last executing test programs: 8m35.610505312s ago: executing program 32 (id=339): mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x406, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCXONC(r3, 0x540a, 0x2) getdents64(r4, &(0x7f00000002c0)=""/222, 0xde) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000), 0x0) 6m41.403988514s ago: executing program 0 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) syz_emit_ethernet(0x3e, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @default, 0x1}, [@default, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) poll(&(0x7f0000000600)=[{r4, 0x48}], 0x1, 0x400) 6m40.3122163s ago: executing program 0 (id=583): mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x406, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCXONC(r4, 0x540a, 0x2) getdents64(r5, &(0x7f00000002c0)=""/222, 0xde) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000), 0x0) 6m39.361186344s ago: executing program 0 (id=585): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7) r2 = syz_open_dev$dri(0x0, 0x0, 0x80200) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x79f4, 0x8ba, 0x2, {0x6, @win={{0x80000001, 0x40, 0xb714, 0xb}, 0x8, 0x8001, &(0x7f0000000480)={{0x80000000, 0x9, 0x9, 0x6}, &(0x7f0000000200)={{0x5, 0xffff, 0x4, 0x3}, &(0x7f00000001c0)={{0xf, 0x8, 0x76, 0x3}}}}, 0x800, &(0x7f00000005c0)="7f36cc7caf5398e1680c15fda724eb4cfb11edb1d5c0ac9fba5190b34312c5feab563ab007230523bff177e064efb18002b9da1512aa829f452b0179bea1f82da5438e341459175b5413c79578e19831c17937b4001d40f07c365bee98ca5a6f195fefea17a95bec26a5a0a05af0db93647a2f6118e18e6561d3c6297ea0bd3c15f651a8e43a64705f958851868f1e885b3d", 0x7}}, 0x40004}) syz_io_uring_setup(0x24f9, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) getdents64(r7, &(0x7f0000000fc0)=""/4101, 0xfee8) 6m37.200445296s ago: executing program 0 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x70bd22, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m36.984919379s ago: executing program 0 (id=592): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m34.609697693s ago: executing program 0 (id=597): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x24, 0x7, @val=@netkit={@void, @value}}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 6m17.453777324s ago: executing program 33 (id=597): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x24, 0x7, @val=@netkit={@void, @value}}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3m56.608788167s ago: executing program 4 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1}, 0x80000000}], 0x1, 0x20, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0xc0105702, &(0x7f0000000040)) 3m54.520018727s ago: executing program 4 (id=889): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_GETXATTR(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) syz_io_uring_setup(0x4fae, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = fcntl$dupfd(r5, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) clock_gettime(0x0, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) 3m42.514591673s ago: executing program 4 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x2410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r5, 0x6a98047402e98331}, 0x14}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r6, &(0x7f0000000940), 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmmsg(r7, &(0x7f0000002380), 0x0, 0x100) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) syz_open_procfs(r8, 0x0) rt_sigqueueinfo(r8, 0x32, &(0x7f0000000080)={0x3c, 0xe, 0x80}) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) 3m39.246406981s ago: executing program 4 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3m37.978517249s ago: executing program 4 (id=928): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x210801, 0x1}, 0xc) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}}, 0x20008004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x1, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000002000)=""/4096, &(0x7f0000000180)=0x1000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000e80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000100)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) 3m34.176487235s ago: executing program 4 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x120) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x7f, 0x40000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff02, 0x2, 0xffff, 0xb, 0xd, "5f730000a9003f00"}) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x80000000) 3m18.846162649s ago: executing program 34 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x120) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x7f, 0x40000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff02, 0x2, 0xffff, 0xb, 0xd, "5f730000a9003f00"}) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x80000000) 3m16.567228092s ago: executing program 6 (id=977): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) 3m16.342817226s ago: executing program 6 (id=978): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0x0, [0x1, 0x97, 0x6, 0xf23, 0xfd, 0xff, 0x1, 0x1, 0x4, 0x9, 0x8, 0x5c, 0x7f, 0x5a87, 0x2, 0x8, 0x8, 0xfffffeff, 0x4, 0x5, 0x4, 0x7, 0x501, 0x8, 0x8001, 0x2, 0x9, 0x9, 0x8, 0x2, 0x3, 0xc, 0x3, 0x1, 0x6, 0x8, 0x3, 0x6, 0x164, 0x0, 0x7, 0x9, 0x6, 0xc8, 0x0, 0x7ff, 0x7, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0xfffffffc, 0x656, 0x8, 0x7bea, 0x7ff, 0x4, 0x1ff, 0x9b0c, 0x8, 0xde04, 0x5, 0x5, 0xac49, 0x9, 0x80, 0x7, 0x65f0, 0x4, 0x10, 0xbb, 0x4, 0x0, 0x401, 0xb, 0xffffffff, 0x5, 0x8, 0x4, 0x3, 0x0, 0xed8, 0x200, 0x8, 0x6, 0x3, 0x12a2, 0x9, 0xb, 0x8001, 0xfffffff9, 0x1, 0x6, 0x0, 0xfff, 0x3, 0x7, 0x401, 0x400, 0x0, 0x5, 0xffffffff, 0x0, 0x8, 0x80000001, 0x1, 0x1000000, 0x4, 0x1, 0xf5, 0x8, 0x9, 0x710, 0x2, 0x3, 0x10001, 0x0, 0x5, 0x4ca, 0x7f, 0x9, 0x3, 0x8000, 0x800, 0x3, 0xfffffffe, 0x6], "fdf0eda1084edc7a7c6323ab0e2c9115c3f541cfb47f97d25dd2e85dafe575d8b04c1b"}}) socket$can_bcm(0x1d, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200000000000}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r1, &(0x7f0000000280)=""/44, 0x2c) ioctl$KDMKTONE(r2, 0x4b30, 0x8000000000000001) 3m16.08533656s ago: executing program 6 (id=979): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000200)) 3m15.897708943s ago: executing program 6 (id=980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 3m14.296140086s ago: executing program 6 (id=984): r0 = memfd_secret(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x200020088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_fallocate_exit\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './file0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r6, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) io_uring_enter(r5, 0x564, 0x72, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/529, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x21d) syz_io_uring_setup(0x106088, &(0x7f00000003c0)={0x0, 0x2c1, 0x4, 0x4005, 0xfc, 0x0, r0}, &(0x7f00000029c0), 0x0) 3m13.617753546s ago: executing program 6 (id=987): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) 2m58.553958286s ago: executing program 35 (id=987): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) 2m36.745165266s ago: executing program 7 (id=1067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2m33.124207188s ago: executing program 7 (id=1073): socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbmon(0x0, 0xf33f5f0, 0x80801) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x44b, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2m32.440551719s ago: executing program 7 (id=1076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0) 2m32.33843173s ago: executing program 7 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) 2m32.169189963s ago: executing program 7 (id=1081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) socket$nl_route(0x10, 0x3, 0x0) 2m30.869751101s ago: executing program 7 (id=1084): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m15.27289158s ago: executing program 36 (id=1084): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m28.472612396s ago: executing program 1 (id=1204): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x46f2, &(0x7f00000002c0)={0x0, 0x4, 0x8000, 0x3, 0x7f}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="01072bbd7000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x7, 0x2, 0x1}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000400)='omfs\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x800000) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[]) 1m26.905063378s ago: executing program 1 (id=1208): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7) r2 = syz_open_dev$dri(0x0, 0x0, 0x80200) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x79f4, 0x8ba, 0x2, {0x6, @win={{0x80000001, 0x40, 0xb714, 0xb}, 0x8, 0x8001, &(0x7f0000000480)={{0x80000000, 0x9, 0x9, 0x6}, &(0x7f0000000200)={{0x5, 0xffff, 0x4, 0x3}, &(0x7f00000001c0)={{0xf, 0x8, 0x76, 0x3}}}}, 0x800, &(0x7f00000005c0)="7f36cc7caf5398e1680c15fda724eb4cfb11edb1d5c0ac9fba5190b34312c5feab563ab007230523bff177e064efb18002b9da1512aa829f452b0179bea1f82da5438e341459175b5413c79578e19831c17937b4001d40f07c365bee98ca5a6f195fefea17a95bec26a5a0a05af0db93647a2f6118e18e6561d3c6297ea0bd3c15f651a8e43a64705f958851868f1e885b3d", 0x7}}, 0x40004}) syz_io_uring_setup(0x24f9, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) getdents64(r7, &(0x7f0000000fc0)=""/4101, 0xfee8) 1m26.09622277s ago: executing program 1 (id=1213): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x3, @mcast2, 0xfff}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="44a92a813846c8a2296d7f3271b8a1ceebf3a2b7c63362dbe3863da67dca97dc73b2d1176f094ab5751155933c6b4f024f6b7e59899637ece2682dbf1f0b603847931aa5b1663a3d5bcfafd4a61ebcd25682fa3c405cf71c0aaeda1e7e47fdf6f4e3be25197b98bb31439c309deace390e1a29d23c8c0963c120c0b2b64d4823bd23f605384b0aec53d4d967debbe550844ddd6c27220830c0f0691442c9d59037c0ef266d86944836a4fa1bd243aecf181c646c45ae69a59dd977bd3071c323c0f049da7ba803727d11f4d4a81561e5b2ef7e1640eb1c0b3a", 0xd9}, {&(0x7f00000003c0)="10aeac32b2659ae6355498562384194efb2d18b4db664c30bc2a659027c82defdaede7a018f68625dbc92cfe142faaf94f8d361d800c699bd139e14f02f60388eb8bceecc508086cdc7d1acc72adf657b7939dfd0a20888517ab3a4b3ec7348e1cdc39c8a7dc84bce571f6c8f129c8eb770ad3439d83477493bdb05c9ea29081ef3585c8fb5d37575225b67a004a2e80a2abb0632760ceae53dc8d845dab29484cffcba1853c3a179ce0bb60", 0xac}, {&(0x7f00000001c0)="fd9e4d528bfa", 0x6}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="86856a81d1d16d68f54c", 0xa}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000000000000290000003e0000000500000000000000300000000000000029000000370000002c02000000000000071000000001020501000e000000000000000000000000005800000000000000290000003900000002080003000000002001000000000000000000000000000000000000000000000000ffff0a0101020000000000002000000000000000000120010000000000000000000000000001952b296c27b0b4062647d649e2e3bb868c0930c4320d7d0cd37352f4a40697d5162cbf0573fa3fcae8e20af0f50c575d62ae7ab3e3c4596d43487c27c798f6"], 0xa0}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0xadd, @private2, 0x4852e66e}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000680)="343a379c4653e16d19acd811a05a935b4ae549555c80eda0d098e6ab5920d76999bd3b61326635d0", 0x28}, {&(0x7f0000000700)="c70580bb5c60daca1ed4023a910370bc9d15fe8bb5019a013ef0ac4b39872416f9783db89d910395b33f66b39c011a0d0396c3aed3cc9ec9f7a84c2ec5bbf59a1843ffb8c5384f95c4ee5e57c759dbec7c0e11ca60125751ae7a5566488caddf219293de435bbf1781e0bbd9924686e20cd2db9d4af38d211b75e817b775e44bcb8af1f864667368c33dee94aa27ae483e06d86bc551aed316ef0b49e65e3721cb4598072ad75404b1596f85619341817fccbd1c6e6975c95e92047636d31025831217ef5654eb2ba1acb9b6bc780d3a646095479cf9da65d198bb07cd0a1bff58219786fe8bf4f8e976a8fe", 0xec}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="0af3d4b17ef0305647a0dcf423be1f18d1b03c0af94f9a79fc127c64255663d6b99dab62d0cda6c08d087ec879c409f17ca5827347f895a73fe93791459e7e8fe9f2e9d0caca415b42ed65a9f791c07b34a59bbec792e31f5601095878e28dd7bd6922d6f12646de93dc90543924d3613781da13a1802f1c0017abb40daed0e66f6bc8b8", 0x84}, {&(0x7f0000000900)="baa433cbc31c236ebc59abbd764d3eda6bc4be7383991e15eced2a7b8c1ffb48741a14a88019ab6fcdb768260a", 0x2d}, {&(0x7f0000000940)="a102e2c1a49b2ef13895febc0521a01d7cfd28764120900d4de76fc438fb2702569c5ea894de306d9110ea3ec13b7a7190e0b6d8a8ebad1db635", 0x3a}], 0x3}}], 0x3, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) 1m23.822598753s ago: executing program 1 (id=1217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) capset(0x0, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) inotify_init() 1m20.271511285s ago: executing program 1 (id=1220): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x46f2, &(0x7f00000002c0)={0x0, 0x4, 0x8000, 0x3, 0x7f}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="01072bbd7000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x7, 0x2, 0x1}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000400)='omfs\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x800000) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[]) 1m17.570336475s ago: executing program 1 (id=1224): syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) bind(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000680)={0x8, [[0x1, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x1], [0x4, 0x8, 0x0, 0x2], [0x100091, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6f8]], '\x00', [{0x0, 0x800004}, {}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x2, 0xf7bc}], '\x00', 0x300}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x22100, 0x102) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0x8004550f, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002400127b0b0001dbd642f1a325f121df0b0cc692d1538600627269646765000014000280"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) 1m0.487236105s ago: executing program 37 (id=1224): syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) bind(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000680)={0x8, [[0x1, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x1], [0x4, 0x8, 0x0, 0x2], [0x100091, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6f8]], '\x00', [{0x0, 0x800004}, {}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x2, 0xf7bc}], '\x00', 0x300}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x22100, 0x102) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0x8004550f, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002400127b0b0001dbd642f1a325f121df0b0cc692d1538600627269646765000014000280"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) 21.495768276s ago: executing program 5 (id=1321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_setup(0x2a0d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x2c4343, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 20.648094078s ago: executing program 3 (id=1322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000380000000000000100000009500080000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x80000001, 0x0, 0x1, 0x1, 0x2}, 0xcf) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \''], 0x86) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000080)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) 18.076800785s ago: executing program 5 (id=1325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x4, 0x6}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x2, 0x7da, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4811) 17.056155121s ago: executing program 5 (id=1327): socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbmon(&(0x7f0000000140), 0xf33f5f0, 0x80801) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x44b, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 16.694941806s ago: executing program 3 (id=1331): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f65"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 15.432423415s ago: executing program 3 (id=1334): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x40, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf648, 0x0, 0x0, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x29, 0x0, 0x4, 0x0, 0xb9, 0x40, 0x5}], "cb78b2e77777e850"}}}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) syz_io_uring_setup(0x9f, 0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d000200"], 0x0) 13.454394763s ago: executing program 9 (id=1337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x4, 0x6}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x2, 0x7da, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4811) 12.358917649s ago: executing program 9 (id=1341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000380000000000000100000009500080000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x80000001, 0x0, 0x1, 0x1, 0x2}, 0xcf) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \''], 0x86) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000080)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) 8.952058229s ago: