=1627): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8m42.534000997s ago: executing program 4 (id=2463): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) io_uring_setup(0x1, &(0x7f0000000500)={0x0, 0x0, 0x100, 0xb, 0x3d5}) io_uring_setup(0x2c49, &(0x7f0000000400)) 8m41.579764421s ago: executing program 4 (id=2466): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='1', 0x1) accept4$alg(r3, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') rename(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) 8m40.61497566s ago: executing program 4 (id=2468): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) lseek(0xffffffffffffffff, 0xc, 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000300)='R\x10suse\x00\x00\x00\x00\x00\x00\x00\'n\x00\x00\x00', 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0x8}) 8m37.68582384s ago: executing program 4 (id=2476): socket$inet6(0xa, 0x11, 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 8m36.11498852s ago: executing program 4 (id=2478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 8m35.052498022s ago: executing program 4 (id=2479): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8m20.027031998s ago: executing program 36 (id=2479): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 5m3.520655811s ago: executing program 8 (id=2899): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, &(0x7f00000001c0)) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 4m55.539966026s ago: executing program 8 (id=2912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000003c0)="48884ca234cd083c2a1f5cec81c91b9547c12f4abadf96f767a95b76c144118ac35b7071638f3111825c1d0cd3b04dcdb4a437a9ec099c09c1691fc81300a10699e1a1a400000000000900"/84, 0xf000}, {0x0}], 0x60) r3 = socket(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x45080) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000"]) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz1\x00', 0x4}, 0x1, 0x30000024, 0x7b, 0x0, 0x0, 0x4, 'syz1\x00', 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000006c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 4m53.207603348s ago: executing program 8 (id=2917): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4m50.973478629s ago: executing program 8 (id=2920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000002000000001000000220000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4m49.68131914s ago: executing program 8 (id=2924): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0xa, @rand_addr=0x64010100}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) 4m45.229520923s ago: executing program 8 (id=2931): fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x10001, 0x34324152, 0x0, 0x9, [{0xd0d}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000001979060ffb63740906194e04c1ac4e2604fe44cc646b0988229edac9fd7d57ed2328615bb787acb8f7ccc14fb37ab39053aa239a4cb17fe75f9c9194197defad42a3e137b7a8"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x11, 0x1, 0x200005b9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$btrfs_control(0xffffff9c, &(0x7f0000000600), 0x201, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m30.017460599s ago: executing program 37 (id=2931): fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x10001, 0x34324152, 0x0, 0x9, [{0xd0d}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000001979060ffb63740906194e04c1ac4e2604fe44cc646b0988229edac9fd7d57ed2328615bb787acb8f7ccc14fb37ab39053aa239a4cb17fe75f9c9194197defad42a3e137b7a8"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x11, 0x1, 0x200005b9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$btrfs_control(0xffffff9c, &(0x7f0000000600), 0x201, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m18.020419792s ago: executing program 7 (id=2992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) 4m16.992778262s ago: executing program 7 (id=2994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) 4m15.220793096s ago: executing program 7 (id=2995): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3c, &(0x7f0000002d80)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109022a00010000000009049700010dd5ce00082402010000000009"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 4m11.024700809s ago: executing program 7 (id=3001): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x73656000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='signal_generate\x00', r3}, 0xc) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x0, 0x20}) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240c0850}, 0x8000) 4m10.055522218s ago: executing program 7 (id=3002): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) io_uring_setup(0x2c49, &(0x7f0000000400)) 4m8.400928901s ago: executing program 7 (id=3005): fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x10001, 0x34324152, 0x0, 0x9, [{0xd0d}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000001979060ffb63740906194e04c1ac4e2604fe44cc646b0988229edac9fd7d57ed2328615bb787acb8f7ccc14fb37ab39053aa239a4cb17fe75f9c9194197defad42a3e137b7a8"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x11, 0x1, 0x200005b9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$btrfs_control(0xffffff9c, &(0x7f0000000600), 0x201, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3m52.469153643s ago: executing program 38 (id=3005): fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x10001, 0x34324152, 0x0, 0x9, [{0xd0d}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000001979060ffb63740906194e04c1ac4e2604fe44cc646b0988229edac9fd7d57ed2328615bb787acb8f7ccc14fb37ab39053aa239a4cb17fe75f9c9194197defad42a3e137b7a8"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x11, 0x1, 0x200005b9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$btrfs_control(0xffffff9c, &(0x7f0000000600), 0x201, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m44.301060593s ago: executing program 1 (id=3158): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000"], 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m39.954500139s ago: executing program 1 (id=3170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2m38.703448411s ago: executing program 1 (id=3173): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='7'], 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 2m36.405212507s ago: executing program 1 (id=3178): ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000040)={0xf, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) 2m31.763930394s ago: executing program 1 (id=3189): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="66b85e0000000f23d00f21f86635100000010f23f8660f38810bf3d9ed66d90266b9030800000f32dfb0f7880f01cfc6c000660f382944dd660f3881990080", 0x3f}], 0x1, 0x82, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x17, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000}, @dstype0], 0x2) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd5000ffdbdf25060000001f000180080009005500000006000100020000007d8679cf47ab24e7d886a6c3962d026f87683d8df63c7311f652e6b7411ea8988160bd7767f90d484331d52f7fd883bbc39f949a02904745494a97ea6149cb5ac9b1e7b6057d30bbcac6fba1a8809c769d9bd393bd1f471b7d544965e5a2360b459b8a7d6d3edc5ae9943e4f361436e1584714e0"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x480c0) r6 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x1000000) r10 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r10}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2m28.262880863s ago: executing program 1 (id=3197): fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x10001, 0x34324152, 0x0, 0x9, [{0xd0d}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000001979060ffb63740906194e04c1ac4e2604fe44cc646b0988229edac9fd7d57ed2328615bb787acb8f7ccc14fb37ab39053aa239a4cb17fe75f9c9194197defad42a3e137b7a8"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x11, 0x1, 0x200005b9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$btrfs_control(0xffffff9c, &(0x7f0000000600), 0x201, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m12.858193933s ago: executing program 39 (id=3197): fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x10001, 0x34324152, 0x0, 0x9, [{0xd0d}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000001979060ffb63740906194e04c1ac4e2604fe44cc646b0988229edac9fd7d57ed2328615bb787acb8f7ccc14fb37ab39053aa239a4cb17fe75f9c9194197defad42a3e137b7a8"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x11, 0x1, 0x200005b9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$btrfs_control(0xffffff9c, &(0x7f0000000600), 0x201, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m22.164497041s ago: executing program 6 (id=3336): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(0x0, r1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)={0x1e0, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb42}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x44084}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) 1m21.16618529s ago: executing program 6 (id=3339): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080000", @ANYRES32], 0x48) 1m21.023570558s ago: executing program 6 (id=3340): openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000000)="d5db83aa1d3451ccd13675a34859f629b37e1cc1d1885d9213e4128b7bdde2aa1011891b81c2c5e608e9d48f0f4a61499b8d70", 0x0}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) chdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 1m19.860659296s ago: executing program 2 (id=3344): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, 0x0, 0x0) 1m19.708562156s ago: executing program 9 (id=3345): r0 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) fcntl$setsig(r5, 0xa, 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYBLOB='\x00'/19], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) connect$inet(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1m19.570991411s ago: executing program 2 (id=3346): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, &(0x7f00000001c0)) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 1m18.610837182s ago: executing program 9 (id=3348): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) 1m16.201402047s ago: executing program 6 (id=3353): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x48, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscach']) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x1) syz_clone(0x10022000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000500)="d1bc900d8a00c336af2a52816b757b56260c0944c4f341e9c85c040cff9c5cb201188344ec2fc3fffae0c36426d9228eba2b3c8b42a11f14833b25ea6bd3247a6b565adec5c3a506f5018d06d35efdbb76355936726d1060e638d7e8038ab2e6a23d5c4e1d00d5e8e0b94a252398a320916396ce6999aa2c04557443ff35fd4f7b6a2a2c4717dd2840936d0c43556b3e98f3cb949293cae52be2488aad3b51be28d5751ffa75c3e2fd85e7044b798fe8cb4c4d14f11f4465acc5507d1e3176218958d23fff776ff00f0afb37cd50d13dbf57db8b0d743b59779a6f8008c1e0d354d666417953545575356d5618b956117d1314e5") recvmmsg(r6, &(0x7f0000004e00)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000c40)=""/158, 0x9e}, {&(0x7f0000000d00)=""/239, 0xef}, {&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f0000000300)}], 0x7, &(0x7f0000000f00)=""/242, 0xf2}, 0x23b}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001080)=""/13, 0xd}, {&(0x7f00000010c0)=""/119, 0x77}, {&(0x7f0000001140)=""/219, 0xdb}, {&(0x7f0000001240)=""/188, 0xbc}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/84, 0x54}], 0x6, &(0x7f00000023c0)=""/74, 0x4a}, 0x5}, {{&(0x7f0000002440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000024c0)=""/79, 0x4f}, {&(0x7f0000002540)=""/40, 0x28}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/88, 0x58}, {&(0x7f0000003600)=""/160, 0xa0}], 0x5}, 0x5}, {{&(0x7f0000003700)=@qipcrtr, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003880)=""/219, 0xdb}, {0x0}, {&(0x7f0000003780)=""/235, 0xeb}, {&(0x7f0000004b00)=""/149, 0x95}], 0x4, &(0x7f0000004c00)=""/65, 0x41}, 0xfffffff7}, {{&(0x7f0000004c80)=@qipcrtr, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004d00)=""/29, 0x1d}, {&(0x7f0000004d40)=""/26, 0x1a}], 0x2, &(0x7f0000004dc0)}, 0x5}], 0x5, 0x1, 0x0) 1m15.499331011s ago: executing program 9 (id=3355): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0xc, 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000300)='R\x10suse\x00\x00\x00\x00\x00\x00\x00\'n\x00\x00\x00', 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0x8}) 1m13.66104169s ago: executing program 3 (id=3360): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 1m12.930986277s ago: executing program 2 (id=3362): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x15, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/107, 0x6b, 0x2, 0x13}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0xfffffffffffffe58}}, 0x1000}], 0x0, 0x0, 0x0}) 1m12.294959535s ago: executing program 3 (id=3363): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0x142, 0xfe) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 1m12.035470977s ago: executing program 0 (id=3364): r0 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000340)='environ\x00') 1m11.161834023s ago: executing program 2 (id=3365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000000)={0xd, 0xffffffea}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r6, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r8 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}}) socket$netlink(0x10, 0x3, 0x0) 1m10.932143592s ago: executing program 3 (id=3366): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2fc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) 1m10.098607708s ago: executing program 9 (id=3367): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3ce4c34fb706d197276832381100000030003904ffffffff0000000000000000f77108cce359b66adc3b4f1a744a044dba154538546e420fdd0c56fb51c30a297756a24d2bc442effb22fdd748dfaeb67d784acf887c688fd4f178a4f6a7"], 0x3c}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0xfffffffc) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r4, &(0x7f00000025c0)={0x9, {"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", 0x1000}}, 0x1006) 1m10.031957764s ago: executing program 3 (id=3368): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, 0x0, 0x4800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r6, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1m9.936861871s ago: executing program 0 (id=3369): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) 1m9.249526254s ago: executing program 6 (id=3370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) 1m9.160928466s ago: executing program 6 (id=3371): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m9.122561145s ago: executing program 3 (id=3372): socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0xc, 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000300)='R\x10suse\x00\x00\x00\x00\x00\x00\x00\'n\x00\x00\x00', 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0x8}) 1m9.075753087s ago: executing program 2 (id=3373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) 1m9.045278762s ago: executing program 0 (id=3374): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000020c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x20004804) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x2, 0x7, 0x13) mount$9p_rdma(0x0, 0x0, 0x0, 0x3b8c039, &(0x7f0000000440)=ANY=[]) openat$mice(0xffffffffffffff9c, 0x0, 0x20000) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x80000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 1m9.032307257s ago: executing program 9 (id=3375): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x18, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff4f6b8cb35822967dfbed4e4c473c76a96716319816bc69817063a877505d05c2ef4ce0022e26566a13ab38411ffb"], 0x0) 1m7.46594208s ago: executing program 2 (id=3376): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000000)=ANY=[@ANYBLOB="800000000802110000010802110000000702110000000000000000000000000064000100000602020202020201488216ddc711000000000000000000"], 0x36) 1m6.881895404s ago: executing program 9 (id=3377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m5.800989987s ago: executing program 0 (id=3378): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) unshare(0x8000080) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1ff, 0x181800) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m4.409204458s ago: executing program 3 (id=3379): openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000000)="d5db83aa1d3451ccd13675a34859f629b37e1cc1d1885d9213e4128b7bdde2aa1011891b81c2c5", 0x0}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) chdir(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 51.652506473s ago: executing program 40 (id=3376): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000000)=ANY=[@ANYBLOB="800000000802110000010802110000000702110000000000000000000000000064000100000602020202020201488216ddc711000000000000000000"], 0x36) 51.4967577s ago: executing program 41 (id=3371): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 51.470028085s ago: executing program 0 (id=3382): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0xc, 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000300)='R\x10suse\x00\x00\x00\x00\x00\x00\x00\'n\x00\x00\x00', 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0x8}) 40.117654805s ago: executing program 42 (id=3377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d7190000001000"/84, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r3, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000000000000007000000b7000000000000009500000000000000a1032a5c190397070003d6fe8226e4a6ed3a7c7f198a7e1be1b917efe2b3fce0d44312"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 39.868680675s ago: executing program 43 (id=3379): openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000000)="d5db83aa1d3451ccd13675a34859f629b37e1cc1d1885d9213e4128b7bdde2aa1011891b81c2c5", 0x0}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) chdir(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 39.810999248s ago: executing program 0 (id=3385): fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x10001, 0x34324152, 0x0, 0x9, [{0xd0d}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000001979060ffb63740906194e04c1ac4e2604fe44cc646b0988229edac9fd7d57ed2328615bb787acb8f7ccc14fb37ab39053aa239a4cb17fe75f9c9194197defad42a3e137b7a8"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x11, 0x1, 0x200005b9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 0s ago: executing program 44 (id=3385): fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0x10001, 0x34324152, 0x0, 0x9, [{0xd0d}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000001979060ffb63740906194e04c1ac4e2604fe44cc646b0988229edac9fd7d57ed2328615bb787acb8f7ccc14fb37ab39053aa239a4cb17fe75f9c9194197defad42a3e137b7a8"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x78) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x11, 