last executing test programs: 6m44.132157378s ago: executing program 32 (id=91): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) 4m34.279303798s ago: executing program 33 (id=410): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x4002) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) pread64(r1, &(0x7f0000002180)=""/4105, 0x1009, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) sendmmsg$inet(r7, &(0x7f00000005c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r8, 0x89e4, &(0x7f0000002900)={0x22, "65fbcb559dd3222da9bbdbd82f780118457f0448bb9bff155a64d7d46dc0162b3b05731c8c27e949745fc0c81b1516ac2109a6c5b52460ba687f8d9099b11145795eab66d1040151172cfeccffa27d001768e4aae63a0b34fc65eed111dae797353a0129d06800da4ae2b00fade2cc3edb99f7b323edc32cfa353a428b7b7a81"}) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 3m49.965574349s ago: executing program 0 (id=549): socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) socket(0x10, 0x2, 0x0) 3m49.054937676s ago: executing program 3 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, &(0x7f00000005c0)}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[0x0]) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') pread64(r8, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) 3m48.936272348s ago: executing program 0 (id=551): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x80803, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3m48.19480639s ago: executing program 3 (id=554): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x4f424752, 0x0, 0xa, [{0x0, 0xfffffffe}, {0x10}, {}, {0xffff5e49, 0x2}, {0x6}, {0x0, 0x4}, {0xfffffffc}, {0xfffffffe, 0x80000000}], 0x0, 0x0, 0x6, 0x1}}) mkdirat(0xffffffffffffffff, 0x0, 0x148) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m47.103541918s ago: executing program 0 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2, 0x3}, 0x11, 0x0) landlock_restrict_self(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="250300aae1a53efc1e8d07e1938a"], 0x14}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xf7, 0xc, 0x8}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x0) 3m44.836752075s ago: executing program 0 (id=563): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, @void, @value}, 0x94) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) 3m43.9768964s ago: executing program 0 (id=564): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x0) 3m43.444791916s ago: executing program 1 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_GETFSMAP(r3, 0x40305839, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000000c0)=0x5, 0x4) 3m42.464394278s ago: executing program 1 (id=566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB]) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) msgget(0x3, 0x710) msgget(0x2, 0x624) 3m41.365584688s ago: executing program 1 (id=567): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x80803, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3m41.152219388s ago: executing program 0 (id=569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 3m40.428312629s ago: executing program 1 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0x5, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m40.305392884s ago: executing program 1 (id=571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$radio(&(0x7f0000000640), 0x0, 0x2) readv(r6, 0x0, 0x0) 3m38.928163741s ago: executing program 1 (id=573): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 3m32.471570858s ago: executing program 34 (id=554): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x4f424752, 0x0, 0xa, [{0x0, 0xfffffffe}, {0x10}, {}, {0xffff5e49, 0x2}, {0x6}, {0x0, 0x4}, {0xfffffffc}, {0xfffffffe, 0x80000000}], 0x0, 0x0, 0x6, 0x1}}) mkdirat(0xffffffffffffffff, 0x0, 0x148) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m25.251546218s ago: executing program 35 (id=569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 3m23.41981839s ago: executing program 36 (id=573): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 3m0.416984817s ago: executing program 5 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) symlinkat(0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, 0x0, 0x8000) r5 = socket(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r8, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xd9, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 2m54.793511933s ago: executing program 5 (id=641): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r8}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000300)={@remote, r11}, 0x14) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4e7c5800", '\x00', "08000000000e7d00"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2m46.834669001s ago: executing program 5 (id=652): syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, 0x0, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) close(0x3) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) sendmmsg$sock(r5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="170900000000000000000100000005000700000000000800090003000000060002000100000008000a000000000008001800e0000002080019"], 0x44}}, 0x0) 2m45.759077033s ago: executing program 9 (id=654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2m45.552861777s ago: executing program 9 (id=656): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080) r3 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r5, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) socket$igmp(0x2, 0x3, 0x2) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) 2m44.38092248s ago: executing program 9 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2m42.941714406s ago: executing program 5 (id=660): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setfsgid(0x0) socket$inet6(0xa, 0x80803, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m42.886220935s ago: executing program 9 (id=661): inotify_init1(0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1b, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r6, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 2m40.211869483s ago: executing program 9 (id=664): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x420000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000000)={0x4, r6}) 2m38.366142687s ago: executing program 9 (id=665): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000740)='\r ', 0x2}], 0x1}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x80010, r1, 0xa969d000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 2m38.305365755s ago: executing program 5 (id=666): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2, 0x3}, 0x11, 0x0) landlock_restrict_self(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpgrp(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="250300aae1a53efc1e8d07e1938a"], 0x14}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r5, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xf7, 0xc, 0x8}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x9c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) fanotify_init(0x20, 0x800) 2m36.972589366s ago: executing program 5 (id=671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[0x0]) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') pread64(r7, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) 2m22.806218694s ago: executing program 37 (id=665): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000740)='\r ', 0x2}], 0x1}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x80010, r1, 0xa969d000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 2m21.527355446s ago: executing program 38 (id=671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[0x0]) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') pread64(r7, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) 1m4.379789328s ago: executing program 6 (id=841): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r8}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00'}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4e7c5800", '\x00', "08000000000e7d00"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socket$nl_netfilter(0x10, 0x3, 0xc) 1m1.312214705s ago: executing program 6 (id=850): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080) r3 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x18, r6, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r6, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6}) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)) 59.868641697s ago: executing program 6 (id=852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$radio(&(0x7f0000000640), 0x0, 0x2) 55.686906617s ago: executing program 6 (id=863): prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e24, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xda}, 0xfffffffffffffcdc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x2, &(0x7f0000001680)=""/55, &(0x7f0000000000)=0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x90) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000180)=""/133, 0x85}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sg(&(0x7f0000000240), 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) pread64(r3, &(0x7f0000000000)=""/162, 0xa2, 0xff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000003a000957000000d00a20000001"], 0x18}}, 0x0) 54.314116606s ago: executing program 6 (id=866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xc0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 53.066483621s ago: executing program 6 (id=869): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r4, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) socket$igmp(0x2, 0x3, 0x2) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) 37.476596422s ago: executing program 39 (id=869): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r4, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) socket$igmp(0x2, 0x3, 0x2) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) 17.209445812s ago: executing program 2 (id=927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') openat(r4, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002d9c0207f72660000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020) syz_io_uring_setup(0x2a20, 0x0, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d000000010000000000008d0000000000001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 16.022345763s ago: executing program 2 (id=929): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0x5, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.187995537s ago: executing program 7 (id=936): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0x25, 0x80, 0x20, 0xe20, 0x101, 0x7407, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0x0, 0x0, 0x71, 0x49, 0x7b}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 11.04088165s ago: executing program 2 (id=937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) iopl(0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xc0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 11.019388349s ago: executing program 4 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$sg(&(0x7f0000006740), 0x0, 0xc0000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x100000008, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 10.637475956s ago: executing program 8 (id=939): userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000240), 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') pipe(&(0x7f00000001c0)) select(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000400)={0xca}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe000bb00, @dev={0xac, 0x14, 0x14, 0x24}, @dev}, 0xc) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000002240)=""/65, 0x41}], 0x1, 0x9, 0x1) 9.897183227s ago: executing program 4 (id=940): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000300)={@remote, r10}, 0x14) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 9.138598419s ago: executing program 8 (id=941): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000120005ff2cbd7000000000200000004a", @ANYRES32=0x0, @ANYBLOB="00696facda40040040001280090001"], 0x68}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000001640)="2364e5bdfcf35efa4f51589bd13415c395cb14dda43df089ba3a4fe93b1d33ee347d474b07b0ef7e5be987ac26ccb79d9748428dbccb52e4383fd37aff2cc54821f82dc45dadef471f8fe5896f3ab589a70cce8fd8b527508d73d7ed1bc8f2a9363ecb80d5a008211309c95725bcf7", &(0x7f0000000240)=""/95, 0x4}, 0x20) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x32, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3cafe8ec225fda47", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {&(0x7f0000000080)="e94b02666c08000080", 0x9}], 0x8, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) 8.908044437s ago: executing program 7 (id=942): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080) r3 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r5, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)) 8.183633384s ago: executing program 4 (id=943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$radio(0x0, 0x0, 0x2) 8.103906227s ago: executing program 8 (id=944): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1}, 0x18) 8.001859114s ago: executing program 2 (id=945): syz_init_net_socket$ax25(0x3, 0x3, 0xcd) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x1, 0x8000000], [0x8200, 0x1], 0x13a}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 7.896077426s ago: executing program 3 (id=892): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80803, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 7.891274285s ago: executing program 7 (id=946): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0x5, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.432919579s ago: executing program 7 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)='%-010d \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0xb4, 0x802, 0x113a0, r7, 0x9, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0xc, @void, @value, @value=r6}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES64=0x0, @ANYRES16, @ANYRESOCT, @ANYRES16=r3, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) 6.357560087s ago: executing program 8 (id=948): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x0) 5.213141099s ago: executing program 3 (id=949): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x4, 0x4f424752, 0x0, 0xa, [{0x0, 0xfffffffe}, {0x810}, {}, {0xffff5e49, 0x2}, {0x6}, {0x0, 0x4}, {0xfffffffc}, {0xfffffffe, 0x80000000}], 0x0, 0x0, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x7) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) 5.210595526s ago: executing program 2 (id=950): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) inotify_init1(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f3fd65bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e208000000729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e7095d6744756e17ece06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) modify_ldt$read(0x0, &(0x7f0000000140)=""/28, 0x1c) gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) ioctl$PPPIOCGIDLE64(r5, 0x8010743f, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000001280), 0x4001, &(0x7f00000012c0)={[], [{@seclabel}]}) dup(r7) 4.06931772s ago: executing program 8 (id=951): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9e, 0x25, 0x80, 0x20, 0xe20, 0x101, 0x7407, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0x0, 0x0, 0x71, 0x49, 0x7b}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 3.9414881s ago: executing program 4 (id=952): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioperm(0x0, 0x1, 0x18a) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r5, 0x0, 0x3, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x45, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000002000001000000100000fa6215e1c90fed90ac00000010a85f001a4b000000000000000580000000aaaaaabd0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x31, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x7, 0xfffffffffffffc28) 2.742638444s ago: executing program 7 (id=953): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000300)={@remote, r10}, 0x14) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.709267592s ago: executing program 3 (id=954): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20) 2.629550066s ago: executing program 4 (id=955): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) iopl(0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xc0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 2.431077398s ago: executing program 3 (id=956): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x2a) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 2.221753204s ago: executing program 2 (id=957): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.791348965s ago: executing program 8 (id=958): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(r0, 0xa, &(0x7f0000000100)={0xf, 0x3}, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x30, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4}) get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x25dfdbff, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x9b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048004}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) 1.452895611s ago: executing program 4 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0xe}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xffffffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)='%-010d \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0xb4, 0x802, 0x113a0, r7, 0x9, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0xc, @void, @value, @value=r6}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES64=0x0, @ANYRES16, @ANYRESOCT, @ANYRES16=r3, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) 0s ago: executing program 7 (id=960): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): mmufd_mock0: Adding to iommu group 0 [ 181.338217][ T5877] usb 2-1: can't set config #179, error -71 [ 181.473458][ T6812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.604185][ T5877] usb 2-1: USB disconnect, device number 6 [ 187.515076][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 187.521273][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 187.521368][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 187.527856][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 193.926495][ T6905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.938666][ T6905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.232'. [ 194.535778][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.542223][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.270193][ T6938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.307402][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.455333][ T6980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.509888][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.247'. [ 202.078737][ T7000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.257495][ T7057] netlink: 'syz.0.260': attribute type 4 has an invalid length. [ 207.118661][ T7069] 9pnet_fd: Insufficient options for proto=fd [ 209.085169][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 209.373867][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 209.390120][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.399568][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.413745][ T9] usb 2-1: Product: syz [ 209.417911][ T9] usb 2-1: Manufacturer: syz [ 209.425831][ T9] usb 2-1: SerialNumber: syz [ 210.244652][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 210.627712][ T7088] IPVS: persistence engine module ip_vs_pe_@ not found [ 210.809482][ T9] usb 2-1: USB disconnect, device number 7 [ 210.816524][ T9] usblp0: removed [ 210.920194][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 211.100099][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 211.116812][ T5894] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 211.131239][ T5894] usb 6-1: config 179 has no interface number 0 [ 211.137977][ T5894] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 211.166249][ T5894] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 211.179572][ T5894] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.202044][ T5894] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 211.215751][ T5894] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 211.239529][ T5894] usb 6-1: config 179 interface 65 has no altsetting 0 [ 211.258021][ T5894] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 211.273110][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.360259][ T7092] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 211.378929][ T5894] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input7 [ 211.665706][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 211.718006][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 211.848503][ T7097] ceph: No mds server is up or the cluster is laggy [ 211.888781][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 212.132481][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 212.290247][ T5909] usb 6-1: USB disconnect, device number 2 [ 212.290451][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 212.304737][ T5909] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 213.792572][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'. [ 213.958827][ T7139] tipc: Started in network mode [ 213.968789][ T7139] tipc: Node identity 7aaa21c39e15, cluster identity 4711 [ 213.989291][ T7139] tipc: Enabled bearer , priority 7 [ 214.013653][ T7139] ªªªªªª: renamed from syzkaller0 [ 214.101935][ T7139] tipc: Disabling bearer [ 214.396173][ T7153] capability: warning: `syz.3.283' uses deprecated v2 capabilities in a way that may be insecure [ 214.881822][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 215.129831][ T7170] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.395679][ T5894] IPVS: starting estimator thread 0... [ 215.491363][ T7183] IPVS: using max 21 ests per chain, 50400 per kthread [ 215.791889][ T7198] loop0: detected capacity change from 0 to 512 [ 216.211082][ T7198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.244578][ T7198] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.326691][ T7198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.490263][ T7226] loop3: detected capacity change from 0 to 4096 [ 216.585872][ T7226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.833903][ T7253] loop1: detected capacity change from 0 to 2048 [ 216.880088][ T7253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.903499][ T7253] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.058338][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.119141][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.445261][ T29] audit: type=1326 audit(1733527314.651:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 217.537365][ T29] audit: type=1326 audit(1733527314.651:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 217.597711][ T29] audit: type=1326 audit(1733527314.671:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 217.674952][ T7287] loop1: detected capacity change from 0 to 512 [ 217.690225][ T29] audit: type=1326 audit(1733527314.671:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 217.712262][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.808139][ T29] audit: type=1326 audit(1733527314.671:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 217.830193][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.851929][ T7290] 9pnet_fd: Insufficient options for proto=fd [ 217.916157][ T29] audit: type=1326 audit(1733527314.671:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 217.960739][ T7295] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 217.976228][ T7287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.989612][ T7287] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.037240][ T7287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.039229][ T29] audit: type=1326 audit(1733527314.701:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 218.280354][ T29] audit: type=1326 audit(1733527314.701:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 218.346799][ T29] audit: type=1326 audit(1733527314.741:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86c757ff13 code=0x7ffc0000 [ 218.379123][ T29] audit: type=1326 audit(1733527314.741:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86c757ff13 code=0x7ffc0000 [ 218.457584][ T7316] loop2: detected capacity change from 0 to 128 [ 218.475652][ T7310] loop0: detected capacity change from 0 to 512 [ 218.494270][ T7312] loop3: detected capacity change from 0 to 512 [ 218.560473][ T7312] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 218.573903][ T7312] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.711881][ T7316] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 218.790836][ T7316] FAT-fs (loop2): Filesystem has been set read-only [ 218.797506][ T7316] syz.2.332: attempt to access beyond end of device [ 218.797506][ T7316] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 218.812333][ T7312] EXT4-fs (loop3): 1 orphan inode deleted [ 218.818369][ T7312] EXT4-fs (loop3): 1 truncate cleaned up [ 218.825077][ T7312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.830664][ T7316] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 218.867329][ T7310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.913986][ T7316] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 218.928146][ T7310] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.950877][ T7316] syz.2.332: attempt to access beyond end of device [ 218.950877][ T7316] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 218.983465][ T7310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.009756][ T7316] syz.2.332 (7316) used greatest stack depth: 18704 bytes left [ 219.072348][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.102144][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 219.216846][ T7336] loop2: detected capacity change from 0 to 512 [ 219.224074][ T7336] EXT4-fs: Ignoring removed oldalloc option [ 219.253515][ T7336] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.304419][ T7336] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 219.335477][ T7341] syz.3.339 uses obsolete (PF_INET,SOCK_PACKET) [ 219.351090][ T7336] EXT4-fs (loop2): 1 truncate cleaned up [ 219.375904][ T7336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.422822][ T7336] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 219.619504][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.344'. [ 219.649574][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 219.708366][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.866815][ T7373] loop2: detected capacity change from 0 to 1024 [ 220.890867][ T7373] EXT4-fs: Ignoring removed orlov option [ 220.917048][ T7373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.898238][ T7388] ip6t_srh: unknown srh invflags 4000 [ 221.953573][ T7373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.611963][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.710069][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 223.240189][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 223.271381][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.308844][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.344244][ T9] usb 4-1: Product: syz [ 223.357657][ T9] usb 4-1: Manufacturer: syz [ 223.385149][ T9] usb 4-1: SerialNumber: syz [ 223.422863][ T9] usb 4-1: config 0 descriptor?? [ 223.750333][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 224.438864][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 224.470866][ T7433] bond_slave_0: entered promiscuous mode [ 224.476917][ T7433] bond_slave_1: entered promiscuous mode [ 224.483405][ T7433] macvtap1: entered promiscuous mode [ 224.493602][ T7433] bond0: entered promiscuous mode [ 224.499377][ T7433] macvtap1: entered allmulticast mode [ 224.505692][ T7433] bond0: entered allmulticast mode [ 224.526449][ T7433] bond_slave_0: entered allmulticast mode [ 224.534627][ T7433] bond_slave_1: entered allmulticast mode [ 224.567389][ T7433] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 224.664516][ T7436] bond0: left allmulticast mode [ 224.712370][ T7436] bond_slave_0: left allmulticast mode [ 224.718667][ T7436] bond_slave_1: left allmulticast mode [ 224.729077][ T7436] bond0: left promiscuous mode [ 224.765828][ T7436] bond_slave_0: left promiscuous mode [ 224.771551][ T7436] bond_slave_1: left promiscuous mode [ 225.037146][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 225.037167][ T29] audit: type=1326 audit(1733527322.181:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.089491][ T29] audit: type=1326 audit(1733527322.181:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.111796][ T29] audit: type=1326 audit(1733527322.181:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.134058][ T29] audit: type=1326 audit(1733527322.181:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.156295][ T29] audit: type=1326 audit(1733527322.181:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.178609][ T29] audit: type=1326 audit(1733527322.181:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.200939][ T29] audit: type=1326 audit(1733527322.181:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.223402][ T29] audit: type=1326 audit(1733527322.181:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.245670][ T29] audit: type=1326 audit(1733527322.181:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.269061][ T29] audit: type=1326 audit(1733527322.181:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cf97fed9 code=0x7ffc0000 [ 225.574184][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 225.589866][ T9] usb 4-1: USB disconnect, device number 5 [ 225.728690][ T7459] netlink: 'syz.2.368': attribute type 4 has an invalid length. [ 228.611995][ T7482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.435065][ T7512] loop3: detected capacity change from 0 to 512 [ 233.452448][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 233.452459][ T29] audit: type=1326 audit(1733527330.671:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 233.520420][ T29] audit: type=1326 audit(1733527330.701:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 233.570896][ T29] audit: type=1326 audit(1733527330.701:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 233.660882][ T29] audit: type=1326 audit(1733527330.701:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 