last executing test programs: 39m53.80237493s ago: executing program 32 (id=62): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) shutdown(0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000001140), 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) 39m53.312711597s ago: executing program 33 (id=64): pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xb8}}, 0x4004) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 35m17.437451251s ago: executing program 34 (id=625): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x200}}}]}, 0x38}}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80004, {0x0, 0x0, 0x0, r10, {}, {0x9, 0xb}, {0x9, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 35m15.381892795s ago: executing program 35 (id=632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8, 0x0, 0xb44, 0x9, 0x0, 0xffffffff, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffc82, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000001000a0001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x10}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x3) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r8, 0x0, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="deffffffffffffff00000b0000000c0005800700010069620000"], 0x20}}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$hiddev(r10, &(0x7f0000000000)=""/149, 0x95) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) 23m21.401099633s ago: executing program 36 (id=2724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x50) 20m49.983712643s ago: executing program 9 (id=3166): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000049000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b954bc6762240c61c57ed374ad", 0x0, 0x20041ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) 20m48.177809869s ago: executing program 9 (id=3173): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) close(0x3) 20m47.897050592s ago: executing program 9 (id=3177): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) 20m47.538672201s ago: executing program 9 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x12, &(0x7f0000000300)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x6}, 0x46) 20m45.62672233s ago: executing program 9 (id=3182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) 20m45.45847759s ago: executing program 9 (id=3184): socket(0x27, 0x3, 0xff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd20, 0x319080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000540)={0x0, r5, 0xd, 0x7, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff", @ANYBLOB], 0x0) 20m29.638285804s ago: executing program 37 (id=3183): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 20m29.446593884s ago: executing program 38 (id=3188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x38, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2e, 0x9, 0x7fff, {0xe, @esp_ip4_spec={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2fe, 0x8}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10, 0x8f75, [0x6, 0x3]}, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x30}, @empty, 0x2, 0x34}, {0x0, @empty, 0x8, 0xd, [0x7ff, 0x6f8]}, 0xffffffff7fffffff, 0x5}}}) syz_open_dev$dri(0x0, 0xffffffff, 0x200) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) 20m29.356404704s ago: executing program 39 (id=3184): socket(0x27, 0x3, 0xff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd20, 0x319080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000540)={0x0, r5, 0xd, 0x7, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff", @ANYBLOB], 0x0) 10m10.833809643s ago: executing program 2 (id=4801): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x80102, 0x100) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d2060500423c3bb7232500182c00fe8000000000000000000000000000bbfe800000006202020000000500000000000000"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_setup(0x8, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"}}}}}, 0x0) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=r4, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r7, 0x8, 0x9) 10m8.305616859s ago: executing program 2 (id=4807): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 10m8.089054582s ago: executing program 2 (id=4809): socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 10m2.98121844s ago: executing program 2 (id=4816): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/9, 0x24}, 0x9}], 0x8000000000001e4, 0x300, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x204000, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setpriority(0x0, 0x0, 0x2a14b58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 10m1.845873837s ago: executing program 2 (id=4819): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f0000000080)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000cc0000010066b87a000f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000001c0)={0xf, 0x4, 0x80}) 10m0.945681135s ago: executing program 2 (id=4820): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x90) 9m44.244102492s ago: executing program 40 (id=4820): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x90) 6m15.46932381s ago: executing program 0 (id=5247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x8763ffe, 0x4) fcntl$dupfd(r3, 0x0, r3) 6m14.335347383s ago: executing program 0 (id=5251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) 6m13.005598459s ago: executing program 0 (id=5254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r2}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 6m11.616661391s ago: executing program 0 (id=5256): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xfffffffffffffd63}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 6m7.526741464s ago: executing program 0 (id=5269): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000000540)=@v2={0x3, 0x0, 0xf, 0x7ff, 0x800, "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"}, 0x809, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r8, 0x4, 0x0) dup(r8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) 6m1.458810311s ago: executing program 0 (id=5276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) r1 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x50b480, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getdents64(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20000008b}, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x5c13c0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800123afffe8000000000000000000000000000bbff0200000000000000000000a55614618600907800"/72], 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200c0001}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060102000000000000000000ff14000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a3100000000050001000700"/88], 0x58}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 5m40.581864407s ago: executing program 41 (id=5276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) r1 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x50b480, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getdents64(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20000008b}, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x5c13c0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800123afffe8000000000000000000000000000bbff0200000000000000000000a55614618600907800"/72], 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200c0001}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060102000000000000000000ff14000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a3100000000050001000700"/88], 0x58}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 4m13.934820093s ago: executing program 7 (id=5433): ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x1, 0x5, 0xfffffff9}) 4m13.443482995s ago: executing program 7 (id=5435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x74) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r3, 0x80002219, 0x7721, 0x16, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xb, 0x100000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x1, 0x20001000, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xd, 0x4, @thr={&(0x7f0000000e80)="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", &(0x7f0000000100)="1d4bd8cb30321a0aa2b318e4850868b2e5be94199b713e9f51e9232654fc6f1a22d2"}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8008}, 0x10) 4m10.014743857s ago: executing program 7 (id=5442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000140)=0x6) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4a, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(r7, 0xffffffffffffffff, 0x0) 4m6.699092807s ago: executing program 7 (id=5451): socket(0x1d, 0x2, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x18, 0x30, 0x871a15abc695f30d, 0x7, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x81) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) fstat(r1, &(0x7f0000000380)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r1, 0x1) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242) close_range(r0, 0xffffffffffffffff, 0x0) 4m5.537306986s ago: executing program 7 (id=5452): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r0, 0x80002219, 0x7721, 0x16, 0x0, 0x0) 4m5.246757042s ago: executing program 7 (id=5453): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x4044090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x10fe83, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x869db000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x142) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) fanotify_init(0xc, 0x80000) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, 0x0) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200), 0xa00d0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 3m48.383809227s ago: executing program 42 (id=5453): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x4044090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x10fe83, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x869db000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x142) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) fanotify_init(0xc, 0x80000) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, 0x0) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200), 0xa00d0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 3m0.223521317s ago: executing program 1 (id=5550): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2m56.086449762s ago: executing program 1 (id=5556): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x100, 0x3, 0x114, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000000d0000d2b300070012000000050017000000000006000a00ffff00000500190004000000060008000000000005001800f8000000", @ANYBLOB='D\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) getsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000300), &(0x7f0000000400)=0x4) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x6c623e, 0xa7f7a8c46d0312a1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x8, 0x8, 0x5, 0xff, {{0x5, 0x4, 0x1, 0x3c, 0x14, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010101}}}}) 2m55.022261964s ago: executing program 1 (id=5558): syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="a7", 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 2m53.05065282s ago: executing program 1 (id=5560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x8763ffe, 0x4) fcntl$dupfd(r3, 0x0, r3) 2m51.800368976s ago: executing program 1 (id=5563): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x74) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) preadv(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r0, 0x80002219, 0x7721, 0x16, 0x0, 0x0) 2m51.610720646s ago: executing program 1 (id=5565): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xfffffffffffffd63}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2m35.008095144s ago: executing program 43 (id=5565): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xfffffffffffffd63}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 16.514780822s ago: executing program 5 (id=5816): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x2a8, &(0x7f0000000440)={0x0, 0xe14e, 0x20, 0x3, 0x206, 0x0, r0}, 0x0, 0x0) 16.333129908s ago: executing program 5 (id=5817): ioperm(0x0, 0xa, 0x400000000000001d) iopl(0x3) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'s526\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0x10001, 0x20000004, 0x6, 0xffe, 0xe3b3, 0x1, 0x1, 0x4, 0x100007, 0xa9, 0x6, 0x5, 0x40000009, 0x830, 0x2, 0xfffd, 0x8, 0xa4df, 0x101, 0x2, 0x0, 0x100007, 0x3, 0x8, 0x5, 0x713]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, &(0x7f0000000080)=[0x3, 0x3, 0x4, 0x7, 0x4660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x3, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x45, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1, 0x8, 0x3, 0x66}}) syz_emit_ethernet(0xbe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 14.852782659s ago: executing program 8 (id=5821): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8814) 14.630669848s ago: executing program 6 (id=5822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r1, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 14.134777107s ago: executing program 6 (id=5824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) sendmmsg$unix(r2, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 14.072674185s ago: executing program 6 (id=5825): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffe, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) eventfd(0x3c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x400000bce) syz_open_dev$video(0x0, 0xa7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, &(0x7f0000000600), 0x4) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e00000004000000040000007f00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="182000003e27e3080e525d797d4f960f3c5a31b41db82d3f23657db4092985fc2a2424e276bb5823733b", @ANYRES32=r4, @ANYBLOB="000000007d4b0000950000000000000085000000b500000018630000070000000000000000000000b7080000000000007b8af8ff00000000b7080000c50c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000140)='GPL\x00', 0x3, 0x3b, &(0x7f00000005c0)=""/59, 0x41100, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7166c735de1815"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, r5, &(0x7f00000001c0)) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693bb724900"/33, 0x21}, {&(0x7f0000001740)="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", 0xc55}], 0x5}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000e006119c000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) 13.463083414s ago: executing program 5 (id=5828): ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x8, @remote, 'veth0_to_bond\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'ipvlan1\x00'}}, 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(0x0, 0x0, 0x3) 11.145662712s ago: executing program 4 (id=5830): syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r1, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) 10.785254807s ago: executing program 3 (id=5831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00000000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6, 0x10}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xfffffe00) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0xfff3, @local, 0x26000}, 0x1c) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 10.763860199s ago: executing program 4 (id=5832): r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r1) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 10.078814042s ago: executing program 4 (id=5833): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x74) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r3, 0x80002219, 0x7721, 0x16, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xb, 0x100000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x1, 0x20001000, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xd, 0x4, @thr={&(0x7f0000000e80)="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", &(0x7f0000000100)="1d4bd8cb30321a0aa2b318e4850868b2e5be94199b713e9f51e9232654fc6f1a22d2"}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8008}, 0x10) 8.9077217s ago: executing program 3 (id=5834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r1, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 7.766690552s ago: executing program 6 (id=5835): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x2, 0x3, 0x20420, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x5}, 0xfffffea7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) clock_adjtime(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x1c10c1, 0x9c37611dc13d0d23) fchown(r4, 0x0, 0xee01) 7.277133017s ago: executing program 5 (id=5836): socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc00000018000703ab092500090007000a070000000000060000369321000700ff2500000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c", 0x47) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = add_key$user(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)="c2e580c47ab1f62543f7f1636dc6", 0xe, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.275808893s ago: executing program 4 (id=5837): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x5, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.222242015s ago: executing program 8 (id=5838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 6.203119781s ago: executing program 3 (id=5839): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, 0x0) 5.688954384s ago: executing program 8 (id=5840): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5.462588809s ago: executing program 5 (id=5841): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket(0x1d, 0x0, 0x6) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="660f6ab30000f3af65d9e10f20d86635200000000f22d8f20f2b9b0080f30fc7b500a0baf80c66b84094f68566efbafc0c66edb800008ee00f20db2e0f01cf", 0x3f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0xe}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bd6000/0x400000)=nil) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0x4004850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000811) 4.2683724s ago: executing program 8 (id=5842): syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="a7", 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 3.857183649s ago: executing program 4 (id=5843): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x109100, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000800)={{}, 0xc5}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 3.856703324s ago: executing program 3 (id=5844): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x100, 0x3, 0x114, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000000d0000d2b300070012000000050017000000000006000a00ffff00000500190004000000060008000000000005001800f8000000", @ANYBLOB='D\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) getsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000300), &(0x7f0000000400)=0x4) r6 = socket(0x10, 0x80002, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x6c623e, 0xa7f7a8c46d0312a1) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmmsg$sock(r11, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x8, 0x8, 0x5, 0xff, {{0x5, 0x4, 0x1, 0x3c, 0x14, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010101}}}}) 1.990797041s ago: executing program 6 (id=5845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b400000000038000480340001800b0001006e756d67656e00002400028008000340000000010800014000000000080004400000000008000240000000000900010073797a3000000000140000001100010000000000000000000000000adb2cc1346d80121bc215bc38d58dce1a3152fcabc54b665f9fb7bbab519423500c7a"], 0xd4}}, 0x0) 1.969118385s ago: executing program 3 (id=5846): prlimit64(0x0, 0xe, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/9, 0x24}, 0x9}], 0x8000000000001e4, 0x300, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x204000, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setpriority(0x0, 0x0, 0x2a14b58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x4810) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 1.884595953s ago: executing program 4 (id=5847): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x8, @remote, 'veth0_to_bond\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'ipvlan1\x00'}}, 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(0x0, 0x0, 0x3) 1.241654421s ago: executing program 6 (id=5848): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) poll(0x0, 0x0, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) r3 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000a00)=0xb5, 0x46) listen(r3, 0x2000002) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$userio(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r2, &(0x7f0000000040)=""/117, 0x75) 926.900064ms ago: executing program 8 (id=5849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r1, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 777.596385ms ago: executing program 3 (id=5850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x11, r7, 0x81000000) r8 = fcntl$dupfd(r3, 0x0, r3) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1009, 0x0, 0x14, 0xb4a, 0xbffc}) move_mount(0xffffffffffffff9c, 0x0, r8, 0x0, 0x177) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYBLOB="170928bd700000000000010000000500070000"], 0x3c}, 0x1, 0x620b}, 0x0) 508.751269ms ago: executing program 8 (id=5851): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) io_setup(0xff, 0x0) io_submit(0x0, 0x0, 0x0) 0s ago: executing program 5 (id=5852): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): nk_simulate: vblank timer overrun [ 1716.620669][ C0] vkms_vblank_simulate: vblank timer overrun [ 1716.924594][ C0] vkms_vblank_simulate: vblank timer overrun [ 1717.061535][T21535] netlink: 'syz.8.4372': attribute type 1 has an invalid length. [ 1717.124633][T21535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1717.297105][T21538] bond1: (slave gretap1): making interface the new active one [ 1717.319409][T21538] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1717.466194][ C0] vkms_vblank_simulate: vblank timer overrun [ 1719.770858][T21553] syzkaller0: entered promiscuous mode [ 1719.770887][T21553] syzkaller0: entered allmulticast mode [ 1720.133664][ T1577] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1720.477191][ T1577] usb 1-1: Using ep0 maxpacket: 8 [ 1720.481425][ T1577] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1720.483083][ T1577] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1720.500259][ T1577] usb 1-1: string descriptor 0 read error: -22 [ 1720.500403][ T1577] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1720.500425][ T1577] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.518507][ T1577] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1720.545138][ T1577] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1720.545406][ T1577] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1720.545434][ T1577] usb 1-1: media controller created [ 1720.647215][ T1577] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1720.829897][T21556] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1721.058857][ T1577] zl10353_read_register: readreg error (reg=127, ret==0) [ 1721.250697][ T1577] usb 1-1: USB disconnect, device number 20 [ 1725.556360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1725.715480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1725.790582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1726.522933][ C0] vkms_vblank_simulate: vblank timer overrun [ 1727.242635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1728.219250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1728.272436][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4402'. [ 1728.407409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1728.998231][ C0] vkms_vblank_simulate: vblank timer overrun [ 1729.059787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1729.170232][ C0] vkms_vblank_simulate: vblank timer overrun [ 1729.349351][T16173] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1729.499279][T16173] usb 3-1: Using ep0 maxpacket: 16 [ 1729.501753][T16173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1729.505876][T16173] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1729.505902][T16173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.505920][T16173] usb 3-1: Product: syz [ 1729.505933][T16173] usb 3-1: Manufacturer: syz [ 1729.505946][T16173] usb 3-1: SerialNumber: syz [ 1729.566028][T16173] usb 3-1: config 0 descriptor?? [ 1729.575721][T16173] hub 3-1:0.0: bad descriptor, ignoring hub [ 1729.575743][T16173] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1729.578786][T16173] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input61 [ 1729.817267][T21647] IPv6: NLM_F_CREATE should be specified when creating new route [ 1730.218959][T21653] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 1730.272712][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.272780][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.446991][T21653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1730.519814][ T1577] usb 3-1: USB disconnect, device number 16 [ 1730.548505][T21657] bond3: (slave gretap1): making interface the new active one [ 1730.567922][T21657] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1734.720123][T17449] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1734.838732][T21691] ALSA: mixer_oss: invalid OSS volume 'u' [ 1736.170315][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4421'. [ 1736.465764][T21709] IPv6: NLM_F_CREATE should be specified when creating new route [ 1736.789310][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4423'. [ 1737.059284][T19032] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1737.209271][T19032] usb 3-1: Using ep0 maxpacket: 16 [ 1737.210889][T19032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1737.212888][T19032] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1737.212903][T19032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.212913][T19032] usb 3-1: Product: syz [ 1737.212920][T19032] usb 3-1: Manufacturer: syz [ 1737.212927][T19032] usb 3-1: SerialNumber: syz [ 1737.216063][T19032] usb 3-1: config 0 descriptor?? [ 1737.218581][T19032] hub 3-1:0.0: bad descriptor, ignoring hub [ 1737.218601][T19032] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1737.295430][T19032] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input62 [ 1741.629755][T21727] ALSA: mixer_oss: invalid OSS volume 'u' [ 1746.069324][T19032] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1746.233500][T19032] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1746.233536][T19032] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1746.233547][T19032] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1746.235690][T19032] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1746.235706][T19032] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1746.235717][T19032] usb 1-1: Product: syz [ 1746.235724][T19032] usb 1-1: Manufacturer: syz [ 1746.235731][T19032] usb 1-1: SerialNumber: syz [ 1746.275703][T19032] usb 1-1: config 0 descriptor?? [ 1746.330387][T19032] hub 1-1:0.0: bad descriptor, ignoring hub [ 1746.330409][T19032] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1746.388644][T19032] usb 1-1: selecting invalid altsetting 0 [ 1747.697603][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4439'. [ 1747.844955][ C0] vkms_vblank_simulate: vblank timer overrun [ 1748.546916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1748.719377][ T5165] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 1748.909529][T21769] ALSA: mixer_oss: invalid OSS volume 'u' [ 1749.191004][ T44] usb 1-1: USB disconnect, device number 21 [ 1749.585402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1749.759757][T19033] usb 3-1: USB disconnect, device number 17 [ 1750.375275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1751.168595][T21791] tipc: Started in network mode [ 1751.168662][T21791] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1751.169356][T21791] tipc: Enabled bearer , priority 10 [ 1752.194689][T19033] tipc: Node number set to 10136234 [ 1752.572572][T21813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4454'. [ 1753.808274][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4456'. [ 1754.079487][T18882] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1754.229194][T18882] usb 3-1: Using ep0 maxpacket: 16 [ 1754.230973][T18882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1754.233129][T18882] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1754.233154][T18882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.233165][T18882] usb 3-1: Product: syz [ 1754.233172][T18882] usb 3-1: Manufacturer: syz [ 1754.233179][T18882] usb 3-1: SerialNumber: syz [ 1754.321695][T18882] usb 3-1: config 0 descriptor?? [ 1754.323615][T18882] hub 3-1:0.0: bad descriptor, ignoring hub [ 1754.323635][T18882] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1754.326608][T18882] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input63 [ 1754.539371][T21827] openvswitch: netlink: IP tunnel dst address not specified [ 1755.769722][T21257] usb 3-1: USB disconnect, device number 18 [ 1760.159241][T19033] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1760.319582][T19033] usb 1-1: Using ep0 maxpacket: 8 [ 1760.321815][T19033] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1760.322939][T19033] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1760.325886][T19033] usb 1-1: string descriptor 0 read error: -22 [ 1760.325983][T19033] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1760.325995][T19033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.377966][T19033] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1760.387055][T21866] syz.2.4471 (21866): drop_caches: 1 [ 1760.404248][T19033] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1760.406035][T19033] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1760.406064][T19033] usb 1-1: media controller created [ 1760.535069][T19033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1761.839219][T19033] zl10353_read_register: readreg error (reg=127, ret==0) [ 1762.330754][T21882] lo speed is unknown, defaulting to 1000 [ 1762.331397][T21882] lo speed is unknown, defaulting to 1000 [ 1762.675280][T21882] lo speed is unknown, defaulting to 1000 [ 1762.846957][T21882] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1762.855865][T21882] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1762.887880][T21882] lo speed is unknown, defaulting to 1000 [ 1762.891358][T21882] lo speed is unknown, defaulting to 1000 [ 1762.896706][T21882] lo speed is unknown, defaulting to 1000 [ 1762.899460][T21882] lo speed is unknown, defaulting to 1000 [ 1762.901586][T21882] lo speed is unknown, defaulting to 1000 [ 1762.903099][T21882] lo speed is unknown, defaulting to 1000 [ 1762.905618][T21882] lo speed is unknown, defaulting to 1000 [ 1762.907100][T21882] lo speed is unknown, defaulting to 1000 [ 1763.176894][T19033] usb 1-1: USB disconnect, device number 22 [ 1767.878289][T21902] syzkaller0: entered promiscuous mode [ 1767.878307][T21902] syzkaller0: entered allmulticast mode [ 1770.592923][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1770.597002][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1770.598435][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1770.832655][T21920] infiniband syz2: set active [ 1770.832668][T21920] infiniband syz2: added vxcan1 [ 1770.834736][T21920] syz2: rxe_create_cq: returned err = -12 [ 1770.834784][T21920] infiniband syz2: Couldn't create ib_mad CQ [ 1770.834910][T21920] infiniband syz2: Couldn't open port 1 [ 1770.846673][ T44] vxcan1 speed is unknown, defaulting to 1000 [ 1770.870331][T21920] RDS/IB: syz2: added [ 1770.871340][T21920] smc: adding ib device syz2 with port count 1 [ 1770.871638][T21920] smc: ib device syz2 port 1 has pnetid [ 1770.875099][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1771.054810][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1771.212684][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1771.371958][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1771.530240][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1771.554714][T18882] vxcan1 speed is unknown, defaulting to 1000 [ 1771.750299][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1771.909473][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1772.068011][T21920] vxcan1 speed is unknown, defaulting to 1000 [ 1772.541898][T21931] siw: device registration error -23 [ 1775.768771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1775.801213][T21967] Bluetooth: MGMT ver 1.23 [ 1776.470234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1776.708839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1777.197764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1777.869667][T17449] Bluetooth: hci0: command tx timeout [ 1778.401028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1780.356726][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1780.356740][ T37] audit: type=1800 audit(1759268737.099:1528): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4514" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1782.118769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1782.289400][T22049] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4520'. [ 1782.515218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1784.579371][T19033] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1784.971753][T19033] usb 1-1: Using ep0 maxpacket: 8 [ 1785.277445][T19033] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1785.278464][T19033] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1785.285770][T19033] usb 1-1: string descriptor 0 read error: -22 [ 1785.285914][T19033] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1785.285937][T19033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.328829][T19033] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1785.435487][T19033] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1785.435859][T19033] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1785.435910][T19033] usb 1-1: media controller created [ 1785.931416][T22082] lo speed is unknown, defaulting to 1000 [ 1785.997131][T22082] lo speed is unknown, defaulting to 1000 [ 1786.014455][T22082] lo speed is unknown, defaulting to 1000 [ 1786.597394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.618472][T22067] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1786.736188][T22082] infiniband sz1: set active [ 1786.736202][T22082] infiniband sz1: added lo [ 1786.756451][ T44] lo speed is unknown, defaulting to 1000 [ 1786.825236][T19033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1786.892057][T22082] RDS/IB: sz1: added [ 1786.892140][T22082] smc: adding ib device sz1 with port count 1 [ 1786.892163][T22082] smc: ib device sz1 port 1 has pnetid [ 1786.895900][T22082] lo speed is unknown, defaulting to 1000 [ 1786.903701][T19033] zl10353_read_register: readreg error (reg=127, ret==0) [ 1786.951341][ T44] lo speed is unknown, defaulting to 1000 [ 1787.105084][T22082] lo speed is unknown, defaulting to 1000 [ 1787.264569][T22082] lo speed is unknown, defaulting to 1000 [ 1787.425606][T22082] lo speed is unknown, defaulting to 1000 [ 1787.585568][T22082] lo speed is unknown, defaulting to 1000 [ 1787.745640][T22082] lo speed is unknown, defaulting to 1000 [ 1787.985887][T22082] lo speed is unknown, defaulting to 1000 [ 1788.155827][T22082] lo speed is unknown, defaulting to 1000 [ 1788.532183][T19033] usb 1-1: USB disconnect, device number 23 [ 1790.030319][T22094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4534'. [ 1791.719902][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.719976][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.463494][ C0] vkms_vblank_simulate: vblank timer overrun [ 1792.547693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1795.616349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1796.026660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1796.157116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1796.243677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1797.260688][T22160] syzkaller0: entered promiscuous mode [ 1797.260706][T22160] syzkaller0: entered allmulticast mode [ 1797.530443][T22167] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4551'. [ 