0x1, 0x200005b9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) kernel console output (not intermixed with test programs): : config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1491.413896][T17620] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1491.455884][T17620] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1491.480102][T17620] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.504389][T17620] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1491.522066][T17620] usb 10-1: invalid MIDI out EP 0 [ 1491.679153][T17620] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1492.144381][T17621] usb 10-1: USB disconnect, device number 2 [ 1495.567496][ T1861] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1495.649523][T18545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1495.856162][ T1861] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1496.178015][ T1861] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1496.300445][ T1861] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1496.919038][ T1861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.961401][T18544] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1497.012951][ T1861] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1497.489652][ T1861] usb 9-1: invalid MIDI out EP 0 [ 1498.509436][T18582] binder: 18575:18582 ioctl c0306201 200000001440 returned -11 [ 1498.509892][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 1499.449013][ T1861] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1499.635228][ T1861] usb 9-1: USB disconnect, device number 6 [ 1501.361211][T18628] openvswitch: : Dropping previously announced user features [ 1502.253988][T18641] binder: 18638:18641 ioctl c0046209 0 returned -22 [ 1507.003158][T18688] tipc: Started in network mode [ 1507.338032][T18688] tipc: Node identity 7f000001, cluster identity 4711 [ 1507.349207][T18688] tipc: Enabled bearer , priority 10 [ 1507.637714][T18688] tipc: Enabled bearer , priority 0 [ 1508.740073][ T1861] tipc: Node number set to 2130706433 [ 1509.649741][T18362] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1509.830219][T18362] usb 7-1: Using ep0 maxpacket: 16 [ 1509.891322][T18362] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1509.899374][T18362] usb 7-1: config 0 has no interface number 0 [ 1509.939578][T18362] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1509.993702][T18362] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1510.031855][T18362] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1510.051576][T18362] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1510.083540][T18362] usb 7-1: Product: syz [ 1510.109481][T18362] usb 7-1: SerialNumber: syz [ 1510.976073][T18362] usb 7-1: config 0 descriptor?? [ 1511.070427][T18362] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1511.088463][T18362] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input98 [ 1511.426500][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1511.426887][T17876] usb 7-1: USB disconnect, device number 20 [ 1511.433485][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1512.401954][T17876] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1514.437864][T18781] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2723'. [ 1515.769938][T18792] binder: 18791:18792 ioctl c0046209 0 returned -22 [ 1518.998372][T18794] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1519.353398][T18839] tipc: Enabling of bearer rejected, already enabled [ 1519.780618][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 1521.197770][ T30] audit: type=1400 audit(2000000630.610:1342): avc: denied { ioctl } for pid=18856 comm="syz.9.2738" path="socket:[80922]" dev="sockfs" ino=80922 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1521.232681][ T30] audit: type=1400 audit(2000000630.610:1343): avc: denied { connect } for pid=18856 comm="syz.9.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1521.462442][T17621] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1521.486217][T17621] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1521.967561][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2740'. [ 1522.068176][T18863] fido_id[18863]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1524.079705][ T30] audit: type=1800 audit(2000000633.480:1344): pid=18880 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2743" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1524.724568][T18895] tipc: Enabling of bearer rejected, failed to enable media [ 1524.740476][T18895] tipc: Enabling of bearer rejected, already enabled [ 1526.740891][T18913] openvswitch: : Dropping previously announced user features [ 1532.500060][ T9742] Bluetooth: hci5: command 0x0406 tx timeout [ 1534.493101][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2767'. [ 1536.796131][T18994] tipc: Enabling of bearer rejected, failed to enable media [ 1536.820289][T18994] tipc: Enabling of bearer rejected, already enabled [ 1539.059592][T19016] random: crng reseeded on system resumption [ 1540.275916][T19024] blktrace: Concurrent blktraces are not allowed on loop12 [ 1543.210645][T19047] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 1544.558445][T19066] random: crng reseeded on system resumption [ 1545.719133][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.726755][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.852747][ T30] audit: type=1800 audit(2000000655.260:1345): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2793" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1547.962810][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 1550.245885][T19111] trusted_key: encrypted_key: insufficient parameters specified [ 1550.345815][T19120] trusted_key: encrypted_key: insufficient parameters specified [ 1550.421032][T19119] random: crng reseeded on system resumption [ 1553.128885][ T30] audit: type=1400 audit(2000000662.540:1346): avc: denied { setopt } for pid=19135 comm="syz.6.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1553.889122][T19138] xt_CT: No such helper "snmp" [ 1554.198780][ T30] audit: type=1400 audit(2000000662.640:1347): avc: denied { write } for pid=19135 comm="syz.6.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1554.239797][ T30] audit: type=1400 audit(2000000662.640:1348): avc: denied { connect } for pid=19135 comm="syz.6.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1554.710976][T19137] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1554.719754][T19137] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.062345][T19137] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1555.169655][T17621] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1555.352079][T17621] usb 1-1: Using ep0 maxpacket: 32 [ 1555.359229][T17621] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1555.367698][T17621] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1555.438429][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2810'. [ 1555.789349][T17621] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1555.800722][T17621] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1555.829746][T17621] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1555.857910][T17621] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1555.868300][T17621] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1556.560189][T17621] usb 1-1: Product: syz [ 1556.565355][T17621] usb 1-1: Manufacturer: syz [ 1556.650562][T17621] usb 1-1: SerialNumber: syz [ 1557.249256][T17621] usb 1-1: config 0 descriptor?? [ 1557.256790][T17621] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1557.436611][T17621] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1557.593986][T19169] random: crng reseeded on system resumption [ 1558.774650][T17876] usb 1-1: USB disconnect, device number 20 [ 1559.694820][T17876] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1562.108880][T19207] input: syz0 as /devices/virtual/input/input99 [ 1563.668862][T19215] random: crng reseeded on system resumption [ 1566.996623][T19254] random: crng reseeded on system resumption [ 1568.520492][ T6811] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.602998][T19268] input: syz0 as /devices/virtual/input/input100 [ 1569.816900][ T6811] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.875421][ T9742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1569.909257][ T9742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1569.923173][ T9742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1569.937843][ T9742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1569.945464][ T9742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1570.026517][ T6811] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.406702][ T6811] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.020116][ T5817] Bluetooth: hci0: command tx timeout [ 1572.972361][ T30] audit: type=1800 audit(2000000681.970:1349): pid=19305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2849" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1573.705478][T19269] chnl_net:caif_netlink_parms(): no params data found [ 1573.724601][ T6811] bridge_slave_1: left allmulticast mode [ 1573.753773][ T6811] bridge_slave_1: left promiscuous mode [ 1573.778690][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.100266][ T5817] Bluetooth: hci0: command tx timeout [ 1574.181359][ T6811] bridge_slave_0: left allmulticast mode [ 1574.187052][ T6811] bridge_slave_0: left promiscuous mode [ 1574.193447][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.594952][T17678] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1575.604235][T17678] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1575.672626][T19331] fido_id[19331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1575.807572][ T6811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1575.820895][ T6811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1575.832951][ T6811] bond0 (unregistering): Released all slaves [ 1575.940533][ T6811] : left promiscuous mode [ 1576.105171][ T6811] tipc: Disabling bearer [ 1576.115208][ T6811] tipc: Disabling bearer [ 1576.125286][ T6811] tipc: Left network mode [ 1576.125401][T19269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.177607][T19269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.184903][ T5817] Bluetooth: hci0: command tx timeout [ 1576.207551][T19269] bridge_slave_0: entered allmulticast mode [ 1576.237768][T19269] bridge_slave_0: entered promiscuous mode [ 1576.247299][T19269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.254657][T19269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.262089][T19269] bridge_slave_1: entered allmulticast mode [ 1576.269548][T19269] bridge_slave_1: entered promiscuous mode [ 1576.437386][T19269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.474612][T19269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.859173][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2856'. [ 1577.870757][T19269] team0: Port device team_slave_0 added [ 1577.996740][T19363] input: syz0 as /devices/virtual/input/input101 [ 1578.061246][T19269] team0: Port device team_slave_1 added [ 1578.260285][ T5817] Bluetooth: hci0: command tx timeout [ 1579.427596][T19370] xt_CT: No such helper "snmp" [ 1579.627897][T19369] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1579.638953][T19369] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.666534][T19369] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1579.889445][T19269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.908951][T19269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.955563][T19269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.073973][T19269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1580.104864][T19269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.142443][T19378] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1580.158505][T19378] IPv6: NLM_F_CREATE should be specified when creating new route [ 1580.199735][T19269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.480043][T18362] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1581.576746][T19396] openvswitch: : Dropping previously announced user features [ 1581.686497][T19269] hsr_slave_0: entered promiscuous mode [ 1581.715574][T19269] hsr_slave_1: entered promiscuous mode [ 1581.885240][T18362] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1581.901193][ T6811] hsr_slave_0: left promiscuous mode [ 1581.923525][ T6811] hsr_slave_1: left promiscuous mode [ 1581.929453][T18362] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1582.070161][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.077916][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.092459][T19407] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2865'. [ 1582.477052][T18362] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1582.486319][T18362] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.528821][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1582.535547][T19392] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1582.566049][T18362] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1582.567446][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.653855][ T6811] veth1_macvtap: left promiscuous mode [ 1582.686750][ T6811] veth0_macvtap: left promiscuous mode [ 1582.725014][ T6811] veth1_vlan: left promiscuous mode [ 1582.753948][ T6811] veth0_vlan: left promiscuous mode [ 1582.954246][ T6815] usb 7-1: USB disconnect, device number 21 [ 1583.561970][T19416] 9p: Unknown Cache mode or invalid value fscach [ 1584.739101][ T6811] team0 (unregistering): Port device team_slave_1 removed [ 1585.354684][ T6811] team0 (unregistering): Port device team_slave_0 removed [ 1590.630095][ T6811] IPVS: stop unused estimator thread 0... [ 1591.496088][T19472] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1591.502825][T19472] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.528914][T19472] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1591.802885][T19474] xt_CT: No such helper "snmp" [ 1592.648789][T19269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1592.683515][T19269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1592.785266][T19269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1592.836201][T19269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1593.026389][T19269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.108980][T19269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.173257][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.180407][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.263194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.270368][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.088269][ T30] audit: type=1400 audit(2000000704.430:1350): avc: denied { read } for pid=19524 comm="syz.7.2883" path="socket:[84635]" dev="sockfs" ino=84635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1595.803478][T19269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.064344][T19269] veth0_vlan: entered promiscuous mode [ 1596.104031][T19269] veth1_vlan: entered promiscuous mode [ 1596.299139][T19269] veth0_macvtap: entered promiscuous mode [ 1596.308457][T19269] veth1_macvtap: entered promiscuous mode [ 1596.343715][T19269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.382353][T19269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.404060][ T30] audit: type=1400 audit(2000000705.820:1351): avc: denied { ioctl } for pid=19538 comm="syz.8.2886" path="socket:[84668]" dev="sockfs" ino=84668 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1596.459224][ T30] audit: type=1400 audit(2000000705.860:1352): avc: denied { write } for pid=19538 comm="syz.8.2886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1596.491902][T19269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.514087][ T30] audit: type=1400 audit(2000000705.860:1353): avc: denied { read } for pid=19538 comm="syz.8.2886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1596.517154][T19269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.576158][ T30] audit: type=1400 audit(2000000705.920:1354): avc: denied { ioctl } for pid=19538 comm="syz.8.2886" path="socket:[84669]" dev="sockfs" ino=84669 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1596.612591][T19269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.658697][T19548] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1596.669467][T19548] IPv6: NLM_F_CREATE should be specified when creating new route [ 1596.724822][T19269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.989255][T13818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.065403][T13818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.914671][ T6811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.056318][ T6811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.178948][T19584] binder: 19577:19584 ioctl c0306201 200000001440 returned -11 [ 1600.641988][ T30] audit: type=1800 audit(2000000710.010:1355): pid=19587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2892" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1600.674115][T19589] overlayfs: missing 'workdir' [ 1600.857351][T19596] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1600.864334][T19596] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1600.907575][T19596] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1601.606864][T19596] xt_CT: No such helper "snmp" [ 1604.609576][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2901'. [ 1607.215974][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.227814][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.544512][T19685] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 1611.123997][T19697] input: syz0 as /devices/virtual/input/input102 [ 1613.414056][T19717] trusted_key: encrypted_key: insufficient parameters specified [ 1614.066615][T19718] trusted_key: encrypted_key: insufficient parameters specified [ 1615.531336][T19735] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1616.825487][T19752] random: crng reseeded on system resumption [ 1617.839568][T19761] binder: 19760:19761 ioctl c0046209 0 returned -22 [ 1619.237619][T19785] trusted_key: encrypted_key: insufficient parameters specified [ 1619.269019][T19785] trusted_key: encrypted_key: insufficient parameters specified [ 1619.343709][T19787] openvswitch: : Dropping previously announced user features [ 1621.719995][ T30] audit: type=1400 audit(2000000731.020:1356): avc: denied { write } for pid=19797 comm="syz.8.2931" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1621.795768][T19803] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1622.554837][T19811] overlayfs: missing 'lowerdir' [ 1625.284450][T19837] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2942'. [ 1626.285109][T19843] "syz.0.2943" (19843) uses