233.683062][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.714696][ T29] audit: type=1326 audit(1733527330.701:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 233.737226][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.795034][ T29] audit: type=1326 audit(1733527330.701:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 233.817177][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.060153][ T29] audit: type=1326 audit(1733527330.701:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 234.568498][ T29] audit: type=1326 audit(1733527330.701:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 234.662880][ T29] audit: type=1326 audit(1733527330.701:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 234.685068][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.647423][ T7558] syz.2.395: attempt to access beyond end of device [ 238.647423][ T7558] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 239.014799][ T5894] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 239.025244][ T7564] bond1: entered promiscuous mode [ 239.063569][ T7564] bond1: entered allmulticast mode [ 239.095302][ T7564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.644013][ T5894] usb 6-1: config 1 interface 0 has no altsetting 0 [ 239.659616][ T5894] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.674239][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.684871][ T5894] usb 6-1: Product: syz [ 239.689082][ T5894] usb 6-1: Manufacturer: syz [ 239.849359][ T5894] usb 6-1: SerialNumber: syz [ 241.830881][ T5894] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 241.908531][ T7587] netlink: 'syz.3.400': attribute type 10 has an invalid length. [ 242.831576][ T7564] bond1 (unregistering): Released all slaves [ 243.503173][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 243.554786][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.574122][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.327764][ T7587] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.136963][ T974] usb 6-1: USB disconnect, device number 3 [ 245.242308][ T974] usblp0: removed [ 245.258677][ T7600] team_slave_0: entered promiscuous mode [ 245.265460][ T7600] team_slave_1: entered promiscuous mode [ 245.272092][ T7600] macvtap2: entered promiscuous mode [ 245.277382][ T7600] team0: entered promiscuous mode [ 245.282825][ T7600] macvtap2: entered allmulticast mode [ 245.288197][ T7600] team0: entered allmulticast mode [ 245.296812][ T7600] team_slave_0: entered allmulticast mode [ 245.302943][ T7600] team_slave_1: entered allmulticast mode [ 245.311726][ T7600] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 245.507797][ T7603] team0: left allmulticast mode [ 245.676377][ T7603] team_slave_0: left allmulticast mode [ 245.682052][ T7603] team_slave_1: left allmulticast mode [ 245.688351][ T7603] team0: left promiscuous mode [ 245.693844][ T7603] team_slave_0: left promiscuous mode [ 245.699649][ T7603] team_slave_1: left promiscuous mode [ 246.608585][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 247.074331][ T7629] erspan0: entered promiscuous mode [ 247.083338][ T7629] macvtap3: entered promiscuous mode [ 247.088762][ T7629] macvtap3: entered allmulticast mode [ 247.100135][ T7629] erspan0: entered allmulticast mode [ 247.115032][ T7631] netlink: 'syz.5.415': attribute type 4 has an invalid length. [ 247.139555][ T7631] netlink: 17 bytes leftover after parsing attributes in process `syz.5.415'. [ 247.308730][ T7632] erspan0: left allmulticast mode [ 247.330681][ T7632] erspan0: left promiscuous mode [ 248.275581][ T7650] ip6t_srh: unknown srh invflags 4000 [ 250.082557][ T7658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.809072][ T7678] netlink: 'syz.5.427': attribute type 4 has an invalid length. [ 252.817087][ T7678] netlink: 17 bytes leftover after parsing attributes in process `syz.5.427'. [ 255.709829][ T7697] netlink: 'syz.5.431': attribute type 4 has an invalid length. [ 256.260625][ T7696] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 256.790839][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.808415][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.998365][ T5141] Bluetooth: hci5: command 0x0406 tx timeout [ 259.136564][ T7714] ip6t_srh: unknown srh invflags 4000 [ 259.551545][ T7724] netlink: 'syz.5.437': attribute type 4 has an invalid length. [ 259.559716][ T7724] netlink: 17 bytes leftover after parsing attributes in process `syz.5.437'. [ 260.552812][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.566986][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.579884][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.702856][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.732998][ T5141] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.755487][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.430275][ T29] audit: type=1326 audit(1733527358.351:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 261.615075][ T29] audit: type=1326 audit(1733527358.351:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 261.692043][ T29] audit: type=1326 audit(1733527358.351:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 262.727753][ T29] audit: type=1326 audit(1733527358.351:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 262.772953][ T29] audit: type=1326 audit(1733527358.351:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 262.830979][ T29] audit: type=1326 audit(1733527358.351:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 262.853411][ T29] audit: type=1326 audit(1733527358.351:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 262.876239][ T29] audit: type=1326 audit(1733527358.351:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 262.898720][ T29] audit: type=1326 audit(1733527358.351:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 262.921260][ T29] audit: type=1326 audit(1733527358.351:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 263.187217][ T5141] Bluetooth: hci3: command tx timeout [ 263.475244][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 264.140248][ T7765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.405569][ T5141] Bluetooth: hci3: command tx timeout [ 266.177944][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.187093][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.208424][ T7731] bridge_slave_0: entered allmulticast mode [ 266.225783][ T7731] bridge_slave_0: entered promiscuous mode [ 266.236477][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.302884][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.311960][ T7731] bridge_slave_1: entered allmulticast mode [ 266.321567][ T7731] bridge_slave_1: entered promiscuous mode [ 266.576388][ T6481] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 266.647631][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.695801][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.790250][ T6481] usb 1-1: Using ep0 maxpacket: 32 [ 266.801135][ T6481] usb 1-1: config 0 has an invalid interface number: 218 but max is 0 [ 266.815936][ T6481] usb 1-1: config 0 has no interface number 0 [ 266.840309][ T6481] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 266.862852][ T6481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.895465][ T6481] usb 1-1: Product: syz [ 266.919725][ T6481] usb 1-1: Manufacturer: syz [ 266.939264][ T6481] usb 1-1: SerialNumber: syz [ 267.514395][ T5141] Bluetooth: hci3: command tx timeout [ 267.780419][ T6481] usb 1-1: config 0 descriptor?? [ 267.819645][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.904476][ T7731] team0: Port device team_slave_0 added [ 268.139708][ T7731] team0: Port device team_slave_1 added [ 268.288861][ T9] usb 1-1: USB disconnect, device number 5 [ 269.655641][ T5141] Bluetooth: hci3: command tx timeout [ 269.666743][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.137561][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 270.137579][ T29] audit: type=1326 audit(1733527367.351:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 270.446762][ T29] audit: type=1326 audit(1733527367.391:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 270.479561][ T29] audit: type=1326 audit(1733527367.391:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 270.577362][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.601831][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.608945][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.609262][ T29] audit: type=1326 audit(1733527367.391:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 270.685863][ T7834] ip6t_srh: unknown srh invflags 4000 [ 270.720206][ T7731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.845538][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.853202][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.881852][ T7731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.977653][ T29] audit: type=1326 audit(1733527367.391:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 271.176444][ T7836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.226687][ T29] audit: type=1326 audit(1733527367.391:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 271.267041][ T29] audit: type=1326 audit(1733527367.391:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 272.407390][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.501718][ T29] audit: type=1326 audit(1733527367.391:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 272.535976][ T29] audit: type=1326 audit(1733527367.391:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 272.564904][ T29] audit: type=1326 audit(1733527367.391:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24b7fed9 code=0x7ffc0000 [ 272.705192][ T7731] hsr_slave_0: entered promiscuous mode [ 272.734705][ T7731] hsr_slave_1: entered promiscuous mode [ 272.742411][ T7731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.764826][ T7731] Cannot create hsr debugfs directory [ 275.568596][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 275.568614][ T29] audit: type=1326 audit(1733527372.771:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 275.598519][ T29] audit: type=1326 audit(1733527372.771:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 275.621324][ T29] audit: type=1326 audit(1733527372.771:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 275.632963][ T7731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.651601][ T29] audit: type=1326 audit(1733527372.871:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86c757e840 code=0x7ffc0000 [ 275.688592][ T29] audit: type=1326 audit(1733527372.871:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 275.715909][ T29] audit: type=1326 audit(1733527372.871:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 275.743728][ T29] audit: type=1326 audit(1733527372.901:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f86c757fed9 code=0x7ffc0000 [ 275.827369][ T7731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.855441][ T7731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.945444][ T35] bridge_slave_1: left allmulticast mode [ 275.951497][ T35] bridge_slave_1: left promiscuous mode [ 275.958941][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.974858][ T35] bridge_slave_0: left allmulticast mode [ 275.990738][ T35] bridge_slave_0: left promiscuous mode [ 275.997441][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.021646][ T7874] ip6t_srh: unknown srh invflags 4000 [ 277.891017][ T974] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 278.050119][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 278.075022][ T974] usb 2-1: config 0 has an invalid interface number: 218 but max is 0 [ 278.088002][ T974] usb 2-1: config 0 has no interface number 0 [ 278.560059][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.574834][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.585522][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.599106][ T35] bond0 (unregistering): Released all slaves [ 278.614959][ T974] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 278.625015][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.632151][ T7731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.648682][ T974] usb 2-1: Product: syz [ 278.673111][ T974] usb 2-1: Manufacturer: syz [ 278.679215][ T974] usb 2-1: SerialNumber: syz [ 278.706868][ T974] usb 2-1: config 0 descriptor?? [ 278.755735][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.772190][ T35] IPVS: stopping master sync thread 5970 ... [ 278.942916][ T974] usb 2-1: USB disconnect, device number 8 [ 279.072723][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.441948][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.449331][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.715312][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.722600][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.867187][ T35] hsr_slave_0: left promiscuous mode [ 280.911491][ T35] hsr_slave_1: left promiscuous mode [ 280.950248][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.966973][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.011990][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.241560][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.399212][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 282.510305][ T35] veth1_macvtap: left promiscuous mode [ 282.567122][ T35] veth0_macvtap: left promiscuous mode [ 282.710506][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 282.721665][ T9] usb 4-1: config 0 has no interfaces? [ 282.730984][ T35] veth1_vlan: left promiscuous mode [ 282.753306][ T35] veth0_vlan: left promiscuous mode [ 282.753407][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 282.783550][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.577465][ T9] usb 4-1: Manufacturer: syz [ 283.897180][ T9] usb 4-1: config 0 descriptor?? [ 284.424302][ T7940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.428151][ T7952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.048986][ T35] team0 (unregistering): Port device team_slave_1 removed [ 286.143846][ T35] team0 (unregistering): Port device team_slave_0 removed [ 289.030058][ T9] usb 4-1: can't set config #0, error -110 [ 290.647167][ T974] usb 4-1: USB disconnect, device number 6 [ 291.307528][ T7987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.510151][ T974] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 292.173513][ T974] usb 4-1: config 1 interface 0 has no altsetting 0 [ 292.199329][ T974] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 292.277731][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.336979][ T974] usb 4-1: Product: syz [ 292.350572][ T974] usb 4-1: Manufacturer: syz [ 292.355251][ T974] usb 4-1: SerialNumber: syz [ 292.360754][ T7978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.366320][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.679213][ T8015] syz.1.520: attempt to access beyond end of device [ 292.679213][ T8015] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 293.038609][ T974] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 293.489606][ T7731] veth0_vlan: entered promiscuous mode [ 293.502388][ T7731] veth1_vlan: entered promiscuous mode [ 294.172414][ T7731] veth0_macvtap: entered promiscuous mode [ 294.260417][ T7731] veth1_macvtap: entered promiscuous mode [ 294.349354][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.360882][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.374843][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.386994][ T5909] usb 4-1: USB disconnect, device number 7 [ 294.394585][ T5909] usblp0: removed [ 294.461418][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.481347][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.499672][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.532777][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.543760][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.573502][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.604911][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.669489][ T8043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.681465][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.481202][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.492141][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.502175][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.512644][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.522754][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.533269][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.543577][ T7731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.554568][ T7731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.565509][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.575667][ T7731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.584597][ T7731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.593353][ T7731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.602153][ T7731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.557140][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.582339][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.606195][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.630025][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.703817][ T8084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.927965][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.540'. [ 300.936941][ T8106] ip6_vti0: entered promiscuous mode [ 300.942682][ T8106] ip6_vti0: entered allmulticast mode [ 303.889586][ T8146] syz.0.549: attempt to access beyond end of device [ 303.889586][ T8146] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 304.437602][ T8139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.256524][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 308.068363][ T8177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.783128][ T8207] netlink: 'syz.1.560': attribute type 10 has an invalid length. [ 308.806918][ T8207] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 309.071137][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 309.440975][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 309.450184][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 309.463971][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.483981][ T8] usb 6-1: Product: syz [ 309.498577][ T8] usb 6-1: Manufacturer: syz [ 309.518512][ T8] usb 6-1: SerialNumber: syz [ 309.590946][ T8] usb 6-1: config 0 descriptor?? [ 311.092013][ T8] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 311.099375][ T8] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 312.248809][ T974] usb 6-1: USB disconnect, device number 4 [ 316.599695][ T8307] netlink: 'syz.6.576': attribute type 10 has an invalid length. [ 316.624068][ T8307] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 316.754862][ T8305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.814783][ T8305] netlink: 32 bytes leftover after parsing attributes in process `syz.5.575'. [ 317.553402][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.560103][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.406996][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.415909][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.424035][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.475032][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.483730][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.493588][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.626374][ T8361] chnl_net:caif_netlink_parms(): no params data found [ 321.834761][ T7915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.858663][ T8361] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.865914][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.875231][ T8361] bridge_slave_0: entered allmulticast mode [ 321.882256][ T8361] bridge_slave_0: entered promiscuous mode [ 321.889551][ T8361] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.898040][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.905662][ T8361] bridge_slave_1: entered allmulticast mode [ 321.912487][ T8361] bridge_slave_1: entered promiscuous mode [ 321.931446][ T8361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.942310][ T8361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.967531][ T8361] team0: Port device team_slave_0 added [ 321.975953][ T8361] team0: Port device team_slave_1 added [ 322.025269][ T8361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.040146][ T8361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.066039][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.109776][ T8361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.153461][ T7915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.178726][ T8361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.192743][ T8361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.256248][ T8361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.327484][ T7915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.410140][ T7915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.435918][ T8361] hsr_slave_0: entered promiscuous mode [ 322.446355][ T8361] hsr_slave_1: entered promiscuous mode [ 322.456597][ T8361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.467847][ T8361] Cannot create hsr debugfs directory [ 323.116432][ T7915] bridge_slave_1: left allmulticast mode [ 323.140133][ T7915] bridge_slave_1: left promiscuous mode [ 323.187278][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.214750][ T7915] bridge_slave_0: left allmulticast mode [ 323.243138][ T7915] bridge_slave_0: left promiscuous mode [ 323.481303][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.673521][ T5141] Bluetooth: hci1: command tx timeout [ 324.741111][ T7915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.755408][ T7915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.767055][ T7915] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 324.782639][ T7915] bond0 (unregistering): Released all slaves [ 324.987367][ T7915] tipc: Left network mode [ 325.019163][ T8361] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 325.064391][ T8361] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 325.088419][ T7915] IPVS: stopping master sync thread 5963 ... [ 325.096543][ T8361] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 325.205452][ T8361] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 325.758254][ T5141] Bluetooth: hci1: command tx timeout [ 325.915791][ T8361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.206205][ T7915] hsr_slave_0: left promiscuous mode [ 327.264722][ T7915] hsr_slave_1: left promiscuous mode [ 327.276491][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.372787][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.815677][ T5141] Bluetooth: hci1: command tx timeout [ 327.970741][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.978218][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.046637][ T7915] veth1_macvtap: left promiscuous mode [ 328.069256][ T7915] veth0_macvtap: left promiscuous mode [ 328.102423][ T7915] veth1_vlan: left promiscuous mode [ 328.125578][ T7915] veth0_vlan: left promiscuous mode [ 329.129242][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.183056][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.196193][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.214373][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.680161][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 329.831416][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.890330][ T5141] Bluetooth: hci1: command tx timeout [ 330.277389][ T7915] team0 (unregistering): Port device team_slave_1 removed [ 330.381829][ T7915] team0 (unregistering): Port device team_slave_0 removed [ 330.614927][ T8452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.965300][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.975679][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.984191][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.993267][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.002106][ T5838] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 331.010564][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.891254][ T5838] Bluetooth: hci4: command tx timeout [ 332.314483][ T8361] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.365508][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.372712][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.527134][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.534335][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.097769][ T5838] Bluetooth: hci6: command tx timeout [ 333.304544][ T8471] netlink: 'syz.5.604': attribute type 4 has an invalid length. [ 333.316928][ T8471] netlink: 17 bytes leftover after parsing attributes in process `syz.5.604'. [ 333.413134][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 333.489744][ T7915] IPVS: stop unused estimator thread 0... [ 333.970446][ T5838] Bluetooth: hci4: command tx timeout [ 334.331631][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.348701][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.356228][ T8454] bridge_slave_0: entered allmulticast mode [ 334.363321][ T8454] bridge_slave_0: entered promiscuous mode [ 334.417844][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.477746][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.497759][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.516197][ T8454] bridge_slave_1: entered allmulticast mode [ 334.525761][ T8454] bridge_slave_1: entered promiscuous mode [ 334.545475][ T8443] chnl_net:caif_netlink_parms(): no params data found [ 334.594578][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.712871][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.750518][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.762760][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.180297][ T5838] Bluetooth: hci6: command tx timeout [ 335.408472][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.526260][ T8454] team0: Port device team_slave_0 added [ 335.804719][ T8361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.837660][ T8454] team0: Port device team_slave_1 added [ 335.936101][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.948229][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.974200][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.988789][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.214492][ T5838] Bluetooth: hci4: command tx timeout [ 336.273076][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.328445][ T8443] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.346185][ T8443] bridge_slave_0: entered allmulticast mode [ 336.353488][ T8443] bridge_slave_0: entered promiscuous mode [ 336.362077][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.369244][ T8443] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.376631][ T8443] bridge_slave_1: entered allmulticast mode [ 336.383854][ T8443] bridge_slave_1: entered promiscuous mode [ 336.391290][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.399081][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.425038][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.444115][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.624960][ T8443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.723266][ T8454] hsr_slave_0: entered promiscuous mode [ 336.740716][ T8454] hsr_slave_1: entered promiscuous mode [ 336.804534][ T8443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.095014][ T8443] team0: Port device team_slave_0 added [ 337.219236][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.260307][ T5838] Bluetooth: hci6: command tx timeout [ 337.294848][ T8443] team0: Port device team_slave_1 added [ 337.445188][ T8361] veth0_vlan: entered promiscuous mode [ 337.456598][ T8361] veth1_vlan: entered promiscuous mode [ 337.479293][ T8361] veth0_macvtap: entered promiscuous mode [ 337.488398][ T8361] veth1_macvtap: entered promiscuous mode [ 337.597890][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.680912][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.687945][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.718165][ T8443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.744473][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.759994][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.769905][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.780707][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.791348][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.806509][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.827353][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.851219][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.873622][ T8361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.969062][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.038562][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.073872][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.307074][ T5838] Bluetooth: hci4: command tx timeout [ 338.418745][ T8443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.762013][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.780062][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.800038][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.817333][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.827332][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.837935][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.847859][ T8361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.859411][ T8361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.870822][ T8361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.947137][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.999539][ T8361] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.015200][ T8361] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.025037][ T8361] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.034352][ T8361] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.233480][ T8443] hsr_slave_0: entered promiscuous mode [ 339.270571][ T8443] hsr_slave_1: entered promiscuous mode [ 339.290454][ T8443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.298122][ T8443] Cannot create hsr debugfs directory [ 339.335553][ T5838] Bluetooth: hci6: command tx timeout [ 339.882151][ T8454] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 339.930213][ T8454] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 