executing program 8 (id=1343): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x210801, 0x1}, 0xc) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}}, 0x20008004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x1, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000002000)=""/4096, &(0x7f0000000180)=0x1000) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000e80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000100)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) 8.775243862s ago: executing program 3 (id=1344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) 8.633756294s ago: executing program 9 (id=1346): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b000200fc00ff05ffdf00da8075392313db00", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 8.092243581s ago: executing program 2 (id=1347): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x46f2, &(0x7f00000002c0)={0x0, 0x4, 0x8000, 0x3, 0x7f}, 0x0, &(0x7f0000000340)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="01072bbd7000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x7, 0x2, 0x1}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000400)='omfs\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x800000) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[]) 7.412418422s ago: executing program 8 (id=1348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_setup(0x2a0d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x2c4343, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 7.315101143s ago: executing program 5 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=@newtaction={0x14, 0x30, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x14) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000040)={0x0, 0x1000, 0x8}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) 6.18833033s ago: executing program 2 (id=1350): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) capset(0x0, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) inotify_init() 6.006525712s ago: executing program 8 (id=1351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x4, 0x6}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x2, 0x7da, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4811) 5.45587969s ago: executing program 2 (id=1352): syz_clone3(&(0x7f0000002c00)={0x9828000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x4000}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x110) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet6(r1, &(0x7f0000000200)="d34c4b2fd7d09e145902dcf7495c823dee541dd353f2d6eab93d8a3b0f7059fcee67ca6699e3465a77b5d8696d9a5e1e7d32e6afcc8e5ffe4d6561460c4ecb134b88f1ceeaa3ade17f47a702f5ab3a5a3232f7906b4deced3e43332e7fb21e65728fd4b026dec1d0a32f507b2d8628f990c4b7bf7791dd4649db2031", 0x7c, 0x20000040, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, &(0x7f0000000140)='grpquota') 4.475744735s ago: executing program 8 (id=1353): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.388701666s ago: executing program 2 (id=1354): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x40, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf648, 0x0, 0x0, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x29, 0x0, 0x4, 0x0, 0xb9, 0x40, 0x5}], "cb78b2e77777e850"}}}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) syz_io_uring_setup(0x9f, &(0x7f0000000640)={0x0, 0x80000000, 0x1000, 0x2, 0x24d}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d000200"], 0x0) 4.059790371s ago: executing program 3 (id=1355): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x3, @mcast2, 0xfff}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="44a92a813846c8a2296d7f3271b8a1ceebf3a2b7c63362dbe3863da67dca97dc73b2d1176f094ab5751155933c6b4f024f6b7e59899637ece2682dbf1f0b603847931aa5b1663a3d5bcfafd4a61ebcd25682fa3c405cf71c0aaeda1e7e47fdf6f4e3be25197b98bb31439c309deace390e1a29d23c8c0963c120c0b2b64d4823bd23f605384b0aec53d4d967debbe550844ddd6c27220830c0f0691442c9d59037c0ef266d86944836a4fa1bd243aecf181c646c45ae69a59dd977bd3071c323c0f049da7ba803727d11f4d4a81561e5b2ef7e1640eb1c0b3a", 0xd9}, {&(0x7f00000003c0)="10aeac32b2659ae6355498562384194efb2d18b4db664c30bc2a659027c82defdaede7a018f68625dbc92cfe142faaf94f8d361d800c699bd139e14f02f60388eb8bceecc508086cdc7d1acc72adf657b7939dfd0a20888517ab3a4b3ec7348e1cdc39c8a7dc84bce571f6c8f129c8eb770ad3439d83477493bdb05c9ea29081ef3585c8fb5d37575225b67a004a2e80a2abb0632760ceae53dc8d845dab29484cffcba1853c3a179ce0bb60", 0xac}, {&(0x7f00000001c0)="fd9e4d528bfa", 0x6}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="86856a81d1d16d68f54c", 0xa}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000000000000290000003e0000000500000000000000300000000000000029000000370000002c02000000000000071000000001020501000e000000000000000000000000005800000000000000290000003900000002080003000000002001000000000000000000000000000000000000000000000000ffff0a0101020000000000002000000000000000000120010000000000000000000000000001952b296c27b0b4062647d649e2e3bb868c0930c4320d7d0cd37352f4a40697d5162cbf0573fa3fcae8e20af0f50c575d62ae7ab3e3c4596d43487c27c798f6"], 0xa0}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0xadd, @private2, 0x4852e66e}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000680)="343a379c4653e16d19acd811a05a935b4ae549555c80eda0d098e6ab5920d76999bd3b61326635d0", 0x28}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="0af3d4b17ef0305647a0dcf423be1f18d1b03c0af94f9a79fc127c64255663d6b99dab62d0cda6c08d087ec879c409f17ca5827347f895a73fe93791459e7e8fe9f2e9d0caca415b42ed65a9f791c07b34a59bbec792e31f5601095878e28dd7bd6922d6f12646de93dc90543924d3613781da13a1802f1c0017abb40daed0e66f6bc8b86b", 0x85}, {&(0x7f0000000900)="baa433cbc31c236ebc59abbd764d3eda6bc4be7383991e15eced2a7b8c1ffb48741a14a88019ab6fcdb768260a", 0x2d}, {&(0x7f0000000940)="a102e2c1a49b2ef13895febc0521a01d7cfd28764120900d4de76fc438fb2702569c5ea894de306d9110ea3ec13b7a7190e0b6d8a8ebad1db635", 0x3a}], 0x3}}], 0x3, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) 3.284368822s ago: executing program 9 (id=1356): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x80000001, 0x0, 0x1, 0x1, 0x2}, 0xcf) write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \''], 0x86) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fef725253be9e8480cb4f3524932f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c6f5917ea8428d41cab5612336fcfe86c481c8935a48e9c1c86a394feb64fb06f77dadbcb59ef62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e83d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba8cd86587ad33743b1c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db4fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7d0200000000000000c335ed08174bb5ea722a98b34d38ac6de995deb50cff541b2567b3f87e2bcaab9d3c530897857edd5d7f97d61fc67076eab4846010d482a8c801f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a7232dbb0d6de9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2245f46c953048c43f961d7fbd734c60a9695f567aa710ce9d3327568895d99dde0266485bbd9d0caecf00e9501a4001000000cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a97404557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc22efe0eff248d3a473fe32a5b3243bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc1cc72f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd93197dc8d77b9245f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a9ba8103bbfe389939e55296ec9b4f8d3a03a1731ce9aa0dd6e5158a672be040000009ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df473c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd9737e27afd20b02ce0e504c15b0237437200"}, 0x418}) 3.198032943s ago: executing program 3 (id=1357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r4, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000014) syz_genetlink_get_family_id$nl80211(0x0, r3) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28040085) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.183656604s ago: executing program 5 (id=1358): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x210801, 0x1}, 0xc) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}}, 0x20008004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x1, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000002000)=""/4096, &(0x7f0000000180)=0x1000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000e80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000100)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) 3.064276545s ago: executing program 8 (id=1359): socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbmon(&(0x7f0000000140), 0xf33f5f0, 0x80801) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x44b, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.323811001s ago: executing program 2 (id=1360): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x46f2, &(0x7f00000002c0)={0x0, 0x4, 0x8000, 0x3, 0x7f}, 0x0, &(0x7f0000000340)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="01072bbd7000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x7, 0x2, 0x1}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000400)='omfs\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x800000) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[]) 273.380216ms ago: executing program 9 (id=1361): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_setup(0x2a0d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x2c4343, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 137.094178ms ago: executing program 8 (id=1362): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) capset(0x0, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) inotify_init() 28.20527ms ago: executing program 5 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 11.57621ms ago: executing program 2 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 0s ago: executing program 9 (id=1365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) kernel console output (not intermixed with test programs): n device batadv0 [ 351.032120][ T6354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.404649][ T264] block nbd4: Attempted send on invalid socket [ 351.411019][ T264] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.424557][ T264] block nbd4: Attempted send on invalid socket [ 351.430832][ T264] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.442371][ T6371] Mount JFS Failure: -5 [ 351.446673][ T6371] jfs_mount failed w/return code = -5 [ 351.767307][ T6375] CUSE: unknown device info "ÿ" [ 351.772358][ T6375] CUSE: zero length info key specified [ 357.465571][ T6399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.690077][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.707849][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.909986][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.803599][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.044786][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.101863][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.452566][ T6061] device veth0_vlan entered promiscuous mode [ 359.526834][ T6061] device veth1_vlan entered promiscuous mode [ 359.609542][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.618989][ T264] block nbd2: Attempted send on invalid socket [ 359.625299][ T264] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.636836][ T150] block nbd2: Attempted send on invalid socket [ 359.643056][ T150] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.657261][ T6428] Mount JFS Failure: -5 [ 359.662374][ T6428] jfs_mount failed w/return code = -5 [ 359.680978][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.751115][ T6061] device veth0_macvtap entered promiscuous mode [ 359.836749][ T6061] device veth1_macvtap entered promiscuous mode [ 359.851649][ T6427] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 6427 comm: syz.0.560) [ 359.867916][ T26] audit: type=1800 audit(2000000016.360:24): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.560" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=40325 res=0 errno=0 [ 359.920355][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.970780][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.000133][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.034130][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.063413][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.103280][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.164038][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.175278][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.202543][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.100993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.118358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.145366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.252384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.540961][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 361.571958][ T6450] device macvtap2 entered promiscuous mode [ 361.596933][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.624150][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.659374][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.875791][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.891628][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.349773][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.396342][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.417312][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.454385][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.722400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.761705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.785025][ T6061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.806674][ T6061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.844479][ T6061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.854231][ T6061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.765255][ T6486] ip6t_REJECT: ECHOREPLY is not supported [ 366.285083][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.324864][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.252648][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.301059][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.344172][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 367.421401][ T6525] device macvtap5 entered promiscuous mode [ 367.450392][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.474518][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.598449][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.854828][ T6550] vivid-000: kernel_thread() failed [ 377.395964][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 378.527580][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.432064][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 380.613469][ T6633] udc-core: couldn't find an available UDC or it's busy [ 380.620636][ T6633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.215282][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.223286][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.363251][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.371213][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.379111][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.387690][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.395742][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.403717][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.411766][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.419681][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.530658][ T5719] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 381.573677][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.616471][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.639222][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.805263][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.842752][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 381.964283][ T5719] usb 6-1: Using ep0 maxpacket: 8 [ 382.780985][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 382.821640][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 382.854222][ T5719] usb 6-1: device descriptor read/all, error -71 [ 383.504666][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 383.512853][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 383.520775][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 383.529163][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 383.537544][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 383.545367][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 383.553136][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.187923][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.195992][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.203768][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.211622][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.219911][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.227776][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.236791][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.247188][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.258182][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.305233][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 