obsolete ecb(arc4) skcipher [ 1626.306583][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 1626.911181][T19840] netlink: 'syz.7.2944': attribute type 4 has an invalid length. [ 1626.929411][T19840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1627.487922][T19850] binder: 19848:19850 ioctl c0306201 200000001440 returned -11 [ 1627.798517][T19860] openvswitch: : Dropping previously announced user features [ 1628.828001][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2951'. [ 1630.953806][T19870] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.761990][T19870] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.860462][T19870] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.335886][T19870] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.422835][T19870] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.435139][T19870] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.448143][T19870] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.460643][T19870] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.879523][T19879] overlayfs: missing 'lowerdir' [ 1634.121119][T19883] warning: `syz.9.2955' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1634.388889][T19895] input: syz0 as /devices/virtual/input/input103 [ 1636.195368][ T30] audit: type=1400 audit(2000000745.610:1357): avc: denied { ioctl } for pid=19902 comm="syz.9.2960" path="socket:[85729]" dev="sockfs" ino=85729 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1637.141365][T19908] tipc: Enabling of bearer rejected, failed to enable media [ 1638.070526][ T9742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1638.090509][ T9742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1638.099841][ T9742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1638.107712][ T9742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1638.115474][ T9742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1638.120741][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1638.595822][T19801] Set syz1 is full, maxelem 65536 reached [ 1639.047621][T19919] Bluetooth: MGMT ver 1.23 [ 1639.144959][T19921] chnl_net:caif_netlink_parms(): no params data found [ 1640.886916][ T9742] Bluetooth: hci1: command tx timeout [ 1641.024039][T19921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.068624][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2972'. [ 1641.182228][T19921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.261151][T19921] bridge_slave_0: entered allmulticast mode [ 1641.283119][T19921] bridge_slave_0: entered promiscuous mode [ 1641.300784][T19921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.340155][T19921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.381139][T19921] bridge_slave_1: entered allmulticast mode [ 1641.391524][T19921] bridge_slave_1: entered promiscuous mode [ 1641.733207][T19921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.851896][ T30] audit: type=1400 audit(2000000751.270:1358): avc: denied { unmount } for pid=8579 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1641.874364][T19962] tipc: Started in network mode [ 1641.916452][T19962] tipc: Node identity 7f000001, cluster identity 4711 [ 1641.936753][T19962] tipc: Enabled bearer , priority 10 [ 1641.952215][T19921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.048417][T19968] input: syz0 as /devices/virtual/input/input104 [ 1642.493378][T19921] team0: Port device team_slave_0 added [ 1642.503463][T19921] team0: Port device team_slave_1 added [ 1642.822633][T19921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.858187][T19921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.900106][ T9742] Bluetooth: hci1: command tx timeout [ 1642.930198][T17876] tipc: Node number set to 2130706433 [ 1643.046067][T19921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.131015][T19921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.137981][T19921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1643.316949][T19921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.384021][T19921] hsr_slave_0: entered promiscuous mode [ 1643.394831][T19921] hsr_slave_1: entered promiscuous mode [ 1643.407597][T19921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1643.423669][T19921] Cannot create hsr debugfs directory [ 1644.222308][T19978] tipc: Enabled bearer , priority 0 [ 1645.161623][ T9742] Bluetooth: hci1: command tx timeout [ 1646.492390][T20006] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 1647.830189][ T9742] Bluetooth: hci1: command tx timeout [ 1651.181843][T20043] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.299879][T20043] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.418647][ T30] audit: type=1400 audit(2000000760.830:1359): avc: denied { create } for pid=20054 comm="syz.7.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1651.454994][T20043] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.560486][T20043] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.587370][T19921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1651.608931][T19921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1651.635191][T20043] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.647965][T20043] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.664513][T20043] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.677216][T20043] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.737173][T19921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1651.790410][T18362] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1651.853589][T19921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1651.954059][T18362] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1651.979795][T18362] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1652.020802][T18362] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1652.080108][T18362] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.141149][T20053] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1652.156185][T18362] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1652.407530][T19921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.499290][T19921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1652.738782][T19373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.745935][T19373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.771841][T13818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.778974][T13818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.928184][T18362] usb 10-1: USB disconnect, device number 3 [ 1654.761721][T19921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1654.798495][T19921] veth0_vlan: entered promiscuous mode [ 1654.831307][T19921] veth1_vlan: entered promiscuous mode [ 1655.489380][T19921] veth0_macvtap: entered promiscuous mode [ 1655.499710][T19921] veth1_macvtap: entered promiscuous mode [ 1655.816329][T19921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.204269][T19921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.261572][T19921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.325346][T19921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.347125][T19921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.370069][T19921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.903429][T19373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.991044][T19373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.007544][T20072] syz.6.2998 (20072): drop_caches: 2 [ 1658.309305][T13818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.571250][T13818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.430122][T20165] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1661.797513][T20161] tipc: Started in network mode [ 1661.802430][T20161] tipc: Node identity 7f000001, cluster identity 4711 [ 1661.809521][T20161] tipc: Enabled bearer , priority 10 [ 1661.827237][T20161] tipc: Enabled bearer , priority 0 [ 1662.679532][T20176] afs: Unknown parameter '' [ 1662.930046][T17678] tipc: Node number set to 2130706433 [ 1664.575867][T20188] "syz.1.3016" (20188) uses obsolete ecb(arc4) skcipher [ 1664.585790][T20188] 9pnet_virtio: no channels available for device syz [ 1664.593238][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'. [ 1665.649279][T20198] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3018'. [ 1668.630234][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.644962][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.554373][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 1672.196364][T20271] "syz.0.3030" (20271) uses obsolete ecb(arc4) skcipher [ 1672.206477][T20271] 9pnet_virtio: no channels available for device syz [ 1672.216549][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 1673.647937][T20278] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.3032'. [ 1676.282588][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1676.302040][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1676.310448][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1676.318050][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1676.326708][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1676.428600][T20128] Set syz1 is full, maxelem 65536 reached [ 1677.514183][T20329] random: crng reseeded on system resumption [ 1678.476737][ T9742] Bluetooth: hci2: command tx timeout [ 1678.957588][ T6811] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.072878][T20308] chnl_net:caif_netlink_parms(): no params data found [ 1679.158700][ T6811] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.986630][ T6811] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.211149][T20356] afs: Unknown parameter '' [ 1681.136706][ T5817] Bluetooth: hci2: command tx timeout [ 1681.910715][ T6811] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.965955][T20367] "syz.6.3047" (20367) uses obsolete ecb(arc4) skcipher [ 1681.988372][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3047'. [ 1683.429374][ T9742] Bluetooth: hci2: command tx timeout [ 1684.979012][T20308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.470154][ T9742] Bluetooth: hci2: command tx timeout [ 1685.519331][T20308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.528573][T20308] bridge_slave_0: entered allmulticast mode [ 1685.540035][T20308] bridge_slave_0: entered promiscuous mode [ 1685.551553][T20308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.579369][T20308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.625918][T20308] bridge_slave_1: entered allmulticast mode [ 1685.735380][T20308] bridge_slave_1: entered promiscuous mode [ 1686.028540][T20308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.146563][T20308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.239382][T20407] 9p: Unknown Cache mode or invalid value fscach [ 1687.029466][T20308] team0: Port device team_slave_0 added [ 1687.039504][T20308] team0: Port device team_slave_1 added [ 1687.706708][T20308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.717089][T20308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.980020][T20308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.355212][T20308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.550144][T20308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.748375][T20308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.774722][T20440] binder: 20439:20440 ioctl c0046209 0 returned -22 [ 1688.791758][ T6811] bridge_slave_1: left allmulticast mode [ 1688.825671][ T6811] bridge_slave_1: left promiscuous mode [ 1688.859551][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.460949][ T6811] bridge_slave_0: left allmulticast mode [ 1689.466617][ T6811] bridge_slave_0: left promiscuous mode [ 1689.510039][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.865453][ T6811] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1690.789217][ T6811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.803312][ T6811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.817338][ T6811] bond0 (unregistering): Released all slaves [ 1690.841042][ T30] audit: type=1800 audit(2000000800.250:1360): pid=20469 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3059" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1691.163718][ T6811] : left promiscuous mode [ 1691.322481][T20308] hsr_slave_0: entered promiscuous mode [ 1691.934390][T20481] random: crng reseeded on system resumption [ 1692.370638][T20308] hsr_slave_1: entered promiscuous mode [ 1692.376719][T20308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1692.384312][T20308] Cannot create hsr debugfs directory [ 1692.475772][ T6811] tipc: Disabling bearer [ 1692.481115][ T6811] tipc: Disabling bearer [ 1692.851134][ T6811] tipc: Left network mode [ 1696.265389][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 1697.568230][ T6811] hsr_slave_0: left promiscuous mode [ 1697.635910][ T6811] hsr_slave_1: left promiscuous mode [ 1697.644661][T17619] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1697.682798][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1697.714322][T17619] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1697.724475][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1697.877806][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1697.990850][T20570] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.994916][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1697.996916][T20570] binder: 20551:20570 ioctl 4018620d 200000000040 returned -16 [ 1698.059128][T20568] fido_id[20568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1698.132741][ T6811] veth1_macvtap: left promiscuous mode [ 1698.182538][ T6811] veth0_macvtap: left promiscuous mode [ 1698.238133][ T6811] veth1_vlan: left promiscuous mode [ 1698.245478][ T6811] veth0_vlan: left promiscuous mode [ 1702.436710][ T6811] team0 (unregistering): Port device team_slave_1 removed [ 1702.523791][ T6811] team0 (unregistering): Port device team_slave_0 removed [ 1702.974087][T17619] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1703.168666][T17619] usb 2-1: Using ep0 maxpacket: 8 [ 1703.203042][T17619] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1703.211385][T17619] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.225926][T17619] usb 2-1: config 0 has no interface number 0 [ 1703.232329][T17619] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1703.266589][T17619] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1703.279978][T17619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.290278][T17619] usb 2-1: Product: syz [ 1703.295517][T17619] usb 2-1: Manufacturer: syz [ 1703.309978][T17619] usb 2-1: SerialNumber: syz [ 1703.316848][T17619] usb 2-1: config 0 descriptor?? [ 1703.327254][T17619] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1703.361387][T17619] snd-usb-audio 2-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 1703.414362][T20594] tipc: Enabling of bearer rejected, already enabled [ 1703.418960][T20486] udevd[20486]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1703.582086][ T9742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1703.592182][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: kworker/u9:0 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 1703.592208][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1703.592220][ T9742] Workqueue: hci1 hci_rx_work [ 1703.592253][ T9742] Call Trace: [ 1703.592259][ T9742] [ 1703.592265][ T9742] dump_stack_lvl+0x16c/0x1f0 [ 1703.592295][ T9742] sysfs_warn_dup+0x7f/0xa0 [ 1703.592322][ T9742] sysfs_create_dir_ns+0x24b/0x2b0 [ 1703.592348][ T9742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1703.592371][ T9742] ? find_held_lock+0x2b/0x80 [ 1703.592398][ T9742] ? do_raw_spin_unlock+0x172/0x230 [ 1703.592420][ T9742] kobject_add_internal+0x2c4/0x9b0 [ 1703.592454][ T9742] kobject_add+0x16e/0x240 [ 1703.592469][ T9742] ? __pfx_kobject_add+0x10/0x10 [ 1703.592487][ T9742] ? do_raw_spin_unlock+0x172/0x230 [ 1703.592514][ T9742] ? kobject_put+0xab/0x5a0 [ 1703.592550][ T9742] device_add+0x288/0x1a70 [ 1703.592579][ T9742] ? __pfx_dev_set_name+0x10/0x10 [ 1703.592599][ T9742] ? __pfx_device_add+0x10/0x10 [ 1703.592630][ T9742] ? mgmt_send_event_skb+0x2fb/0x460 [ 1703.592663][ T9742] hci_conn_add_sysfs+0x17e/0x230 [ 1703.592693][ T9742] le_conn_complete_evt+0x1075/0x1d70 [ 1703.592722][ T9742] ? rcu_is_watching+0x12/0xc0 [ 1703.592746][ T9742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1703.592770][ T9742] ? hci_event_packet+0x459/0x11c0 [ 1703.592803][ T9742] hci_le_conn_complete_evt+0x23c/0x370 [ 1703.592835][ T9742] hci_le_meta_evt+0x357/0x5e0 [ 1703.592862][ T9742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1703.592891][ T9742] hci_event_packet+0x682/0x11c0 [ 1703.592917][ T9742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1703.592945][ T9742] ? __pfx_hci_event_packet+0x10/0x10 [ 1703.592973][ T9742] ? kcov_remote_start+0x3c9/0x6d0 [ 1703.592993][ T9742] ? lockdep_hardirqs_on+0x7c/0x110 [ 1703.593024][ T9742] hci_rx_work+0x2c5/0x16b0 [ 1703.593052][ T9742] ? rcu_is_watching+0x12/0xc0 [ 1703.593077][ T9742] process_one_work+0x9cc/0x1b70 [ 1703.593106][ T9742] ? __pfx_process_one_work+0x10/0x10 [ 1703.593132][ T9742] ? assign_work+0x1a0/0x250 [ 1703.593163][ T9742] worker_thread+0x6c8/0xf10 [ 1703.593193][ T9742] ? __pfx_worker_thread+0x10/0x10 [ 1703.593211][ T9742] kthread+0x3c2/0x780 [ 1703.593227][ T9742] ? __pfx_kthread+0x10/0x10 [ 1703.593245][ T9742] ? rcu_is_watching+0x12/0xc0 [ 1703.593265][ T9742] ? __pfx_kthread+0x10/0x10 [ 1703.593282][ T9742] ret_from_fork+0x5d4/0x6f0 [ 1703.593306][ T9742] ? __pfx_kthread+0x10/0x10 [ 1703.593323][ T9742] ret_from_fork_asm+0x1a/0x30 [ 1703.593355][ T9742] [ 1703.593376][ T9742] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1703.853150][ T9742] Bluetooth: hci1: failed to register connection device [ 1703.896563][T20308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1703.947940][T20308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1704.020118][T10824] usb 2-1: USB disconnect, device number 4 [ 1704.032012][T20308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1704.056519][T20308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1704.799129][T20308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.825793][T20308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.826760][ T6811] IPVS: stop unused estimator thread 0... [ 1704.854536][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.861610][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.915258][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.922335][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.013741][T20308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1705.684843][T20641] openvswitch: : Dropping previously announced user features [ 1705.940181][ T9742] Bluetooth: hci1: command tx timeout [ 