340.080249][ T8454] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 340.560051][ T8454] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 340.748951][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.786753][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.982379][ T35] bridge_slave_1: left allmulticast mode [ 341.028953][ T35] bridge_slave_1: left promiscuous mode [ 341.041996][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.055964][ T35] bridge_slave_0: left allmulticast mode [ 341.066343][ T35] bridge_slave_0: left promiscuous mode [ 341.073452][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.250585][ T6481] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 341.293543][ T35] bridge_slave_1: left allmulticast mode [ 341.332218][ T35] bridge_slave_1: left promiscuous mode [ 341.383843][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.439984][ T6481] usb 7-1: config 1 interface 0 has no altsetting 0 [ 341.475921][ T6481] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 341.533275][ T35] bridge_slave_0: left allmulticast mode [ 341.547141][ T6481] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.607501][ T35] bridge_slave_0: left promiscuous mode [ 341.752840][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.771465][ T6481] usb 7-1: Product: syz [ 341.775981][ T6481] usb 7-1: Manufacturer: syz [ 341.780689][ T6481] usb 7-1: SerialNumber: syz [ 342.777294][ T6481] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 343.272203][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.298779][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.328681][ T6481] usb 7-1: USB disconnect, device number 2 [ 343.337221][ T6481] usblp0: removed [ 343.356392][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.378014][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.410916][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 343.435406][ T35] bond0 (unregistering): Released all slaves [ 343.737411][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.753559][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.785845][ T35] bond0 (unregistering): Released all slaves [ 343.817637][ T8475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.848463][ T8475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.861003][ T8605] netlink: 'syz.5.619': attribute type 10 has an invalid length. [ 343.868795][ T8605] netlink: 55 bytes leftover after parsing attributes in process `syz.5.619'. [ 344.017842][ T35] IPVS: stopping master sync thread 5944 ... [ 344.034453][ T35] IPVS: stopping master sync thread 6123 ... [ 346.028215][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.178412][ T8443] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 346.240571][ T8443] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 346.820265][ T8443] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 346.902626][ T8443] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 346.956613][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.134369][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.141566][ T8475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.161069][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.168223][ T8475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.439734][ T8653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.520565][ T8653] netlink: 32 bytes leftover after parsing attributes in process `syz.7.624'. [ 347.852952][ T8443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.870880][ T8443] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.948917][ T8454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.030170][ T8454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.061615][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.068773][ T7915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.128072][ T7915] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.135297][ T7915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.350612][ T8443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.192555][ T35] hsr_slave_0: left promiscuous mode [ 349.252007][ T35] hsr_slave_1: left promiscuous mode [ 349.285710][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.293849][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.341713][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.349210][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.392746][ T35] hsr_slave_0: left promiscuous mode [ 349.429790][ T35] hsr_slave_1: left promiscuous mode [ 349.436404][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.470025][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.488223][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.523217][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.605293][ T35] veth1_macvtap: left promiscuous mode [ 349.632392][ T35] veth0_macvtap: left promiscuous mode [ 349.638102][ T35] veth1_vlan: left promiscuous mode [ 349.670204][ T35] veth0_vlan: left promiscuous mode [ 349.700217][ T35] veth1_macvtap: left promiscuous mode [ 349.705806][ T35] veth0_macvtap: left promiscuous mode [ 349.720169][ T35] veth1_vlan: left promiscuous mode [ 349.725698][ T35] veth0_vlan: left promiscuous mode [ 353.323802][ T35] team0 (unregistering): Port device team_slave_1 removed [ 354.323486][ T35] team0 (unregistering): Port device team_slave_0 removed [ 357.280803][ T35] team0 (unregistering): Port device team_slave_1 removed [ 357.350275][ T35] team0 (unregistering): Port device team_slave_0 removed [ 358.758196][ T8443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.411565][ T8747] netlink: 'syz.5.641': attribute type 10 has an invalid length. [ 359.452722][ T8747] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 359.639743][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.485061][ T8443] veth0_vlan: entered promiscuous mode [ 360.595089][ T8443] veth1_vlan: entered promiscuous mode [ 360.756040][ T8443] veth0_macvtap: entered promiscuous mode [ 360.806393][ T8443] veth1_macvtap: entered promiscuous mode [ 361.190892][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.816030][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.827253][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.851815][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.865893][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.888065][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.907831][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.983120][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.045052][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.067488][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.079780][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.101811][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.119194][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.143851][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.159241][ T8443] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.174483][ T8443] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.217878][ T8443] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.229074][ T8443] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.389199][ T8454] veth0_vlan: entered promiscuous mode [ 363.407700][ T8454] veth1_vlan: entered promiscuous mode [ 364.141090][ T8454] veth0_macvtap: entered promiscuous mode [ 364.159351][ T8454] veth1_macvtap: entered promiscuous mode [ 364.212416][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.224362][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.234928][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.245840][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.265613][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.276868][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.295175][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.303806][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.329779][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.337678][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.356470][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.419812][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.445921][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.740629][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.964283][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.985146][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.050655][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.108724][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.127593][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.152631][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.241616][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.261366][ T8454] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.275965][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.297246][ T8454] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.360461][ T8454] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.387011][ T8454] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.644763][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.663060][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.816002][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.832211][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.359872][ T8848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.450607][ T8891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.503404][ T8904] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 377.581021][ T8918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.805781][ T29] audit: type=1326 audit(1733527476.001:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 379.495798][ T29] audit: type=1326 audit(1733527476.001:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 379.536349][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.542786][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.669147][ T29] audit: type=1326 audit(1733527476.001:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 379.676059][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.675'. [ 379.740028][ T29] audit: type=1326 audit(1733527476.001:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 379.777214][ T8940] netlink: 48 bytes leftover after parsing attributes in process `syz.6.675'. [ 379.839270][ T29] audit: type=1326 audit(1733527476.001:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 379.868986][ T29] audit: type=1326 audit(1733527476.001:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 379.891359][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.905488][ T29] audit: type=1326 audit(1733527476.001:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 379.933375][ T8948] ip6t_srh: unknown srh invflags 4000 [ 379.939470][ T29] audit: type=1326 audit(1733527476.001:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 380.092391][ T29] audit: type=1326 audit(1733527476.001:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 380.114852][ T29] audit: type=1326 audit(1733527476.001:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 381.970266][ T2082] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 383.232382][ T2082] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 383.242189][ T2082] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.707892][ T2082] usb 8-1: config 0 descriptor?? [ 383.737260][ T2082] usb 8-1: can't set config #0, error -71 [ 383.808444][ T2082] usb 8-1: USB disconnect, device number 2 [ 386.341112][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 386.956566][ T9039] netlink: 'syz.7.690': attribute type 4 has an invalid length. [ 391.000437][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.697'. [ 391.020510][ T9070] veth0_to_hsr: entered promiscuous mode [ 391.026834][ T9070] veth0_to_hsr: entered allmulticast mode [ 392.118823][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.129131][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.138669][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.150126][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.158100][ T5141] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 392.165677][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.491336][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.634273][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.649864][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.658398][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.666223][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 393.674398][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.847660][ T9093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.251626][ T5141] Bluetooth: hci0: command tx timeout [ 394.805950][ T9082] chnl_net:caif_netlink_parms(): no params data found [ 395.730508][ T5141] Bluetooth: hci2: command tx timeout [ 395.832644][ T9090] chnl_net:caif_netlink_parms(): no params data found [ 396.016032][ T9082] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.138281][ T9130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.387547][ T5141] Bluetooth: hci0: command tx timeout [ 396.420077][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.427453][ T9082] bridge_slave_0: entered allmulticast mode [ 396.445812][ T9082] bridge_slave_0: entered promiscuous mode [ 396.900250][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.907399][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.928236][ T9082] bridge_slave_1: entered allmulticast mode [ 396.954658][ T9082] bridge_slave_1: entered promiscuous mode [ 397.291286][ T9082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.303063][ T9082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.187093][ T5141] Bluetooth: hci2: command tx timeout [ 398.231290][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.711'. [ 398.450074][ T5141] Bluetooth: hci0: command tx timeout [ 400.039311][ T9155] bridge0: entered promiscuous mode [ 400.210514][ T5141] Bluetooth: hci2: command tx timeout [ 400.223082][ T9155] macvtap1: entered promiscuous mode [ 400.228776][ T9155] macvtap1: entered allmulticast mode [ 400.235242][ T9155] bridge0: entered allmulticast mode [ 400.244650][ T9158] bridge0: left allmulticast mode [ 400.250158][ T9158] bridge0: left promiscuous mode [ 400.849338][ T5141] Bluetooth: hci0: command tx timeout [ 401.214687][ T176] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.422502][ T9082] team0: Port device team_slave_0 added [ 402.095684][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.120785][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.150545][ T9090] bridge_slave_0: entered allmulticast mode [ 402.172953][ T9090] bridge_slave_0: entered promiscuous mode [ 402.189259][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.200355][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.211353][ T9090] bridge_slave_1: entered allmulticast mode [ 402.219074][ T9090] bridge_slave_1: entered promiscuous mode [ 402.290212][ T5141] Bluetooth: hci2: command tx timeout [ 402.757991][ T176] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.319108][ T9082] team0: Port device team_slave_1 added [ 403.838151][ T176] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.899539][ T9090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.674461][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.809836][ T9211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.823503][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.854093][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.883060][ T9082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.910702][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.917865][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.944143][ T9082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.050315][ T176] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.343310][ T9090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.514812][ T9082] hsr_slave_0: entered promiscuous mode [ 405.555436][ T9082] hsr_slave_1: entered promiscuous mode [ 406.337135][ T9082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.558093][ T9082] Cannot create hsr debugfs directory [ 406.608963][ T9090] team0: Port device team_slave_0 added [ 406.651712][ T9090] team0: Port device team_slave_1 added [ 406.695586][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.724'. [ 406.870264][ T9230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.549799][ T9228] bridge0: entered promiscuous mode [ 407.557803][ T9228] macvtap1: entered promiscuous mode [ 407.700395][ T9228] macvtap1: entered allmulticast mode [ 407.705863][ T9228] bridge0: entered allmulticast mode [ 408.426715][ T9229] bridge0: left allmulticast mode [ 408.433165][ T9229] bridge0: left promiscuous mode [ 408.562443][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.569487][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.631346][ T9090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.646989][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.654106][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.680609][ T9090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.774056][ T176] bridge_slave_1: left allmulticast mode [ 408.783643][ T176] bridge_slave_1: left promiscuous mode [ 408.789508][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.817419][ T176] bridge_slave_0: left allmulticast mode [ 408.827517][ T176] bridge_slave_0: left promiscuous mode [ 408.838881][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.708474][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.757702][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.983495][ T176] bond0 (unregistering): Released all slaves [ 412.603391][ T9090] hsr_slave_0: entered promiscuous mode [ 412.633262][ T9090] hsr_slave_1: entered promiscuous mode [ 412.679049][ T9090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.687692][ T9090] Cannot create hsr debugfs directory [ 412.910235][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 412.925377][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 412.925395][ T29] audit: type=1326 audit(1733527510.141:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.7.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x0 [ 413.071665][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 413.082207][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 413.114333][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.134685][ T9] usb 9-1: Product: syz [ 413.138915][ T9] usb 9-1: Manufacturer: syz [ 413.150030][ T9] usb 9-1: SerialNumber: syz [ 413.379783][ T176] hsr_slave_0: left promiscuous mode [ 413.470915][ T176] hsr_slave_1: left promiscuous mode [ 413.520431][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.538269][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.598676][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.606905][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.658506][ T176] veth1_macvtap: left promiscuous mode [ 413.668038][ T176] veth0_macvtap: left promiscuous mode [ 413.678224][ T176] veth1_vlan: left promiscuous mode [ 413.689217][ T176] veth0_vlan: left promiscuous mode [ 414.542151][ T9] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 414.599085][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.612394][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.279607][ T176] team0 (unregistering): Port device team_slave_1 removed [ 415.353012][ T176] team0 (unregistering): Port device team_slave_0 removed [ 415.711229][ T2082] usb 9-1: USB disconnect, device number 2 [ 415.718978][ T2082] usblp0: removed [ 416.439088][ T9290] netlink: 'syz.6.738': attribute type 4 has an invalid length. [ 417.983911][ T176] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.183622][ T176] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.322005][ T176] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.416285][ T176] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.505833][ T9082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.542951][ T9082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.573392][ T9082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.605726][ T9082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.643727][ T176] bridge_slave_1: left allmulticast mode [ 418.652507][ T176] bridge_slave_1: left promiscuous mode [ 418.658374][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.668593][ T176] bridge_slave_0: left allmulticast mode [ 418.674995][ T176] bridge_slave_0: left promiscuous mode [ 418.681446][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.917677][ T9315] netlink: 40 bytes leftover after parsing attributes in process `syz.6.745'. [ 420.168208][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.193527][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.216200][ T176] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 420.253342][ T176] bond0 (unregistering): Released all slaves [ 420.284209][ T9090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 420.384660][ T9090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 420.636579][ T9090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 420.738221][ T9090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.232255][ T176] hsr_slave_0: left promiscuous mode [ 421.269267][ T176] hsr_slave_1: left promiscuous mode [ 421.292432][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.325586][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.346972][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.378338][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.421373][ T176] veth1_macvtap: left promiscuous mode [ 421.426916][ T176] veth0_macvtap: left promiscuous mode [ 423.005286][ T9328] netlink: 'syz.6.749': attribute type 10 has an invalid length. [ 423.123328][ T9338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.283216][ T9338] netlink: 32 bytes leftover after parsing attributes in process `syz.7.751'. [ 424.307763][ T176] team0 (unregistering): Port device team_slave_1 removed [ 425.202024][ T176] team0 (unregistering): Port device team_slave_0 removed [ 426.739202][ T9090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.826717][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.081891][ T9082] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.388641][ T9090] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.445527][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.452751][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.471097][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.478238][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.487086][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.494281][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.515467][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.522648][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.696900][ T9082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.720721][ T9082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.814654][ T9090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.090948][ T5894] hid (null): unknown global tag 0xe [ 429.151121][ T5894] hid-generic 0004:000C:0001.0004: unknown global tag 0xe [ 429.194927][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.204003][ T5894] hid-generic 0004:000C:0001.0004: item 0 0 1 14 parsing failed [ 429.257183][ T5894] hid-generic 0004:000C:0001.0004: probe with driver hid-generic failed with error -22 [ 429.268898][ T9090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.498717][ T9090] veth0_vlan: entered promiscuous mode [ 429.543349][ T9090] veth1_vlan: entered promiscuous mode [ 430.151146][ T9090] veth0_macvtap: entered promiscuous mode [ 430.161286][ T9090] veth1_macvtap: entered promiscuous mode [ 430.211998][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.288153][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.330127][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.342595][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.353184][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.400008][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.417403][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.492611][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.535887][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.631380][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.645487][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.665912][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.810157][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.483726][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.577435][ T9082] veth0_vlan: entered promiscuous mode [ 431.599346][ T9090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.635301][ T9090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.658173][ T9090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.677045][ T9090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.751743][ T9082] veth1_vlan: entered promiscuous mode [ 432.016987][ T5879] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 432.151647][ T9082] veth0_macvtap: entered promiscuous mode [ 433.145872][ T9082] veth1_macvtap: entered promiscuous mode [ 433.458755][ T5879] usb 8-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 433.469452][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.481410][ T5879] usb 8-1: Product: syz [ 433.495344][ T5879] usb 8-1: Manufacturer: syz [ 433.500647][ T5879] usb 8-1: SerialNumber: syz [ 433.516754][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.524794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.535459][ T5879] usb 8-1: config 0 descriptor?? [ 433.561491][ T5879] usb 8-1: disable ehci-hcd to run US-144 [ 433.601954][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.610032][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.657165][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.688345][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.704474][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.717963][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.787329][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.853766][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.183008][ T5879] usb 8-1: USB disconnect, device number 3 [ 434.280029][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.301384][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.344905][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.441899][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.478013][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.501343][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.538856][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.564879][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.586763][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.596778][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.610153][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.621287][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.638163][ T9082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.784930][ T9082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.793895][ T9082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.805330][ T9082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.910744][ T5834] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 435.090413][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.098262][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.107358][ T5834] usb 9-1: Using ep0 maxpacket: 8 [ 435.160250][ T5834] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.171483][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.179566][ T5834] usb 9-1: Product: syz [ 435.243449][ T5834] usb 9-1: Manufacturer: syz [ 435.301433][ T5834] usb 9-1: SerialNumber: syz [ 435.344550][ T5834] usb 9-1: config 0 descriptor?? [ 435.351216][ T7915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.563245][ T7915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.842254][ T5834] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.317165][ T9456] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 437.149684][ T9456] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 437.649431][ T5834] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 437.676298][ T5834] usb 9-1: USB disconnect, device number 3 [ 438.262720][ T9476] netlink: 'syz.4.773': attribute type 10 has an invalid length. [ 438.280927][ T9476] netlink: 55 bytes leftover after parsing attributes in process `syz.4.773'. [ 440.296792][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.303374][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.354040][ T9496] netlink: 'syz.8.778': attribute type 10 has an invalid length. [ 441.338658][ T9496] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 441.448350][ T9499] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 444.888874][ T9533] netlink: 'syz.4.785': attribute type 10 has an invalid length. [ 445.842077][ T9548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.286648][ T9564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.843294][ T9571] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 447.901358][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 451.811452][ T9627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.690619][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 454.238813][ T9663] ======================================================= [ 454.238813][ T9663] WARNING: The mand mount option has been deprecated and [ 454.238813][ T9663] and is ignored by this kernel. Remove the mand [ 454.238813][ T9663] option from the mount to silence this warning. [ 454.238813][ T9663] ======================================================= [ 454.273986][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.322370][ T9663] overlayfs: overlapping lowerdir path [ 454.548255][ T9664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.625614][ T9664] netlink: 32 bytes leftover after parsing attributes in process `syz.7.809'. [ 458.335109][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 459.642909][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 459.761746][ T5879] usb 5-1: config 0 has no interfaces? [ 459.819792][ T5879] usb 5-1: string descriptor 0 read error: -71 [ 459.826234][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 459.836654][ T5879] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 459.856824][ T5879] usb 5-1: config 0 descriptor?? [ 