1797.624492][T22169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4552'. [ 1797.624514][T22169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4552'. [ 1801.216034][T22193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4557'. [ 1801.216203][T22193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4557'. [ 1801.496139][T22193] sit1: entered allmulticast mode [ 1804.298529][T22217] syzkaller0: entered promiscuous mode [ 1804.298547][T22217] syzkaller0: entered allmulticast mode [ 1805.187091][T22226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4566'. [ 1806.779480][T22237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1807.213338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.333595][T22246] siw: device registration error -23 [ 1808.292400][ C0] vkms_vblank_simulate: vblank timer overrun [ 1809.377632][T22251] netlink: 'syz.6.4573': attribute type 1 has an invalid length. [ 1809.458357][T22251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1809.815758][ T44] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1809.979824][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 1809.990569][ T44] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1809.990596][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.990615][ T44] usb 9-1: Product: syz [ 1809.990628][ T44] usb 9-1: Manufacturer: syz [ 1809.990641][ T44] usb 9-1: SerialNumber: syz [ 1809.998848][ T44] usb 9-1: config 0 descriptor?? [ 1810.424786][ T44] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1810.451617][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1810.456677][ T44] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1810.456733][ T44] usb 9-1: media controller created [ 1810.917080][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1811.852426][ T44] zl10353_read_register: readreg error (reg=127, ret==0) [ 1811.852485][ T44] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1811.852499][ T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1811.919623][ T44] usb 9-1: USB disconnect, device number 26 [ 1812.202066][ T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1813.898789][T22295] siw: device registration error -23 [ 1813.993896][T22287] could not allocate digest TFM handle crct10dif-arm64-neon [ 1818.204915][T14211] Bluetooth: hci0: command 0x0405 tx timeout [ 1820.009212][T21255] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1820.072605][T22338] nbd: must specify a device to reconfigure [ 1820.159910][T21255] usb 9-1: Using ep0 maxpacket: 16 [ 1820.166510][T21255] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1820.166537][T21255] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.166556][T21255] usb 9-1: Product: syz [ 1820.166569][T21255] usb 9-1: Manufacturer: syz [ 1820.166583][T21255] usb 9-1: SerialNumber: syz [ 1820.219364][ T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1820.241580][T21255] usb 9-1: config 0 descriptor?? [ 1820.344500][T22344] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4599'. [ 1820.397806][ T44] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1820.397835][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.397854][ T44] usb 1-1: Product: syz [ 1820.397868][ T44] usb 1-1: Manufacturer: syz [ 1820.397881][ T44] usb 1-1: SerialNumber: syz [ 1820.541554][ T44] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1820.678577][T22347] siw: device registration error -23 [ 1821.132059][T21255] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1821.485991][T18882] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1822.703714][T18882] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1822.706924][T18882] ath9k_htc: Failed to initialize the device [ 1822.910755][ T44] usb 9-1: USB disconnect, device number 27 [ 1823.087021][T18882] usb 1-1: ath9k_htc: USB layer deinitialized [ 1824.341773][T21257] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1824.574811][ T5880] usb 1-1: USB disconnect, device number 24 [ 1824.729259][T21257] usb 3-1: Using ep0 maxpacket: 16 [ 1824.731168][T21257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.731183][T21257] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1824.902202][T21257] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1824.902230][T21257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.902249][T21257] usb 3-1: Product: syz [ 1824.902262][T21257] usb 3-1: Manufacturer: syz [ 1824.902276][T21257] usb 3-1: SerialNumber: syz [ 1824.923767][T21257] usb 3-1: config 0 descriptor?? [ 1825.883115][T21257] usb 3-1: USB disconnect, device number 19 [ 1826.346759][T22386] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4610'. [ 1826.629241][T18882] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1826.792574][T18882] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1826.792632][T18882] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1826.792655][T18882] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1826.798588][T18882] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1826.798614][T18882] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1826.798634][T18882] usb 1-1: Product: syz [ 1826.798647][T18882] usb 1-1: Manufacturer: syz [ 1826.798660][T18882] usb 1-1: SerialNumber: syz [ 1826.876043][T18882] usb 1-1: config 0 descriptor?? [ 1826.904316][T18882] hub 1-1:0.0: bad descriptor, ignoring hub [ 1826.904354][T18882] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1826.989894][T18882] usb 1-1: selecting invalid altsetting 0 [ 1827.837663][ T5880] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1828.161300][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 1828.165448][ T5880] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1828.165464][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.165475][ T5880] usb 3-1: Product: syz [ 1828.165482][ T5880] usb 3-1: Manufacturer: syz [ 1828.165489][ T5880] usb 3-1: SerialNumber: syz [ 1828.925723][ T5880] usb 3-1: config 0 descriptor?? [ 1829.620461][ T5880] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1829.664227][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1829.664882][ T5880] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1829.664914][ T5880] usb 3-1: media controller created [ 1829.936423][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1829.979761][ T5880] zl10353_read_register: readreg error (reg=127, ret==0) [ 1829.979817][ T5880] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1829.979830][ T5880] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1830.011242][ T5880] usb 3-1: USB disconnect, device number 20 [ 1830.099877][T19494] usb 1-1: USB disconnect, device number 25 [ 1830.178534][ T5880] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1830.666746][T22423] rdma_rxe: rxe_newlink: failed to add lo [ 1831.548376][T22434] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4622'. [ 1831.548394][T22434] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4622'. [ 1834.649863][T22456] netlink: 'syz.6.4629': attribute type 27 has an invalid length. [ 1834.859356][T18882] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1834.920834][T22463] sz1: rxe_newlink: already configured on lo [ 1835.011910][T22467] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4633'. [ 1835.011937][T22467] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4633'. [ 1835.173573][T18882] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1835.173627][T18882] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1835.173648][T18882] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1835.179619][T18882] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1835.179645][T18882] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1835.179663][T18882] usb 3-1: Product: syz [ 1835.179676][T18882] usb 3-1: Manufacturer: syz [ 1835.179689][T18882] usb 3-1: SerialNumber: syz [ 1835.187843][T18882] usb 3-1: config 0 descriptor?? [ 1835.194350][T18882] hub 3-1:0.0: bad descriptor, ignoring hub [ 1835.194383][T18882] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1836.517263][T18882] usb 3-1: selecting invalid altsetting 0 [ 1840.741946][T22506] delete_channel: no stack [ 1841.307448][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4641'. [ 1841.601199][T22507] ceph: No mds server is up or the cluster is laggy [ 1841.632107][T22511] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4645'. [ 1841.632125][T22511] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4645'. [ 1842.908405][T19032] usb 3-1: USB disconnect, device number 21 [ 1843.547732][T22533] netlink: 'syz.8.4651': attribute type 1 has an invalid length. [ 1845.200195][T19032] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1845.785803][T22550] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4657'. [ 1845.785822][T22550] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4657'. [ 1845.960762][T19032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1845.960780][T19032] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1845.960793][T19032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1845.960803][T19032] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1845.960826][T19032] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1845.960838][T19032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.963934][T19032] usb 3-1: config 0 descriptor?? [ 1846.265612][T22546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.266423][T22546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.331000][T19032] hdpvr 3-1:0.0: firmware version 0xd dated [ 1847.991387][T22555] netlink: 'syz.7.4658': attribute type 1 has an invalid length. [ 1848.124648][T19032] hdpvr 3-1:0.0: Could not setup controls [ 1848.125401][T19032] hdpvr 3-1:0.0: registering videodev failed [ 1848.387493][T19032] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 1848.448130][T19032] usb 3-1: USB disconnect, device number 22 [ 1850.392844][T22585] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4669'. [ 1850.392864][T22585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4669'. [ 1851.228312][T22593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4670'. [ 1852.323851][T22599] siw: device registration error -23 [ 1853.300803][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.300900][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.598395][T17449] Bluetooth: hci0: link tx timeout [ 1853.599036][T17449] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1856.349482][T22314] Bluetooth: hci0: command 0x0405 tx timeout [ 1856.973512][T14211] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1860.673040][T22671] loop5: detected capacity change from 0 to 7 [ 1862.019932][T15960] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.020119][T15960] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.025191][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.025220][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.025477][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.025500][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.025623][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.025645][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.025783][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.025804][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.025936][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.025958][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.026074][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.026095][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.026174][T22671] ldm_validate_partition_table(): Disk read failed. [ 1862.026223][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.026245][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.026371][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.026393][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.026510][T22671] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1862.026531][T22671] Buffer I/O error on dev loop5, logical block 0, async page read [ 1862.026788][T22671] Dev loop5: unable to read RDB block 0 [ 1862.027792][T22671] loop5: unable to read partition table [ 1862.284503][T22671] loop5: partition table beyond EOD, truncated [ 1862.284532][T22671] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1866.199477][T19494] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1866.380967][T19494] usb 1-1: Using ep0 maxpacket: 8 [ 1866.392125][T19494] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1866.393581][T19494] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1866.434774][T19494] usb 1-1: string descriptor 0 read error: -22 [ 1866.436040][T19494] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1866.436097][T19494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.507461][T22735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4714'. [ 1866.580185][T22735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.602908][T22735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.624427][T22735] bridge0: entered allmulticast mode [ 1867.176349][T19494] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1867.207000][T19494] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1867.207379][T19494] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1867.207425][T19494] usb 1-1: media controller created [ 1867.264448][T19494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1869.556481][T19494] usb 1-1: USB disconnect, device number 26 [ 1871.804511][T22763] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4720'. [ 1872.624191][T22769] program syz.8.4723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1878.146544][ C1] vkms_vblank_simulate: vblank timer overrun [ 1878.358887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1878.944906][ C1] vkms_vblank_simulate: vblank timer overrun [ 1879.655880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1879.787285][ T5885] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1880.033154][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 1880.036373][ T5885] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1880.038153][ T5885] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1880.142660][ C1] vkms_vblank_simulate: vblank timer overrun [ 1880.148845][ T5885] usb 9-1: string descriptor 0 read error: -22 [ 1880.148948][ T5885] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1880.148960][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.212276][ T5885] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1880.245745][ T5885] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1880.246120][ T5885] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1880.246168][ T5885] usb 9-1: media controller created [ 1880.286983][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1881.201867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1881.627597][ T5885] usb 9-1: USB disconnect, device number 28 [ 1882.605767][T22823] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4737'. [ 1883.222759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1884.136183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1886.328206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1886.748003][T22843] ieee802154 phy0 wpan0: encryption failed: -22 [ 1887.857893][ C1] vkms_vblank_simulate: vblank timer overrun [ 1889.411453][T22865] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4748'. [ 1893.337725][T22895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4758'. [ 1893.337746][T22895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4758'. [ 1895.586098][T22908] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4764'. [ 1896.889933][T22923] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4768'. [ 1897.499199][T22927] ceph: No mds server is up or the cluster is laggy [ 1897.518728][T22901] syz.7.4759 (22901): drop_caches: 1 [ 1897.721674][T22933] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4772'. [ 1897.721696][T22933] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4772'. [ 1898.657421][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4771'. [ 1898.980850][ T5885] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1899.590234][ T5885] usb 9-1: Using ep0 maxpacket: 16 [ 1899.598017][ T5885] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1899.598043][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.598063][ T5885] usb 9-1: Product: syz [ 1899.598075][ T5885] usb 9-1: Manufacturer: syz [ 1899.598088][ T5885] usb 9-1: SerialNumber: syz [ 1899.603290][ T5885] usb 9-1: config 0 descriptor?? [ 1899.652945][T22933] vivid-004: kernel_thread() failed [ 1900.041893][ T5885] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1900.051937][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1900.052996][ T5885] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1900.053047][ T5885] usb 9-1: media controller created [ 1900.257924][T22937] dtv5100: wlen = 0, aborting. [ 1901.164865][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1903.011605][ T5885] zl10353_read_register: readreg error (reg=127, ret==0) [ 1903.011668][ T5885] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1903.011682][ T5885] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1903.093167][ T5885] usb 9-1: USB disconnect, device number 29 [ 1903.309214][ T5885] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1904.620222][T22977] netlink: 'syz.7.4782': attribute type 1 has an invalid length. [ 1906.509865][T22983] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4785'. [ 1906.509895][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4785'. [ 1906.805755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1906.861103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1907.092580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1907.320448][ C0] vkms_vblank_simulate: vblank timer overrun [ 1907.438634][T22984] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1907.488370][T22984] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1907.511820][ C0] vkms_vblank_simulate: vblank timer overrun [ 1908.416913][T19032] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1908.577433][T19032] usb 1-1: Using ep0 maxpacket: 16 [ 1908.588170][T19032] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1908.588198][T19032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.588217][T19032] usb 