1706.828689][T20658] "syz.9.3092" (20658) uses obsolete ecb(arc4) skcipher [ 1707.271410][T20660] "syz.6.3091" (20660) uses obsolete ecb(arc4) skcipher [ 1707.674576][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3091'. [ 1708.926862][T20308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1709.213443][T20308] veth0_vlan: entered promiscuous mode [ 1709.245601][T20308] veth1_vlan: entered promiscuous mode [ 1709.856630][T20683] tipc: Enabling of bearer rejected, already enabled [ 1710.108976][T20308] veth0_macvtap: entered promiscuous mode [ 1710.411810][T20308] veth1_macvtap: entered promiscuous mode [ 1711.042714][T20308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1711.057847][T20308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1711.116300][T20308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.165085][T20308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.291591][T20308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.300754][T20308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.547199][ T6811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.569964][ T6811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.707930][T13818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.584625][T13818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.102901][T20726] "syz.1.3102" (20726) uses obsolete ecb(arc4) skcipher [ 1715.877031][T20749] input: syz0 as /devices/virtual/input/input105 [ 1717.845405][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1718.905400][T20784] tipc: Enabling of bearer rejected, already enabled [ 1722.229667][T20833] "syz.1.3114" (20833) uses obsolete ecb(arc4) skcipher [ 1722.629822][T20842] "syz.3.3118" (20842) uses obsolete ecb(arc4) skcipher [ 1722.652544][T20842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3118'. [ 1724.797389][T20868] : entered promiscuous mode [ 1728.499259][T20904] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1729.631841][T20886] 9p: Unknown Cache mode or invalid value fscach [ 1730.023521][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.029872][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.253666][T20918] : entered promiscuous mode [ 1731.335643][T20927] "syz.6.3135" (20927) uses obsolete ecb(arc4) skcipher [ 1731.363350][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1732.864480][T20953] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1733.101182][T20947] tipc: Started in network mode [ 1733.341103][T20947] tipc: Node identity 7f000001, cluster identity 4711 [ 1733.698013][T20947] tipc: Enabled bearer , priority 10 [ 1734.810595][T17678] tipc: Node number set to 2130706433 [ 1734.823117][T17619] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1735.042233][T17619] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1735.082437][T17619] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1735.113006][T17619] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1735.126796][T17619] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.154143][T20979] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1735.163671][T17619] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1735.417413][T17619] usb 10-1: USB disconnect, device number 4 [ 1736.227003][T21004] random: crng reseeded on system resumption [ 1738.471015][T21018] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1739.713588][T21045] input: syz0 as /devices/virtual/input/input106 [ 1740.096432][T21051] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3153'. [ 1742.484963][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3159'. [ 1743.893851][T21088] random: crng reseeded on system resumption [ 1744.834060][T21090] xt_CT: No such helper "snmp" [ 1744.911402][T21098] binder: 21097:21098 ioctl c0046209 0 returned -22 [ 1746.150862][T21115] "syz.6.3168" (21115) uses obsolete ecb(arc4) skcipher [ 1746.172243][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3168'. [ 1746.792329][T10824] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1747.812381][T10824] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1747.825963][T10824] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1747.836149][T10824] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1747.845296][T10824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.865313][T21108] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1747.882509][T10824] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1749.419015][ T6815] usb 10-1: USB disconnect, device number 5 [ 1749.570161][T17678] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1750.075129][T17678] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1750.487526][T21162] fido_id[21162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1750.705585][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'. [ 1751.195375][T21189] binder: BINDER_SET_CONTEXT_MGR already set [ 1751.201448][T21189] binder: 21153:21189 ioctl 4018620d 200000000040 returned -16 [ 1751.691968][T21191] "syz.0.3183" (21191) uses obsolete ecb(arc4) skcipher [ 1751.700700][T21191] 9pnet_virtio: no channels available for device syz [ 1751.708467][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1753.950060][T21215] binder: 21210:21215 ioctl 4018620d 0 returned -22 [ 1754.628305][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3187'. [ 1755.559264][T21224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3189'. [ 1760.881454][T21287] "syz.0.3200" (21287) uses obsolete ecb(arc4) skcipher [ 1760.900472][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1762.835383][T21286] Bluetooth: hci1: command 0x0406 tx timeout [ 1763.718802][T21318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3207'. [ 1764.105399][T21319] random: crng reseeded on system resumption [ 1765.702973][ T6815] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1765.935127][ T6815] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1765.988002][ T6815] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1766.073695][ T6815] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1766.127000][ T6815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.167348][T21332] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1766.177864][ T6815] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1766.339943][ T30] audit: type=1800 audit(2000000875.730:1361): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3210" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1766.565201][ T6815] usb 10-1: USB disconnect, device number 6 [ 1769.968645][T21372] xt_CT: No such helper "snmp" [ 1771.122286][T21387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'. [ 1771.196427][T21390] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3220'. [ 1771.485024][T21394] tipc: Enabling of bearer rejected, already enabled [ 1772.124073][T21404] kAFS: No cell specified [ 1772.615557][T21400] IPv6: NLM_F_CREATE should be specified when creating new route [ 1772.625741][T21394] tipc: Enabled bearer , priority 0 [ 1773.353063][T21420] block device autoloading is deprecated and will be removed. [ 1773.700782][T17619] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1773.992760][T17619] usb 7-1: Using ep0 maxpacket: 16 [ 1774.005463][T21277] Set syz1 is full, maxelem 65536 reached [ 1774.030161][T17619] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1774.055668][T17619] usb 7-1: config 0 has no interface number 0 [ 1774.072424][T17619] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1774.132569][T17619] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1774.221613][T17619] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1774.267090][T17619] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1774.299645][T17619] usb 7-1: Product: syz [ 1774.304402][T17619] usb 7-1: SerialNumber: syz [ 1774.337052][T17619] usb 7-1: config 0 descriptor?? [ 1774.376023][T17619] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1774.433630][T17619] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input107 [ 1774.670284][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.677822][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.684994][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.692348][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.707872][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.715016][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.722436][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.729554][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.736826][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.744347][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1774.771074][T17619] usb 7-1: USB disconnect, device number 22 [ 1774.777031][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1774.793968][T21286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1774.813689][T21286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1774.821982][T21286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1774.830154][T21286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1774.837750][T21286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1774.910547][T17619] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1775.726236][ T3537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.916812][T21453] input: syz0 as /devices/virtual/input/input108 [ 1776.777133][T21424] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1776.920035][T21286] Bluetooth: hci1: command tx timeout [ 1777.249021][ T3537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.545725][ T3537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.780562][T21286] Bluetooth: hci0: command 0x0406 tx timeout [ 1777.784514][ T3537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.457286][T21286] Bluetooth: hci1: command tx timeout [ 1779.764114][ T3537] bridge_slave_1: left allmulticast mode [ 1779.814309][ T3537] bridge_slave_1: left promiscuous mode [ 1779.876959][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.961636][ T3537] bridge_slave_0: left allmulticast mode [ 1779.967308][ T3537] bridge_slave_0: left promiscuous mode [ 1779.979656][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.540048][T21286] Bluetooth: hci1: command tx timeout [ 1782.004492][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1782.060031][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.074746][ T3537] bond0 (unregistering): Released all slaves [ 1782.137350][T21521] pim6reg: entered allmulticast mode [ 1782.156314][T21526] pim6reg: left allmulticast mode [ 1782.316888][T17619] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1782.493861][T21434] chnl_net:caif_netlink_parms(): no params data found [ 1782.532129][ T3537] : left promiscuous mode [ 1782.632573][T17619] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.708107][T17619] usb 10-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1782.741250][T17619] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.801958][T17619] usb 10-1: Product: syz [ 1782.812214][T17619] usb 10-1: Manufacturer: syz [ 1782.817861][T17619] usb 10-1: SerialNumber: syz [ 1782.831463][T17619] usb 10-1: config 0 descriptor?? [ 1782.855863][ T3537] tipc: Disabling bearer [ 1782.898705][ T3537] tipc: Disabling bearer [ 1782.929213][T17619] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1783.016048][T17619] dvb-usb: bulk message failed: -22 (3/0) [ 1783.159530][T17619] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1783.203955][T17619] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1783.243928][T17619] usb 10-1: media controller created [ 1783.285391][T17619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1783.368901][T21555] xt_CT: No such helper "snmp" [ 1783.381342][ T3537] tipc: Left network mode [ 1783.431576][T17619] dvb-usb: bulk message failed: -22 (6/0) [ 1783.504981][T17619] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1783.621523][T21286] Bluetooth: hci1: command tx timeout [ 1784.240145][T17619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input109 [ 1784.338591][T17619] dvb-usb: schedule remote query interval to 150 msecs. [ 1784.374350][T17619] dvb-usb: bulk message failed: -22 (3/0) [ 1784.410093][T17619] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1784.502422][T17619] usb 10-1: USB disconnect, device number 7 [ 1784.667222][T21434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.709540][T21434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.727889][T21434] bridge_slave_0: entered allmulticast mode [ 1784.774213][T21434] bridge_slave_0: entered promiscuous mode [ 1784.797950][T17619] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1784.927917][T21434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.945254][T21434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.953861][T21434] bridge_slave_1: entered allmulticast mode [ 1784.962546][T21434] bridge_slave_1: entered promiscuous mode [ 1785.005743][T21576] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3252'. [ 1785.166200][T21581] binder: 21580:21581 ioctl c0046209 0 returned -22 [ 1785.256082][T21434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1785.484887][T21434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.866539][T21596] openvswitch: : Dropping previously announced user features [ 1786.884498][T21434] team0: Port device team_slave_0 added [ 1786.917299][T21434] team0: Port device team_slave_1 added [ 1786.981309][T21602] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 1787.217421][ T3537] hsr_slave_0: left promiscuous mode [ 1787.387753][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3259'. [ 1787.425997][ T3537] hsr_slave_1: left promiscuous mode [ 1787.450102][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.457544][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.477127][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1787.516308][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.557522][ T3537] veth1_macvtap: left promiscuous mode [ 1787.563658][ T3537] veth0_macvtap: left promiscuous mode [ 1787.569392][ T3537] veth1_vlan: left promiscuous mode [ 1787.574812][ T3537] veth0_vlan: left promiscuous mode [ 1787.753870][T17678] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1787.923367][T17678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.969935][T17678] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1787.988047][T17678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.005363][T17678] usb 4-1: Product: syz [ 1788.015449][T17678] usb 4-1: Manufacturer: syz [ 1788.026654][T17678] usb 4-1: SerialNumber: syz [ 1788.041281][T17678] usb 4-1: config 0 descriptor?? [ 1788.057830][T17678] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1788.098631][T17678] dvb-usb: bulk message failed: -22 (3/0) [ 1788.257841][T17678] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1788.282119][T17678] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1788.293752][T17678] usb 4-1: media controller created [ 1788.310581][T17678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1788.323662][T17678] dvb-usb: bulk message failed: -22 (6/0) [ 1788.329481][T17678] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1788.818864][T17678] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input110 [ 1788.838858][T17678] dvb-usb: schedule remote query interval to 150 msecs. [ 1788.847392][T17678] dvb-usb: bulk message failed: -22 (3/0) [ 1788.872315][T17678] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1789.005825][T17678] dvb-usb: bulk message failed: -22 (1/0) [ 1789.029926][T17678] dvb-usb: error while querying for an remote control event. [ 1789.200524][T17678] dvb-usb: bulk message failed: -22 (1/0) [ 1789.206380][T17678] dvb-usb: error while querying for an remote control event. [ 1789.232846][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 1789.949580][ T1861] dvb-usb: bulk message failed: -22 (1/0) [ 1790.367382][ T1861] dvb-usb: error while querying for an remote control event. [ 1790.427757][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 1790.529956][ T1861] dvb-usb: bulk message failed: -22 (1/0) [ 1790.535717][ T1861] dvb-usb: error while querying for an remote control event. [ 1790.710443][ T1861] dvb-usb: bulk message failed: -22 (1/0) [ 1790.722278][ T1861] dvb-usb: error while querying for an remote control event. [ 1790.900182][ T1861] dvb-usb: bulk message failed: -22 (1/0) [ 1790.905946][ T1861] dvb-usb: error while querying for an remote control event. [ 1791.021284][T21434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1791.028289][T21434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1791.068628][T21434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1791.079504][ T1861] dvb-usb: bulk message failed: -22 (1/0) [ 1791.093440][ T1861] dvb-usb: error while querying for an remote control event. [ 1791.094822][T21667] trusted_key: encrypted_key: insufficient parameters specified [ 1791.102333][T21434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1791.115819][T21434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1791.144375][T21668] trusted_key: encrypted_key: insufficient parameters specified [ 1791.153488][T21434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.175233][T21610] pim6reg: entered allmulticast mode [ 1791.180740][T21615] pim6reg: left allmulticast mode [ 1791.270364][ T1861] dvb-usb: bulk message failed: -22 (1/0) [ 1791.280029][ T1861] dvb-usb: error while querying for an remote control event. [ 1791.331631][T17621] usb 4-1: USB disconnect, device number 11 [ 1792.128389][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.123567][T17621] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1793.296971][T21434] hsr_slave_0: entered promiscuous mode [ 1793.322746][T21434] hsr_slave_1: entered promiscuous mode [ 1793.342515][T21434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1793.362852][T21434] Cannot create hsr debugfs directory [ 1795.381851][T21722] "syz.9.3275" (21722) uses obsolete ecb(arc4) skcipher [ 1795.404721][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3275'. [ 1796.646415][T21731] "syz.3.3276" (21731) uses obsolete ecb(arc4) skcipher [ 1796.655716][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 1797.815155][T21736] tipc: Enabling of bearer rejected, already enabled [ 1798.732513][ T9742] Bluetooth: hci2: command 0x0406 tx timeout [ 1799.216567][T21434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1799.332581][T21434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1799.382727][T21434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1799.424618][T21434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1799.794648][T21434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.847102][T21434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.902264][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.909376][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.106554][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.113709][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.673884][T21434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1800.874316][T21776] binder: 