459.880163][ T5879] usb 5-1: can't set config #0, error -71 [ 459.905920][ T5879] usb 5-1: USB disconnect, device number 2 [ 460.470339][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 460.639018][ T9] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 460.639068][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.639106][ T9] usb 7-1: Product: syz [ 460.639144][ T9] usb 7-1: Manufacturer: syz [ 460.639177][ T9] usb 7-1: SerialNumber: syz [ 460.647524][ T9] usb 7-1: config 0 descriptor?? [ 460.657654][ T9] usb 7-1: disable ehci-hcd to run US-144 [ 460.846363][ T9714] overlayfs: overlapping lowerdir path [ 460.873774][ T9] usb 7-1: USB disconnect, device number 3 [ 463.639305][ T9759] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 464.205729][ T9748] overlayfs: overlapping lowerdir path [ 464.522182][ T9774] netlink: 'syz.8.829': attribute type 10 has an invalid length. [ 464.570169][ T9774] netlink: 55 bytes leftover after parsing attributes in process `syz.8.829'. [ 466.121595][ T9795] ip6t_srh: unknown srh invflags 4000 [ 466.425128][ T9784] netlink: 72 bytes leftover after parsing attributes in process `syz.6.833'. [ 466.441430][ T9801] netlink: 'syz.2.835': attribute type 4 has an invalid length. [ 466.449156][ T9801] netlink: 17 bytes leftover after parsing attributes in process `syz.2.835'. [ 468.960638][ T9812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.136657][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.4.836'. [ 469.653223][ T9835] netlink: 'syz.6.841': attribute type 10 has an invalid length. [ 470.693854][ T9849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.048008][ T9853] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 471.693491][ T9859] overlayfs: overlapping lowerdir path [ 472.035794][ T29] audit: type=1326 audit(1733527569.251:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 472.135558][ T9866] netlink: 72 bytes leftover after parsing attributes in process `syz.7.848'. [ 472.150105][ T29] audit: type=1326 audit(1733527569.251:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 472.172318][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.179056][ T29] audit: type=1326 audit(1733527569.251:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 472.224949][ T29] audit: type=1326 audit(1733527569.251:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 472.321675][ T29] audit: type=1326 audit(1733527569.251:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 472.521824][ T9879] ip6t_srh: unknown srh invflags 4000 [ 472.573568][ T46] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 472.679341][ T9876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.918299][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 472.987274][ T46] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 473.118453][ T46] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 473.234143][ T46] usb 9-1: config 179 has no interface number 0 [ 473.403203][ T29] audit: type=1326 audit(1733527569.251:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 473.440047][ T46] usb 9-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 473.440748][ T29] audit: type=1326 audit(1733527569.251:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 473.481463][ T29] audit: type=1326 audit(1733527569.251:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 473.503950][ T29] audit: type=1326 audit(1733527569.251:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 473.548351][ T29] audit: type=1326 audit(1733527569.251:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8944d7fed9 code=0x7ffc0000 [ 473.577499][ T46] usb 9-1: config 179 interface 65 has no altsetting 0 [ 473.620058][ T46] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 473.671267][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.291475][ T5879] usb 9-1: USB disconnect, device number 4 [ 475.540221][ T5834] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 475.986435][ T5834] usb 9-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 476.023817][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.101467][ T5834] usb 9-1: config 0 descriptor?? [ 476.752043][ T5834] kaweth 9-1:0.0: Firmware present in device. [ 477.098152][ T5834] kaweth 9-1:0.0: Statistics collection: 0 [ 477.104122][ T5834] kaweth 9-1:0.0: Multicast filter limit: 0 [ 477.110131][ T5834] kaweth 9-1:0.0: MTU: 0 [ 477.114403][ T5834] kaweth 9-1:0.0: Read MAC address 00:00:00:00:00:00 [ 477.783599][ T5834] kaweth 9-1:0.0: Error setting receive filter [ 477.808622][ T5834] kaweth 9-1:0.0: probe with driver kaweth failed with error -5 [ 477.836147][ T5834] usb 9-1: USB disconnect, device number 5 [ 478.831569][ T9957] overlayfs: overlapping lowerdir path [ 479.128011][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 479.128034][ T29] audit: type=1326 audit(1733527576.341:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 479.268659][ T29] audit: type=1326 audit(1733527576.341:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 479.291290][ T29] audit: type=1326 audit(1733527576.381:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 479.330370][ T29] audit: type=1326 audit(1733527576.381:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 479.353023][ T29] audit: type=1326 audit(1733527576.381:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 479.380413][ T29] audit: type=1326 audit(1733527576.381:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 480.371948][ T29] audit: type=1326 audit(1733527576.381:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 480.683202][ T9972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.980099][ T29] audit: type=1326 audit(1733527576.381:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 481.032746][ T29] audit: type=1326 audit(1733527576.381:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 481.055176][ T29] audit: type=1326 audit(1733527576.381:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.8.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878ad7fed9 code=0x7ffc0000 [ 482.859678][ T9985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.439077][T10005] overlayfs: overlapping lowerdir path [ 487.470641][T10054] netlink: 'syz.8.879': attribute type 10 has an invalid length. [ 487.621000][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 487.621013][ T29] audit: type=1326 audit(1733527584.841:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 487.713342][ T29] audit: type=1326 audit(1733527584.841:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 487.811466][ T29] audit: type=1326 audit(1733527584.881:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 487.865050][ T29] audit: type=1326 audit(1733527584.881:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 488.089415][ T29] audit: type=1326 audit(1733527584.881:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 488.111704][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.244669][ T29] audit: type=1326 audit(1733527584.881:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 488.307927][ T29] audit: type=1326 audit(1733527584.881:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 488.330226][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.353504][ T29] audit: type=1326 audit(1733527584.881:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 488.375911][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.424191][ T29] audit: type=1326 audit(1733527584.881:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 488.446501][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.597325][ T29] audit: type=1326 audit(1733527584.881:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz.7.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dc77fed9 code=0x7ffc0000 [ 488.642844][T10071] sp0: Synchronizing with TNC [ 495.213679][ T9981] sched: DL replenish lagged too much [ 496.935467][ T5141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 497.012161][T10310] netlink: 'syz.8.893': attribute type 4 has an invalid length. [ 497.013682][ T5141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 497.038723][ T5141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 497.074985][ T5141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 497.105244][ T5141] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 497.118107][ T5141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 497.290205][T10310] netlink: 17 bytes leftover after parsing attributes in process `syz.8.893'. [ 497.600731][T10305] chnl_net:caif_netlink_parms(): no params data found [ 497.943400][T10321] overlayfs: overlapping lowerdir path [ 498.235965][T10316] overlayfs: overlapping lowerdir path [ 498.341498][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.363599][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.371505][T10305] bridge_slave_0: entered allmulticast mode [ 498.379153][T10305] bridge_slave_0: entered promiscuous mode [ 498.389048][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.397621][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.411335][T10305] bridge_slave_1: entered allmulticast mode [ 498.418307][T10305] bridge_slave_1: entered promiscuous mode [ 498.513787][T10305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.273858][ T5141] Bluetooth: hci5: command tx timeout [ 499.303169][T10305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.446435][T10305] team0: Port device team_slave_0 added [ 499.493599][T10305] team0: Port device team_slave_1 added [ 499.703687][T10305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.730388][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.817291][T10305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.855178][T10305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.866660][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.930162][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 499.960151][T10305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.193835][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 500.249344][ T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 500.258622][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.267060][ T9] usb 9-1: Product: syz [ 500.275894][ T9] usb 9-1: Manufacturer: syz [ 500.283914][ T9] usb 9-1: SerialNumber: syz [ 500.296812][ T9] usb 9-1: config 0 descriptor?? [ 500.309014][ T9] ims_pcu 9-1:0.0: Missing CDC union descriptor [ 500.331481][ T9] ims_pcu 9-1:0.0: probe with driver ims_pcu failed with error -22 [ 500.457589][T10305] hsr_slave_0: entered promiscuous mode [ 500.484025][T10305] hsr_slave_1: entered promiscuous mode [ 501.340045][ T5141] Bluetooth: hci5: command tx timeout [ 501.732475][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.738920][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.222286][ T5923] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.816744][ T5834] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 503.509718][ T5141] Bluetooth: hci5: command tx timeout [ 503.598709][ T5923] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.913437][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 504.164378][ T5834] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 504.173807][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.185802][ T5834] usb 3-1: Product: syz [ 504.570047][ T5834] usb 3-1: Manufacturer: syz [ 504.574807][ T5834] usb 3-1: SerialNumber: syz [ 504.601018][ T5834] usb 3-1: config 0 descriptor?? [ 504.601664][ T5923] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.612974][ T5834] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 504.641370][ T5834] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 505.640430][ T5141] Bluetooth: hci5: command tx timeout [ 505.926793][ T5834] usb 9-1: USB disconnect, device number 6 [ 507.133420][T10438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.664727][ T974] usb 3-1: USB disconnect, device number 5 [ 509.684635][ T5923] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.940235][ T5880] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 509.941918][T10461] netlink: 'syz.2.913': attribute type 4 has an invalid length. [ 510.639013][T10461] netlink: 17 bytes leftover after parsing attributes in process `syz.2.913'. [ 510.740039][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 510.976006][T10305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 511.069234][T10305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 511.088344][T10305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 511.208008][T10305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 511.229731][ T5880] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 511.238541][ T5880] usb 8-1: config 179 has no interface number 0 [ 511.245227][ T5880] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 511.261947][ T5880] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 511.512456][ T5880] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 511.526020][ T5880] usb 8-1: config 179 interface 65 has no altsetting 0 [ 511.533119][ T5880] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 511.542455][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.864579][T10451] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 512.231588][ T5923] bridge_slave_1: left allmulticast mode [ 512.237288][ T5923] bridge_slave_1: left promiscuous mode [ 512.263230][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.371683][ T974] usb 8-1: USB disconnect, device number 4 [ 512.584895][ T5923] bridge_slave_0: left allmulticast mode [ 512.602725][ T5923] bridge_slave_0: left promiscuous mode [ 512.627912][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.078963][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.106966][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.272035][ T5923] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 515.294739][ T5923] bond0 (unregistering): Released all slaves [ 515.384621][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.447018][T10305] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.484532][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.491707][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.499680][ T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 515.557498][ T5923] IPVS: stopping master sync thread 9571 ... [ 515.571868][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.579011][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.599137][T10305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.824415][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 516.127024][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 516.136723][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.145132][ T8] usb 5-1: Product: syz [ 516.149335][ T8] usb 5-1: Manufacturer: syz [ 516.154058][ T8] usb 5-1: SerialNumber: syz [ 516.871590][T10305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.087045][ T8] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 517.410495][T10305] veth0_vlan: entered promiscuous mode [ 517.422590][T10305] veth1_vlan: entered promiscuous mode [ 517.441713][T10305] veth0_macvtap: entered promiscuous mode [ 517.454633][T10305] veth1_macvtap: entered promiscuous mode [ 517.576035][ T5923] hsr_slave_0: left promiscuous mode [ 517.588160][ T5923] hsr_slave_1: left