1-1: Product: syz [ 1908.588230][T19032] usb 1-1: Manufacturer: syz [ 1908.588243][T19032] usb 1-1: SerialNumber: syz [ 1908.612440][T19032] usb 1-1: config 0 descriptor?? [ 1909.082570][T19032] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1909.102397][T19032] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1909.107543][T19032] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1909.107600][T19032] usb 1-1: media controller created [ 1909.170368][T19032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1909.860348][T19032] zl10353_read_register: readreg error (reg=127, ret==0) [ 1909.860408][T19032] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1909.860420][T19032] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1909.860591][T22995] dtv5100: wlen = 0, aborting. [ 1909.951617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1910.033212][T19032] usb 1-1: USB disconnect, device number 27 [ 1910.112359][T19032] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1910.989432][T23023] netlink: 'syz.8.4795': attribute type 26 has an invalid length. [ 1915.931331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1916.520452][T19494] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1916.616429][ T5898] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1916.694187][T19494] usb 1-1: Using ep0 maxpacket: 8 [ 1916.703494][T19494] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1916.705344][T19494] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1916.718462][T19494] usb 1-1: string descriptor 0 read error: -22 [ 1916.718615][T19494] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1916.718636][T19494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.768989][T19494] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1916.777148][ T5898] usb 9-1: Using ep0 maxpacket: 16 [ 1916.806080][ T5898] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1916.806108][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.806127][ T5898] usb 9-1: Product: syz [ 1916.806141][ T5898] usb 9-1: Manufacturer: syz [ 1916.806154][ T5898] usb 9-1: SerialNumber: syz [ 1916.857363][ T5898] usb 9-1: config 0 descriptor?? [ 1916.901984][T19494] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1916.902368][T19494] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1916.902414][T19494] usb 1-1: media controller created [ 1917.054840][T23070] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1917.202616][T19494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1917.287363][T19494] zl10353_read_register: readreg error (reg=127, ret==0) [ 1917.303597][ T5898] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1917.309170][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1917.310773][ T5898] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1917.311100][ T5898] usb 9-1: media controller created [ 1917.355568][T22314] Bluetooth: hci0: command 0x0405 tx timeout [ 1917.389800][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1917.416984][T19494] usb 1-1: USB disconnect, device number 28 [ 1917.518451][ T5898] zl10353_read_register: readreg error (reg=127, ret==0) [ 1917.518492][ T5898] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1917.518501][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1917.562548][ T5898] usb 9-1: USB disconnect, device number 30 [ 1919.332734][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.332780][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.487765][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1920.295497][T23095] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1920.869891][T23109] fuse: Bad value for 'fd' [ 1923.348235][T23121] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1925.678072][T23143] ceph: No mds server is up or the cluster is laggy [ 1925.728558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.830209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.922144][ C0] vkms_vblank_simulate: vblank timer overrun [ 1926.268693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1928.833263][ C0] vkms_vblank_simulate: vblank timer overrun [ 1929.322584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1929.380976][ C0] vkms_vblank_simulate: vblank timer overrun [ 1930.194893][T23164] IPv6: NLM_F_CREATE should be specified when creating new route [ 1930.345711][ C0] vkms_vblank_simulate: vblank timer overrun [ 1930.841382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1931.104571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1931.412756][T23171] Bluetooth: MGMT ver 1.23 [ 1938.264791][T23176] syz2: rxe_newlink: already configured on vxcan1 [ 1939.646459][T23182] input: syz1 as /devices/virtual/input/input64 [ 1943.846366][ C0] vkms_vblank_simulate: vblank timer overrun [ 1943.959204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1944.439729][T22314] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1944.468831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1944.531819][T22314] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1944.534005][T22314] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1944.545140][T22314] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1944.660075][T22314] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1945.459656][T23216] lo speed is unknown, defaulting to 1000 [ 1945.465905][T23216] vxcan1 speed is unknown, defaulting to 1000 [ 1947.352852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1947.516527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1947.522985][T14211] Bluetooth: hci2: command tx timeout [ 1948.820607][ C0] vkms_vblank_simulate: vblank timer overrun [ 1949.682405][T14211] Bluetooth: hci2: command tx timeout [ 1949.718666][T23216] lo speed is unknown, defaulting to 1000 [ 1949.856558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1950.188173][T23257] netlink: 'syz.6.4852': attribute type 4 has an invalid length. [ 1950.224128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1950.388563][T18882] lo speed is unknown, defaulting to 1000 [ 1950.391099][T18882] sz1: Port: 1 Link DOWN [ 1950.401095][T19494] lo speed is unknown, defaulting to 1000 [ 1950.706574][ C0] vkms_vblank_simulate: vblank timer overrun [ 1950.937234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1951.906185][T14211] Bluetooth: hci2: command tx timeout [ 1952.748524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.521026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.599958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.730739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.759456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.930774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1954.020182][ C0] vkms_vblank_simulate: vblank timer overrun [ 1954.130245][T14211] Bluetooth: hci2: command tx timeout [ 1954.428618][T23278] input: syz1 as /devices/virtual/input/input65 [ 1954.512391][T23216] chnl_net:caif_netlink_parms(): no params data found [ 1955.470263][ C0] vkms_vblank_simulate: vblank timer overrun [ 1955.785223][T23216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.793968][T23216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.794247][T23216] bridge_slave_0: entered allmulticast mode [ 1955.815847][T23216] bridge_slave_0: entered promiscuous mode [ 1956.150100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1956.388368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1956.402859][T23216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.402968][T23216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.403133][T23216] bridge_slave_1: entered allmulticast mode [ 1956.428717][T23216] bridge_slave_1: entered promiscuous mode [ 1956.782509][T23305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4862'. [ 1957.332011][T23216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1957.348855][T23216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1957.917029][T23216] team0: Port device team_slave_0 added [ 1957.973139][T23216] team0: Port device team_slave_1 added [ 1958.124829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1958.818987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1958.994210][ C0] vkms_vblank_simulate: vblank timer overrun [ 1959.193818][T23316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4867'. [ 1959.409473][T23316] bond4: entered promiscuous mode [ 1959.420329][T23316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1959.573497][T23317] bridge1: entered promiscuous mode [ 1959.575816][T23317] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1959.577272][T23216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1959.577285][T23216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1959.577314][T23216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1959.579736][T23216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1959.579748][T23216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1959.579769][T23216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1960.321086][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1960.593476][T23216] hsr_slave_0: entered promiscuous mode [ 1960.667166][T23216] hsr_slave_1: entered promiscuous mode [ 1960.738416][T23216] debugfs: 'hsr0' already exists in 'hsr' [ 1960.738578][T23216] Cannot create hsr debugfs directory [ 1960.823862][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1960.823902][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.955315][ T44] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1961.955344][ T44] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1961.955361][ T44] usb 1-1: Manufacturer: syz [ 1962.001617][ T44] usb 1-1: config 0 descriptor?? [ 1965.440564][ T44] usbhid 1-1:0.0: can't add hid device: -71 [ 1965.440686][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1965.565494][ T44] usb 1-1: USB disconnect, device number 29 [ 1966.003732][T23355] overlayfs: failed to resolve './bus': -2 [ 1966.094455][T23357] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4879'. [ 1966.094477][T23357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4879'. [ 1966.507441][T23349] ceph: No mds server is up or the cluster is laggy [ 1967.483766][T23375] siw: device registration error -23 [ 1971.096095][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4892'. [ 1972.093417][T23418] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4894'. [ 1972.238336][T23413] ceph: No mds server is up or the cluster is laggy [ 1973.811524][T23427] siw: device registration error -23 [ 1976.872281][T23216] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1977.004574][T23216] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1977.601162][T23216] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1978.703208][T23216] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1983.201543][T23216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1983.235000][T23216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1983.735390][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.735602][ T6857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1983.801383][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.801643][ T6858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.711439][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1984.711880][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.408760][T23492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4910'. [ 1986.521239][T23216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1986.591889][T23216] veth0_vlan: entered promiscuous mode [ 1986.638120][T23216] veth1_vlan: entered promiscuous mode [ 1986.853067][T23216] veth0_macvtap: entered promiscuous mode [ 1986.934617][T23216] veth1_macvtap: entered promiscuous mode [ 1986.997440][T23216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1987.021457][T23216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1987.066434][T23462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.079226][T23462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.111625][ T6857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.131701][ T6857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.055552][T23462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.055573][T23462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.437500][T17287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.437519][T17287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.109698][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4916'. [ 1992.059827][T23535] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4924'. [ 1992.059876][T23535] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4924'. [ 1995.949252][T23563] delete_channel: no stack [ 1996.530594][T23572] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1996.808531][T23573] ubi31: attaching mtd0 [ 1997.877289][T23573] ubi31: scanning is finished [ 1997.877337][T23573] ubi31: empty MTD device detected [ 1998.580351][T23573] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1999.417134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1999.552553][ C0] vkms_vblank_simulate: vblank timer overrun [ 2000.101747][ T1577] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 2000.263106][ T1577] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2000.263124][ T1577] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2000.263136][ T1577] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2000.263160][ T1577] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2000.263171][ T1577] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.268628][ T1577] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 2000.658701][ C0] vkms_vblank_simulate: vblank timer overrun [ 2001.352809][ C0] vkms_vblank_simulate: vblank timer overrun [ 2001.615224][ C0] vkms_vblank_simulate: vblank timer overrun [ 2001.764162][ C0] vkms_vblank_simulate: vblank timer overrun [ 2002.175578][ C0] vkms_vblank_simulate: vblank timer overrun [ 2002.777126][ C0] vkms_vblank_simulate: vblank timer overrun [ 2002.855972][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.270675][T23609] delete_channel: no stack [ 2003.346018][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.427582][ T44] usb 9-1: USB disconnect, device number 31 [ 2003.639462][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.682144][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.920865][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.966266][ C0] vkms_vblank_simulate: vblank timer overrun [ 2004.223314][T18882] libceph: connect (1)[c::]:6789 error -101 [ 2004.223442][T18882] libceph: mon0 (1)[c::]:6789 connect error [ 2004.495647][T18882] libceph: connect (1)[c::]:6789 error -101 [ 2004.495851][T18882] libceph: mon0 (1)[c::]:6789 connect error [ 2004.864322][T23618] ceph: No mds server is up or the cluster is laggy [ 2005.105821][T18882] libceph: connect (1)[c::]:6789 error -101 [ 2005.106028][T18882] libceph: mon0 (1)[c::]:6789 connect error [ 2005.152507][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4950'. [ 2007.994396][T23643] openvswitch: netlink: IP tunnel dst address not specified [ 2010.394462][T19034] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 2010.558188][T19034] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2010.558215][T19034] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2010.558234][T19034] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2010.558271][T19034] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2010.558291][T19034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.631217][T19034] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 2010.829576][ T44] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2011.206031][T23679] wg1: entered promiscuous mode [ 2011.206061][T23679] wg1: entered allmulticast mode [ 2011.827191][T23651] libceph: connect (1)[c::]:6789 error -101 [ 2011.827409][T23651] libceph: mon0 (1)[c::]:6789 connect error [ 2011.890181][T23676] ceph: No mds server is up or the cluster is laggy [ 2012.062929][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2012.062948][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2012.062969][ T44] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2012.062980][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.134033][T18882] libceph: connect (1)[c::]:6789 error -101 [ 2012.155014][T18882] libceph: mon0 (1)[c::]:6789 connect error [ 2012.227880][ T44] usb 1-1: config 0 descriptor?? [ 2016.573779][T22314] Bluetooth: hci0: command 0x0405 tx timeout [ 2017.964018][ T44] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 2017.970461][ T44] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 2017.970504][ T44] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 2018.010777][T19032] usb 2-1: USB disconnect, device number 10 [ 2018.186131][ T44] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -71 [ 2018.264227][ T44] usb 1-1: USB disconnect, device number 30 [ 2018.653311][T23707] openvswitch: netlink: IP tunnel dst address not specified [ 2019.666362][T23697] fido_id[23697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2020.472284][T23723] IPv6: NLM_F_CREATE should be specified when creating new route [ 2026.038934][T23772] input: syz1 as /devices/virtual/input/input66 [ 2027.056124][T23773] Mount JFS Failure: -5 [ 2027.056154][T23773] jfs_mount failed w/return code = -5 [ 2028.059773][T17449] Bluetooth: hci2: command 0x0405 tx timeout [ 2029.626960][T23651] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 2030.000080][ C1] vkms_vblank_simulate: vblank timer overrun [ 2030.031172][T23651] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2030.031201][T23651] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2030.031238][T23651] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2030.031258][T23651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.185386][ C1] vkms_vblank_simulate: vblank timer overrun [ 2030.813839][ C1] vkms_vblank_simulate: vblank timer overrun [ 2030.926385][T23651] usb 1-1: usb_control_msg returned -32 [ 2030.926423][T23651] usbtmc 1-1:16.0: can't read capabilities [ 2031.480556][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.330765][ C1] vkms_vblank_simulate: vblank timer overrun [ 