384.509855][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 385.174003][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 385.181953][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 385.190210][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 385.198282][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 385.206515][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 385.219496][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 385.245130][ T4232] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 385.556095][ T6679] fuse: Unknown parameter 'QO V¢òÿ' [ 389.254248][ T4343] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 390.434127][ T4343] usb 2-1: Using ep0 maxpacket: 8 [ 391.066743][ T6700] fido_id[6700]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 391.114275][ T4343] usb 2-1: device descriptor read/all, error -71 [ 392.256464][ T6723] tipc: Started in network mode [ 392.264853][ T6723] tipc: Node identity 6, cluster identity 4711 [ 392.395207][ T6723] tipc: Node number set to 6 [ 392.419185][ T6728] CUSE: unknown device info "ÿ" [ 392.424347][ T6728] CUSE: zero length info key specified [ 396.273266][ T4372] Bluetooth: hci1: command 0x0409 tx timeout [ 396.566028][ T4174] syz-executor (4174) used greatest stack depth: 20480 bytes left [ 397.013640][ T4462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.159580][ T6731] lo speed is unknown, defaulting to 1000 [ 397.213303][ T4462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.541550][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 400.234247][ T4216] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 400.564353][ T4216] usb 5-1: Using ep0 maxpacket: 8 [ 400.614084][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 401.527616][ T4216] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 402.021488][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.030610][ T4216] usb 5-1: Product: syz [ 402.035254][ T4216] usb 5-1: Manufacturer: syz [ 402.039962][ T4216] usb 5-1: SerialNumber: syz [ 402.106881][ T4216] usb 5-1: config 0 descriptor?? [ 402.350788][ T6786] CUSE: unknown device info "ÿ" [ 402.355933][ T6786] CUSE: zero length info key specified [ 402.694336][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 403.674450][ T4216] usb 5-1: can't set config #0, error -71 [ 403.821253][ T4216] usb 5-1: USB disconnect, device number 7 [ 405.040392][ T4462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.445351][ T4462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.090026][ T6731] chnl_net:caif_netlink_parms(): no params data found [ 410.000118][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 412.119794][ T6850] udc-core: couldn't find an available UDC or it's busy [ 412.126841][ T6850] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 412.584064][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 412.864329][ T1108] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 412.907663][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.017009][ T1108] usb 2-1: Product: syz [ 413.034775][ T1108] usb 2-1: Manufacturer: syz [ 413.053791][ T1108] usb 2-1: SerialNumber: syz [ 413.114012][ T6854] CUSE: unknown device info "ÿ" [ 413.119199][ T6854] CUSE: zero length info key specified [ 413.453435][ T1108] usb 2-1: config 0 descriptor?? [ 414.764185][ T1108] usb 2-1: can't set config #0, error -71 [ 414.827394][ T1108] usb 2-1: USB disconnect, device number 8 [ 414.951493][ T26] audit: type=1326 audit(2000000071.440:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47db2a9969 code=0x7ffc0000 [ 415.178187][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.198793][ T26] audit: type=1326 audit(2000000071.480:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47db2a9969 code=0x7ffc0000 [ 415.306890][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.444807][ T6731] device bridge_slave_0 entered promiscuous mode [ 416.377323][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.412981][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.421722][ T6731] device bridge_slave_1 entered promiscuous mode [ 416.763737][ T6731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.791918][ T6731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.822687][ T264] block nbd1: Attempted send on invalid socket [ 416.828973][ T264] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.849450][ T264] block nbd1: Attempted send on invalid socket [ 416.855798][ T264] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 416.866872][ T6872] Mount JFS Failure: -5 [ 416.871582][ T6872] jfs_mount failed w/return code = -5 [ 417.006168][ T6731] team0: Port device team_slave_0 added [ 417.075921][ T6731] team0: Port device team_slave_1 added [ 417.723676][ T6731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.847533][ T6731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.990837][ T6731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.014049][ T4227] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 421.148875][ T6912] udc-core: couldn't find an available UDC or it's busy [ 421.156102][ T6912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 422.114181][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 422.198796][ T6731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.378702][ T6731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.504491][ T4227] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 422.564275][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.715297][ T4227] usb 5-1: Product: syz [ 422.780465][ T4227] usb 5-1: Manufacturer: syz [ 422.798372][ T6731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.860601][ T4227] usb 5-1: SerialNumber: syz [ 423.094845][ T6928] tmpfs: Unknown parameter 'grpquota' [ 424.037731][ T6925] vivid-002: kernel_thread() failed [ 424.064910][ T4227] usb 5-1: config 0 descriptor?? [ 424.106801][ T4227] usb 5-1: can't set config #0, error -71 [ 424.114951][ T4227] usb 5-1: USB disconnect, device number 8 [ 424.454955][ T6731] device hsr_slave_0 entered promiscuous mode [ 424.476630][ T6731] device hsr_slave_1 entered promiscuous mode [ 424.512150][ T6731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.803697][ T6731] Cannot create hsr debugfs directory [ 425.342106][ T4462] device hsr_slave_0 left promiscuous mode [ 425.354807][ T4462] device hsr_slave_1 left promiscuous mode [ 425.395105][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.402570][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.445137][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.452576][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.494639][ T4462] device bridge_slave_1 left promiscuous mode [ 425.538405][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.672992][ T4462] device bridge_slave_0 left promiscuous mode [ 425.792128][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.173501][ T4462] device veth1_macvtap left promiscuous mode [ 426.239410][ T4462] device veth0_macvtap left promiscuous mode [ 426.326758][ T4462] device veth1_vlan left promiscuous mode [ 426.403457][ T4462] device veth0_vlan left promiscuous mode [ 427.214130][ T2283] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 429.995101][ T6960] udc-core: couldn't find an available UDC or it's busy [ 430.002134][ T6960] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 431.514070][ T2283] usb 6-1: Using ep0 maxpacket: 8 [ 431.606257][ T2283] usb 6-1: device descriptor read/all, error -71 [ 432.557753][ T4462] team0 (unregistering): Port device team_slave_1 removed [ 433.403604][ T4462] team0 (unregistering): Port device team_slave_0 removed [ 433.421535][ T4462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.442124][ T4462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.511490][ T26] audit: type=1326 audit(2000000090.000:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea3c3969 code=0x7ffc0000 [ 433.544781][ T6988] ax25_connect(): syz.5.683 uses autobind, please contact jreuter@yaina.de [ 433.664942][ T26] audit: type=1326 audit(2000000090.030:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f7eea3c3969 code=0x7ffc0000 [ 433.797517][ T26] audit: type=1326 audit(2000000090.030:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea3c3969 code=0x7ffc0000 [ 433.948036][ T26] audit: type=1326 audit(2000000090.030:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7eea3c3969 code=0x7ffc0000 [ 434.092980][ T26] audit: type=1326 audit(2000000090.050:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea3c3969 code=0x7ffc0000 [ 434.239356][ T26] audit: type=1326 audit(2000000090.050:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f7eea3c3969 code=0x7ffc0000 [ 434.283041][ T26] audit: type=1326 audit(2000000090.050:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea3c3969 code=0x7ffc0000 [ 434.310975][ T26] audit: type=1326 audit(2000000090.050:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea3c3969 code=0x7ffc0000 [ 434.351237][ T4462] bond0 (unregistering): Released all slaves [ 434.469602][ T6973] netlink: 'syz.2.680': attribute type 2 has an invalid length. [ 434.565464][ T4185] lo speed is unknown, defaulting to 1000 [ 435.320102][ T7008] input: syz0 as /devices/virtual/input/input7 [ 435.715329][ T4223] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 438.385236][ T4372] Bluetooth: hci2: command 0x0406 tx timeout [ 438.401336][ T7011] vivid-004: kernel_thread() failed [ 439.163433][ T7028] vivid-002: kernel_thread() failed [ 439.434918][ T6731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.979491][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.646322][ T6731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 440.987300][ T6731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.120242][ T6731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.247888][ T7059] netlink: 160 bytes leftover after parsing attributes in process `syz.1.701'. [ 441.264998][ T7059] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 443.114099][ T4214] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 443.414226][ T4214] usb 3-1: Using ep0 maxpacket: 8 [ 443.694669][ T4214] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 443.764462][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.890533][ T4214] usb 3-1: Product: syz [ 443.897807][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 443.940947][ T4214] usb 3-1: Manufacturer: syz [ 444.024054][ T4214] usb 3-1: SerialNumber: syz [ 444.034950][ T7072] input: syz0 as /devices/virtual/input/input8 [ 444.073554][ T4214] usb 3-1: config 0 descriptor?? [ 445.143387][ T6731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.177030][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.217566][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.254090][ T4214] usb read operation failed. (-71) [ 445.254273][ T7088] vivid-001: disconnect [ 445.278554][ T4214] usb write operation failed. (-71) [ 445.299460][ T7087] vivid-001: reconnect [ 445.306693][ T6731] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.334985][ T4214] usb write operation failed. (-71) [ 445.355284][ T4214] usb write operation failed. (-71) [ 445.361001][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.384672][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.616202][ T4214] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 445.631772][ T4214] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 446.022640][ T4214] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 446.251475][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.258657][ T4465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.318285][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.327345][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.336201][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.344042][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.354633][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.518403][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.529633][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.547646][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.559029][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.560842][ T264] block nbd4: Attempted send on invalid socket [ 446.573438][ T264] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 446.581377][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.592072][ T264] block nbd4: Attempted send on invalid socket [ 446.593031][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.598426][ T264] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 446.619075][ T7108] Mount JFS Failure: -5 [ 446.629276][ T7108] jfs_mount failed w/return code = -5 [ 446.672171][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.683236][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.693446][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.710518][ T6731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.940399][ T6731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.961532][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.976392][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.044035][ T4179] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 451.304718][ T7148] syz.1.720 (7148): drop_caches: 1 [ 451.696792][ T7156] vivid-000: kernel_thread() failed [ 454.104105][ T4372] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 454.292006][ T7192] input: syz0 as /devices/virtual/input/input10 [ 455.343161][ T5631] Bluetooth: hci5: command 0x0409 tx timeout [ 455.694083][ T4372] usb 6-1: Using ep0 maxpacket: 16 [ 455.814667][ T4372] usb 6-1: config 64 has an invalid interface number: 176 but max is 0 [ 455.834053][ T4216] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 455.859491][ T4372] usb 6-1: config 64 has no interface number 0 [ 455.914423][ T4372] usb 6-1: config 64 interface 176 has no altsetting 0 [ 456.144633][ T4372] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 456.184790][ T4372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.267999][ T4372] usb 6-1: Product: syz [ 456.300325][ T4372] usb 6-1: Manufacturer: syz [ 456.349105][ T4372] usb 6-1: SerialNumber: syz [ 456.884535][ T4372] usb 6-1: can't set config #64, error -71 [ 456.999901][ T4372] usb 6-1: USB disconnect, device number 7 [ 457.074220][ T5818] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 457.404207][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 457.704517][ T5818] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 457.783793][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.862518][ T7178] chnl_net:caif_netlink_parms(): no params data found [ 458.009458][ T5818] usb 2-1: Product: syz [ 458.110457][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 458.117640][ T5818] usb 2-1: Manufacturer: syz [ 458.204120][ T5818] usb 2-1: SerialNumber: syz [ 460.059481][ T5818] usb 2-1: config 0 descriptor?? [ 460.084114][ T5818] usb 2-1: can't set config #0, error -71 [ 460.091968][ T5818] usb 2-1: USB disconnect, device number 9 [ 460.290607][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 460.541205][ T7236] overlayfs: bad index found (index=index/00fb21000134787bb9234349d7b4c5413f75466949bea85984b603000000000000, ftype=2000, origin ftype=8000). [ 462.926602][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.933818][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.035635][ T7178] device bridge_slave_0 entered promiscuous mode [ 463.044824][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.051995][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.060340][ T7178] device bridge_slave_1 entered promiscuous mode [ 463.235836][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.316166][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.329931][ T4216] Bluetooth: hci5: command 0x0419 tx timeout [ 466.423995][ T7] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 467.706058][ T7282] vivid-003: kernel_thread() failed [ 467.805860][ T7178] team0: Port device team_slave_0 added [ 467.862082][ T7178] team0: Port device team_slave_1 added [ 468.693966][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 468.954375][ T7305] 9pnet_virtio: no channels available for device syz [ 470.324010][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 470.834943][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.874017][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 471.216718][ T7] usb 2-1: string descriptor 0 read error: -71 [ 471.228811][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 471.545805][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.628414][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.686794][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.696760][ T7] usb 2-1: config 0 descriptor?? [ 471.703089][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.716912][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.724265][ T7] usb 2-1: can't set config #0, error -71 [ 473.088875][ T7] usb 2-1: USB disconnect, device number 11 [ 473.130129][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.181701][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.243998][ T7178] device hsr_slave_0 entered promiscuous mode [ 473.259264][ T7178] device hsr_slave_1 entered promiscuous mode [ 473.279782][ T7178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.293604][ T7178] Cannot create hsr debugfs directory [ 473.394092][ T4216] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 473.825419][ T4216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 473.956753][ T4216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 474.271163][ T4216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 474.294821][ T4216] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 475.174038][ T4216] usb 5-1: string descriptor 0 read error: -71 [ 475.180283][ T4216] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.215314][ T4216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 475.254054][ T4216] usb 5-1: can't set config #1, error -71 [ 475.269681][ T4216] usb 5-1: USB disconnect, device number 10 [ 475.463321][ T7364] 9pnet_virtio: no channels available for device syz [ 477.603756][ T7374] input: syz0 as /devices/virtual/input/input11 [ 477.796546][ T7178] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 479.755378][ T7178] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 479.927756][ T7178] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 480.166664][ T7178] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 480.204027][ T4227] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 482.772223][ T4227] usb 6-1: device not accepting address 8, error -71 [ 482.775376][ T7414] 9pnet_virtio: no channels available for device syz [ 484.195477][ T7426] input: syz0 as /devices/virtual/input/input12 [ 484.604897][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.795788][ T7178] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.074461][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 485.649028][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.663743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.902574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.920048][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.927223][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.679192][ T7452] vivid-000: kernel_thread() failed [ 486.816632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.200467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.209289][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.216532][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.349400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.386749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.875078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.887872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 487.905294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.935466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.961748][ T7178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 488.207919][ T7178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.241651][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.251138][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.289805][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.423335][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.435359][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.445794][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.189561][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 491.159782][ T7501] overlayfs: missing 'workdir' [ 491.690093][ T7503] vivid-002: kernel_thread() failed [ 491.932379][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 491.958137][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.002526][ T4462] device hsr_slave_0 left promiscuous mode [ 492.010635][ T4462] device hsr_slave_1 left promiscuous mode [ 492.396101][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 492.969807][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.333972][ T7525] ubi31: attaching mtd0 [ 493.403183][ T7525] ubi31: scanning is finished [ 493.407948][ T7525] ubi31: empty MTD device detected [ 494.288324][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.355469][ T7525] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 494.365136][ T4462] device bridge_slave_1 left promiscuous mode [ 494.371997][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.396218][ T23] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 495.215935][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.226481][ T23] usb 5-1: config 0 descriptor?? [ 495.236127][ T4462] device bridge_slave_0 left promiscuous mode [ 495.242378][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.293769][ T7537] CUSE: unknown device info "ÿ" [ 495.298950][ T7537] CUSE: zero length info key specified [ 496.141385][ T23] usb 5-1: can't set config #0, error -71 [ 496.165126][ T23] usb 5-1: USB disconnect, device number 11 [ 496.447600][ T21] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 496.668498][ T4462] team0 (unregistering): Port device team_slave_1 removed [ 496.700951][ T4462] team0 (unregistering): Port device team_slave_0 removed [ 496.733026][ T4462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.761137][ T4462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.830730][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.842050][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 496.853545][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 496.864467][ T21] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 496.890441][ T4462] bond0 (unregistering): Released all slaves [ 496.942668][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.954976][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.964342][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 496.972471][ T21] usb 2-1: SerialNumber: syz [ 497.021126][ T7538] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 497.029848][ T7538] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 497.044930][ T21] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 498.432173][ T21] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 498.495006][ T21] usb 2-1: USB disconnect, device number 12 [ 498.539292][ T7569] loop9: detected capacity change from 0 to 7 [ 499.873566][ T7569] loop9: [POWERTEC] p1 p2 p3 p4 [ 500.204079][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 500.354894][ T7569] loop9: p1 start 1600481121 is beyond EOD, truncated [ 500.362342][ T7569] loop9: p2 start 4294910286 is beyond EOD, truncated [ 500.589709][ T7569] loop9: p3 size 1680801792 extends beyond EOD, truncated [ 500.680431][ T7569] loop9: p4 start 131072 is beyond EOD, truncated [ 500.712019][ T7594] CUSE: unknown device info "ÿ" [ 500.717044][ T7594] CUSE: zero length info key specified [ 500.868641][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.904737][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.043120][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.066224][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.108757][ T7178] device veth0_vlan entered promiscuous mode [ 501.127366][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.173061][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.222048][ T7178] device veth1_vlan entered promiscuous mode [ 501.358008][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 501.379853][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 501.408934][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.454880][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.525755][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.564644][ T7178] device veth0_macvtap entered promiscuous mode [ 501.604476][ T7178] device veth1_macvtap entered promiscuous mode [ 501.700936][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.775484][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.785747][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.796422][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.807443][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.818197][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.828253][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.838815][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.870191][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.881458][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.893410][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.905337][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.922006][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.933301][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.944468][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.954666][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.965507][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.991902][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.064084][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.072393][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 502.139776][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.177104][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.271052][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 502.372137][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 502.476297][ T7178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.532365][ T7178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.585624][ T7178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.608910][ T7178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.988026][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.050239][ T4817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.069873][ T4817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.085526][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.118474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 505.134910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.254069][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 505.366750][ T7653] CUSE: unknown device info "ÿ" [ 505.371820][ T7653] CUSE: zero length info key specified [ 505.774233][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 506.350106][ T23] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 506.368666][ T23] usb 2-1: config 0 has no interface number 0 [ 506.525826][ T4214] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 506.574294][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=5c.24 [ 506.583383][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.683155][ T4214] dvb_usb_az6007: probe of 3-1:0.0 failed with error -110 [ 506.694514][ T23] usb 2-1: Product: syz [ 506.698712][ T23] usb 2-1: Manufacturer: syz [ 507.536651][ T4214] usb 3-1: USB disconnect, device number 5 [ 507.543225][ T23] usb 2-1: SerialNumber: syz [ 507.551363][ T23] usb 2-1: config 0 descriptor?? [ 507.604379][ T23] usb 2-1: can't set config #0, error -71 [ 507.676984][ T23] usb 2-1: USB disconnect, device number 14 [ 507.785786][ T7659] CUSE: unknown device info "ÿ" [ 508.677369][ T7659] CUSE: zero length info key specified [ 510.856475][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.841'. [ 511.577532][ T7704] CUSE: unknown device info "ÿ" [ 511.582661][ T7704] CUSE: zero length info key specified [ 513.534275][ T7717] IPVS: length: 4096 != 17667290688 [ 513.834016][ T4223] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 514.104101][ T4223] usb 2-1: Using ep0 maxpacket: 32 [ 516.035833][ T7708] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.039144][ T4223] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 516.159429][ T4223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.257032][ T4223] usb 2-1: config 0 descriptor?? [ 517.145087][ T7708] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.460510][ T7708] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.664691][ T7708] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.713620][ T7761] input: syz0 as /devices/virtual/input/input19 [ 518.046783][ T7708] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.080520][ T7708] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.138452][ T7708] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.171358][ T7708] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.277508][ T4223] usb 2-1: can't set config #0, error -71 [ 518.299211][ T4223] usb 2-1: USB disconnect, device number 15 [ 518.415574][ T7771] CUSE: unknown device info "ÿ" [ 518.420652][ T7771] CUSE: zero length info key specified [ 522.552074][ T7788] CUSE: unknown device info "ÿ" [ 522.584141][ T7788] CUSE: zero length info key specified [ 522.844079][ T4227] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 524.770534][ T7823] CUSE: unknown device info "ÿ" [ 524.775688][ T7823] CUSE: zero length info key specified [ 528.882029][ T7818] overlayfs: failed to resolve './file1': -2 [ 534.296119][ T7868] CUSE: unknown device info "ÿ" [ 534.301188][ T7868] CUSE: zero length info key specified [ 534.662068][ T7882] netlink: 92 bytes leftover after parsing attributes in process `syz.1.894'. [ 539.529908][ T7921] vivid-002: kernel_thread() failed [ 540.978880][ T7946] xt_l2tp: invalid flags combination: 8 [ 541.977070][ T7943] CUSE: unknown device info "ÿ" [ 541.982036][ T7943] CUSE: zero length info key specified [ 543.779560][ T7958] IPVS: length: 4096 != 17667290688 [ 544.244662][ T5631] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 544.524255][ T5631] usb 3-1: Using ep0 maxpacket: 32 [ 544.704901][ T5631] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 544.734880][ T5631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.813625][ T5631] usb 3-1: config 0 descriptor?? [ 544.901143][ T5631] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 545.074377][ T5631] gspca_nw80x: reg_w err -71 [ 545.079138][ T5631] nw80x: probe of 3-1:0.0 failed with error -71 [ 545.300525][ T5631] usb 3-1: USB disconnect, device number 6 [ 546.484147][ T4227] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 546.515296][ T7989] vivid-004: kernel_thread() failed [ 546.774761][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 546.791444][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 547.734844][ T4227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.816179][ T4227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 547.975183][ T4227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 548.116947][ T4227] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 548.546841][ T4227] usb 5-1: string descriptor 0 read error: -71 [ 548.604131][ T4227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.613381][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 548.934165][ T4227] usb 5-1: can't set config #1, error -71 [ 549.684390][ T4227] usb 5-1: USB disconnect, device number 12 [ 550.024937][ T8035] IPVS: length: 4096 != 17667290688 [ 550.384335][ T4214] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 551.137249][ T8047] vivid-000: kernel_thread() failed [ 551.366698][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.933'. [ 551.376112][ T4214] usb 5-1: Using ep0 maxpacket: 32 [ 551.383533][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.933'. [ 552.446529][ T4214] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 553.058107][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.114051][ T4214] usb 5-1: config 0 descriptor?? [ 553.585808][ T4214] usb 5-1: can't set config #0, error -71 [ 553.592953][ T4214] usb 5-1: USB disconnect, device number 13 [ 553.647470][ T8072] input: syz0 as /devices/virtual/input/input22 [ 554.954358][ T8091] virtio-fs: tag not found [ 555.399005][ T8104] capability: warning: `syz.5.947' uses deprecated v2 capabilities in a way that may be insecure [ 555.541273][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.946'. [ 556.219778][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.946'. [ 560.449927][ T26] audit: type=1326 audit(2000000216.940:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47db2a9969 code=0x0 [ 560.585538][ T8137] input: syz0 as /devices/virtual/input/input26 [ 562.454168][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 562.744111][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 562.864975][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.364163][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 563.412402][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.559328][ T23] usb 2-1: Product: syz [ 563.634781][ T23] usb 2-1: Manufacturer: syz [ 563.698566][ T23] usb 2-1: SerialNumber: syz [ 563.930634][ T8153] udc-core: couldn't find an available UDC or it's busy [ 563.937719][ T8153] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 564.867628][ T23] usb 2-1: config 0 descriptor?? [ 565.764073][ T23] usb read operation failed. (-71) [ 565.784071][ T23] usb write operation failed. (-71) [ 566.825826][ T23] usb write operation failed. (-71) [ 567.398489][ T264] block nbd1: Attempted send on invalid socket [ 567.404941][ T264] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 567.417100][ T264] block nbd1: Attempted send on invalid socket [ 567.423344][ T264] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 567.434460][ T8182] Mount JFS Failure: -5 [ 567.438682][ T8182] jfs_mount failed w/return code = -5 [ 567.654036][ T23] usb write operation failed. (-71) [ 567.659473][ T23] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 567.725800][ T23] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 568.713357][ T23] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 571.517781][ T8235] input: syz0 as /devices/virtual/input/input28 [ 571.609541][ T4545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.817281][ T4545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.036219][ T4545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.401359][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 573.396571][ T4545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.563680][ T2283] Bluetooth: hci1: command 0x0409 tx timeout [ 574.120158][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.221151][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.697771][ T8231] device bridge_slave_0 entered promiscuous mode [ 575.118941][ T8293] vivid-002: kernel_thread() failed [ 575.214882][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.223034][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.276268][ T8231] device bridge_slave_1 entered promiscuous mode [ 575.503416][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.536445][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.644117][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 575.812778][ T8231] team0: Port device team_slave_0 added [ 576.811619][ T8231] team0: Port device team_slave_1 added [ 577.055589][ T4216] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 577.343988][ T4216] usb 3-1: Using ep0 maxpacket: 8 [ 577.634508][ T4216] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 577.682084][ T4216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.792467][ T8333] udc-core: couldn't find an available UDC or it's busy [ 579.799519][ T8333] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 580.020033][ T4216] usb 3-1: Product: syz [ 580.653600][ T4216] usb 3-1: Manufacturer: syz [ 580.658840][ T4216] usb 3-1: SerialNumber: syz [ 580.664737][ T2283] Bluetooth: hci1: command 0x040f tx timeout [ 580.694893][ T4216] usb 3-1: config 0 descriptor?? [ 580.708877][ T4223] Bluetooth: hci5: command 0x0406 tx timeout [ 580.823812][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.830880][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.935360][ T4216] usb 3-1: can't set config #0, error -71 [ 580.967564][ T4216] usb 3-1: USB disconnect, device number 7 [ 581.050516][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.343886][ T150] block nbd2: Attempted send on invalid socket [ 581.350704][ T150] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.363399][ T150] block nbd2: Attempted send on invalid socket [ 581.374208][ T150] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.385899][ T8347] Mount JFS Failure: -5 [ 581.390320][ T8347] jfs_mount failed w/return code = -5 [ 582.421457][ T8356] vivid-000: kernel_thread() failed [ 582.559858][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.567116][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.634194][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.693162][ T2283] Bluetooth: hci1: command 0x0419 tx timeout [ 582.822071][ T8231] device hsr_slave_0 entered promiscuous mode [ 582.866590][ T8231] device hsr_slave_1 entered promiscuous mode [ 582.907544][ T8231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.926759][ T8231] Cannot create hsr debugfs directory [ 583.609082][ T4545] device hsr_slave_0 left promiscuous mode [ 583.619639][ T4545] device hsr_slave_1 left promiscuous mode [ 583.653809][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.670040][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.696082][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.713004][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.736987][ T4545] device bridge_slave_1 left promiscuous mode [ 583.763265][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.899640][ T4545] device bridge_slave_0 left promiscuous mode [ 583.997824][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.334205][ T4268] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 584.404431][ T4545] device veth1_macvtap left promiscuous mode [ 584.472606][ T4545] device veth0_macvtap left promiscuous mode [ 584.543106][ T4545] device veth1_vlan left promiscuous mode [ 584.610973][ T4545] device veth0_vlan left promiscuous mode [ 584.634140][ T4268] usb 6-1: Using ep0 maxpacket: 8 [ 584.924520][ T4268] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 584.977306][ T4268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.068429][ T4268] usb 6-1: Product: syz [ 585.114405][ T4268] usb 6-1: Manufacturer: syz [ 585.167191][ T4268] usb 6-1: SerialNumber: syz [ 585.261662][ T4268] usb 6-1: config 0 descriptor?? [ 586.244296][ T4268] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 587.679456][ T4545] team0 (unregistering): Port device team_slave_1 removed [ 587.708316][ T4545] team0 (unregistering): Port device team_slave_0 removed [ 587.732038][ T4545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.759443][ T4545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.862944][ T4545] bond0 (unregistering): Released all slaves [ 588.035358][ T8231] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 588.107086][ T8231] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 588.190668][ T8231] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.277981][ T8231] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 589.424085][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.519543][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 589.563597][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 589.607314][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.664250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 589.684786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 589.722496][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.729665][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.835208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 589.865794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 590.147593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 590.227208][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.234470][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.306469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 590.903982][ T4185] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 592.164119][ T4185] usb 3-1: Using ep0 maxpacket: 8 [ 592.534327][ T4185] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 592.589951][ T4185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.696956][ T4185] usb 3-1: Product: syz [ 592.744075][ T4185] usb 3-1: Manufacturer: syz [ 592.791310][ T4185] usb 3-1: SerialNumber: syz [ 592.906111][ T5719] Bluetooth: hci3: command 0x0409 tx timeout [ 592.914963][ T4185] usb 3-1: config 0 descriptor?? [ 593.443382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 593.454946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.465727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.477200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 593.490252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.529303][ T8231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.567212][ T8231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.588784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 593.616388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.688303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.833408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.989811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.134128][ T4185] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 594.166823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.656776][ T8447] chnl_net:caif_netlink_parms(): no params data found [ 594.844047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.852022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 595.071021][ T5719] Bluetooth: hci3: command 0x041b tx timeout [ 595.093391][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.041276][ T8447] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.083955][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.125913][ T8447] device bridge_slave_0 entered promiscuous mode [ 596.293557][ T8447] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.302288][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.335308][ T8447] device bridge_slave_1 entered promiscuous mode [ 596.649118][ T8447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.961756][ T8447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.171963][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 597.636999][ T8447] team0: Port device team_slave_0 added [ 597.670046][ T8447] team0: Port device team_slave_1 added [ 597.843001][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.860571][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.941774][ T8447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.992900][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.018659][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.096018][ T8447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.216149][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 598.259022][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 598.353715][ T8447] device hsr_slave_0 entered promiscuous mode [ 598.378535][ T8447] device hsr_slave_1 entered promiscuous mode [ 598.426295][ T8447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.470752][ T8447] Cannot create hsr debugfs directory [ 598.980994][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 599.157330][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 599.421437][ T8231] device veth0_vlan entered promiscuous mode [ 599.503545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 599.536526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 599.615079][ T4372] Bluetooth: hci3: command 0x0419 tx timeout [ 600.030176][ T8231] device veth1_vlan entered promiscuous mode [ 600.257764][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 600.275696][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 600.316704][ T8231] device veth0_macvtap entered promiscuous mode [ 600.389662][ T8231] device veth1_macvtap entered promiscuous mode [ 600.885314][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 600.967740][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 601.118955][ T8447] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 601.246110][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.287649][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.304078][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.327843][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.359962][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.370484][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.380471][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.390952][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.404911][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.413480][ T8447] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 601.438674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 601.458678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 601.485870][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.497803][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.509263][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.520401][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.530944][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.542103][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.560753][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.582582][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.602278][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.614248][ T8447] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 601.631464][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 601.659950][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 601.697257][ T8447] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 601.727803][ T8231] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.737930][ T8231] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.749445][ T8231] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.758218][ T8231] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.792102][ T4545] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.872820][ T4545] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.966821][ T4545] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.061705][ T4545] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.154808][ T4817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.185428][ T4817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.236258][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.256767][ T8447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.325363][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.338381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 602.353799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 602.361932][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.385354][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.455048][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 602.520093][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.547777][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.613501][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.620899][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.660858][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.721447][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.768927][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.776135][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.786850][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 603.742035][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 603.775041][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 603.827789][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 603.884544][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 604.060141][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 604.097117][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 604.164295][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 604.176158][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.201402][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.708755][ T8447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.784542][ T8447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 604.826209][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 604.889982][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 607.253964][ T4372] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 607.524049][ T4372] usb 8-1: Using ep0 maxpacket: 8 [ 607.804706][ T4372] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 607.858545][ T4372] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.988036][ T4372] usb 8-1: Product: syz [ 608.576889][ T4372] usb 8-1: Manufacturer: syz [ 608.579593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.581536][ T4372] usb 8-1: SerialNumber: syz [ 608.603785][ T4372] usb 8-1: config 0 descriptor?? [ 608.654215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.122156][ T4372] usb 8-1: can't set config #0, error -71 [ 609.182843][ T4372] usb 8-1: USB disconnect, device number 2 [ 609.268894][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.670698][ T264] block nbd2: Attempted send on invalid socket [ 610.677256][ T264] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.715776][ T264] block nbd2: Attempted send on invalid socket [ 610.722167][ T264] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.734696][ T8711] Mount JFS Failure: -5 [ 610.739029][ T8711] jfs_mount failed w/return code = -5 [ 614.648271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.658452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.700728][ T8447] device veth0_vlan entered promiscuous mode [ 614.712143][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.723103][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 615.311094][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 615.359292][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.391358][ T8447] device veth1_vlan entered promiscuous mode [ 615.567420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.590354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.639582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.668429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.740759][ T8447] device veth0_macvtap entered promiscuous mode [ 615.798134][ T8447] device veth1_macvtap entered promiscuous mode [ 615.850719][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.885232][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.897796][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.912097][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.924795][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.943550][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.954854][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.966520][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.977629][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.989085][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.001411][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.090368][ T8777] device pim6reg1 entered promiscuous mode [ 616.104693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.128999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.354377][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.381767][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.393386][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.413951][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.433999][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.651035][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.831437][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.091640][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.133791][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.144432][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.155849][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.169771][ T4545] device hsr_slave_0 left promiscuous mode [ 617.197197][ T4545] device hsr_slave_1 left promiscuous mode [ 617.246061][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.263856][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.292750][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.331519][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.426671][ T4545] device bridge_slave_1 left promiscuous mode [ 617.451936][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.492787][ T4545] device bridge_slave_0 left promiscuous mode [ 617.525384][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.560871][ T4545] device veth1_macvtap left promiscuous mode [ 617.570966][ T4545] device veth0_macvtap left promiscuous mode [ 617.582082][ T4545] device veth1_vlan left promiscuous mode [ 617.876906][ T4545] device veth0_vlan left promiscuous mode [ 619.764823][ T4545] team0 (unregistering): Port device team_slave_1 removed [ 619.805829][ T4545] team0 (unregistering): Port device team_slave_0 removed [ 619.829465][ T4545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.860524][ T4545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.999115][ T4545] bond0 (unregistering): Released all slaves [ 620.060541][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.069935][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.159332][ T8447] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.255178][ T8447] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.346903][ T8447] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.461526][ T8447] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.480299][ T26] audit: type=1326 audit(2000000276.970:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47db2a9969 code=0x0 [ 623.525575][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.545256][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.628953][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 623.656683][ T4817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.693158][ T4817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.710964][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.725469][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.660644][ T26] audit: type=1326 audit(2000000282.150:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.1100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31de60969 code=0x0 [ 629.406488][ T4185] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 629.407358][ T23] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 629.440970][ T4268] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 629.512124][ T4185] dvb_usb_az6007: probe of 3-1:0.0 failed with error -2 [ 629.720299][ T4185] usb 3-1: USB disconnect, device number 8 [ 629.978664][ T4268] dvb_usb_az6007: probe of 6-1:0.0 failed with error -2 [ 629.993222][ T4268] usb 6-1: USB disconnect, device number 10 [ 630.002567][ T23] dvb_usb_az6007: probe of 2-1:0.0 failed with error -110 [ 630.025363][ T23] usb 2-1: USB disconnect, device number 17 [ 633.804107][ T4185] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 634.124092][ T4185] usb 3-1: Using ep0 maxpacket: 8 [ 634.444512][ T4185] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 635.209472][ T4185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.663314][ T4185] usb 3-1: Product: syz [ 635.828674][ T4185] usb 3-1: Manufacturer: syz [ 636.081387][ T4185] usb 3-1: SerialNumber: syz [ 636.372793][ T4185] usb 3-1: config 0 descriptor?? [ 636.514116][ T4185] usb 3-1: can't set config #0, error -71 [ 636.562476][ T4185] usb 3-1: USB disconnect, device number 9 [ 636.927662][ T8961] chnl_net:caif_netlink_parms(): no params data found [ 637.648105][ T8984] syz.2.1124 (8984): drop_caches: 1 [ 637.752872][ T8984] syz.2.1124 (8984): drop_caches: 1 [ 638.805800][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 639.153097][ T8998] IPVS: length: 4096 != 17667290688 [ 639.211996][ T26] audit: type=1326 audit(2000000295.700:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.8.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96fe674969 code=0x0 [ 639.245509][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.263261][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.493890][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 641.301137][ T4215] Bluetooth: hci5: command 0x041b tx timeout [ 641.505167][ T8961] device bridge_slave_0 entered promiscuous mode [ 641.514331][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.521596][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.538362][ T8961] device bridge_slave_1 entered promiscuous mode [ 641.575753][ T4372] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 642.294093][ T4372] usb 2-1: Using ep0 maxpacket: 8 [ 643.114865][ T9005] udc-core: couldn't find an available UDC or it's busy [ 643.122247][ T9005] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.134707][ T8961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.257049][ T8961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.357716][ T4215] Bluetooth: hci5: command 0x040f tx timeout [ 644.643992][ T4372] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 644.653487][ T4372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.746461][ T8961] team0: Port device team_slave_0 added [ 644.763640][ T4372] usb 2-1: Product: syz [ 644.792557][ T8961] team0: Port device team_slave_1 added [ 644.800021][ T4372] usb 2-1: Manufacturer: syz [ 644.871622][ T4372] usb 2-1: config 0 descriptor?? [ 644.927450][ T4372] usb 2-1: can't set config #0, error -71 [ 645.078226][ T4372] usb 2-1: USB disconnect, device number 18 [ 645.424751][ T9049] syz.1.1141[9049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 645.424962][ T9049] syz.1.1141[9049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 645.466343][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.644290][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.743971][ T8961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.760725][ T9058] input: syz0 as /devices/virtual/input/input30 [ 645.785855][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.792831][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.820887][ T8961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.634194][ T4215] Bluetooth: hci5: command 0x0419 tx timeout [ 647.328953][ T7] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 647.625597][ T8961] device hsr_slave_0 entered promiscuous mode [ 647.676450][ T8961] device hsr_slave_1 entered promiscuous mode [ 647.734905][ T8961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.865412][ T8961] Cannot create hsr debugfs directory [ 647.934119][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.970912][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 648.008427][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 648.041259][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 648.349116][ T4545] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.365665][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 648.433212][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 648.442108][ T7] usb 2-1: SerialNumber: syz [ 649.104520][ T9071] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.111849][ T9071] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.135156][ T7] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 649.252364][ T4545] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.313724][ T4545] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.152718][ T4545] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.059096][ T7] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 651.566325][ T8961] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 651.574209][ T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 651.641710][ T8961] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 651.690878][ T8961] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 651.771461][ T8961] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 651.794123][ T7] usb 2-1: USB disconnect, device number 19 [ 651.819550][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 651.954242][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.995453][ T21] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 652.344283][ T21] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 652.353379][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.404567][ T21] usb 3-1: Product: syz [ 652.408823][ T21] usb 3-1: Manufacturer: syz [ 652.413441][ T21] usb 3-1: SerialNumber: syz [ 652.432462][ T8961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.449412][ T21] usb 3-1: config 0 descriptor?? [ 652.519555][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.540782][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.578158][ T8961] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.608347][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.622479][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.652917][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.660226][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.704276][ T4372] usb 3-1: USB disconnect, device number 11 [ 652.765056][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.781369][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.802053][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.813533][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.820683][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.836912][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.852743][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 653.045838][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 653.076189][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 653.108111][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.265694][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.435617][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 653.610315][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 653.786331][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 653.911613][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 653.934822][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 654.154506][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 656.339332][ T9180] IPVS: length: 4096 != 17667290688 [ 656.423976][ T2283] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 656.663292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.684455][ T5631] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 656.697284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.724668][ T2283] usb 3-1: Using ep0 maxpacket: 8 [ 656.981518][ T8961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.004546][ T5631] usb 2-1: Using ep0 maxpacket: 32 [ 657.478788][ T2283] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 657.534308][ T5631] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 657.593494][ T2283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.605853][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.668533][ T26] audit: type=1326 audit(2000000012.990:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9185 comm="syz.5.1166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eea3c3969 code=0x0 [ 657.734869][ T2283] usb 3-1: Product: syz [ 657.832127][ T5631] usb 2-1: config 0 descriptor?? [ 657.839574][ T2283] usb 3-1: Manufacturer: syz [ 657.962887][ T2283] usb 3-1: SerialNumber: syz [ 658.803486][ T9201] xt_l2tp: invalid flags combination: 8 [ 659.425011][ T2283] usb 3-1: config 0 descriptor?? [ 659.454040][ T2283] usb 3-1: can't set config #0, error -71 [ 659.460039][ T5631] usb 2-1: can't set config #0, error -71 [ 659.567703][ T2283] usb 3-1: USB disconnect, device number 12 [ 659.575398][ T5631] usb 2-1: USB disconnect, device number 20 [ 659.872870][ T9212] vivid-001: kernel_thread() failed [ 659.931543][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1172'. [ 662.493124][ T5631] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 663.544070][ T26] audit: type=1326 audit(2000000018.870:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.8.1180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96fe674969 code=0x0 [ 663.677511][ T9246] IPVS: length: 4096 != 17667290688 [ 663.747249][ T4545] device hsr_slave_0 left promiscuous mode [ 663.763947][ T4545] device hsr_slave_1 left promiscuous mode [ 663.774768][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.797769][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.815073][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.843126][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.965378][ T2283] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 663.974954][ T4545] device bridge_slave_1 left promiscuous mode [ 663.986366][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.023253][ T4545] device bridge_slave_0 left promiscuous mode [ 664.244171][ T5631] usb 2-1: Using ep0 maxpacket: 8 [ 664.244760][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.345112][ T2283] usb 6-1: Using ep0 maxpacket: 8 [ 664.424282][ T5631] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 664.436485][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.536312][ T5631] usb 2-1: config 0 descriptor?? [ 664.551487][ T4545] device veth1_macvtap left promiscuous mode [ 664.557754][ T4545] device veth0_macvtap left promiscuous mode [ 664.565184][ T4545] device veth1_vlan left promiscuous mode [ 664.571127][ T4545] device veth0_vlan left promiscuous mode [ 664.579659][ T5631] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 664.715485][ T2283] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 664.727250][ T2283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.737112][ T2283] usb 6-1: Product: syz [ 664.741777][ T2283] usb 6-1: Manufacturer: syz [ 664.747355][ T2283] usb 6-1: SerialNumber: syz [ 664.760031][ T2283] usb 6-1: config 0 descriptor?? [ 665.164197][ T2283] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 665.185841][ T4545] team0 (unregistering): Port device team_slave_1 removed [ 665.201638][ T4545] team0 (unregistering): Port device team_slave_0 removed [ 665.217680][ T4545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.233041][ T4545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.311782][ T4545] bond0 (unregistering): Released all slaves [ 665.364519][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 665.375397][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 665.534648][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 665.602318][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 665.871697][ T9283] vivid-001: kernel_thread() failed [ 666.033964][ T5631] gspca_nw80x: reg_w err -71 [ 666.038616][ T5631] nw80x: probe of 2-1:0.0 failed with error -71 [ 667.055910][ T5631] usb 2-1: USB disconnect, device number 21 [ 667.101110][ T8961] device veth0_vlan entered promiscuous mode [ 667.120599][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.225517][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.269882][ T2283] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 667.288603][ T8961] device veth1_vlan entered promiscuous mode [ 667.297695][ T2283] dvbdev: DVB: registering new adapter (Terratec H7) [ 667.441270][ T2283] usb 6-1: media controller created [ 667.494655][ T2283] usb read operation failed. (-71) [ 