promiscuous mode [ 517.686392][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.698503][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.709715][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.718126][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.761824][ T5923] veth1_macvtap: left promiscuous mode [ 517.768162][ T5923] veth0_macvtap: left promiscuous mode [ 517.777245][ T5923] veth1_vlan: left promiscuous mode [ 517.783112][ T5923] veth0_vlan: left promiscuous mode [ 517.810518][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.836740][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.866976][ T2082] usb 5-1: USB disconnect, device number 3 [ 517.882511][ T2082] usblp0: removed [ 519.330535][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 519.411803][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 519.779364][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 519.906551][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 520.850070][T10618] overlayfs: overlapping lowerdir path [ 522.384209][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.429985][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.477323][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.545288][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.594779][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.620493][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.640339][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.660036][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.691658][T10305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.714513][T10635] netlink: 'syz.4.938': attribute type 4 has an invalid length. [ 522.726102][T10635] netlink: 17 bytes leftover after parsing attributes in process `syz.4.938'. [ 522.772151][ T5877] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 522.810387][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.849537][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.990231][ T5877] usb 8-1: Using ep0 maxpacket: 32 [ 523.065166][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.411645][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.436540][ T5877] usb 8-1: config 0 has an invalid interface number: 218 but max is 0 [ 523.477420][ T5877] usb 8-1: config 0 has no interface number 0 [ 523.493828][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.520133][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.531159][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.542528][ T5877] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 523.542626][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.564739][T10305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.583376][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.624919][ T5877] usb 8-1: Product: syz [ 523.639696][ T5877] usb 8-1: Manufacturer: syz [ 523.658113][ T5877] usb 8-1: SerialNumber: syz [ 523.673494][T10305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.685289][ T5877] usb 8-1: config 0 descriptor?? [ 523.705574][T10305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.980038][T10305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.988812][T10305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.996945][ T5877] usb 8-1: USB disconnect, device number 5 [ 524.081664][T10645] netlink: 'syz.4.940': attribute type 10 has an invalid length. [ 524.491039][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.515070][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.568330][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.941'. [ 524.587617][T10648] netlink: 48 bytes leftover after parsing attributes in process `syz.8.941'. [ 524.707278][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.722062][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.863621][T10655] ip6t_srh: unknown srh invflags 4000 [ 524.909217][T10656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.397459][T10690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.800184][ T974] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 530.600041][ T974] usb 9-1: Using ep0 maxpacket: 32 [ 530.622055][ T974] usb 9-1: config 0 has an invalid interface number: 218 but max is 0 [ 530.630354][ T974] usb 9-1: config 0 has no interface number 0 [ 530.641385][ T974] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 530.659511][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.667678][ T974] usb 9-1: Product: syz [ 530.672596][ T974] usb 9-1: Manufacturer: syz [ 530.677270][ T974] usb 9-1: SerialNumber: syz [ 530.702067][ T974] usb 9-1: config 0 descriptor?? [ 531.073141][T10714] netlink: 'syz.7.953': attribute type 10 has an invalid length. [ 531.084967][ T2082] usb 9-1: USB disconnect, device number 7 [ 531.481415][T10714] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 531.582007][T10718] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 531.610164][T10718] netlink: 55 bytes leftover after parsing attributes in process `syz.3.956'. [ 532.458560][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.8.958'. [ 532.468223][T10730] netlink: 'syz.8.958': attribute type 14 has an invalid length. [ 533.666749][ T35] ================================================================== [ 533.674866][ T35] BUG: KASAN: slab-use-after-free in ipvlan_get_iflink+0x73/0x80 [ 533.682623][ T35] Read of size 4 at addr ffff88803434c0e0 by task kworker/u8:2/35 [ 533.690437][ T35] [ 533.692787][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 533.702955][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.713020][ T35] Workqueue: events_unbound linkwatch_event [ 533.718938][ T35] Call Trace: [ 533.722245][ T35] [ 533.725186][ T35] dump_stack_lvl+0x241/0x360 [ 533.729886][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.735095][ T35] ? __pfx__printk+0x10/0x10 [ 533.739699][ T35] ? _printk+0xd5/0x120 [ 533.743867][ T35] ? __virt_addr_valid+0x183/0x530 [ 533.748986][ T35] ? __virt_addr_valid+0x183/0x530 [ 533.754111][ T35] print_report+0x169/0x550 [ 533.758636][ T35] ? __virt_addr_valid+0x183/0x530 [ 533.763847][ T35] ? __virt_addr_valid+0x183/0x530 [ 533.769052][ T35] ? __virt_addr_valid+0x45f/0x530 [ 533.774175][ T35] ? __phys_addr+0xba/0x170 [ 533.778688][ T35] ? ipvlan_get_iflink+0x73/0x80 [ 533.783639][ T35] kasan_report+0x143/0x180 [ 533.788150][ T35] ? preempt_schedule_common+0x84/0xd0 [ 533.793623][ T35] ? ipvlan_get_iflink+0x73/0x80 [ 533.798574][ T35] ipvlan_get_iflink+0x73/0x80 [ 533.803351][ T35] rfc2863_policy+0x174/0x300 [ 533.808040][ T35] linkwatch_do_dev+0x3e/0x170 [ 533.812821][ T35] __linkwatch_run_queue+0x44f/0x6c0 [ 533.818120][ T35] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 533.823941][ T35] ? process_scheduled_works+0x976/0x1840 [ 533.829677][ T35] linkwatch_event+0x4c/0x60 [ 533.834366][ T35] process_scheduled_works+0xa66/0x1840 [ 533.839933][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 533.845929][ T35] ? assign_work+0x364/0x3d0 [ 533.850534][ T35] worker_thread+0x870/0xd30 [ 533.855145][ T35] ? __kthread_parkme+0x169/0x1d0 [ 533.860266][ T35] ? __pfx_worker_thread+0x10/0x10 [ 533.865395][ T35] kthread+0x2f0/0x390 [ 533.869485][ T35] ? __pfx_worker_thread+0x10/0x10 [ 533.874619][ T35] ? __pfx_kthread+0x10/0x10 [ 533.879217][ T35] ret_from_fork+0x4b/0x80 [ 533.883823][ T35] ? __pfx_kthread+0x10/0x10 [ 533.888423][ T35] ret_from_fork_asm+0x1a/0x30 [ 533.893200][ T35] [ 533.896227][ T35] [ 533.898550][ T35] Allocated by task 10305: [ 533.902972][ T35] kasan_save_track+0x3f/0x80 [ 533.907667][ T35] __kasan_kmalloc+0x98/0xb0 [ 533.912269][ T35] __kmalloc_node_noprof+0x290/0x4d0 [ 533.917562][ T35] __kvmalloc_node_noprof+0x72/0x190 [ 533.922860][ T35] alloc_netdev_mqs+0xa4/0x1080 [ 533.927719][ T35] rtnl_create_link+0x2f9/0xc20 [ 533.932583][ T35] rtnl_newlink_create+0x210/0xa40 [ 533.937703][ T35] rtnl_newlink+0x1b40/0x20e0 [ 533.942383][ T35] rtnetlink_rcv_msg+0x791/0xcf0 [ 533.947306][ T35] netlink_rcv_skb+0x1e3/0x430 [ 533.952058][ T35] netlink_unicast+0x7f6/0x990 [ 533.956808][ T35] netlink_sendmsg+0x8e4/0xcb0 [ 533.961570][ T35] __sock_sendmsg+0x221/0x270 [ 533.966230][ T35] __sys_sendto+0x363/0x4c0 [ 533.970719][ T35] __x64_sys_sendto+0xde/0x100 [ 533.975474][ T35] do_syscall_64+0xf3/0x230 [ 533.979981][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.985888][ T35] [ 533.988198][ T35] Freed by task 10718: [ 533.992252][ T35] kasan_save_track+0x3f/0x80 [ 533.996915][ T35] kasan_save_free_info+0x40/0x50 [ 534.001926][ T35] __kasan_slab_free+0x59/0x70 [ 534.006677][ T35] kfree+0x196/0x430 [ 534.010567][ T35] device_release+0x99/0x1c0 [ 534.015167][ T35] kobject_put+0x22f/0x480 [ 534.019597][ T35] netdev_run_todo+0xe79/0x1000 [ 534.024456][ T35] rtnl_dellink+0x760/0x8d0 [ 534.028976][ T35] rtnetlink_rcv_msg+0x791/0xcf0 [ 534.033909][ T35] netlink_rcv_skb+0x1e3/0x430 [ 534.038667][ T35] netlink_unicast+0x7f6/0x990 [ 534.043422][ T35] netlink_sendmsg+0x8e4/0xcb0 [ 534.048180][ T35] __sock_sendmsg+0x221/0x270 [ 534.052847][ T35] ____sys_sendmsg+0x52a/0x7e0 [ 534.057597][ T35] __sys_sendmsg+0x269/0x350 [ 534.062180][ T35] do_syscall_64+0xf3/0x230 [ 534.066683][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.072575][ T35] [ 534.074889][ T35] The buggy address belongs to the object at ffff88803434c000 [ 534.074889][ T35] which belongs to the cache kmalloc-cg-4k of size 4096 [ 534.089279][ T35] The buggy address is located 224 bytes inside of [ 534.089279][ T35] freed 4096-byte region [ffff88803434c000, ffff88803434d000) [ 534.103151][ T35] [ 534.105484][ T35] The buggy address belongs to the physical page: [ 534.111941][ T35] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34348 [ 534.120702][ T35] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 534.129190][ T35] memcg:ffff888032b99b81 [ 534.133420][ T35] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 534.140971][ T35] page_type: f5(slab) [ 534.144943][ T35] raw: 00fff00000000040 ffff88801ac4f500 ffffea00017f1e00 dead000000000002 [ 534.153540][ T35] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888032b99b81 [ 534.162118][ T35] head: 00fff00000000040 ffff88801ac4f500 ffffea00017f1e00 dead000000000002 [ 534.170779][ T35] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888032b99b81 [ 534.179440][ T35] head: 00fff00000000003 ffffea0000d0d201 ffffffffffffffff 0000000000000000 [ 534.188099][ T35] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 534.196752][ T35] page dumped because: kasan: bad access detected [ 534.203162][ T35] page_owner tracks the page as allocated [ 534.208865][ T35] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6356, tgid 6356 (syz-executor), ts 132513411783, free_ts 132041985137 [ 534.230561][ T35] post_alloc_hook+0x1f4/0x240 [ 534.235328][ T35] get_page_from_freelist+0x365c/0x37a0 [ 534.240866][ T35] __alloc_frozen_pages_noprof+0x292/0x710 [ 534.246687][ T35] alloc_pages_mpol+0x30e/0x550 [ 534.251529][ T35] allocate_slab+0x8f/0x3a0 [ 534.256023][ T35] ___slab_alloc+0xc27/0x14a0 [ 534.260700][ T35] __slab_alloc+0x58/0xa0 [ 534.265021][ T35] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 534.271426][ T35] kmemdup_noprof+0x2a/0x60 [ 534.275924][ T35] __addrconf_sysctl_register+0xb1/0x3a0 [ 534.281550][ T35] addrconf_sysctl_register+0x167/0x1c0 [ 534.287086][ T35] ipv6_add_dev+0xcf6/0x1220 [ 534.291673][ T35] addrconf_notify+0x6a7/0x1020 [ 534.296516][ T35] notifier_call_chain+0x1a5/0x3f0 [ 534.301618][ T35] register_netdevice+0x167f/0x1b00 [ 534.306810][ T35] tun_set_iff+0x85c/0xe80 [ 534.311220][ T35] page last free pid 6355 tgid 6355 stack trace: [ 534.317532][ T35] free_frozen_pages+0xe0d/0x10e0 [ 534.322552][ T35] __put_partials+0x160/0x1c0 [ 534.327221][ T35] put_cpu_partial+0x17c/0x250 [ 534.331970][ T35] __slab_free+0x290/0x380 [ 534.336374][ T35] qlist_free_all+0x9a/0x140 [ 534.340959][ T35] kasan_quarantine_reduce+0x14f/0x170 [ 534.346408][ T35] __kasan_slab_alloc+0x23/0x80 [ 534.351338][ T35] kmem_cache_alloc_noprof+0x1d9/0x380 [ 534.356794][ T35] jbd2__journal_start+0x14d/0x5d0 [ 534.361894][ T35] __ext4_journal_start_sb+0x239/0x600 [ 534.367347][ T35] ext4_dirty_inode+0x92/0x110 [ 534.372101][ T35] __mark_inode_dirty+0x2ee/0xe90 [ 534.377117][ T35] file_update_time+0x3d2/0x450 [ 534.381965][ T35] ext4_page_mkwrite+0x213/0x1100 [ 534.386981][ T35] do_page_mkwrite+0x15c/0x350 [ 534.391733][ T35] handle_pte_fault+0x10c6/0x5ee0 [ 534.396748][ T35] [ 534.399061][ T35] Memory state around the buggy address: [ 534.404680][ T35] ffff88803434bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 534.412730][ T35] ffff88803434c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.420780][ T35] >ffff88803434c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.428826][ T35] ^ [ 534.436006][ T35] ffff88803434c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.444061][ T35] ffff88803434c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.452113][ T35] ================================================================== [ 534.460254][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.520752][ T35] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 534.527982][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 534.538135][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 534.548200][ T35] Workqueue: events_unbound linkwatch_event [ 534.554105][ T35] Call Trace: [ 534.557397][ T35] [ 534.562101][ T35] dump_stack_lvl+0x241/0x360 [ 534.566792][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.571990][ T35] ? __pfx__printk+0x10/0x10 [ 534.576581][ T35] ? preempt_schedule+0xe1/0xf0 [ 534.581427][ T35] ? vscnprintf+0x5d/0x90 [ 534.585748][ T35] panic+0x349/0x880 [ 534.589638][ T35] ? check_panic_on_warn+0x21/0xb0 [ 534.594745][ T35] ? __pfx_panic+0x10/0x10 [ 534.599154][ T35] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 534.605128][ T35] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 534.611450][ T35] ? print_report+0x502/0x550 [ 534.616131][ T35] check_panic_on_warn+0x86/0xb0 [ 534.621068][ T35] ? ipvlan_get_iflink+0x73/0x80 [ 534.626010][ T35] end_report+0x77/0x160 [ 534.630249][ T35] kasan_report+0x154/0x180 [ 534.634743][ T35] ? preempt_schedule_common+0x84/0xd0 [ 534.640194][ T35] ? ipvlan_get_iflink+0x73/0x80 [ 534.645134][ T35] ipvlan_get_iflink+0x73/0x80 [ 534.649893][ T35] rfc2863_policy+0x174/0x300 [ 534.654578][ T35] linkwatch_do_dev+0x3e/0x170 [ 534.659374][ T35] __linkwatch_run_queue+0x44f/0x6c0 [ 534.664661][ T35] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 534.670471][ T35] ? process_scheduled_works+0x976/0x1840 [ 534.676190][ T35] linkwatch_event+0x4c/0x60 [ 534.680783][ T35] process_scheduled_works+0xa66/0x1840 [ 534.686336][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.692358][ T35] ? assign_work+0x364/0x3d0 [ 534.696944][ T35] worker_thread+0x870/0xd30 [ 534.701530][ T35] ? __kthread_parkme+0x169/0x1d0 [ 534.706549][ T35] ? __pfx_worker_thread+0x10/0x10 [ 534.711659][ T35] kthread+0x2f0/0x390 [ 534.715729][ T35] ? __pfx_worker_thread+0x10/0x10 [ 534.720835][ T35] ? __pfx_kthread+0x10/0x10 [ 534.725421][ T35] ret_from_fork+0x4b/0x80 [ 534.729831][ T35] ? __pfx_kthread+0x10/0x10 [ 534.734420][ T35] ret_from_fork_asm+0x1a/0x30 [ 534.739182][ T35] [ 534.742342][ T35] Kernel Offset: disabled [ 534.746665][ T35] Rebooting in 86400 seconds..