2032.697047][T23820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5005'. [ 2032.851715][T19494] usb 1-1: USB disconnect, device number 31 [ 2033.846470][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.633376][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.664504][ C1] vkms_vblank_simulate: vblank timer overrun [ 2038.700110][T23852] ceph: No mds server is up or the cluster is laggy [ 2038.723437][T19494] libceph: connect (1)[c::]:6789 error -101 [ 2038.756952][T19494] libceph: mon0 (1)[c::]:6789 connect error [ 2039.127093][T19494] libceph: connect (1)[c::]:6789 error -101 [ 2039.127310][T19494] libceph: mon0 (1)[c::]:6789 connect error [ 2044.453229][T23909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5028'. [ 2044.611810][T23895] sp0: Synchronizing with TNC [ 2045.323128][T23894] [U] è`` [ 2047.081870][T23651] libceph: connect (1)[c::]:6789 error -101 [ 2047.082225][T23651] libceph: mon0 (1)[c::]:6789 connect error [ 2047.098802][T23651] libceph: connect (1)[c::]:6789 error -101 [ 2047.098930][T23651] libceph: mon0 (1)[c::]:6789 connect error [ 2047.374464][T19494] libceph: connect (1)[c::]:6789 error -101 [ 2047.374593][T19494] libceph: mon0 (1)[c::]:6789 connect error [ 2048.159959][T19494] libceph: connect (1)[c::]:6789 error -101 [ 2048.160167][T19494] libceph: mon0 (1)[c::]:6789 connect error [ 2048.259782][T23922] ceph: No mds server is up or the cluster is laggy [ 2051.051254][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2051.051329][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2057.926829][T24004] overlayfs: failed to resolve './bus': -2 [ 2058.392106][T23999] ceph: No mds server is up or the cluster is laggy [ 2060.900009][T24032] netlink: 296 bytes leftover after parsing attributes in process `syz.7.5067'. [ 2060.900053][T24032] openvswitch: netlink: Flow key attr not present in new flow. [ 2061.129745][T24030] openvswitch: netlink: IP tunnel dst address not specified [ 2061.245524][T24035] overlayfs: failed to resolve './bus': -2 [ 2068.102299][T24080] netlink: 'syz.0.5084': attribute type 1 has an invalid length. [ 2069.895542][T24109] siw: device registration error -23 [ 2072.986588][T18882] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2073.118206][T24133] delete_channel: no stack [ 2073.203786][T18882] usb 1-1: too many configurations: 67, using maximum allowed: 8 [ 2073.229577][T18882] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2073.229605][T18882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.229623][T18882] usb 1-1: Product: syz [ 2073.229635][T18882] usb 1-1: Manufacturer: syz [ 2073.229656][T18882] usb 1-1: SerialNumber: syz [ 2073.268405][T24139] netlink: 'syz.1.5103': attribute type 1 has an invalid length. [ 2073.286751][T18882] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2073.349652][T19494] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2074.783939][T19494] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2074.784139][T19494] ath9k_htc: Failed to initialize the device [ 2074.838179][T19032] usb 1-1: USB disconnect, device number 32 [ 2074.933815][T19032] usb 1-1: ath9k_htc: USB layer deinitialized [ 2075.456107][T24151] siw: device registration error -23 [ 2076.653928][T24162] input: syz1 as /devices/virtual/input/input67 [ 2077.851228][T24177] 9pnet_fd: Insufficient options for proto=fd [ 2078.577731][T24184] delete_channel: no stack [ 2078.997355][T24190] siw: device registration error -23 [ 2079.936959][T17449] Bluetooth: hci2: command 0x0405 tx timeout [ 2083.270395][ C0] vkms_vblank_simulate: vblank timer overrun [ 2083.514478][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.149011][ C0] vkms_vblank_simulate: vblank timer overrun [ 2085.210034][T24238] delete_channel: no stack [ 2086.281656][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.523853][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.550039][ C0] vkms_vblank_simulate: vblank timer overrun [ 2087.962998][ C0] vkms_vblank_simulate: vblank timer overrun [ 2088.018918][ C0] vkms_vblank_simulate: vblank timer overrun [ 2088.117455][ C0] vkms_vblank_simulate: vblank timer overrun [ 2094.323291][T24283] delete_channel: no stack [ 2094.645544][T24286] wg1: entered promiscuous mode [ 2094.645658][T24286] wg1: entered allmulticast mode [ 2098.955520][T24313] lo speed is unknown, defaulting to 1000 [ 2098.964903][T24313] vxcan1 speed is unknown, defaulting to 1000 [ 2099.514218][T24313] lo speed is unknown, defaulting to 1000 [ 2099.814987][T17449] Bluetooth: hci2: command 0x0405 tx timeout [ 2101.936786][T24333] delete_channel: no stack [ 2102.617875][ C0] vkms_vblank_simulate: vblank timer overrun [ 2102.706661][ C0] vkms_vblank_simulate: vblank timer overrun [ 2102.961596][ C0] vkms_vblank_simulate: vblank timer overrun [ 2103.893811][ C0] vkms_vblank_simulate: vblank timer overrun [ 2104.118275][ C0] vkms_vblank_simulate: vblank timer overrun [ 2105.362438][ C0] vkms_vblank_simulate: vblank timer overrun [ 2105.755613][ C0] vkms_vblank_simulate: vblank timer overrun [ 2105.961581][ C0] vkms_vblank_simulate: vblank timer overrun [ 2109.950874][T24387] input: syz1 as /devices/virtual/input/input68 [ 2110.991095][ C1] vkms_vblank_simulate: vblank timer overrun [ 2111.581531][T19494] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2111.693990][T24415] Mount JFS Failure: -5 [ 2111.694017][T24415] jfs_mount failed w/return code = -5 [ 2112.086966][T19494] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 2112.087026][T19494] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2112.087046][T19494] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2112.102549][T19494] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2112.102576][T19494] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2112.102593][T19494] usb 2-1: Product: syz [ 2112.102606][T19494] usb 2-1: Manufacturer: syz [ 2112.102619][T19494] usb 2-1: SerialNumber: syz [ 2112.111449][T19494] usb 2-1: config 0 descriptor?? [ 2112.134924][T19494] hub 2-1:0.0: bad descriptor, ignoring hub [ 2112.134960][T19494] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2112.260897][T19494] usb 2-1: selecting invalid altsetting 0 [ 2113.070077][T24420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5176'. [ 2113.199646][ C1] vkms_vblank_simulate: vblank timer overrun [ 2113.367193][ C1] vkms_vblank_simulate: vblank timer overrun [ 2113.665098][ C1] vkms_vblank_simulate: vblank timer overrun [ 2114.299504][T19494] usb 2-1: USB disconnect, device number 11 [ 2115.028196][T24412] udevd[24412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2115.407959][ C1] vkms_vblank_simulate: vblank timer overrun [ 2116.037165][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2116.037239][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2116.124801][ C1] vkms_vblank_simulate: vblank timer overrun [ 2116.727753][ C1] vkms_vblank_simulate: vblank timer overrun [ 2117.178249][ C1] vkms_vblank_simulate: vblank timer overrun [ 2117.189982][T24456] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5190'. [ 2117.354180][T24460] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 2120.512483][ C0] vkms_vblank_simulate: vblank timer overrun [ 2120.959596][ C0] vkms_vblank_simulate: vblank timer overrun [ 2121.010251][ C0] vkms_vblank_simulate: vblank timer overrun [ 2121.325060][ C0] vkms_vblank_simulate: vblank timer overrun [ 2121.508078][T24482] qnx6: unable to read the first superblock [ 2121.508926][T24482] qnx6: unable to read the first superblock [ 2121.508938][T24482] qnx6: unable to read the first superblock [ 2121.550195][ C0] vkms_vblank_simulate: vblank timer overrun [ 2121.960578][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.338545][T24486] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5199'. [ 2122.338567][T24486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5199'. [ 2122.552891][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.721584][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.814761][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.955536][ C0] vkms_vblank_simulate: vblank timer overrun [ 2123.066939][ C0] vkms_vblank_simulate: vblank timer overrun [ 2123.236811][ C0] vkms_vblank_simulate: vblank timer overrun [ 2123.750905][ C0] vkms_vblank_simulate: vblank timer overrun [ 2125.462419][T24510] delete_channel: no stack [ 2126.032536][T24513] overlayfs: missing 'lowerdir' [ 2127.345697][T24522] input: syz1 as /devices/virtual/input/input69 [ 2130.251976][T24549] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5213'. [ 2133.554713][T24571] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5221'. [ 2133.554735][T24571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5221'. [ 2137.328902][T24588] input: syz1 as /devices/virtual/input/input70 [ 2141.649522][T24618] ubi31: attaching mtd0 [ 2141.760210][T24623] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 2141.834822][T24618] ubi31: scanning is finished [ 2142.389773][T24629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5238'. [ 2143.652692][T24638] wg1: entered promiscuous mode [ 2143.652724][T24638] wg1: entered allmulticast mode [ 2143.990327][T24618] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 2146.604829][T24651] syz2: rxe_newlink: already configured on vxcan1 [ 2149.023909][T24668] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5245'. [ 2149.023931][T24668] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5245'. [ 2150.979150][T17449] Bluetooth: hci2: command 0x0405 tx timeout [ 2151.759098][T24689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5252'. [ 2153.188955][T18882] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2153.603142][T18882] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 2153.603203][T18882] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2153.603225][T18882] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2153.606990][T18882] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2153.607015][T18882] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2153.607033][T18882] usb 1-1: Product: syz [ 2153.607046][T18882] usb 1-1: Manufacturer: syz [ 2153.607059][T18882] usb 1-1: SerialNumber: syz [ 2153.655123][T18882] usb 1-1: config 0 descriptor?? [ 2153.765105][T18882] hub 1-1:0.0: bad descriptor, ignoring hub [ 2153.765143][T18882] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2153.786146][T18882] usb 1-1: selecting invalid altsetting 0 [ 2154.350194][T24722] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5261'. [ 2154.350216][T24722] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5261'. [ 2155.394918][T12545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.768858][T12545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.866723][ T44] usb 1-1: USB disconnect, device number 33 [ 2157.469831][T24750] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 2159.548660][T12545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.748456][T24748] infiniband syz1: set active [ 2159.748470][T24748] infiniband syz1: added syz_tun [ 2159.749102][T24748] syz1: rxe_create_cq: returned err = -12 [ 2159.749147][T24748] infiniband syz1: Couldn't create ib_mad CQ [ 2159.749232][T24748] infiniband syz1: Couldn't open port 1 [ 2159.771410][T24748] RDS/IB: syz1: added [ 2159.771497][T24748] smc: adding ib device syz1 with port count 1 [ 2159.771518][T24748] smc: ib device syz1 port 1 has pnetid [ 2162.613777][T24768] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5273'. [ 2162.613798][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5273'. [ 2162.640768][T12545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.782891][T16169] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2165.921140][T16169] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2165.921168][T16169] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2165.921186][T16169] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2165.921239][T16169] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2165.921261][T16169] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2165.934218][T16169] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2165.934245][T16169] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2165.934263][T16169] usb 1-1: Product: syz [ 2165.934277][T16169] usb 1-1: Manufacturer: syz [ 2166.051980][T16169] cdc_wdm 1-1:1.0: skipping garbage [ 2166.051998][T16169] cdc_wdm 1-1:1.0: skipping garbage [ 2166.078919][T16169] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2166.078940][T16169] cdc_wdm 1-1:1.0: Unknown control protocol [ 2167.400242][T24794] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5276'. [ 2167.782069][T16169] usb 1-1: USB disconnect, device number 34 [ 2167.884404][T24802] syz2: rxe_newlink: already configured on vxcan1 [ 2170.243793][T12545] bridge_slave_1: left allmulticast mode [ 2170.243816][T12545] bridge_slave_1: left promiscuous mode [ 2170.243991][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.520053][T12545] bridge_slave_0: left allmulticast mode [ 2170.520084][T12545] bridge_slave_0: left promiscuous mode [ 2170.520366][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.582227][T24815] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5287'. [ 2170.582249][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5287'. [ 2177.672640][T12545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2181.727087][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2181.727133][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2183.823651][T12545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2183.918038][T12545] bond0 (unregistering): Released all slaves [ 2184.109313][T24835] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2184.109356][T24835] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2184.109387][T24835] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2184.191697][T24853] wg1: entered promiscuous mode [ 2184.191727][T24853] wg1: entered allmulticast mode [ 2185.632296][T17449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2185.695929][T17449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2185.698445][T17449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2185.711303][T17449] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2185.720516][T17449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2187.444069][T19032] IPVS: starting estimator thread 0... [ 2187.570073][T24896] IPVS: using max 8 ests per chain, 19200 per kthread [ 2188.056889][T17449] Bluetooth: hci3: command tx timeout [ 2188.163924][ T57] smc: removing ib device syz1 [ 2188.288462][T19032] syz1: Port: 1 Link DOWN [ 2188.350575][T24875] lo speed is unknown, defaulting to 1000 [ 2188.352054][T24875] vxcan1 speed is unknown, defaulting to 1000 [ 2188.532570][T24875] lo speed is unknown, defaulting to 1000 [ 2190.270589][T17449] Bluetooth: hci3: command tx timeout [ 2190.779414][T24913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5311'. [ 2192.809976][T17449] Bluetooth: hci3: command tx timeout [ 2195.055532][T14211] Bluetooth: hci3: command tx timeout [ 2202.249872][T17449] Bluetooth: hci3: command 0x0405 tx timeout [ 2202.930138][T24875] chnl_net:caif_netlink_parms(): no params data found [ 2207.708565][T25023] netlink: 'syz.8.5343': attribute type 1 has an invalid length. [ 2208.316343][T24875] bridge0: port 1(bridge_slave_0) entered blocking state [ 2208.316488][T24875] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.316700][T24875] bridge_slave_0: entered allmulticast mode [ 2208.345458][T24875] bridge_slave_0: entered promiscuous mode [ 2208.365497][T24875] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.366299][T24875] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.366435][T24875] bridge_slave_1: entered allmulticast mode [ 2208.942307][T24875] bridge_slave_1: entered promiscuous mode [ 2210.362213][T24875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2210.462281][T24875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2211.968428][T24875] team0: Port device team_slave_0 added [ 2212.148375][T25056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2212.751976][T24875] team0: Port device team_slave_1 added [ 2212.902693][T25031] syz.6.5346 (25031): drop_caches: 1 [ 2214.647012][T24875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2214.647132][T24875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2214.647259][T24875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2214.836126][T24875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2214.836139][T24875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2214.836154][T24875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2216.418944][T12545] hsr_slave_0: left promiscuous mode [ 2216.492749][T12545] hsr_slave_1: left promiscuous mode [ 2216.493676][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2216.493704][T12545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2216.574958][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2216.574989][T12545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2216.679763][T12545] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 2216.679795][T12545] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2218.312969][T12545] veth1_macvtap: left promiscuous mode [ 2218.313095][T12545] veth0_macvtap: left promiscuous mode [ 2218.313575][T12545] veth1_vlan: left promiscuous mode [ 2218.315042][T12545] veth0_vlan: left promiscuous mode [ 2223.185347][T25115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5371'. [ 2225.415734][T12545] team0 (unregistering): Port device team_slave_1 removed [ 2225.696422][T12545] team0 (unregistering): Port device team_slave_0 removed [ 2227.030993][T25131] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5375'. [ 2229.747401][T24875] hsr_slave_0: entered promiscuous mode [ 2229.748728][T24875] hsr_slave_1: entered promiscuous mode [ 2229.749589][T24875] debugfs: 'hsr0' already exists in 'hsr' [ 2229.749612][T24875] Cannot create hsr debugfs directory [ 2237.588408][T25162] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5384'. [ 2237.857051][T25165] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5385'. [ 2238.519848][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5387'. [ 2240.739763][T12545] IPVS: stop unused estimator thread 0... [ 