668.244668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.250934][ T2283] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 668.253484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.286356][ T8961] device veth0_macvtap entered promiscuous mode [ 668.301159][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1188'. [ 668.377005][ T2283] usb 6-1: USB disconnect, device number 11 [ 668.403443][ T8961] device veth1_macvtap entered promiscuous mode [ 668.433262][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.590967][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.602068][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.612982][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.632230][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.744216][ T4216] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 669.784721][ T26] audit: type=1326 audit(2000000025.120:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9313 comm="syz.5.1191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eea3c3969 code=0x0 [ 669.814084][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.825299][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.836080][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.963981][ T8961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.987138][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.002543][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.013694][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.044829][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.094075][ T4216] usb 3-1: Using ep0 maxpacket: 8 [ 670.118039][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.284286][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.305110][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.427561][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.455223][ T8961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.475405][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 670.504234][ T4216] usb 3-1: unable to read config index 0 descriptor/all [ 670.505186][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 670.511240][ T4216] usb 3-1: can't read configurations, error -71 [ 670.569181][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.701036][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.897983][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 671.157702][ T8961] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.285312][ T8961] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.419120][ T9334] IPVS: length: 4096 != 17667290688 [ 671.451857][ T8961] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.460755][ T8961] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.336138][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1199'. [ 676.570258][ T5631] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 676.934298][ T5631] usb 3-1: Using ep0 maxpacket: 8 [ 677.145700][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.229115][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.244458][ T5631] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 677.313114][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.247123][ T5631] usb 3-1: Product: syz [ 678.288001][ T5631] usb 3-1: Manufacturer: syz [ 678.410074][ T5631] usb 3-1: SerialNumber: syz [ 678.555259][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 678.693470][ T5631] usb 3-1: config 0 descriptor?? [ 678.843560][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.124956][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.341307][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 679.391731][ T26] audit: type=1326 audit(2000000034.720:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.1.1204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31de60969 code=0x0 [ 679.453999][ T4216] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 679.573664][ T9392] xt_l2tp: invalid flags combination: 8 [ 679.594400][ T5631] usb read operation failed. (-71) [ 680.094236][ T5631] usb write operation failed. (-71) [ 680.134139][ T5631] usb write operation failed. (-71) [ 680.174328][ T5631] usb write operation failed. (-71) [ 680.180427][ T5631] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 680.189171][ T5631] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 680.199333][ T5631] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 680.325039][ T4216] usb 6-1: Using ep0 maxpacket: 8 [ 680.803084][ T264] block nbd9: Attempted send on invalid socket [ 680.809452][ T264] blk_update_request: I/O error, dev nbd9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.822247][ T264] block nbd9: Attempted send on invalid socket [ 680.828497][ T264] blk_update_request: I/O error, dev nbd9, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.841803][ T9401] Mount JFS Failure: -5 [ 680.846437][ T4216] usb 6-1: device descriptor read/all, error -71 [ 680.898378][ T9401] jfs_mount failed w/return code = -5 [ 681.167643][ T9410] vivid-002: kernel_thread() failed [ 682.396201][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1212'. [ 684.003907][ T4216] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 685.727712][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.144162][ T23] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 686.424455][ T23] usb 9-1: Using ep0 maxpacket: 8 [ 686.715290][ T23] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 686.892225][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.113289][ T23] usb 9-1: Product: syz [ 687.196694][ T23] usb 9-1: Manufacturer: syz [ 687.277405][ T23] usb 9-1: SerialNumber: syz [ 687.374693][ T9453] udc-core: couldn't find an available UDC or it's busy [ 687.381813][ T9453] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 687.428512][ T23] usb 9-1: config 0 descriptor?? [ 687.543162][ T9458] xt_l2tp: invalid flags combination: 8 [ 688.353981][ T23] usb read operation failed. (-71) [ 688.376781][ T23] usb write operation failed. (-71) [ 688.493932][ T26] audit: type=1326 audit(2000000043.770:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.1.1220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31de60969 code=0x0 [ 688.575242][ T23] usb write operation failed. (-71) [ 688.599832][ T23] usb write operation failed. (-71) [ 688.623870][ T23] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 691.536128][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1226'. [ 693.643761][ T9521] xt_l2tp: invalid flags combination: 8 [ 694.663907][ T26] audit: type=1326 audit(2000000005.080:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.8.1234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96fe674969 code=0x0 [ 697.773898][ T4185] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 698.141914][ T9546] vivid-004: kernel_thread() failed [ 698.353953][ T4185] usb 10-1: Using ep0 maxpacket: 8 [ 698.389440][ T150] block nbd5: Attempted send on invalid socket [ 698.395869][ T150] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 698.442474][ T150] block nbd5: Attempted send on invalid socket [ 698.448910][ T150] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 698.460175][ T9551] Mount JFS Failure: -5 [ 698.464532][ T9551] jfs_mount failed w/return code = -5 [ 698.774050][ T4185] usb 10-1: device descriptor read/all, error -71 [ 698.882766][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1239'. [ 702.760370][ T9584] xt_l2tp: invalid flags combination: 8 [ 707.344182][ T4214] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 707.614114][ T4214] usb 10-1: Using ep0 maxpacket: 8 [ 707.898682][ T4214] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 707.930899][ T4214] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.082374][ T4214] usb 10-1: Product: syz [ 708.102002][ T4214] usb 10-1: Manufacturer: syz [ 708.107323][ T4214] usb 10-1: SerialNumber: syz [ 708.188854][ T4214] usb 10-1: config 0 descriptor?? [ 708.489785][ T4214] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 708.748756][ T150] block nbd8: Attempted send on invalid socket [ 708.757717][ T150] blk_update_request: I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.772724][ T150] block nbd8: Attempted send on invalid socket [ 708.779507][ T150] blk_update_request: I/O error, dev nbd8, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.792070][ T9614] Mount JFS Failure: -5 [ 708.796420][ T9614] jfs_mount failed w/return code = -5 [ 709.015834][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1252'. [ 710.264185][ T4214] usb write operation failed. (-71) [ 710.286612][ T4214] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 712.769057][ T4214] dvbdev: DVB: registering new adapter (Terratec H7) [ 712.776920][ T4214] usb 10-1: media controller created [ 712.794151][ T4214] usb read operation failed. (-71) [ 712.804625][ T4372] Bluetooth: hci1: command 0x0409 tx timeout [ 712.823933][ T4214] usb write operation failed. (-71) [ 712.854441][ T4214] dvb_usb_az6007: probe of 10-1:0.0 failed with error -5 [ 712.866223][ T4214] usb 10-1: USB disconnect, device number 4 [ 713.404117][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 713.723544][ T26] audit: type=1326 audit(2000000024.150:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.1260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eea3c3969 code=0x0 [ 714.115796][ T9621] chnl_net:caif_netlink_parms(): no params data found [ 714.428683][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.461763][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.508256][ T9621] device bridge_slave_0 entered promiscuous mode [ 714.576362][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.598894][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.666536][ T9621] device bridge_slave_1 entered promiscuous mode [ 714.804390][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.841739][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.851604][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 714.955559][ T9621] team0: Port device team_slave_0 added [ 714.996080][ T9621] team0: Port device team_slave_1 added [ 715.117343][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.139743][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.191087][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.234948][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.242026][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.274954][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.433098][ T9621] device hsr_slave_0 entered promiscuous mode [ 715.457934][ T9621] device hsr_slave_1 entered promiscuous mode [ 715.476890][ T9621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.492507][ T9621] Cannot create hsr debugfs directory [ 715.627616][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1263'. [ 717.231007][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 717.494821][ T264] block nbd2: Attempted send on invalid socket [ 717.501142][ T264] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 717.513990][ T264] block nbd2: Attempted send on invalid socket [ 717.520226][ T264] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 717.531661][ T9706] Mount JFS Failure: -5 [ 717.535990][ T9706] jfs_mount failed w/return code = -5 [ 719.913664][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 720.411836][ T26] audit: type=1326 audit(2000000000.250:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.8.1273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96fe674969 code=0x0 [ 720.473110][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1274'. [ 721.497243][ T9621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 721.549429][ T9621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 721.601808][ T9621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 721.636367][ T9621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 722.004201][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.068994][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.095643][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.170539][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.200904][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.228831][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.265853][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.272976][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.350769][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 722.404648][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.436773][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 722.454376][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.461510][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.478738][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.494987][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 722.652610][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 722.676059][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 722.699491][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 723.946553][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 724.016289][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 724.263292][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.308308][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.533962][ T1325] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 724.607841][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.616630][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 725.105667][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 725.407749][ T9787] xt_l2tp: invalid flags combination: 8 [ 726.284350][ T1325] usb 10-1: Using ep0 maxpacket: 32 [ 726.414010][ T1325] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 727.953583][ T1325] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.972463][ T1325] usb 10-1: config 0 descriptor?? [ 728.144151][ T1325] usb 10-1: can't set config #0, error -71 [ 728.311672][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'. [ 728.458566][ T1325] usb 10-1: USB disconnect, device number 5 [ 728.594798][ T26] audit: type=1326 audit(2000000000.120:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9808 comm="syz.9.1287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41b337f969 code=0x0 [ 729.580407][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 729.594579][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 729.627224][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.850283][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 729.949180][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 730.094979][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 730.122201][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 730.180351][ T9621] device veth0_vlan entered promiscuous mode [ 730.202111][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 730.228128][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 730.306367][ T9621] device veth1_vlan entered promiscuous mode [ 730.583468][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 730.601900][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 730.734064][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 730.759583][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.804720][ T9621] device veth0_macvtap entered promiscuous mode [ 731.042999][ T9621] device veth1_macvtap entered promiscuous mode [ 731.700963][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.808257][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.819275][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.830951][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.841261][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.852094][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.862148][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.872611][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.882481][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.904284][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.938684][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.042660][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 732.749620][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 732.952886][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 732.984599][ T264] block nbd5: Attempted send on invalid socket [ 732.990923][ T264] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 733.003989][ T264] block nbd5: Attempted send on invalid socket [ 733.010358][ T264] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 733.022018][ T9841] Mount JFS Failure: -5 [ 733.026798][ T9841] jfs_mount failed w/return code = -5 [ 733.172023][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.242889][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.252910][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.263588][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.273513][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.284210][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.294404][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.305321][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.352603][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.870798][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.039297][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.071088][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 