21774:21776 ioctl c0306201 200000001440 returned -11 [ 1801.193571][T21434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1801.246906][T21434] veth0_vlan: entered promiscuous mode [ 1801.265974][T21434] veth1_vlan: entered promiscuous mode [ 1801.470700][T21434] veth0_macvtap: entered promiscuous mode [ 1801.601843][T21434] veth1_macvtap: entered promiscuous mode [ 1801.641126][T21434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1801.668130][T21434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1801.694704][T21434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.819968][T21434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.830214][T21434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.288480][T21434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.769924][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.809915][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.944617][T19373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.980791][T19373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.051037][T21810] pim6reg: entered allmulticast mode [ 1804.173952][T21813] pim6reg: left allmulticast mode [ 1804.177151][T21816] misc userio: No port type given on /dev/userio [ 1804.187477][T21818] misc userio: The device must be registered before sending interrupts [ 1804.203359][T21816] misc userio: The device must be registered before sending interrupts [ 1804.686310][T21810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1805.030079][T17678] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1805.331742][T17678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.343690][T17678] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1805.353151][T17678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.362836][T17678] usb 4-1: Product: syz [ 1805.367058][T17678] usb 4-1: Manufacturer: syz [ 1805.374592][T17678] usb 4-1: SerialNumber: syz [ 1805.906191][T17678] usb 4-1: config 0 descriptor?? [ 1805.934785][T17678] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1807.110203][T17678] dvb-usb: bulk message failed: -22 (3/0) [ 1807.248921][T17678] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1807.647512][T17678] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1807.647728][T17678] usb 4-1: media controller created [ 1807.806023][T17678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1808.063063][T17678] dvb-usb: bulk message failed: -22 (6/0) [ 1808.372119][T17678] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1808.506713][T17678] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input111 [ 1808.650736][T17678] dvb-usb: schedule remote query interval to 150 msecs. [ 1808.658465][T17678] dvb-usb: bulk message failed: -22 (3/0) [ 1808.786444][T17678] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1808.820043][ T1861] dvb-usb: bulk message failed: -22 (1/0) [ 1808.826197][ T1861] dvb-usb: error while querying for an remote control event. [ 1808.931237][T17678] usb 4-1: USB disconnect, device number 12 [ 1809.221040][T13282] dvb-usb: bulk message failed: -22 (1/0) [ 1809.253371][T13282] dvb-usb: error while querying for an remote control event. [ 1809.464284][T17678] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1811.955536][T21900] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3305'. [ 1812.274259][T21890] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1812.510302][T21911] "syz.9.3307" (21911) uses obsolete ecb(arc4) skcipher [ 1812.533847][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3307'. [ 1813.990087][T21286] Bluetooth: hci0: command 0x0406 tx timeout [ 1814.580316][ T30] audit: type=1800 audit(2000000923.990:1362): pid=21926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.3309" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1815.719076][T21943] binder: 21941:21943 ioctl c0046209 0 returned -22 [ 1817.119180][T21962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 1817.486661][T21972] afs: Unknown parameter '' [ 1819.670130][T13282] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1819.930031][T13282] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1819.969973][T17619] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1819.996024][T13282] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1820.020286][T13282] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1820.029488][T13282] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.041090][T21979] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1820.052268][T13282] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1820.305144][T22000] binder: BINDER_SET_CONTEXT_MGR already set [ 1820.311380][T22000] binder: 21998:22000 ioctl 4018620d 200000000040 returned -16 [ 1820.397115][T17619] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1820.453495][T17619] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1820.463600][T17619] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1820.483595][T17619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.540223][T21990] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1820.651682][T17619] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1821.710931][T13282] usb 10-1: USB disconnect, device number 8 [ 1822.457798][T22002] Can't find ip_set type hash:ip,mar [ 1822.775264][T17619] usb 3-1: USB disconnect, device number 11 [ 1825.764846][T22089] tipc: Enabling of bearer rejected, failed to enable media [ 1828.675652][T21993] Set syz1 is full, maxelem 65536 reached [ 1831.618980][T22169] 9p: Unknown Cache mode or invalid value fscach [ 1833.123494][T22192] binder: 22187:22192 ioctl c0306201 0 returned -14 [ 1833.809500][T22198] "syz.0.3361" (22198) uses obsolete ecb(arc4) skcipher [ 1833.832736][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1836.467013][ T30] audit: type=1400 audit(2000000945.880:1363): avc: denied { mounton } for pid=22204 comm="syz.0.3364" path="/proc/426/task" dev="proc" ino=99085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1836.690976][T22229] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1837.209292][T22236] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1837.291147][T22237] bond0: (slave rose0): Releasing backup interface [ 1854.580545][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1855.929870][ C0] sched: DL replenish lagged too much [ 1915.223391][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1950.848057][ T9742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1951.140625][ T9742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1951.151122][ T9742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1951.219200][ T9742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1952.312551][T21438] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1952.323964][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1952.482992][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1952.491750][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1953.500406][T21438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1953.518735][T21438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1953.611816][T21438] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1953.660323][T22303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1953.687299][T22303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1953.700824][T22303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1953.708478][T22303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1954.588988][T13580] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.106269][T21286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1955.130301][T21286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1955.139424][T21286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1955.146951][T21438] Bluetooth: hci1: command tx timeout [ 1955.159569][T21286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1955.178253][T21286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1955.703115][T21286] Bluetooth: hci2: command tx timeout [ 1955.789951][T21286] Bluetooth: hci3: command tx timeout [ 1957.339992][T21286] Bluetooth: hci1: command tx timeout [ 1957.645605][T22303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1957.700229][T22303] Bluetooth: hci4: command tx timeout [ 1957.770303][T22303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1957.786449][T22303] Bluetooth: hci2: command tx timeout [ 1957.860059][T22303] Bluetooth: hci3: command tx timeout [ 1957.880431][T22303] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1957.888840][T22303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1957.897169][T22303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1960.582005][T22303] Bluetooth: hci1: command tx timeout [ 1960.587425][T22303] Bluetooth: hci4: command tx timeout [ 1960.604247][T22303] Bluetooth: hci2: command tx timeout [ 1960.609627][T22303] Bluetooth: hci3: command tx timeout [ 1960.626364][T22303] Bluetooth: hci5: command tx timeout [ 1960.840438][T21438] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1961.977850][T21438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1961.997027][T21438] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1962.144501][T21286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1962.257133][T21286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1962.265068][T21286] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1962.278089][T21286] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1962.287378][T21286] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1962.298565][ T9742] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1962.327995][T21286] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1962.654349][T13580] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.873074][T21286] Bluetooth: hci5: command tx timeout [ 1962.878517][T21286] Bluetooth: hci3: command tx timeout [ 1962.892121][T21438] Bluetooth: hci2: command tx timeout [ 1962.897563][T21438] Bluetooth: hci4: command tx timeout [ 1962.907055][T22303] Bluetooth: hci1: command tx timeout [ 1963.405668][ T9742] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1963.419794][ T9742] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1963.436890][ T9742] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1963.445935][ T9742] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1963.474210][ T9742] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1964.339957][ T9742] Bluetooth: hci6: command tx timeout [ 1964.430794][ T9742] Bluetooth: hci7: command tx timeout [ 1964.980003][ T9742] Bluetooth: hci4: command tx timeout [ 1964.985470][ T9742] Bluetooth: hci5: command tx timeout [ 1965.700120][ T9742] Bluetooth: hci8: command tx timeout [ 1966.269439][T22314] chnl_net:caif_netlink_parms(): no params data found [ 1966.413667][T22331] chnl_net:caif_netlink_parms(): no params data found [ 1966.435005][ T9742] Bluetooth: hci6: command tx timeout [ 1966.500262][ T9742] Bluetooth: hci7: command tx timeout [ 1966.603990][T22328] chnl_net:caif_netlink_parms(): no params data found [ 1966.644720][T22335] chnl_net:caif_netlink_parms(): no params data found [ 1967.059917][ T9742] Bluetooth: hci5: command tx timeout [ 1967.358470][T22325] chnl_net:caif_netlink_parms(): no params data found [ 1967.387349][T22314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.416612][T22314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.440285][T22314] bridge_slave_0: entered allmulticast mode [ 1967.463671][T22314] bridge_slave_0: entered promiscuous mode [ 1967.501101][T22314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.508243][T22314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.541967][T22314] bridge_slave_1: entered allmulticast mode [ 1967.561514][T22314] bridge_slave_1: entered promiscuous mode [ 1967.786120][ T9742] Bluetooth: hci8: command tx timeout [ 1968.114249][T22331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.138553][T22331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.160184][T22331] bridge_slave_0: entered allmulticast mode [ 1968.177208][T22331] bridge_slave_0: entered promiscuous mode [ 1968.221279][T22331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.228403][T22331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.270267][T22331] bridge_slave_1: entered allmulticast mode [ 1968.291470][T22331] bridge_slave_1: entered promiscuous mode [ 1968.446987][T22328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.466203][T22328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.496462][T22328] bridge_slave_0: entered allmulticast mode [ 1968.508405][ T9742] Bluetooth: hci6: command tx timeout [ 1968.540431][T22328] bridge_slave_0: entered promiscuous mode [ 1968.567895][T22328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.581293][ T9742] Bluetooth: hci7: command tx timeout [ 1968.615345][T22328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.635606][T22328] bridge_slave_1: entered allmulticast mode [ 1968.651773][T22328] bridge_slave_1: entered promiscuous mode [ 1968.675292][T22314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1968.727273][T22314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.354854][T22335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.385995][T22335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.394436][T22335] bridge_slave_0: entered allmulticast mode [ 1969.436483][T22335] bridge_slave_0: entered promiscuous mode [ 1969.455742][T22335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.478795][T22335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1969.502798][T22335] bridge_slave_1: entered allmulticast mode [ 1969.537527][T22335] bridge_slave_1: entered promiscuous mode [ 1969.566854][T22331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1969.605398][T22331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.666399][T22328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1969.701942][T22328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.761678][T22314] team0: Port device team_slave_0 added [ 1969.871391][ T9742] Bluetooth: hci8: command tx timeout [ 1970.099664][T22314] team0: Port device team_slave_1 added [ 1970.119445][T22335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.200984][T22331] team0: Port device team_slave_0 added [ 1970.374620][T22335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1970.431212][T22331] team0: Port device team_slave_1 added [ 1970.526290][T22325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.535113][T22325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.547730][T22325] bridge_slave_0: entered allmulticast mode [ 1970.557107][T22325] bridge_slave_0: entered promiscuous mode [ 1970.581808][ T9742] Bluetooth: hci6: command tx timeout [ 1970.594860][T22328] team0: Port device team_slave_0 added [ 1970.656597][T22314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1970.665572][ T9742] Bluetooth: hci7: command tx timeout [ 1970.682128][T22314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1970.716962][T22314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1970.917492][T22335] team0: Port device team_slave_0 added [ 1970.946605][T22335] team0: Port device team_slave_1 added [ 1971.045883][T22325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.069968][T22325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.077222][T22325] bridge_slave_1: entered allmulticast mode [ 1971.128752][T22325] bridge_slave_1: entered promiscuous mode [ 1971.239362][T22328] team0: Port device team_slave_1 added [ 1971.334371][T22314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1971.366475][T22314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.439041][T22314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1971.495963][T22331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1971.511522][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.594381][T22331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1971.625976][T22331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1971.654698][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.726141][T22331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1971.944132][ T9742] Bluetooth: hci8: command tx timeout [ 1972.015761][T22325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1972.129487][T22328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1972.146640][T22328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.225542][T22328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1972.330161][T22335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1972.337146][T22335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.435920][T22335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1972.461885][T22335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1972.468861][T22335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.586362][T22335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.642285][T22325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1972.733965][T22328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1972.769969][T22328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1972.844806][T22328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.147896][T22325] team0: Port device team_slave_0 added [ 1973.488906][T22331] hsr_slave_0: entered promiscuous mode [ 1973.515819][T22331] hsr_slave_1: entered promiscuous mode [ 1973.555495][T22331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1973.576046][T22331] Cannot create hsr debugfs directory [ 1973.634371][T22325] team0: Port device team_slave_1 added [ 1973.696934][T22314] hsr_slave_0: entered promiscuous mode [ 1973.711168][T22314] hsr_slave_1: entered promiscuous mode [ 1973.717416][T22314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1973.737596][T22314] Cannot create hsr debugfs directory [ 1973.888996][T22328] hsr_slave_0: entered promiscuous mode [ 1973.896405][T22328] hsr_slave_1: entered promiscuous mode [ 1973.908505][T22328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1973.916368][T22328] Cannot create hsr debugfs directory [ 1974.009543][T13580] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.225379][T22335] hsr_slave_0: entered promiscuous mode [ 1974.258144][T22335] hsr_slave_1: entered promiscuous mode [ 1974.287291][T22335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1974.320157][T22335] Cannot create hsr debugfs directory [ 1974.429572][T22325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1974.455095][T22325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1974.550027][T22325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1974.875874][T22325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1974.906172][T22325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1974.987534][T22325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1975.567036][T22325] hsr_slave_0: entered promiscuous mode [ 1975.605562][T22325] hsr_slave_1: entered promiscuous mode [ 1975.622039][T22325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1975.656880][T22325] Cannot create hsr debugfs directory [ 1975.786298][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1995.882374][T13580] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.609496][T21438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2004.619042][T21438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2004.627409][T21438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2004.658407][T21438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2004.667541][T21438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2005.221846][T22965] chnl_net:caif_netlink_parms(): no params data found [ 2005.647399][T22965] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.670216][T22965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.677505][T22965] bridge_slave_0: entered allmulticast mode [ 2005.731496][T22965] bridge_slave_0: entered promiscuous mode [ 2005.747228][T22965] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.765380][T22965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.801973][T22965] bridge_slave_1: entered allmulticast mode [ 2005.830353][T22965] bridge_slave_1: entered promiscuous mode [ 2005.962493][T22965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2006.004997][T22965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2006.249089][T22965] team0: Port device team_slave_0 added [ 2006.281349][T22965] team0: Port device team_slave_1 added [ 2006.457159][T22965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2006.465484][T22965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2006.513987][T22965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2006.559201][T22965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2006.585415][T22965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2006.669623][T22965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2006.740500][T21438] Bluetooth: hci0: command tx timeout [ 2007.082492][T22965] hsr_slave_0: entered promiscuous mode [ 2007.102454][T22965] hsr_slave_1: entered promiscuous mode [ 2007.108668][T22965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2007.139072][T22965] Cannot create hsr debugfs directory [ 2007.334611][T13580] bridge_slave_1: left allmulticast mode [ 2007.356841][T13580] bridge_slave_1: left promiscuous mode [ 2007.380239][T13580] bridge0: port 2(bridge_slave_1) entered disabled state [ 2007.445610][T13580] bridge_slave_0: left allmulticast mode [ 2007.467176][T13580] bridge_slave_0: left promiscuous mode [ 2007.485999][T13580] bridge0: port 1(bridge_slave_0) entered disabled state [ 2007.982419][T13580] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2008.820535][T21438] Bluetooth: hci0: command tx timeout [ 2010.900334][T21438] Bluetooth: hci0: command tx timeout [ 2012.980440][T21438] Bluetooth: hci0: command tx timeout [ 2015.726097][ T9742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2015.744348][ T9742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2015.753520][ T9742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2015.761700][ T9742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2015.773418][ T9742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2015.823075][T21438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2015.835094][T21438] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2015.843975][T21438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2015.853457][T21438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2015.866592][T21438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2016.839074][ T9742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2016.848393][ T9742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2016.860970][ T9742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2016.870830][ T9742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2016.879981][ T9742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2016.933851][ T9742] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2016.950000][ T9742] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2016.959209][ T9742] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2016.968804][ T9742] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2016.976847][ T9742] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2017.863693][T21438] Bluetooth: hci1: command tx timeout [ 2017.942210][T21438] Bluetooth: hci2: command tx timeout [ 2018.980383][T21438] Bluetooth: hci3: command tx timeout [ 2019.060319][T21438] Bluetooth: hci9: command tx timeout [ 2019.940059][T21438] Bluetooth: hci1: command tx timeout [ 2020.024335][T21438] Bluetooth: hci2: command tx timeout [ 2021.070232][T21438] Bluetooth: hci3: command tx timeout [ 2021.141857][T21438] Bluetooth: hci9: command tx timeout [ 2021.287253][T13580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2021.333691][T13580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2021.353896][T13580] bond0 (unregistering): Released all slaves [ 2022.020236][T21438] Bluetooth: hci1: command tx timeout [ 2022.104861][T21438] Bluetooth: hci2: command tx timeout [ 2023.086784][T23037] chnl_net:caif_netlink_parms(): no params data found [ 2023.144344][T21438] Bluetooth: hci3: command tx timeout [ 2023.220685][T21438] Bluetooth: hci9: command tx timeout [ 2023.506457][T23045] chnl_net:caif_netlink_parms(): no params data found [ 2023.554326][T23036] chnl_net:caif_netlink_parms(): no params data found [ 2023.603633][T23047] chnl_net:caif_netlink_parms(): no params data found [ 2024.081704][T23037] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.088903][T23037] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.102667][T21438] Bluetooth: hci1: command tx timeout [ 2024.126048][T23037] bridge_slave_0: entered allmulticast mode [ 2024.168073][T23037] bridge_slave_0: entered promiscuous mode [ 2024.183151][T21438] Bluetooth: hci2: command tx timeout [ 2024.319458][T23037] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.347189][T23037] bridge0: port 2(bridge_slave_1) entered disabled state [ 2024.380419][T23037] bridge_slave_1: entered allmulticast mode [ 2024.397072][T23037] bridge_slave_1: entered promiscuous mode [ 2024.794956][T23037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2024.853028][T23037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2024.924681][T23036] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.940030][T23036] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.947284][T23036] bridge_slave_0: entered allmulticast mode [ 2024.965538][T23036] bridge_slave_0: entered promiscuous mode [ 2025.016514][T23047] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.035230][T23047] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.056766][T23047] bridge_slave_0: entered allmulticast mode [ 2025.066938][T23047] bridge_slave_0: entered promiscuous mode [ 2025.199075][T23036] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.209738][T23036] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.220477][T21438] Bluetooth: hci3: command tx timeout [ 2025.248058][T23036] bridge_slave_1: entered allmulticast mode [ 2025.291825][T23036] bridge_slave_1: entered promiscuous mode [ 2025.300159][T21438] Bluetooth: hci9: command tx timeout [ 2025.355755][T23045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.375124][T23045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.416794][T23045] bridge_slave_0: entered allmulticast mode [ 2025.447675][T23045] bridge_slave_0: entered promiscuous mode [ 2025.476380][T23045] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.510077][T23045] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.530198][T23045] bridge_slave_1: entered allmulticast mode [ 2025.537585][T23045] bridge_slave_1: entered promiscuous mode [ 2025.579619][T23047] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.609147][T23047] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.631391][T23047] bridge_slave_1: entered allmulticast mode [ 2025.654318][T23047] bridge_slave_1: entered promiscuous mode [ 2025.783379][T23037] team0: Port device team_slave_0 added [ 2025.888664][T23036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2026.130688][T23047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2026.165799][T23037] team0: Port device team_slave_1 added [ 2026.276155][T23036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2026.308361][T23045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2026.329595][T23047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2026.576584][T23045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2026.826206][T23037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2026.851765][T23037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2026.929969][T23037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2026.985181][T23036] team0: Port device team_slave_0 added [ 2027.033389][T23036] team0: Port device team_slave_1 added [ 2027.145616][T23045] team0: Port device team_slave_0 added [ 2027.190390][T23047] team0: Port device team_slave_0 added [ 2027.200576][T23037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2027.207549][T23037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2027.314098][T23037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2027.547842][T23045] team0: Port device team_slave_1 added [ 2027.700305][T23047] team0: Port device team_slave_1 added [ 2027.793625][T23036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2027.800803][T23036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2027.838757][T23036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.073159][T23036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.090717][T23036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.126324][T23036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2028.141180][T23045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.148143][T23045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.198502][T23045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.322837][T23037] hsr_slave_0: entered promiscuous mode [ 2028.329376][T23037] hsr_slave_1: entered promiscuous mode [ 2028.370741][T23037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2028.378337][T23037] Cannot create hsr debugfs directory [ 2028.436458][T23045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.468572][T23045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.545677][T23045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2028.579671][T23047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.609886][T23047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.694826][T23047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2029.077252][T23047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2029.094737][T23047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.178057][T23047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.448002][T23045] hsr_slave_0: entered promiscuous mode [ 2029.454885][T23045] hsr_slave_1: entered promiscuous mode [ 2029.484372][T23045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2029.502769][T23045] Cannot create hsr debugfs directory [ 2029.534950][T23036] hsr_slave_0: entered promiscuous mode [ 2029.554328][T23036] hsr_slave_1: entered promiscuous mode [ 2029.565112][T23036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2029.590723][T23036] Cannot create hsr debugfs directory [ 2029.986915][T23047] hsr_slave_0: entered promiscuous mode [ 2029.997766][T23047] hsr_slave_1: entered promiscuous mode [ 2030.014203][T23047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2030.033411][T23047] Cannot create hsr debugfs directory [ 2032.166383][T13580] : left promiscuous mode [ 2037.228104][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2065.179407][ T9742] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2065.189279][ T9742] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2065.200367][ T9742] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2065.208846][ T9742] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2065.232387][ T9742] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2065.947036][T23726] chnl_net:caif_netlink_parms(): no params data found [ 2066.319283][T13580] tipc: Disabling bearer [ 2066.372963][T13580] tipc: Left network mode [ 2066.463662][T23726] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.512075][T23726] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.519368][T23726] bridge_slave_0: entered allmulticast mode [ 2066.548087][T23726] bridge_slave_0: entered promiscuous mode [ 2067.300136][ T9742] Bluetooth: hci10: command tx timeout [ 2068.444408][T23726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.457636][T23726] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.470503][T23726] bridge_slave_1: entered allmulticast mode [ 2068.488881][T23726] bridge_slave_1: entered promiscuous mode [ 2068.682106][T23726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2068.729528][T23726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2069.381238][T21438] Bluetooth: hci10: command tx timeout [ 2069.592180][T23726] team0: Port device team_slave_0 added [ 2069.669426][T23726] team0: Port device team_slave_1 added [ 2069.838413][T23726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2069.879055][T23726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2069.999988][T23726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2070.050101][T23726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2070.057079][T23726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2070.154198][T23726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2070.403889][T23726] hsr_slave_0: entered promiscuous mode [ 2070.427994][T23726] hsr_slave_1: entered promiscuous mode [ 2070.461125][T23726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2070.468722][T23726] Cannot create hsr debugfs directory [ 2071.460360][T21438] Bluetooth: hci10: command tx timeout [ 2073.547033][T21438] Bluetooth: hci10: command tx timeout [ 2076.529737][ T9742] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2076.560581][ T9742] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2076.569110][ T9742] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2076.577264][ T9742] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2076.593909][ T9742] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2076.789239][T21438] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2076.800158][T21438] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2076.808867][T21438] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2076.817510][T21438] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2076.825400][T21438] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2078.125583][ T9742] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2078.135449][ T9742] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2078.147168][ T9742] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2078.159414][ T9742] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2078.167713][ T9742] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2078.237224][T23880] chnl_net:caif_netlink_parms(): no params data found [ 2078.337842][ T5817] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2078.348635][ T5817] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2078.358658][ T5817] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2078.366792][ T5817] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2078.375928][ T5817] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2078.656398][T23887] chnl_net:caif_netlink_parms(): no params data found [ 2078.664405][ T9742] Bluetooth: hci11: command tx timeout [ 2078.900111][ T9742] Bluetooth: hci12: command tx timeout [ 2079.240038][T23880] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.247201][T23880] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.265431][T23880] bridge_slave_0: entered allmulticast mode [ 2079.277441][T23880] bridge_slave_0: entered promiscuous mode [ 2079.293858][T23880] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.322110][T23880] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.329424][T23880] bridge_slave_1: entered allmulticast mode [ 2079.348938][T23880] bridge_slave_1: entered promiscuous mode [ 2079.575137][T23880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2079.740448][T23880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2079.797795][T23887] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.817147][T23887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.829394][T23887] bridge_slave_0: entered allmulticast mode [ 2079.848033][T23887] bridge_slave_0: entered promiscuous mode [ 2079.876687][T23887] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.890018][T23887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.907296][T23887] bridge_slave_1: entered allmulticast mode [ 2079.917585][T23887] bridge_slave_1: entered promiscuous mode [ 2080.121520][T23880] team0: Port device team_slave_0 added [ 2080.158368][T23887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2080.177284][T23880] team0: Port device team_slave_1 added [ 2080.188876][ T9742] Bluetooth: hci13: command tx timeout [ 2080.260196][ T9742] Bluetooth: hci4: command 0x0406 tx timeout [ 2080.266255][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 2080.283667][T23887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2080.500514][T21286] Bluetooth: hci14: command tx timeout [ 2080.628885][T23887] team0: Port device team_slave_0 added [ 2080.694460][T23880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2080.713227][T23880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2080.750512][T21286] Bluetooth: hci11: command tx timeout [ 2080.756247][T23880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2080.819040][T23887] team0: Port device team_slave_1 added [ 2080.868187][T23880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2080.887299][T23880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2080.933416][T23880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2080.980887][T21438] Bluetooth: hci12: command tx timeout [ 2081.268539][T23880] hsr_slave_0: entered promiscuous mode [ 2081.281731][T23880] hsr_slave_1: entered promiscuous mode [ 2081.295465][T23880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2081.314333][T23880] Cannot create hsr debugfs directory [ 