2243.047330][T12545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2245.217862][T12545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.049701][T12545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.406146][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2247.406221][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2247.836644][T25217] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5398'. [ 2248.409410][T25219] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5399'. [ 2248.457612][T25218] block device autoloading is deprecated and will be removed. [ 2248.544225][T12545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.533771][T15822] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2250.613226][T15822] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2252.062767][T12545] bridge_slave_1: left allmulticast mode [ 2252.062801][T12545] bridge_slave_1: left promiscuous mode [ 2252.063103][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 2252.843012][T17449] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2252.848590][T17449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2252.857064][T17449] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2252.874417][T17449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2252.875148][T17449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2255.091904][T17449] Bluetooth: hci4: command tx timeout [ 2256.920216][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5411'. [ 2257.315676][T17449] Bluetooth: hci4: command tx timeout [ 2257.690142][T12545] bond3 (unregistering): (slave gretap1): Releasing active interface [ 2258.362029][ C0] vkms_vblank_simulate: vblank timer overrun [ 2259.688825][T17449] Bluetooth: hci4: command tx timeout [ 2260.076294][T19032] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2260.115691][T19032] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2260.290883][ C0] vkms_vblank_simulate: vblank timer overrun [ 2260.453945][T25285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5416'. [ 2261.239770][T12545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2261.693560][T12545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2261.762090][T12545] bond0 (unregistering): Released all slaves [ 2261.820202][T12545] bond1 (unregistering): Released all slaves [ 2261.849029][T17449] Bluetooth: hci4: command tx timeout [ 2261.909835][T12545] bond2 (unregistering): Released all slaves [ 2262.059776][ C0] vkms_vblank_simulate: vblank timer overrun [ 2262.361878][ C0] vkms_vblank_simulate: vblank timer overrun [ 2263.050169][T25303] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2263.147197][ C0] vkms_vblank_simulate: vblank timer overrun [ 2263.264222][ C0] vkms_vblank_simulate: vblank timer overrun [ 2263.266396][T25307] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5420'. [ 2263.266408][T25307] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5420'. [ 2264.403802][T25312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5421'. [ 2266.176323][T12545] bond3 (unregistering): Released all slaves [ 2267.219302][ C0] vkms_vblank_simulate: vblank timer overrun [ 2268.276162][ C0] vkms_vblank_simulate: vblank timer overrun [ 2268.490759][ C0] vkms_vblank_simulate: vblank timer overrun [ 2268.759285][ C0] vkms_vblank_simulate: vblank timer overrun [ 2268.894295][ C0] vkms_vblank_simulate: vblank timer overrun [ 2268.960923][ C0] vkms_vblank_simulate: vblank timer overrun [ 2269.041468][ C0] vkms_vblank_simulate: vblank timer overrun [ 2269.319013][ C0] vkms_vblank_simulate: vblank timer overrun [ 2269.924355][T25354] openvswitch: netlink: IP tunnel dst address not specified [ 2270.189657][T25353] batadv_slave_1: entered promiscuous mode [ 2270.190848][T25351] batadv_slave_1: left promiscuous mode [ 2270.479421][T25239] lo speed is unknown, defaulting to 1000 [ 2270.498344][T25239] vxcan1 speed is unknown, defaulting to 1000 [ 2270.520645][T25364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5432'. [ 2270.520668][T25364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5432'. [ 2271.360683][ C0] vkms_vblank_simulate: vblank timer overrun [ 2271.434617][ C0] vkms_vblank_simulate: vblank timer overrun [ 2271.529092][ C0] vkms_vblank_simulate: vblank timer overrun [ 2273.504265][T25239] lo speed is unknown, defaulting to 1000 [ 2273.777668][T25395] delete_channel: no stack [ 2274.941528][T25405] openvswitch: netlink: IP tunnel dst address not specified [ 2277.937822][T12545] hsr_slave_0: left promiscuous mode [ 2277.938787][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2277.938815][T12545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2278.345699][T25434] netlink: 'syz.8.5450': attribute type 20 has an invalid length. [ 2278.345727][T25434] IPv6: NLM_F_CREATE should be specified when creating new route [ 2278.345884][T25434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2278.345896][T25434] IPv6: NLM_F_CREATE should be set when creating new route [ 2278.635991][T12545] veth1_macvtap: left promiscuous mode [ 2278.636112][T12545] veth0_macvtap: left promiscuous mode [ 2278.636441][T12545] veth1_vlan: left promiscuous mode [ 2278.636646][T12545] veth0_vlan: left promiscuous mode [ 2280.151063][T14211] Bluetooth: hci4: command 0x0405 tx timeout [ 2280.569105][ C0] vkms_vblank_simulate: vblank timer overrun [ 2283.992255][T25454] openvswitch: netlink: IP tunnel dst address not specified [ 2285.381352][ C1] vkms_vblank_simulate: vblank timer overrun [ 2285.476243][ C1] vkms_vblank_simulate: vblank timer overrun [ 2285.530972][ C1] vkms_vblank_simulate: vblank timer overrun [ 2285.593290][ C1] vkms_vblank_simulate: vblank timer overrun [ 2286.397318][ C1] vkms_vblank_simulate: vblank timer overrun [ 2286.488615][ C1] vkms_vblank_simulate: vblank timer overrun [ 2286.842673][ C1] vkms_vblank_simulate: vblank timer overrun [ 2286.893646][ C1] vkms_vblank_simulate: vblank timer overrun [ 2286.979099][ C1] vkms_vblank_simulate: vblank timer overrun [ 2287.017987][ C1] vkms_vblank_simulate: vblank timer overrun [ 2287.518843][ C1] vkms_vblank_simulate: vblank timer overrun [ 2287.895237][ C1] vkms_vblank_simulate: vblank timer overrun [ 2288.201028][ C1] vkms_vblank_simulate: vblank timer overrun [ 2288.346974][ C1] vkms_vblank_simulate: vblank timer overrun [ 2288.660866][ C1] vkms_vblank_simulate: vblank timer overrun [ 2288.768906][ C1] vkms_vblank_simulate: vblank timer overrun [ 2289.096151][T25491] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2289.137887][ C1] vkms_vblank_simulate: vblank timer overrun [ 2289.459465][ C1] vkms_vblank_simulate: vblank timer overrun [ 2289.661551][ C1] vkms_vblank_simulate: vblank timer overrun [ 2290.043902][T12545] team0 (unregistering): Port device team_slave_1 removed [ 2290.108179][ C1] vkms_vblank_simulate: vblank timer overrun [ 2291.291283][T12545] team0 (unregistering): Port device team_slave_0 removed [ 2291.395138][T25514] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5474'. [ 2291.491349][T25513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5475'. [ 2295.694511][T25534] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2297.050212][T14211] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2297.071469][T14211] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2297.074128][T14211] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2297.094347][T14211] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2297.095139][T14211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2298.360545][T25558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5486'. [ 2298.869681][T25544] lo speed is unknown, defaulting to 1000 [ 2298.984906][T25544] vxcan1 speed is unknown, defaulting to 1000 [ 2299.329734][T17449] Bluetooth: hci3: command tx timeout [ 2299.489374][T25239] chnl_net:caif_netlink_parms(): no params data found [ 2301.355053][T25576] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2301.532035][T17449] Bluetooth: hci3: command tx timeout [ 2302.398657][T25544] lo speed is unknown, defaulting to 1000 [ 2303.599396][T25239] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.600187][T25239] bridge0: port 1(bridge_slave_0) entered disabled state [ 2303.601203][T25239] bridge_slave_0: entered allmulticast mode [ 2303.683506][T25239] bridge_slave_0: entered promiscuous mode [ 2303.701837][T25598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2303.755598][T17449] Bluetooth: hci3: command tx timeout [ 2304.330347][T25239] bridge0: port 2(bridge_slave_1) entered blocking state [ 2304.331120][T25239] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.331876][T25239] bridge_slave_1: entered allmulticast mode [ 2304.409506][T25239] bridge_slave_1: entered promiscuous mode [ 2305.535544][T25611] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 2306.000520][T17449] Bluetooth: hci3: command tx timeout [ 2310.658181][T25616] ceph: No mds server is up or the cluster is laggy [ 2310.768145][T25620] netlink: 'syz.8.5499': attribute type 20 has an invalid length. [ 2310.768281][T25620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2310.961809][T25624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5500'. [ 2311.201063][T25239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2311.238289][T25239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2312.495106][T25239] team0: Port device team_slave_0 added [ 2312.549892][T25239] team0: Port device team_slave_1 added [ 2312.924190][T12545] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.099824][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2313.099898][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2313.280907][ T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2313.454366][ T44] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 2313.454424][ T44] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2313.454446][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2313.695493][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2313.695522][ T44] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2313.695541][ T44] usb 2-1: Product: syz [ 2313.695554][ T44] usb 2-1: Manufacturer: syz [ 2313.695567][ T44] usb 2-1: SerialNumber: syz [ 2314.564716][ T44] usb 2-1: config 0 descriptor?? [ 2314.568693][ T44] hub 2-1:0.0: bad descriptor, ignoring hub [ 2314.568729][ T44] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2314.573204][ T44] usb 2-1: selecting invalid altsetting 0 [ 2314.827979][T12545] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.363244][T25239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2315.363260][T25239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2315.363282][T25239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2315.441911][T25653] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 2316.351254][ C0] vkms_vblank_simulate: vblank timer overrun [ 2316.401436][T14211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2316.770849][ C0] vkms_vblank_simulate: vblank timer overrun [ 2317.159291][ C0] vkms_vblank_simulate: vblank timer overrun [ 2317.245471][T14211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2317.247129][T14211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2317.306848][T14211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2317.314106][T14211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2317.363335][T12545] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.383772][ C0] vkms_vblank_simulate: vblank timer overrun [ 2317.459819][T25667] : entered promiscuous mode [ 2317.841302][T25671] netlink: 'syz.8.5510': attribute type 20 has an invalid length. [ 2317.841390][T25671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2318.322012][T12545] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.504672][T16169] usb 2-1: USB disconnect, device number 12 [ 2318.634056][ C0] vkms_vblank_simulate: vblank timer overrun [ 2318.802169][T25544] chnl_net:caif_netlink_parms(): no params data found [ 2318.840037][T19033] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2319.001780][T19033] usb 9-1: Using ep0 maxpacket: 8 [ 2319.008347][T19033] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2319.008372][T19033] usb 9-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 2319.008407][T19033] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2319.008429][T19033] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.126255][T25664] lo speed is unknown, defaulting to 1000 [ 2319.279284][T25664] vxcan1 speed is unknown, defaulting to 1000 [ 2319.303517][ T5929] usb 9-1: USB disconnect, device number 32 [ 2319.603411][ C0] vkms_vblank_simulate: vblank timer overrun [ 2319.636056][T17449] Bluetooth: hci0: command tx timeout [ 2319.694506][ C0] vkms_vblank_simulate: vblank timer overrun [ 2319.826495][ C0] vkms_vblank_simulate: vblank timer overrun [ 2320.262522][ C0] vkms_vblank_simulate: vblank timer overrun [ 2320.353608][ C0] vkms_vblank_simulate: vblank timer overrun [ 2320.357709][T25692] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 2320.377380][ C0] vkms_vblank_simulate: vblank timer overrun [ 2320.471761][ C0] vkms_vblank_simulate: vblank timer overrun [ 2320.595261][ C0] vkms_vblank_simulate: vblank timer overrun [ 2320.720911][T25544] bridge0: port 1(bridge_slave_0) entered blocking state [ 2320.721155][T25544] bridge0: port 1(bridge_slave_0) entered disabled state [ 2320.721398][T25544] bridge_slave_0: entered allmulticast mode [ 2320.746072][T25544] bridge_slave_0: entered promiscuous mode [ 2320.765397][T25544] bridge0: port 2(bridge_slave_1) entered blocking state [ 2320.765571][T25544] bridge0: port 2(bridge_slave_1) entered disabled state [ 2320.765820][T25544] bridge_slave_1: entered allmulticast mode [ 2320.772706][T25544] bridge_slave_1: entered promiscuous mode [ 2321.672954][T25664] lo speed is unknown, defaulting to 1000 [ 2321.703308][T25544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2321.734874][T25544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2321.801546][T17449] Bluetooth: hci0: command 0x041b tx timeout [ 2322.841877][T25544] team0: Port device team_slave_0 added [ 2322.872626][T25544] team0: Port device team_slave_1 added [ 2323.421906][T19033] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2323.589400][T19033] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 2323.589456][T19033] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2323.589478][T19033] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2323.592459][T19033] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2323.592479][T19033] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2323.592493][T19033] usb 2-1: Product: syz [ 2323.592503][T19033] usb 2-1: Manufacturer: syz [ 2323.592513][T19033] usb 2-1: SerialNumber: syz [ 2323.598151][T19033] usb 2-1: config 0 descriptor?? [ 2323.601596][T19033] hub 2-1:0.0: bad descriptor, ignoring hub [ 2323.601631][T19033] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2323.634683][T25544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2323.634713][T25544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2323.634738][T25544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2323.747269][T19033] usb 2-1: selecting invalid altsetting 0 [ 2324.779739][T14211] Bluetooth: hci0: command 0x041b tx timeout [ 2324.839791][T25544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2324.839808][T25544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2324.839832][T25544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2325.203353][ C0] vkms_vblank_simulate: vblank timer overrun [ 2325.699717][ C0] vkms_vblank_simulate: vblank timer overrun [ 2325.762003][ C0] vkms_vblank_simulate: vblank timer overrun [ 2326.121227][ C0] vkms_vblank_simulate: vblank timer overrun [ 2326.189272][ C0] vkms_vblank_simulate: vblank timer overrun [ 2326.250827][ C0] vkms_vblank_simulate: vblank timer overrun [ 2326.548826][ C0] vkms_vblank_simulate: vblank timer overrun [ 2326.933149][T14211] Bluetooth: hci0: command 0x041b tx timeout [ 2327.577710][ C0] vkms_vblank_simulate: vblank timer overrun [ 2328.627742][ T44] usb 2-1: USB disconnect, device number 13 [ 2328.891036][T25544] hsr_slave_0: entered promiscuous mode [ 2328.911721][T25544] hsr_slave_1: entered promiscuous mode [ 2328.912627][T25544] debugfs: 'hsr0' already exists in 'hsr' [ 2328.912650][T25544] Cannot create hsr debugfs directory [ 2329.161701][T14211] Bluetooth: hci0: command 0x041b tx timeout [ 2331.513884][T12545] bridge_slave_1: left allmulticast mode [ 2331.513930][T12545] bridge_slave_1: left promiscuous mode [ 2331.514295][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 2331.643150][T12545] bridge_slave_0: left allmulticast mode [ 2331.643181][T12545] bridge_slave_0: left promiscuous mode [ 2331.643473][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 2331.793916][T12545] bridge_slave_1: left allmulticast mode [ 2331.793947][T12545] bridge_slave_1: left promiscuous mode [ 2331.794192][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 2332.183559][T12545] bridge_slave_0: left allmulticast mode [ 2332.183593][T12545] bridge_slave_0: left promiscuous mode [ 2332.183835][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 2335.475126][ C0] vkms_vblank_simulate: vblank timer overrun [ 2336.017963][ C0] vkms_vblank_simulate: vblank timer overrun [ 2336.226070][ C0] vkms_vblank_simulate: vblank timer overrun [ 2336.368173][ C0] vkms_vblank_simulate: vblank timer overrun [ 2336.441752][ C0] vkms_vblank_simulate: vblank timer overrun [ 2336.592239][T25800] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5541'. [ 2336.978543][ C0] vkms_vblank_simulate: vblank timer overrun [ 2337.132668][T12545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2337.230426][T12545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2337.269119][T12545] bond0 (unregistering): Released all slaves [ 2337.738334][ C0] vkms_vblank_simulate: vblank timer overrun [ 2338.318038][T12545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2338.436775][T12545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2338.572251][T12545] bond0 (unregistering): Released all slaves [ 2338.727167][T25664] chnl_net:caif_netlink_parms(): no params data found [ 