735.092104][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 735.228478][ T9621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.259395][ T9621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.269519][ T9621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.283549][ T9621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.297234][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1298'. [ 735.659589][ T26] audit: type=1326 audit(2000000007.180:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.9.1300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41b337f969 code=0x0 [ 736.307497][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.364375][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.556993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 737.339284][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.371178][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.640417][ T9880] xt_l2tp: invalid flags combination: 8 [ 738.446894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 739.812044][ T264] block nbd8: Attempted send on invalid socket [ 739.818472][ T264] blk_update_request: I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 739.830961][ T264] block nbd8: Attempted send on invalid socket [ 739.837296][ T264] blk_update_request: I/O error, dev nbd8, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 739.848679][ T9889] Mount JFS Failure: -5 [ 739.852905][ T9889] jfs_mount failed w/return code = -5 [ 741.077934][ T9900] vivid-001: kernel_thread() failed [ 742.195552][ T23] usb 9-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 742.196229][ T5631] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 742.212467][ T23] dvb_usb_az6007: probe of 9-1:0.0 failed with error -2 [ 742.225097][ T23] usb 9-1: USB disconnect, device number 2 [ 742.333679][ T26] audit: type=1326 audit(2000000000.460:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96fe674969 code=0x0 [ 742.688631][ T5631] dvb_usb_az6007: probe of 3-1:0.0 failed with error -110 [ 742.710052][ T9915] IPVS: length: 4096 != 17667290688 [ 743.900925][ T5631] usb 3-1: USB disconnect, device number 15 [ 746.223892][ T23] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 746.513951][ T23] usb 10-1: Using ep0 maxpacket: 8 [ 747.065790][ T9949] xt_l2tp: invalid flags combination: 8 [ 747.151246][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.168014][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.177454][ T23] usb 10-1: device descriptor read/all, error -71 [ 747.740143][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.183884][ T23] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 750.261951][ T150] block nbd8: Attempted send on invalid socket [ 750.268925][ T150] blk_update_request: I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.281258][ T150] block nbd8: Attempted send on invalid socket [ 750.287664][ T150] blk_update_request: I/O error, dev nbd8, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.299396][ T9964] Mount JFS Failure: -5 [ 750.303576][ T9964] jfs_mount failed w/return code = -5 [ 750.720680][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.941165][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.975100][ T9989] IPVS: length: 4096 != 17667290688 [ 752.471061][T10015] xt_l2tp: invalid flags combination: 8 [ 753.015974][ T9726] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 753.376443][ T26] audit: type=1326 audit(2000000003.450:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.9.1335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41b337f969 code=0x0 [ 753.605140][ T9726] usb 4-1: Using ep0 maxpacket: 8 [ 753.815505][ T9726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.836027][ T9726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 754.548428][ T9726] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 754.557837][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.566242][ T9726] usb 4-1: Product: syz [ 754.570508][ T9726] usb 4-1: Manufacturer: syz [ 754.575478][ T9726] usb 4-1: SerialNumber: syz [ 754.582609][ T9726] usb 4-1: config 0 descriptor?? [ 755.319214][ T150] block nbd2: Attempted send on invalid socket [ 755.327607][ T150] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 755.342773][ T150] block nbd2: Attempted send on invalid socket [ 755.352045][ T150] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 755.366274][T10044] Mount JFS Failure: -5 [ 755.372511][T10044] jfs_mount failed w/return code = -5 [ 756.980751][T10054] vivid-001: kernel_thread() failed [ 758.879760][ T1108] usb 4-1: USB disconnect, device number 7 [ 759.265494][T10062] IPVS: length: 4096 != 17667290688 [ 759.553572][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 759.657660][ T26] audit: type=1326 audit(2000000005.010:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10077 comm="syz.2.1347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47db2a9969 code=0x0 [ 760.057899][ T155] device hsr_slave_0 left promiscuous mode [ 760.084001][ T155] device hsr_slave_1 left promiscuous mode [ 760.240064][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.255220][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.316553][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.344294][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.365153][ T155] device bridge_slave_1 left promiscuous mode [ 760.394376][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.495854][ T155] device bridge_slave_0 left promiscuous mode [ 760.512939][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.530505][ T155] device veth1_macvtap left promiscuous mode [ 761.638626][ T155] device veth0_macvtap left promiscuous mode [ 761.666484][ T155] device veth1_vlan left promiscuous mode [ 761.733592][ T155] device veth0_vlan left promiscuous mode [ 762.956851][ T150] block nbd2: Attempted send on invalid socket [ 762.963519][ T150] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.975592][ T150] block nbd2: Attempted send on invalid socket [ 762.982098][ T150] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.993883][T10112] Mount JFS Failure: -5 [ 762.998230][T10112] jfs_mount failed w/return code = -5 [ 763.763057][ T155] team0 (unregistering): Port device team_slave_1 removed [ 763.770906][ T9726] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 763.800182][ T155] team0 (unregistering): Port device team_slave_0 removed [ 763.821322][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.851577][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.243446][ T155] bond0 (unregistering): Released all slaves [ 764.563986][ T9726] usb 3-1: Using ep0 maxpacket: 8 [ 765.483934][ T9726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.209140][ T9726] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 766.378845][ T9726] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 766.403885][ T9726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.440901][ T9726] usb 3-1: Product: syz [ 766.491432][ T9726] usb 3-1: Manufacturer: syz [ 766.513117][ T9726] usb 3-1: SerialNumber: syz [ 766.522837][T10129] IPVS: length: 4096 != 17667290688 [ 766.756141][ T9726] usb 3-1: config 0 descriptor?? [ 766.784047][ T9726] usb 3-1: can't set config #0, error -71 [ 766.794885][ T26] audit: type=1326 audit(2000000004.220:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.2.1360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47db2a9969 code=0x0 [ 766.800517][ T9726] usb 3-1: USB disconnect, device number 17 [ 766.957368][ T4227] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 767.654019][ T4227] usb 6-1: device descriptor read/64, error -71 [ 873.023731][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 873.030872][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P144/1:b..l [ 873.039260][ C0] (detected by 0, t=10502 jiffies, g=45365, q=154) [ 873.045872][ C0] task:kworker/u4:1 state:R running task stack:22752 pid: 144 ppid: 2 flags:0x00004000 [ 873.057877][ C0] Workqueue: bat_events batadv_nc_worker [ 873.063555][ C0] Call Trace: [ 873.066845][ C0] [ 873.069796][ C0] __schedule+0x11b8/0x43b0 [ 873.074350][ C0] ? mark_lock+0x94/0x320 [ 873.078715][ C0] ? mark_lock+0x94/0x320 [ 873.083074][ C0] ? release_firmware_map_entry+0x190/0x190 [ 873.088995][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 873.094312][ C0] preempt_schedule_irq+0xb1/0x150 [ 873.099447][ C0] ? __cond_resched+0xb0/0xb0 [ 873.104159][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 873.109988][ C0] irqentry_exit+0x63/0x70 [ 873.114427][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 873.119920][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 873.125370][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 873.145127][ C0] RSP: 0018:ffffc9000125faa0 EFLAGS: 00000206 [ 873.151229][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c942e06d1bf84a00 [ 873.159220][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2260 RDI: ffffffff8a59a2c0 [ 873.167213][ C0] RBP: ffffc9000125fbc0 R08: dffffc0000000000 R09: fffffbfff1ff3419 [ 873.175220][ C0] R10: fffffbfff1ff3419 R11: 1ffffffff1ff3418 R12: ffffffff8c11bea0 [ 873.183221][ C0] R13: 1ffff9200024bf60 R14: 0000000000000246 R15: dffffc0000000000 [ 873.191278][ C0] ? rcu_lock_release+0x5/0x20 [ 873.196076][ C0] ? read_lock_is_recursive+0x10/0x10 [ 873.201478][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 873.206598][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 873.212628][ C0] rcu_lock_acquire+0x2a/0x30 [ 873.217335][ C0] ? rcu_lock_acquire+0x5/0x30 [ 873.222116][ C0] batadv_nc_worker+0xc9/0x5c0 [ 873.226997][ C0] process_one_work+0x863/0x1000 [ 873.232128][ C0] ? worker_detach_from_pool+0x240/0x240 [ 873.237791][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 873.243111][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 873.248162][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 873.253564][ C0] ? wq_worker_running+0x97/0x170 [ 873.258614][ C0] worker_thread+0xaa8/0x12a0 [ 873.263347][ C0] kthread+0x436/0x520 [ 873.267443][ C0] ? rcu_lock_release+0x20/0x20 [ 873.272318][ C0] ? kthread_blkcg+0xd0/0xd0 [ 873.276930][ C0] ret_from_fork+0x1f/0x30 [ 873.281380][ C0] [ 873.284411][ C0] rcu: rcu_preempt kthread starved for 10528 jiffies! g45365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 873.295630][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 873.305612][ C0] rcu: RCU grace-period kthread stack dump: [ 873.311509][ C0] task:rcu_preempt state:R running task stack:27008 pid: 15 ppid: 2 flags:0x00004000 [ 873.322317][ C0] Call Trace: [ 873.325627][ C0] [ 873.328576][ C0] __schedule+0x11b8/0x43b0 [ 873.333114][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 873.338523][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 873.344453][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 873.350373][ C0] ? _raw_spin_unlock+0x40/0x40 [ 873.355251][ C0] ? rcu_is_watching+0x11/0xa0 [ 873.360033][ C0] ? release_firmware_map_entry+0x190/0x190 [ 873.365962][ C0] schedule+0x11b/0x1e0 [ 873.370139][ C0] schedule_timeout+0x15c/0x280 [ 873.375038][ C0] ? console_conditional_schedule+0x40/0x40 [ 873.380953][ C0] ? update_process_times+0x200/0x200 [ 873.386354][ C0] ? prepare_to_swait_event+0x331/0x350 [ 873.391930][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 873.396914][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 873.402150][ C0] ? rcu_gp_init+0xd58/0x10e0 [ 873.406857][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 873.411651][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 873.416873][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 873.422101][ C0] rcu_gp_kthread+0x98/0x350 [ 873.426713][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 873.431849][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 873.437766][ C0] ? __kthread_parkme+0x157/0x1b0 [ 873.442816][ C0] kthread+0x436/0x520 [ 873.446900][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 873.452031][ C0] ? kthread_blkcg+0xd0/0xd0 [ 873.456654][ C0] ret_from_fork+0x1f/0x30 [ 873.461106][ C0] [ 873.464138][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 873.470483][ C0] NMI backtrace for cpu 0 [ 873.474829][ C0] CPU: 0 PID: 10160 Comm: syz.8.1362 Not tainted 5.15.182-syzkaller #0 [ 873.483089][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 873.493161][ C0] Call Trace: [ 873.496463][ C0] [ 873.499323][ C0] dump_stack_lvl+0x168/0x230 [ 873.504028][ C0] ? show_regs_print_info+0x20/0x20 [ 873.509246][ C0] ? load_image+0x3b0/0x3b0 [ 873.513768][ C0] ? irq_work_queue+0xbf/0x140 [ 873.518562][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 873.523526][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 873.529711][ C0] ? _printk+0xcc/0x110 [ 873.533891][ C0] ? cpu_online+0x1d/0x30 [ 873.538242][ C0] ? load_image+0x3b0/0x3b0 [ 873.542773][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 873.549000][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 873.555020][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 873.561219][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 873.566720][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 873.571797][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 873.577132][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 873.582383][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 873.587269][ C0] ? account_process_tick+0x227/0x3a0 [ 873.592676][ C0] update_process_times+0x193/0x200 [ 873.597909][ C0] tick_sched_timer+0x37d/0x560 [ 873.602797][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 873.608036][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 873.613634][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 873.618778][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 873.624882][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 873.629879][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 873.635897][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 873.641644][ C0] [ 873.644596][ C0] [ 873.647707][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 873.653713][ C0] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90 [ 873.659725][ C0] Code: c0 48 8b 3c 24 e8 dd d2 69 00 eb b5 66 2e 0f 1f 84 00 00 00 00 00 90 41 57 41 56 53 eb 11 e8 04 2d 57 08 e8 af 7d 2a 00 fb 5b <41> 5e 41 5f c3 49 be 00 00 00 00 00 fc ff df 49 89 ff 48 8d 9f 58 [ 873.679349][ C0] RSP: 0018:ffffc9000342f848 EFLAGS: 00000286 [ 873.685449][ C0] RAX: 642c3f3f2f397c00 RBX: ffff8880b903a300 RCX: 642c3f3f2f397c00 [ 873.693446][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b0fc0 RDI: ffffffff8a59a2c0 [ 873.701442][ C0] RBP: ffffc9000342fa40 R08: dffffc0000000000 R09: ffffed1017207461 [ 873.709435][ C0] R10: ffffed1017207461 R11: 1ffff11017207460 R12: 1ffff110172075a3 [ 873.717428][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880b903b048 [ 873.725438][ C0] __schedule+0x1461/0x43b0 [ 873.729997][ C0] ? release_firmware_map_entry+0x190/0x190 [ 873.735920][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 873.740976][ C0] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 873.747419][ C0] ? plist_add+0x3d4/0x480 [ 873.751872][ C0] schedule+0x11b/0x1e0 [ 873.756051][ C0] futex_wait_queue_me+0x22d/0x440 [ 873.761190][ C0] futex_wait+0x202/0x5c0 [ 873.765546][ C0] ? do_futex+0x1240/0x1240 [ 873.770073][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 873.776081][ C0] ? rcu_is_watching+0x11/0xa0 [ 873.780884][ C0] do_futex+0xd1c/0x1240 [ 873.785156][ C0] ? rcu_lock_release+0x5/0x20 [ 873.789942][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 873.794991][ C0] ? futex_exit_release+0x1c0/0x1c0 [ 873.800211][ C0] ? __context_tracking_exit+0x4c/0x80 [ 873.805699][ C0] __se_sys_futex+0x3a3/0x430 [ 873.810399][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 873.815285][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 873.820073][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 873.824863][ C0] do_syscall_64+0x4c/0xa0 [ 873.829426][ C0] ? clear_bhb_loop+0x15/0x70 [ 873.834144][ C0] ? clear_bhb_loop+0x15/0x70 [ 873.838847][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 873.844768][ C0] RIP: 0033:0x7f96fe674969 [ 873.849207][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.868944][ C0] RSP: 002b:00007f96fc4bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 873.877399][ C0] RAX: ffffffffffffffda RBX: 00007f96fe89c088 RCX: 00007f96fe674969 [ 873.885401][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f96fe89c088 [ 873.893391][ C0] RBP: 00007f96fe89c080 R08: 0000000000000000 R09: 0000000000000000 [ 873.901384][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96fe89c08c [ 873.909392][ C0] R13: 0000000000000000 R14: 00007ffc7e6892b0 R15: 00007ffc7e689398 [ 873.917431][ C0]