2081.326023][T23887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2081.345537][T23887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2081.409995][T23887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2081.446906][T23887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2081.465142][T23887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2081.507568][T23887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2081.567166][T23904] chnl_net:caif_netlink_parms(): no params data found [ 2081.687384][T23907] chnl_net:caif_netlink_parms(): no params data found [ 2082.128760][T23887] hsr_slave_0: entered promiscuous mode [ 2082.140998][T23887] hsr_slave_1: entered promiscuous mode [ 2082.147304][T23887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2082.172499][T23887] Cannot create hsr debugfs directory [ 2082.273663][T21438] Bluetooth: hci13: command tx timeout [ 2082.580718][T21438] Bluetooth: hci14: command tx timeout [ 2082.822894][T21438] Bluetooth: hci11: command tx timeout [ 2082.832159][T23904] bridge0: port 1(bridge_slave_0) entered blocking state [ 2082.839694][T23904] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.870273][T23904] bridge_slave_0: entered allmulticast mode [ 2082.891896][T23904] bridge_slave_0: entered promiscuous mode [ 2082.960909][T23907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2082.968051][T23907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.002417][T23907] bridge_slave_0: entered allmulticast mode [ 2083.030513][T23907] bridge_slave_0: entered promiscuous mode [ 2083.072201][T23907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.079350][T23907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.086650][T21438] Bluetooth: hci12: command tx timeout [ 2083.120126][T23907] bridge_slave_1: entered allmulticast mode [ 2083.149546][T23907] bridge_slave_1: entered promiscuous mode [ 2084.340253][ T9742] Bluetooth: hci13: command tx timeout [ 2084.660765][ T9742] Bluetooth: hci14: command tx timeout [ 2084.902119][ T9742] Bluetooth: hci11: command tx timeout [ 2085.140293][ T9742] Bluetooth: hci12: command tx timeout [ 2085.380228][ T9742] Bluetooth: hci6: command 0x0406 tx timeout [ 2085.386350][ T5817] Bluetooth: hci7: command 0x0406 tx timeout [ 2086.115449][T23904] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.132265][T23904] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.150141][T23904] bridge_slave_1: entered allmulticast mode [ 2086.157990][T23904] bridge_slave_1: entered promiscuous mode [ 2086.420475][T21286] Bluetooth: hci13: command tx timeout [ 2086.539440][T23907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2086.584761][T23907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2086.632857][T23904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2086.654061][T23904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2086.740639][T21286] Bluetooth: hci14: command tx timeout [ 2086.963277][T23907] team0: Port device team_slave_0 added [ 2086.995752][T23904] team0: Port device team_slave_0 added [ 2087.062201][T23907] team0: Port device team_slave_1 added [ 2087.125230][T23904] team0: Port device team_slave_1 added [ 2087.277989][T23907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2087.305295][T23907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.400026][T23907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2087.528033][T23904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2087.551450][T23904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.646300][T23904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2087.835242][T23907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2087.851392][T23907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.932895][T23907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2088.035623][T23904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2088.052711][T23904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2088.093017][T23904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2088.196796][T23907] hsr_slave_0: entered promiscuous mode [ 2088.203711][T23907] hsr_slave_1: entered promiscuous mode [ 2088.220197][T23907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2088.227785][T23907] Cannot create hsr debugfs directory [ 2088.425024][T23904] hsr_slave_0: entered promiscuous mode [ 2088.457712][T23904] hsr_slave_1: entered promiscuous mode [ 2088.476558][T23904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2088.509927][T23904] Cannot create hsr debugfs directory [ 2090.502494][T21438] Bluetooth: hci8: command 0x0406 tx timeout [ 2098.664303][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2125.755700][T21438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2125.765575][T21438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2125.774459][T21438] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2125.787424][T21438] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2125.795207][T21438] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2126.216814][T24200] chnl_net:caif_netlink_parms(): no params data found [ 2126.504545][T24200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.525107][T24200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2126.549703][T24200] bridge_slave_0: entered allmulticast mode [ 2126.571677][T24200] bridge_slave_0: entered promiscuous mode [ 2126.603023][T24200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2126.620279][T24200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2126.627582][T24200] bridge_slave_1: entered allmulticast mode [ 2126.646199][T24200] bridge_slave_1: entered promiscuous mode [ 2126.768917][T24200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2126.791456][T24200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2127.035572][T24200] team0: Port device team_slave_0 added [ 2127.070873][T24200] team0: Port device team_slave_1 added [ 2127.203493][T24200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2127.220451][T24200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2127.274349][T24200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2127.375025][T24200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2127.389785][T24200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2127.433908][T24200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2127.601361][T24200] hsr_slave_0: entered promiscuous mode [ 2127.609631][T24200] hsr_slave_1: entered promiscuous mode [ 2127.632384][T24200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2127.658565][T24200] Cannot create hsr debugfs directory [ 2127.860151][T21286] Bluetooth: hci7: command tx timeout [ 2129.949464][T21286] Bluetooth: hci7: command tx timeout [ 2131.460466][T21286] Bluetooth: hci0: command 0x0406 tx timeout [ 2132.020187][T21438] Bluetooth: hci7: command tx timeout [ 2134.100380][T21438] Bluetooth: hci7: command tx timeout [ 2137.275828][T21286] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2137.291858][T21286] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2137.302632][T21286] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2137.313153][T21286] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2137.320923][T21286] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2137.914283][T24220] chnl_net:caif_netlink_parms(): no params data found [ 2138.016464][T21438] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2138.026165][T21438] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2138.039694][T21438] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2138.055159][T21438] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2138.063899][T21438] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2138.387173][T24220] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.404153][T24220] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.422446][T24220] bridge_slave_0: entered allmulticast mode [ 2138.446782][T24220] bridge_slave_0: entered promiscuous mode [ 2138.485661][T24220] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.501126][T24220] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.508433][T24220] bridge_slave_1: entered allmulticast mode [ 2138.535006][T24220] bridge_slave_1: entered promiscuous mode [ 2138.719248][T24220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2138.775098][T24220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2139.064637][T24220] team0: Port device team_slave_0 added [ 2139.101143][T24220] team0: Port device team_slave_1 added [ 2139.380140][T21438] Bluetooth: hci15: command tx timeout [ 2139.443015][T21286] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 2139.454917][T21286] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 2139.471535][T21286] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 2139.482397][T21286] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 2139.490289][T21286] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 2139.547710][T24220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2139.576850][T24220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2139.702076][T24220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2139.742161][T24220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2139.749130][T24220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2139.854407][T24220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2139.904754][T24227] chnl_net:caif_netlink_parms(): no params data found [ 2140.099990][T24243] Bluetooth: hci16: command tx timeout [ 2140.113799][T24243] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 2140.124623][T24243] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 2140.133909][T24243] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 2140.143631][T24243] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 2140.152684][T24243] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 2140.244559][T24220] hsr_slave_0: entered promiscuous mode [ 2140.263959][T24220] hsr_slave_1: entered promiscuous mode [ 2140.278221][T24220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2140.299982][T24220] Cannot create hsr debugfs directory [ 2140.808923][T24227] bridge0: port 1(bridge_slave_0) entered blocking state [ 2140.850085][T24227] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.857442][T24227] bridge_slave_0: entered allmulticast mode [ 2140.900234][ T31] INFO: task syz-executor:22314 blocked for more than 143 seconds. [ 2140.908169][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 2140.916568][T24227] bridge_slave_0: entered promiscuous mode [ 2140.963969][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2141.004460][T24227] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.020110][ T31] task:syz-executor state:D stack:24936 pid:22314 tgid:22314 ppid:1 task_flags:0x400140 flags:0x00004004 [ 2141.041639][T24227] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.048991][T24227] bridge_slave_1: entered allmulticast mode [ 2141.080944][ T31] Call Trace: [ 2141.084913][ T31] [ 2141.087869][ T31] __schedule+0x116a/0x5de0 [ 2141.110147][T24227] bridge_slave_1: entered promiscuous mode [ 2141.116604][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 2141.140013][ T31] ? __lock_acquire+0x622/0x1c90 [ 2141.145010][ T31] ? __pfx___schedule+0x10/0x10 [ 2141.184268][ T31] ? find_held_lock+0x2b/0x80 [ 2141.201796][ T31] ? schedule+0x2d7/0x3a0 [ 2141.206172][ T31] schedule+0xe7/0x3a0 [ 2141.230008][ T31] schedule_preempt_disabled+0x13/0x30 [ 2141.235520][ T31] __mutex_lock+0x6c7/0xb90 [ 2141.273385][ T31] ? del_device_store+0xd1/0x4a0 [ 2141.278388][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2141.310199][ T31] ? __pfx_sscanf+0x10/0x10 [ 2141.314763][ T31] ? __lock_acquire+0x622/0x1c90 [ 2141.319724][ T31] ? del_device_store+0xd1/0x4a0 [ 2141.339151][ T31] del_device_store+0xd1/0x4a0 [ 2141.370293][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2141.375735][ T31] ? find_held_lock+0x2b/0x80 [ 2141.409837][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 2141.414751][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2141.439941][ T31] bus_attr_store+0x74/0xb0 [ 2141.444500][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 2141.449704][ T31] sysfs_kf_write+0xef/0x150 [ 2141.460387][T24241] Bluetooth: hci15: command tx timeout [ 2141.493570][ T31] kernfs_fop_write_iter+0x351/0x510 [ 2141.498911][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2141.530134][ T31] vfs_write+0x6c7/0x1150 [ 2141.534515][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2141.549868][T24241] Bluetooth: hci17: command tx timeout [ 2141.580267][ T31] ? __pfx_vfs_write+0x10/0x10 [ 2141.585078][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2141.602996][ T31] ? find_held_lock+0x2b/0x80 [ 2141.607728][ T31] ksys_write+0x12a/0x250 [ 2141.639799][ T31] ? __pfx_ksys_write+0x10/0x10 [ 2141.644707][ T31] do_syscall_64+0xcd/0x4c0 [ 2141.649230][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2141.689865][ T31] RIP: 0033:0x7fa282d8d3df [ 2141.694314][ T31] RSP: 002b:00007fff93e803c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2141.719872][T24241] Bluetooth: hci1: command 0x0406 tx timeout [ 2141.725921][T24241] Bluetooth: hci2: command 0x0406 tx timeout [ 2141.732960][T24241] Bluetooth: hci3: command 0x0406 tx timeout [ 2141.738970][T24241] Bluetooth: hci9: command 0x0406 tx timeout [ 2141.769953][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa282d8d3df [ 2141.777972][ T31] RDX: 0000000000000001 RSI: 00007fff93e80410 RDI: 0000000000000005 [ 2141.829873][ T31] RBP: 00007fa282e11d8d R08: 0000000000000000 R09: 00007fff93e80217 [ 2141.860448][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2141.868463][ T31] R13: 00007fff93e80410 R14: 00007fa283ae4620 R15: 0000000000000003 [ 2141.899846][ T31] [ 2141.912743][ T31] INFO: task syz-executor:22325 blocked for more than 144 seconds. [ 2141.950438][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 2141.958118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2141.990099][ T31] task:syz-executor state:D stack:24600 pid:22325 tgid:22325 ppid:1 task_flags:0x400140 flags:0x00004004 [ 2142.043267][ T31] Call Trace: [ 2142.050058][ T31] [ 2142.053018][ T31] __schedule+0x116a/0x5de0 [ 2142.057532][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 2142.089901][ T31] ? __lock_acquire+0x622/0x1c90 [ 2142.094912][ T31] ? __pfx___schedule+0x10/0x10 [ 2142.130250][ T31] ? find_held_lock+0x2b/0x80 [ 2142.134988][ T31] ? schedule+0x2d7/0x3a0 [ 2142.160155][ T31] schedule+0xe7/0x3a0 [ 2142.164280][ T31] schedule_preempt_disabled+0x13/0x30 [ 2142.180559][T24241] Bluetooth: hci16: command tx timeout [ 2142.190004][ T31] __mutex_lock+0x6c7/0xb90 [ 2142.194547][ T31] ? del_device_store+0xd1/0x4a0 [ 2142.199497][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2142.240019][ T31] ? __pfx_sscanf+0x10/0x10 [ 2142.244583][ T31] ? __lock_acquire+0x622/0x1c90 [ 2142.249543][ T31] ? del_device_store+0xd1/0x4a0 [ 2142.263628][T22303] Bluetooth: hci18: command tx timeout [ 2142.300155][ T31] del_device_store+0xd1/0x4a0 [ 2142.304982][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2142.330037][ T31] ? find_held_lock+0x2b/0x80 [ 2142.334766][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 2142.339640][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2142.390397][ T31] bus_attr_store+0x74/0xb0 [ 2142.394949][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 2142.414225][ T31] sysfs_kf_write+0xef/0x150 [ 2142.418865][ T31] kernfs_fop_write_iter+0x351/0x510 [ 2142.452592][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2142.457847][ T31] vfs_write+0x6c7/0x1150 [ 2142.489893][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2142.495758][ T31] ? __pfx_vfs_write+0x10/0x10 [ 2142.516599][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2142.540235][ T31] ksys_write+0x12a/0x250 [ 2142.544612][ T31] ? __pfx_ksys_write+0x10/0x10 [ 2142.549477][ T31] do_syscall_64+0xcd/0x4c0 [ 2142.580400][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2142.586342][ T31] RIP: 0033:0x7f072758d3df [ 2142.619003][ T31] RSP: 002b:00007fff361dd870 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2142.650227][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f072758d3df [ 2142.658236][ T31] RDX: 0000000000000001 RSI: 00007fff361dd8c0 RDI: 0000000000000005 [ 2142.702914][ T31] RBP: 00007f0727611d8d R08: 0000000000000000 R09: 00007fff361dd6c7 [ 2142.729824][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2142.737839][ T31] R13: 00007fff361dd8c0 R14: 00007f07282e4620 R15: 0000000000000003 [ 2142.790021][ T31] [ 2142.809596][ T31] INFO: task syz-executor:22328 blocked for more than 145 seconds. [ 2142.870335][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 2142.910073][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2142.918784][ T31] task:syz-executor state:D stack:24584 pid:22328 tgid:22328 ppid:1 task_flags:0x400140 flags:0x00004004 [ 2142.980272][ T31] Call Trace: [ 2142.983598][ T31] [ 2142.986539][ T31] __schedule+0x116a/0x5de0 [ 2143.019834][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 2143.025091][ T31] ? __lock_acquire+0x622/0x1c90 [ 2143.050362][ T31] ? __pfx___schedule+0x10/0x10 [ 2143.055275][ T31] ? find_held_lock+0x2b/0x80 [ 2143.080536][ T31] ? schedule+0x2d7/0x3a0 [ 2143.084918][ T31] schedule+0xe7/0x3a0 [ 2143.089004][ T31] schedule_preempt_disabled+0x13/0x30 [ 2143.130200][ T31] __mutex_lock+0x6c7/0xb90 [ 2143.135133][ T31] ? del_device_store+0xd1/0x4a0 [ 2143.160697][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2143.165783][ T31] ? __pfx_sscanf+0x10/0x10 [ 2143.199952][ T31] ? __lock_acquire+0x622/0x1c90 [ 2143.204960][ T31] ? del_device_store+0xd1/0x4a0 [ 2143.233543][ T31] del_device_store+0xd1/0x4a0 [ 2143.238378][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2143.267896][ T31] ? find_held_lock+0x2b/0x80 [ 2143.280142][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 2143.285045][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2143.319822][ T31] bus_attr_store+0x74/0xb0 [ 2143.324377][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 2143.329579][ T31] sysfs_kf_write+0xef/0x150 [ 2143.373352][ T31] kernfs_fop_write_iter+0x351/0x510 [ 2143.378692][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2143.410144][ T31] vfs_write+0x6c7/0x1150 [ 2143.414530][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2143.438237][ T31] ? __pfx_vfs_write+0x10/0x10 [ 2143.453577][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2143.458817][ T31] ? find_held_lock+0x2b/0x80 [ 2143.489999][ T31] ksys_write+0x12a/0x250 [ 2143.494382][ T31] ? __pfx_ksys_write+0x10/0x10 [ 2143.499253][ T31] do_syscall_64+0xcd/0x4c0 [ 2143.540601][T21438] Bluetooth: hci15: command tx timeout [ 2143.546186][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.562687][ T31] RIP: 0033:0x7faf4518d3df [ 2143.590249][ T31] RSP: 002b:00007ffff4a306a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2143.598718][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007faf4518d3df [ 