2339.003892][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.169538][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.470223][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.510316][ C0] vkms_vblank_simulate: vblank timer overrun [ 2339.797213][T25822] QAT: Device 197 not found [ 2340.207073][ C0] vkms_vblank_simulate: vblank timer overrun [ 2343.605161][T25846] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.5549'. [ 2343.780804][T25664] bridge0: port 1(bridge_slave_0) entered blocking state [ 2343.781023][T25664] bridge0: port 1(bridge_slave_0) entered disabled state [ 2343.782078][T25664] bridge_slave_0: entered allmulticast mode [ 2343.802784][T25664] bridge_slave_0: entered promiscuous mode [ 2344.005550][T25664] bridge0: port 2(bridge_slave_1) entered blocking state [ 2344.005821][T25664] bridge0: port 2(bridge_slave_1) entered disabled state [ 2344.006093][T25664] bridge_slave_1: entered allmulticast mode [ 2344.012826][T25664] bridge_slave_1: entered promiscuous mode [ 2344.550983][T19034] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2344.727155][T19034] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 2344.727212][T19034] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2344.727234][T19034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2344.758824][T19034] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2344.758852][T19034] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2344.758871][T19034] usb 2-1: Product: syz [ 2344.758885][T19034] usb 2-1: Manufacturer: syz [ 2344.758898][T19034] usb 2-1: SerialNumber: syz [ 2344.764180][T19034] usb 2-1: config 0 descriptor?? [ 2344.803609][T19034] hub 2-1:0.0: bad descriptor, ignoring hub [ 2344.803645][T19034] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2344.806583][T19034] usb 2-1: selecting invalid altsetting 0 [ 2345.229467][T25664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2345.687677][T25664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2348.094141][T19033] usb 2-1: USB disconnect, device number 14 [ 2349.318753][T25664] team0: Port device team_slave_0 added [ 2349.389836][T25664] team0: Port device team_slave_1 added [ 2350.536858][T25664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2350.536871][T25664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2350.536886][T25664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2350.726354][T25664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2350.726372][T25664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2350.726399][T25664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2350.831407][T25544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2351.011192][T25544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2351.733531][T25544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2353.279235][T15822] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2354.034360][T25544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2354.162295][T15822] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 2354.162350][T15822] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2354.162370][T15822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2354.173343][T15822] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2354.173370][T15822] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2354.173390][T15822] usb 2-1: Product: syz [ 2354.173402][T15822] usb 2-1: Manufacturer: syz [ 2354.173415][T15822] usb 2-1: SerialNumber: syz [ 2354.306791][T15822] usb 2-1: config 0 descriptor?? [ 2354.720407][T25664] hsr_slave_0: entered promiscuous mode [ 2354.722381][T25664] hsr_slave_1: entered promiscuous mode [ 2354.722936][T25664] debugfs: 'hsr0' already exists in 'hsr' [ 2354.722957][T25664] Cannot create hsr debugfs directory [ 2354.764365][T15822] hub 2-1:0.0: bad descriptor, ignoring hub [ 2354.764401][T15822] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2354.769258][T15822] usb 2-1: selecting invalid altsetting 0 [ 2355.146981][T12545] hsr_slave_0: left promiscuous mode [ 2355.206579][T12545] hsr_slave_1: left promiscuous mode [ 2355.207507][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2355.207535][T12545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2355.291532][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2355.291563][T12545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2355.519700][T12545] hsr_slave_0: left promiscuous mode [ 2355.579638][T12545] hsr_slave_1: left promiscuous mode [ 2355.588297][T12545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2355.713756][T12545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2356.075569][T12545] veth1_macvtap: left promiscuous mode [ 2356.075690][T12545] veth0_macvtap: left promiscuous mode [ 2356.076040][T12545] veth1_vlan: left promiscuous mode [ 2356.076249][T12545] veth0_vlan: left promiscuous mode [ 2361.184206][T17449] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2361.224956][T17449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2361.227382][T17449] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2361.244658][T17449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2361.246325][T17449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2362.586908][T12545] team0 (unregistering): Port device team_slave_1 removed [ 2362.854256][T12545] team0 (unregistering): Port device team_slave_0 removed [ 2363.454022][T17449] Bluetooth: hci4: command tx timeout [ 2364.755556][T17287] smc: removing ib device syz2 [ 2365.677412][T17449] Bluetooth: hci4: command tx timeout [ 2367.900279][T17449] Bluetooth: hci4: command tx timeout [ 2368.156898][T12545] team0 (unregistering): Port device team_slave_1 removed [ 2368.339768][T12545] team0 (unregistering): Port device team_slave_0 removed [ 2369.120888][T25544] kthread_run failed with err -4 [ 2369.134527][T19033] vxcan1 speed is unknown, defaulting to 1000 [ 2369.134553][T19033] syz2: Port: 1 Link DOWN [ 2369.134684][T16169] lo speed is unknown, defaulting to 1000 [ 2369.134702][T16169] syz0: Port: 1 Link DOWN [ 2369.236182][ T44] usb 2-1: USB disconnect, device number 15 [ 2370.133775][T17449] Bluetooth: hci4: command tx timeout [ 2370.366212][T25948] lo speed is unknown, defaulting to 1000 [ 2371.703020][T14211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2371.734145][T14211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2371.781947][T14211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2371.791012][T14211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2371.796778][T14211] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2374.198827][T17449] Bluetooth: hci2: command tx timeout [ 2374.686207][T25973] lo speed is unknown, defaulting to 1000 [ 2376.409131][T14211] Bluetooth: hci2: command tx timeout [ 2377.745882][T25948] chnl_net:caif_netlink_parms(): no params data found [ 2378.589956][T14211] Bluetooth: hci2: command tx timeout [ 2378.765752][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2378.765852][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2379.917777][T17449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2380.176209][T17449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2380.181652][T17449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2380.184957][T17449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2380.185748][T17449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2380.880069][T17449] Bluetooth: hci2: command tx timeout [ 2382.740300][T25948] bridge0: port 1(bridge_slave_0) entered blocking state [ 2382.740441][T25948] bridge0: port 1(bridge_slave_0) entered disabled state [ 2382.740655][T25948] bridge_slave_0: entered allmulticast mode [ 2382.743460][T25948] bridge_slave_0: entered promiscuous mode [ 2382.807874][T25948] bridge0: port 2(bridge_slave_1) entered blocking state [ 2382.810006][T25948] bridge0: port 2(bridge_slave_1) entered disabled state [ 2382.810267][T25948] bridge_slave_1: entered allmulticast mode [ 2382.834168][T25948] bridge_slave_1: entered promiscuous mode [ 2383.189952][T25948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2383.196307][T25948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2383.298776][T14211] Bluetooth: hci0: command tx timeout [ 2383.354898][T25973] chnl_net:caif_netlink_parms(): no params data found [ 2383.605324][T25948] team0: Port device team_slave_0 added [ 2383.782618][T25948] team0: Port device team_slave_1 added [ 2384.011357][T26022] lo speed is unknown, defaulting to 1000 [ 2384.374502][T25948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2384.374518][T25948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2384.374543][T25948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2384.512936][ C1] vkms_vblank_simulate: vblank timer overrun [ 2384.529931][T25948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2384.529946][T25948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2384.529970][T25948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2384.735194][T26051] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5596'. [ 2385.109205][T25973] bridge0: port 1(bridge_slave_0) entered blocking state [ 2385.109312][T25973] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.109466][T25973] bridge_slave_0: entered allmulticast mode [ 2385.132242][T25973] bridge_slave_0: entered promiscuous mode [ 2385.242013][T25973] bridge0: port 2(bridge_slave_1) entered blocking state [ 2385.242186][T25973] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.242414][T25973] bridge_slave_1: entered allmulticast mode [ 2385.247919][T25973] bridge_slave_1: entered promiscuous mode [ 2385.311471][T25948] hsr_slave_0: entered promiscuous mode [ 2385.320243][T25948] hsr_slave_1: entered promiscuous mode [ 2385.321291][T25948] debugfs: 'hsr0' already exists in 'hsr' [ 2385.321315][T25948] Cannot create hsr debugfs directory [ 2385.542349][T14211] Bluetooth: hci0: command tx timeout [ 2385.729384][T25973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2385.891322][T25973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2386.968623][T25973] team0: Port device team_slave_0 added [ 2387.052415][T25973] team0: Port device team_slave_1 added [ 2387.487772][T25973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2387.487788][T25973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2387.487809][T25973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2387.491676][T25973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2387.491734][T25973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2387.491760][T25973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2387.741844][T14211] Bluetooth: hci0: command tx timeout [ 2388.325727][T25973] hsr_slave_0: entered promiscuous mode [ 2388.327432][T25973] hsr_slave_1: entered promiscuous mode [ 2388.328541][T25973] debugfs: 'hsr0' already exists in 'hsr' [ 2388.328565][T25973] Cannot create hsr debugfs directory [ 2388.753957][T26022] chnl_net:caif_netlink_parms(): no params data found [ 2390.712635][T14211] Bluetooth: hci0: command tx timeout [ 2391.581544][T26083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5604'. [ 2393.035215][T26022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2393.035764][T26022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2393.035998][T26022] bridge_slave_0: entered allmulticast mode [ 2393.041873][T26022] bridge_slave_0: entered promiscuous mode [ 2393.241667][T26022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2393.241826][T26022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2393.242030][T26022] bridge_slave_1: entered allmulticast mode [ 2393.245304][T26022] bridge_slave_1: entered promiscuous mode [ 2395.811116][T26099] netlink: 'syz.6.5608': attribute type 1 has an invalid length. [ 2397.240739][T26022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2397.369527][T26022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2397.546985][T26109] netlink: 'syz.6.5609': attribute type 1 has an invalid length. [ 2397.732210][T26109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2397.750236][T26022] team0: Port device team_slave_0 added [ 2397.824961][T26022] team0: Port device team_slave_1 added [ 2399.466213][T25948] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2400.292472][T26022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2400.292545][T26022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2400.292606][T26022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2400.422982][T25948] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2400.713002][T26133] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5612'. [ 2401.121908][T26022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2401.121926][T26022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2401.121960][T26022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2401.122520][T25948] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2401.227793][T25948] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2401.876158][T26022] hsr_slave_0: entered promiscuous mode [ 2401.879128][T26022] hsr_slave_1: entered promiscuous mode [ 2401.880368][T26022] debugfs: 'hsr0' already exists in 'hsr' [ 2401.880392][T26022] Cannot create hsr debugfs directory [ 2402.939735][T25973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2402.977046][T26152] netlink: 'syz.8.5617': attribute type 1 has an invalid length. [ 2403.090232][T26152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2403.106290][T25973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2403.146420][T25973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2403.204751][T25973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2403.638112][T26022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2403.867804][T26022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2403.999891][T17449] Bluetooth: hci0: command 0x0405 tx timeout [ 2404.080212][T26022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2404.388842][T26022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2404.484146][T25948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2405.684692][T25948] 8021q: adding VLAN 0 to HW filter on device team0 [ 2405.735805][T23455] bridge0: port 1(bridge_slave_0) entered blocking state [ 2405.735951][T23455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2405.790430][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 2405.790589][ T6857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2406.101534][T25973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2406.264652][T25973] 8021q: adding VLAN 0 to HW filter on device team0 [ 2406.344481][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.344630][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2406.381664][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 2406.381830][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2406.438184][T26022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2406.628667][T26022] 8021q: adding VLAN 0 to HW filter on device team0 [ 2406.678018][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.678397][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2406.716847][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2406.716986][T17287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2406.846115][T26201] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5622'. [ 2407.279720][T25948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2408.047767][T25973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2408.713794][T25973] veth0_vlan: entered promiscuous mode [ 2408.919711][T25973] veth1_vlan: entered promiscuous mode [ 2408.968456][T26022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2409.078117][T26222] netlink: 'syz.8.5625': attribute type 1 has an invalid length. [ 2409.182848][T26222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2410.461029][T25973] veth0_macvtap: entered promiscuous mode [ 2410.521950][T25973] veth1_macvtap: entered promiscuous mode [ 2410.649113][T25948] veth0_vlan: entered promiscuous mode [ 2410.665739][T25973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2410.700000][T25973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2410.731361][T25948] veth1_vlan: entered promiscuous mode [ 2410.759652][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.779532][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.784404][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.789741][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.141672][T26022] veth0_vlan: entered promiscuous mode [ 2411.283881][T26022] veth1_vlan: entered promiscuous mode [ 2411.296826][T25948] veth0_macvtap: entered promiscuous mode [ 2411.333954][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2411.333974][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2411.338615][T25948] veth1_macvtap: entered promiscuous mode [ 2411.492408][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2411.492429][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2411.561824][T25948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2411.628830][T25948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2411.639490][T26022] veth0_macvtap: entered promiscuous mode [ 2411.669529][T23893] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.672060][T23893] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.672776][T26022] veth1_macvtap: entered promiscuous mode [ 2411.675406][T23893] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.675487][T23893] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.884744][T26022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2412.114668][T26022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2412.266078][T23893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.266302][T23893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.266564][T23893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.266708][T23893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.508547][T23893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2412.508568][T23893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.099943][T17287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.099964][T17287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.339687][ T6517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.339702][ T6517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.616714][ T6517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.616728][ T6517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2417.754111][ C0] vkms_vblank_simulate: vblank timer overrun [ 2417.829114][ C0] vkms_vblank_simulate: vblank timer overrun [ 2419.804390][T26296] netlink: 'syz.8.5639': attribute type 20 has an invalid length. [ 2419.804528][T26296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2420.239094][T18882] IPVS: starting estimator thread 0... [ 2420.338653][T26301] IPVS: using max 8 ests per chain, 19200 per kthread [ 2420.423230][ C0] vkms_vblank_simulate: vblank timer overrun [ 2421.436174][ C0] vkms_vblank_simulate: vblank timer overrun [ 2422.353219][ C0] vkms_vblank_simulate: vblank timer overrun [ 2424.125638][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5646'. [ 2425.400333][ C1] vkms_vblank_simulate: vblank timer overrun [ 2427.143900][ C1] vkms_vblank_simulate: vblank timer overrun [ 2427.923660][ C1] vkms_vblank_simulate: vblank timer overrun [ 2428.178156][ C1] vkms_vblank_simulate: vblank timer overrun [ 2428.450114][ C1] vkms_vblank_simulate: vblank timer overrun [ 2428.684952][T26320] bridge_slave_1: left allmulticast mode [ 2428.684995][T26320] bridge_slave_1: left promiscuous mode [ 2428.685354][T26320] bridge0: port 2(bridge_slave_1) entered disabled state [ 2429.077479][ C1] vkms_vblank_simulate: vblank timer overrun [ 2429.833372][ C1] vkms_vblank_simulate: vblank timer overrun [ 2429.895593][T26320] bridge_slave_0: left allmulticast mode [ 2429.895627][T26320] bridge_slave_0: left promiscuous mode [ 2429.895921][T26320] bridge0: port 1(bridge_slave_0) entered disabled state [ 2430.006955][ C1] vkms_vblank_simulate: vblank timer overrun [ 2434.026613][T26388] openvswitch: netlink: IP tunnel dst address not specified [ 2442.877088][T26455] openvswitch: netlink: IP tunnel dst address not specified [ 2443.217280][T26463] IPv6: NLM_F_CREATE should be specified when creating new route [ 2444.619190][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2444.619265][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2444.663340][T26465] wg1: entered promiscuous mode [ 2444.663369][T26465] wg1: entered allmulticast mode [ 2448.848725][ T5885] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2449.011517][ T5885] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2449.011547][ T5885] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2449.013645][ T5885] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 2449.013713][ T5885] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2449.013733][ T5885] usb 9-1: Manufacturer: syz [ 2449.013747][ T5885] usb 9-1: SerialNumber: syz [ 2449.443912][ T5885] usbhid 9-1:36.0: couldn't find an input interrupt endpoint [ 2449.472844][ T5885] usb 9-1: USB disconnect, device number 33 [ 2449.547034][T26506] openvswitch: netlink: IP tunnel dst address not specified [ 2450.303291][T26514] kAFS: No cell specified [ 2450.454388][T26516] IPv6: NLM_F_CREATE should be specified when creating new route [ 2452.982401][T26538] wg1: entered promiscuous mode [ 2452.982428][T26538] wg1: entered allmulticast mode [ 2455.456294][T26550] kAFS: No cell specified [ 2455.735544][T26554] netlink: 'syz.4.5710': attribute type 4 has an invalid length. [ 2455.819279][T26555] openvswitch: netlink: IP tunnel dst address not specified [ 2465.302347][T19032] IPVS: starting estimator thread 0... [ 2465.404284][T26608] IPVS: using max 8 ests per chain, 19200 per kthread [ 2466.949941][T26617] netlink: 'syz.5.5728': attribute type 1 has an invalid length. [ 2468.964511][T26627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5731'. [ 2469.632345][T26633] netlink: 'syz.8.5732': attribute type 20 has an invalid length. [ 2469.632778][T26633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2471.914606][T26654] siw: device registration error -23 [ 2474.943423][T15822] libceph: connect (1)[c::]:6789 error -101 [ 2474.943633][T15822] libceph: mon0 (1)[c::]:6789 connect error [ 2475.212558][T15822] libceph: connect (1)[c::]:6789 error -101 [ 2475.212755][T15822] libceph: mon0 (1)[c::]:6789 connect error [ 2475.580447][T26669] ceph: No mds server is up or the cluster is laggy [ 2482.367934][T26719] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5756'. [ 2487.133564][T26777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5772'. [ 2488.113239][T26784] siw: device registration error -23 [ 2491.831904][T26812] kAFS: No cell specified [ 2493.042949][ T5885] IPVS: starting estimator thread 0... [ 2493.343019][T26828] IPVS: using max 14 ests per chain, 33600 per kthread [ 2495.932688][T14211] Bluetooth: hci4: command 0x0406 tx timeout [ 2496.997586][T26849] QAT: Device 197 not found [ 2499.802396][T26862] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5795'. [ 2502.028963][T26876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5799'. [ 2502.235334][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5799'. [ 2502.235570][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5799'. [ 2502.236371][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5799'. [ 2504.201387][T26897] netlink: 'syz.3.5806': attribute type 1 has an invalid length. [ 2504.327390][T26892] ceph: No mds server is up or the cluster is laggy [ 2506.963159][T14211] Bluetooth: hci2: command 0x0406 tx timeout [ 2507.670721][T26932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5814'. [ 2509.479407][T26944] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 2509.485176][T26944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2510.245609][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2510.245679][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2510.930196][T26960] tmpfs: Unknown parameter 'qfÇ5Þ' [ 2512.469144][T17449] Bluetooth: hci0: command 0x0405 tx timeout [ 2518.098630][T27007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5837'. [ 2518.743922][T19494] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2518.926733][T19494] usb 4-1: Using ep0 maxpacket: 8 [ 2518.929633][T19494] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2518.929662][T19494] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2518.929683][T19494] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2518.929703][T19494] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2518.929741][T19494] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2518.929761][T19494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.506230][T19494] usb 4-1: GET_CAPABILITIES returned 0 [ 2519.506261][T19494] usbtmc 4-1:16.0: can't read capabilities [ 2519.732826][T26902] usb 4-1: USB disconnect, device number 39 [ 2521.505851][T27034] QAT: Device 197 not found [ 2522.756984][T27030] netlink: 'syz.8.5842': attribute type 20 has an invalid length. [ 2522.757119][T27030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2522.901595][T27043] IPv6: NLM_F_CREATE should be specified when creating new route [ 2523.568524][T27049] input: syz1 as /devices/virtual/input/input71 [ 2525.021409][ T38] INFO: task kworker/u8:9:1392 blocked for more than 143 seconds. [ 2525.021606][ T38] Not tainted syzkaller #0 [ 2525.021641][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2525.021701][ T38] task:kworker/u8:9 state:D stack:19608 pid:1392 tgid:1392 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2525.021939][ T38] Workqueue: ib-unreg-wq ib_unregister_work [ 2525.022040][ T38] Call Trace: [ 2525.022097][ T38] [ 2525.022167][ T38] __schedule+0x16f3/0x4c20 [ 2525.022487][ T38] ? __lock_acquire+0xab9/0xd20 [ 2525.022549][ T38] ? __pfx___schedule+0x10/0x10 [ 2525.022841][ T38] ? schedule+0x91/0x360 [ 2525.022915][ T38] schedule+0x165/0x360 [ 2525.022987][ T38] schedule_timeout+0x9a/0x270 [ 2525.023067][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 2525.023216][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 2525.023258][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2525.023298][ T38] ? wait_for_completion+0x267/0x5d0 [ 2525.023364][ T38] wait_for_completion+0x2bf/0x5d0 [ 2525.023509][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 2525.023584][ T38] ? disable_device+0x137/0x320 [ 2525.023704][ T38] disable_device+0x1c6/0x320 [ 2525.023860][ T38] ? __pfx_disable_device+0x10/0x10 [ 2525.023942][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 2525.023996][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 2525.024067][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 2525.024139][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 2525.024207][ T38] ib_unregister_work+0x19/0x30 [ 2525.024249][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 2525.024293][ T38] process_scheduled_works+0xae1/0x17b0 [ 2525.024524][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 2525.024706][ T38] worker_thread+0x8a0/0xda0 [ 2525.025040][ T38] kthread+0x711/0x8a0 [ 2525.025109][ T38] ? __pfx_worker_thread+0x10/0x10 [ 2525.025154][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.025246][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.025312][ T38] ret_from_fork+0x436/0x7d0 [ 2525.025394][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2525.025501][ T38] ? __switch_to_asm+0x39/0x70 [ 2525.025544][ T38] ? __switch_to_asm+0x33/0x70 [ 2525.025585][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.025660][ T38] ret_from_fork_asm+0x1a/0x30 [ 2525.025814][ T38] [ 2525.026942][ T38] [ 2525.026942][ T38] Showing all locks held in the system: [ 2525.027001][ T38] 1 lock held by khungtaskd/38: [ 2525.027036][ T38] #0: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2525.027461][ T38] 3 locks held by kworker/u8:9/1392: [ 2525.027496][ T38] #0: ffff88801a308138 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2525.027659][ T38] #1: ffffc90005067bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2525.027836][ T38] #2: ffff88804f3dc750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 2525.031805][ T38] 2 locks held by getty/5570: [ 2525.031840][ T38] #0: ffff88823bf248a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2525.032175][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 2525.049177][ T38] 3 locks held by kworker/u8:14/6856: [ 2525.049213][ T38] 4 locks held by kworker/u8:2/12545: [ 2525.049246][ T38] #0: ffff88801a2ec138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2525.049403][ T38] #1: ffffc90004c57bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2525.049579][ T38] #2: ffffffff8e6593a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 2525.049758][ T38] #3: ffffffff8d3af6f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2525.050075][ T38] 2 locks held by kworker/u8:21/18279: [ 2525.050110][ T38] #0: ffff888146695138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2525.050285][ T38] #1: ffffc9000ac7fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2525.050484][ T38] 3 locks held by kworker/1:7/23651: [ 2525.050544][ T38] 3 locks held by syz-executor/25948: [ 2525.050605][ T38] 2 locks held by kworker/u8:24/26369: [ 2525.050639][ T38] #0: ffff888019481938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2525.050856][ T38] #1: ffffc90005b97bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2525.051097][ T38] 1 lock held by syz.6.5848/27047: [ 2525.051802][ T38] #0: ffffffff8e0cf798 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x328/0x640 [ 2525.051987][ T38] 5 locks held by syz.3.5850/27057: [ 2525.052022][ T38] [ 2525.052060][ T38] ============================================= [ 2525.052060][ T38] [ 2525.052265][ T38] NMI backtrace for cpu 0 [ 2525.052287][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2525.052308][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2525.052319][ T38] Call Trace: [ 2525.052327][ T38] [ 2525.052336][ T38] dump_stack_lvl+0x189/0x250 [ 2525.052365][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2525.052388][ T38] ? __pfx__printk+0x10/0x10 [ 2525.052421][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 2525.052511][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2525.052531][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2525.052559][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2525.052583][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2525.052608][ T38] watchdog+0xf93/0xfe0 [ 2525.052635][ T38] ? watchdog+0x1de/0xfe0 [ 2525.052661][ T38] kthread+0x711/0x8a0 [ 2525.052682][ T38] ? __pfx_watchdog+0x10/0x10 [ 2525.052702][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.052723][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.052746][ T38] ret_from_fork+0x436/0x7d0 [ 2525.052771][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2525.052797][ T38] ? __switch_to_asm+0x39/0x70 [ 2525.052814][ T38] ? __switch_to_asm+0x33/0x70 [ 2525.052830][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.052848][ T38] ret_from_fork_asm+0x1a/0x30 [ 2525.052880][ T38] [ 2525.052888][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2525.052913][ C1] NMI backtrace for cpu 1 [ 2525.052928][ C1] CPU: 1 UID: 0 PID: 27057 Comm: syz.3.5850 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2525.052947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2525.052958][ C1] RIP: 0010:__rcu_read_lock+0x2a/0x60 [ 2525.052981][ C1] Code: f3 0f 1e fa 53 65 48 8b 1c 25 08 b0 7f 91 48 81 c3 44 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 18 ff 03 8b 03 3d 00 00 00 40 7d 07 5b e9 d1 c1 11 09 cc [ 2525.052996][ C1] RSP: 0018:ffffc9000e7375b0 EFLAGS: 00000a03 [ 2525.053012][ C1] RAX: 0000000000000000 RBX: ffff88806035dd84 RCX: dffffc0000000000 [ 2525.053026][ C1] RDX: 0000000000000006 RSI: ffffffff8cbb43b2 RDI: 00000000ffffffff [ 2525.053038][ C1] RBP: ffffc9000e737680 R08: ffffffff8eb66a37 R09: 1ffffffff1d6cd46 [ 2525.053052][ C1] R10: dffffc0000000000 R11: fffffbfff1d6cd47 R12: 0000000000000a02 [ 2525.053065][ C1] R13: ffffc9000e737608 R14: 1ffff92001ce6ec1 R15: ffffc9000e737600 [ 2525.053079][ C1] FS: 00007eff2b30d6c0(0000) GS:ffff888127125000(0000) knlGS:0000000000000000 [ 2525.053095][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2525.053107][ C1] CR2: 0000001b33814ff8 CR3: 000000004de34000 CR4: 00000000003526f0 [ 2525.053123][ C1] Call Trace: [ 2525.053130][ C1] [ 2525.053138][ C1] rt_spin_lock+0x1b4/0x2c0 [ 2525.053159][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2525.053175][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 2525.053195][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2525.053211][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2525.053226][ C1] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 2525.053247][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2525.053270][ C1] __skb_try_recv_datagram+0x89/0x1b0 [ 2525.053293][ C1] __unix_dgram_recvmsg+0x2d4/0xd60 [ 2525.053366][ C1] ? irqentry_exit+0x74/0x90 [ 2525.053382][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 2525.053403][ C1] ? irqentry_exit+0x74/0x90 [ 2525.053418][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2525.053437][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 2525.053458][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 2525.053480][ C1] sock_recvmsg_nosec+0x186/0x1c0 [ 2525.053509][ C1] ____sys_recvmsg+0x3ab/0x470 [ 2525.053532][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2525.053558][ C1] ? import_iovec+0x74/0xa0 [ 2525.053580][ C1] ___sys_recvmsg+0x1b5/0x510 [ 2525.053601][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 2525.053635][ C1] ? __might_fault+0xb0/0x130 [ 2525.053653][ C1] do_recvmmsg+0x30d/0x770 [ 2525.053676][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 2525.053701][ C1] ? __pfx_do_futex+0x10/0x10 [ 2525.053729][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 2525.053748][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2525.053766][ C1] ? rcu_is_watching+0x15/0xb0 [ 2525.053784][ C1] ? do_syscall_64+0xbe/0x3b0 [ 2525.053803][ C1] do_syscall_64+0xfa/0x3b0 [ 2525.053819][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2525.053834][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2525.053851][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2525.053869][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2525.053886][ C1] RIP: 0033:0x7eff2d0ceec9 [ 2525.053906][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2525.053921][ C1] RSP: 002b:00007eff2b30d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2525.053939][ C1] RAX: ffffffffffffffda RBX: 00007eff2d326090 RCX: 00007eff2d0ceec9 [ 2525.053952][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 2525.053964][ C1] RBP: 00007eff2d151f91 R08: 0000000000000000 R09: 0000000000000000 [ 2525.053976][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2525.053987][ C1] R13: 00007eff2d326128 R14: 00007eff2d326090 R15: 00007ffc82bb52f8 [ 2525.054008][ C1] [ 2525.055060][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2525.055079][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2525.055100][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2525.055111][ T38] Call Trace: [ 2525.055118][ T38] [ 2525.055126][ T38] dump_stack_lvl+0x99/0x250 [ 2525.055152][ T38] ? __asan_memcpy+0x40/0x70 [ 2525.055172][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2525.055196][ T38] ? __pfx__printk+0x10/0x10 [ 2525.055228][ T38] vpanic+0x281/0x750 [ 2525.055244][ T38] ? rcu_is_watching+0x15/0xb0 [ 2525.055264][ T38] ? __pfx_vpanic+0x10/0x10 [ 2525.055280][ T38] ? preempt_schedule_irq+0xde/0x150 [ 2525.055304][ T38] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2525.055337][ T38] panic+0xb9/0xc0 [ 2525.055354][ T38] ? __pfx_panic+0x10/0x10 [ 2525.055381][ T38] ? __pfx_panic+0x10/0x10 [ 2525.055400][ T38] watchdog+0xfd2/0xfe0 [ 2525.055426][ T38] ? watchdog+0x1de/0xfe0 [ 2525.055453][ T38] kthread+0x711/0x8a0 [ 2525.055473][ T38] ? __pfx_watchdog+0x10/0x10 [ 2525.055493][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.055516][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.055533][ T38] ret_from_fork+0x436/0x7d0 [ 2525.055558][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2525.055585][ T38] ? __switch_to_asm+0x39/0x70 [ 2525.055602][ T38] ? __switch_to_asm+0x33/0x70 [ 2525.055619][ T38] ? __pfx_kthread+0x10/0x10 [ 2525.055636][ T38] ret_from_fork_asm+0x1a/0x30 [ 2525.055669][ T38] [ 2525.055926][ T38] Kernel Offset: disabled