2143.620412][T21438] Bluetooth: hci17: command tx timeout [ 2143.642959][ T31] RDX: 0000000000000001 RSI: 00007ffff4a306f0 RDI: 0000000000000005 [ 2143.670340][ T31] RBP: 00007faf45211d8d R08: 0000000000000000 R09: 00007ffff4a304f7 [ 2143.678380][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2143.720593][ T31] R13: 00007ffff4a306f0 R14: 00007faf45ee4620 R15: 0000000000000003 [ 2143.728632][ T31] [ 2143.752910][ T31] [ 2143.752910][ T31] Showing all locks held in the system: [ 2143.769839][ T31] 1 lock held by khungtaskd/31: [ 2143.792490][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2143.822301][ T31] 3 locks held by kworker/u8:7/3537: [ 2143.827626][ T31] 2 locks held by getty/5571: [ 2143.847782][ T31] #0: ffff888032a570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2143.865790][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2143.890286][ T31] 5 locks held by kworker/u9:2/5817: [ 2143.895597][ T31] #0: ffff888056a28148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2143.921678][ T31] #1: ffffc9000428fd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2143.941321][ T31] #2: ffff888047a9cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 2143.968315][ T31] #3: ffff888047a9c078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10 [ 2143.989893][ T31] #4: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 2144.001189][ T31] 7 locks held by kworker/u9:0/9742: [ 2144.006495][ T31] #0: ffff88806b03e148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2144.037736][ T31] #1: ffffc90004befd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2144.060172][ T31] #2: ffff88806c438d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 2144.084315][ T31] #3: ffff88806c438078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10 [ 2144.110281][ T31] #4: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 2144.129992][ T31] #5: ffff888037471b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 2144.139376][ T31] #6: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 2144.167451][ T31] 4 locks held by kworker/u8:12/13580: [ 2144.179794][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2144.207232][ T31] #1: ffffc90004867d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2144.220252][ T31] #2: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 2144.229621][ T31] #3: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 2144.255009][ T31] 4 locks held by kworker/u9:1/21286: [ 2144.261434][T21438] Bluetooth: hci16: command tx timeout [ 2144.282920][ T31] #0: ffff8880855bb948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2144.305834][ T31] #1: ffffc9000c3cfd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2144.323649][ T31] #2: ffff888078e64d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 2144.340276][T21438] Bluetooth: hci18: command tx timeout [ 2144.345928][ T31] #3: ffff888078e64078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10 [ 2144.371056][ T31] 2 locks held by kworker/0:5/21558: [ 2144.376377][ T31] 5 locks held by kworker/0:7/22276: [ 2144.399241][ T31] 4 locks held by syz-executor/22314: [ 2144.410117][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2144.419149][ T31] #1: ffff888061649488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2144.442882][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2144.459778][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2144.484983][ T31] 4 locks held by syz-executor/22325: [ 2144.500523][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2144.509556][ T31] #1: ffff888054d22888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2144.535522][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2144.556713][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2144.583610][ T31] 4 locks held by syz-executor/22328: [ 2144.589016][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2144.620135][ T31] #1: ffff888061649888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2144.642152][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2144.663988][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2144.679935][ T31] 7 locks held by syz-executor/22335: [ 2144.685339][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2144.708737][ T31] #1: ffff888069faf888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2144.729910][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2144.760005][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2144.780019][ T31] #4: ffff88805936e0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 2144.802223][ T31] #5: ffff888025f38250 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 2144.825531][ T31] #6: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 2144.849937][ T31] 4 locks held by syz-executor/22965: [ 2144.855346][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2144.879461][ T31] #1: ffff88805ad37488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2144.895482][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2144.920028][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2144.948059][ T31] 4 locks held by syz-executor/23036: [ 2144.959893][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2144.968939][ T31] #1: ffff88809627b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2144.995382][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.016652][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.039936][ T31] 4 locks held by syz-executor/23037: [ 2145.045345][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.076622][ T31] #1: ffff88806028a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.099891][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.119911][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.143051][ T31] 4 locks held by syz-executor/23045: [ 2145.148457][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.178977][ T31] #1: ffff888096283488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.194783][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.209770][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.236803][ T31] 4 locks held by syz-executor/23047: [ 2145.251546][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.276925][ T31] #1: ffff88804b283888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.299433][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.319848][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.339831][ T31] 4 locks held by syz-executor/23726: [ 2145.345237][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.368546][ T31] #1: ffff888060066888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.383185][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.409983][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.429877][ T31] 4 locks held by syz-executor/23880: [ 2145.435271][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.456160][ T31] #1: ffff888066042488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.473729][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.490185][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.518243][ T31] 4 locks held by syz-executor/23887: [ 2145.530049][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.539145][ T31] #1: ffff8880a10ac888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.559918][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.580085][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.606369][ T31] 4 locks held by syz-executor/23904: [ 2145.622150][T21438] Bluetooth: hci15: command tx timeout [ 2145.627695][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.650218][ T31] #1: ffff8880a65bfc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.669898][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.702788][T21438] Bluetooth: hci17: command tx timeout [ 2145.710066][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.749938][ T31] 4 locks held by syz-executor/23907: [ 2145.755354][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.786656][ T31] #1: ffff8880a65be888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.811380][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.833390][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.861273][ T31] 4 locks held by syz-executor/24200: [ 2145.866682][ T31] #0: ffff8880371dc428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2145.904980][ T31] #1: ffff888066f84c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 2145.921606][ T31] #2: ffff888140f5dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 2145.958517][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 2145.973328][ T31] 2 locks held by syz-executor/24220: [ 2145.978733][ T31] #0: ffffffff8f6d9a60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 2145.997611][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 2146.011074][ T31] 3 locks held by syz-executor/24227: [ 2146.016463][ T31] #0: ffffffff8f712400 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 2146.040157][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 2146.049282][ T31] #2: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 2146.084783][ T31] 1 lock held by syz-executor/24238: [ 2146.096691][ T31] #0: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x4e4/0x1c70 [ 2146.119892][ T31] 2 locks held by syz-executor/24242: [ 2146.125300][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 2146.149927][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21d/0x7d0 [ 2146.159475][ T31] 1 lock held by dhcpcd/24249: [ 2146.189985][ T31] #0: ffff88804d25e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 2146.225955][ T31] [ 2146.228933][ T31] ============================================= [ 2146.228933][ T31] [ 2146.287631][T24227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2146.302774][ T31] NMI backtrace for cpu 1 [ 2146.302794][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 2146.302817][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2146.302827][ T31] Call Trace: [ 2146.302834][ T31] [ 2146.302841][ T31] dump_stack_lvl+0x116/0x1f0 [ 2146.302871][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2146.302890][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 2146.302914][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2146.302939][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2146.302961][ T31] watchdog+0xf70/0x12c0 [ 2146.302986][ T31] ? __pfx_watchdog+0x10/0x10 [ 2146.303003][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2146.303029][ T31] ? __kthread_parkme+0x19e/0x250 [ 2146.303054][ T31] ? __pfx_watchdog+0x10/0x10 [ 2146.303073][ T31] kthread+0x3c2/0x780 [ 2146.303089][ T31] ? __pfx_kthread+0x10/0x10 [ 2146.303107][ T31] ? rcu_is_watching+0x12/0xc0 [ 2146.303128][ T31] ? __pfx_kthread+0x10/0x10 [ 2146.303145][ T31] ret_from_fork+0x5d4/0x6f0 [ 2146.303169][ T31] ? __pfx_kthread+0x10/0x10 [ 2146.303185][ T31] ret_from_fork_asm+0x1a/0x30 [ 2146.303215][ T31] [ 2146.303221][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2146.429068][ C0] NMI backtrace for cpu 0 [ 2146.429084][ C0] CPU: 0 UID: 0 PID: 22276 Comm: kworker/0:7 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 2146.429103][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2146.429113][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 2146.429133][ C0] RIP: 0010:lock_acquire+0x1a1/0x350 [ 2146.429157][ C0] Code: ff ff 48 c7 c7 83 4a df 8d 48 83 c4 28 e8 d7 16 e8 09 b8 ff ff ff ff 65 0f c1 05 92 a3 34 12 83 f8 01 0f 85 6a 01 00 00 9c 58 c4 02 0f 85 7f 01 00 00 48 83 3c 24 00 0f 84 ad fe ff ff fb e9 [ 2146.429171][ C0] RSP: 0018:ffffc90000007280 EFLAGS: 00000046 [ 2146.429183][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c4940 RCX: 000000007938eb5a [ 2146.429193][ C0] RDX: 0000000000000000 RSI: ffffffff8ddf4a83 RDI: ffffffff8c157ba0 [ 2146.429202][ C0] RBP: 0000000000000002 R08: 39529a686290c103 R09: 0000000000000000 [ 2146.429211][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 2146.429220][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2146.429228][ C0] FS: 0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 2146.429243][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2146.429254][ C0] CR2: 00007f6d79578286 CR3: 0000000029bcd000 CR4: 00000000003526f0 [ 2146.429263][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2146.429272][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2146.429281][ C0] Call Trace: [ 2146.429286][ C0] [ 2146.429293][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 2146.429316][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2146.429335][ C0] unwind_next_frame+0xd1/0x20a0 [ 2146.429355][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 2146.429375][ C0] ? process_backlog+0x442/0x15e0 [ 2146.429393][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2146.429411][ C0] arch_stack_walk+0x94/0x100 [ 2146.429427][ C0] ? process_backlog+0x442/0x15e0 [ 2146.429445][ C0] stack_trace_save+0x8e/0xc0 [ 2146.429462][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2146.429480][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2146.429497][ C0] ? stack_depot_save_flags+0x28/0xa40 [ 2146.429516][ C0] kasan_save_stack+0x33/0x60 [ 2146.429534][ C0] ? kasan_save_stack+0x33/0x60 [ 2146.429550][ C0] ? kasan_save_track+0x14/0x30 [ 2146.429566][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 2146.429582][ C0] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 2146.429601][ C0] ? krealloc_noprof+0x1fc/0x370 [ 2146.429618][ C0] ? nf_ct_ext_add+0x1a7/0x420 [ 2146.429632][ C0] ? init_conntrack.constprop.0+0x5af/0x1080 [ 2146.429647][ C0] ? nf_conntrack_in+0xb03/0x1950 [ 2146.429661][ C0] ? nf_hook_slow+0xbe/0x200 [ 2146.429679][ C0] ? nf_hook.constprop.0+0x422/0x750 [ 2146.429703][ C0] ? ip_rcv+0x7d/0x5d0 [ 2146.429721][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 2146.429741][ C0] ? __netif_receive_skb+0x1d/0x160 [ 2146.429756][ C0] ? process_backlog+0x442/0x15e0 [ 2146.429786][ C0] kasan_save_track+0x14/0x30 [ 2146.429803][ C0] __kasan_kmalloc+0xaa/0xb0 [ 2146.429819][ C0] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 2146.429838][ C0] ? rcu_is_watching+0x12/0xc0 [ 2146.429855][ C0] ? nf_ct_ext_add+0x1a7/0x420 [ 2146.429870][ C0] krealloc_noprof+0x1fc/0x370 [ 2146.429888][ C0] nf_ct_ext_add+0x1a7/0x420 [ 2146.429903][ C0] init_conntrack.constprop.0+0x5af/0x1080 [ 2146.429919][ C0] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 2146.429935][ C0] ? __pfx_hash_conntrack_raw+0x10/0x10 [ 2146.429957][ C0] ? ipt_do_table+0xd48/0x1ae0 [ 2146.429974][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 2146.429990][ C0] ? ipt_do_table+0xd78/0x1ae0 [ 2146.430008][ C0] nf_conntrack_in+0xb03/0x1950 [ 2146.430027][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 2146.430045][ C0] ? lock_acquire+0x179/0x350 [ 2146.430066][ C0] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 2146.430086][ C0] nf_hook_slow+0xbe/0x200 [ 2146.430105][ C0] nf_hook.constprop.0+0x422/0x750 [ 2146.430124][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2146.430143][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 2146.430164][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2146.430183][ C0] ? ip_rcv_core+0x934/0xe80 [ 2146.430203][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 2146.430221][ C0] ip_rcv+0x7d/0x5d0 [ 2146.430240][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 2146.430258][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 2146.430275][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2146.430293][ C0] ? lock_acquire+0x179/0x350 [ 2146.430315][ C0] ? process_backlog+0x3f0/0x15e0 [ 2146.430331][ C0] __netif_receive_skb+0x1d/0x160 [ 2146.430347][ C0] process_backlog+0x442/0x15e0 [ 2146.430367][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 2146.430385][ C0] net_rx_action+0xa9f/0xfe0 [ 2146.430405][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2146.430422][ C0] ? mark_held_locks+0x49/0x80 [ 2146.430442][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2146.430463][ C0] ? tmigr_handle_remote+0x132/0x380 [ 2146.430483][ C0] ? run_timer_base+0x121/0x190 [ 2146.430503][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 2146.430524][ C0] handle_softirqs+0x216/0x8e0 [ 2146.430541][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2146.430557][ C0] ? neigh_periodic_work+0x768/0xcd0 [ 2146.430571][ C0] do_softirq+0xb2/0xf0 [ 2146.430586][ C0] [ 2146.430591][ C0] [ 2146.430596][ C0] __local_bh_enable_ip+0x100/0x120 [ 2146.430612][ C0] neigh_periodic_work+0x768/0xcd0 [ 2146.430627][ C0] ? __pfx_neigh_periodic_work+0x10/0x10 [ 2146.430644][ C0] ? rcu_is_watching+0x12/0xc0 [ 2146.430662][ C0] process_one_work+0x9cc/0x1b70 [ 2146.430679][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 2146.430701][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2146.430718][ C0] ? assign_work+0x1a0/0x250 [ 2146.430741][ C0] worker_thread+0x6c8/0xf10 [ 2146.430757][ C0] ? __kthread_parkme+0x19e/0x250 [ 2146.430777][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2146.430790][ C0] kthread+0x3c2/0x780 [ 2146.430803][ C0] ? __pfx_kthread+0x10/0x10 [ 2146.430816][ C0] ? rcu_is_watching+0x12/0xc0 [ 2146.430832][ C0] ? __pfx_kthread+0x10/0x10 [ 2146.430844][ C0] ret_from_fork+0x5d4/0x6f0 [ 2146.430863][ C0] ? __pfx_kthread+0x10/0x10 [ 2146.430875][ C0] ret_from_fork_asm+0x1a/0x30 [ 2146.430895][ C0] [ 2147.040422][ T5817] Bluetooth: hci16: command tx timeout [ 2147.045946][ T5817] Bluetooth: hci18: command tx timeout [ 2147.057638][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2147.064535][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 2147.076350][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2147.086418][ T31] Call Trace: [ 2147.089702][ T31] [ 2147.092631][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2147.097243][ T31] panic+0x71c/0x800 [ 2147.101149][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 2147.107049][ T31] ? __pfx_panic+0x10/0x10 [ 2147.111477][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2147.116858][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2147.122847][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2147.128226][ T31] ? watchdog+0xdda/0x12c0 [ 2147.132652][ T31] ? watchdog+0xdcd/0x12c0 [ 2147.137077][ T31] watchdog+0xdeb/0x12c0 [ 2147.141328][ T31] ? __pfx_watchdog+0x10/0x10 [ 2147.146017][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2147.151225][ T31] ? __kthread_parkme+0x19e/0x250 [ 2147.156260][ T31] ? __pfx_watchdog+0x10/0x10 [ 2147.160944][ T31] kthread+0x3c2/0x780 [ 2147.165017][ T31] ? __pfx_kthread+0x10/0x10 [ 2147.169609][ T31] ? rcu_is_watching+0x12/0xc0 [ 2147.174384][ T31] ? __pfx_kthread+0x10/0x10 [ 2147.178980][ T31] ret_from_fork+0x5d4/0x6f0 [ 2147.183577][ T31] ? __pfx_kthread+0x10/0x10 [ 2147.188168][ T31] ret_from_fork_asm+0x1a/0x30 [ 2147.192949][ T31] [ 2147.196159][ T31] Kernel Offset: disabled [ 2147.200467][ T31] Rebooting in 86400 seconds..