last executing test programs: 29m12.252032804s ago: executing program 32 (id=18): pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000001c0), 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) 27m15.123567419s ago: executing program 33 (id=149): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = memfd_create(&(0x7f0000001380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x81, 0x537, 0x7fffffff, 0xa1, 0x1f, "c644c0000000000000144800"}) syz_socket_connect_nvme_tcp() dup(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0c406, &(0x7f0000000b80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f47303038302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRESOCT=0x0], 0x1, 0x2a2, &(0x7f0000001140)="$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") write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b3250098b089b3b08381a090890e0878f0e1ac6e7049b334b959b5d9a241b5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffedd}}, 0x1006) 26m28.852964119s ago: executing program 34 (id=196): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000340)='net/netfilter\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 23m59.436067798s ago: executing program 35 (id=306): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000001cdc0200b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0xa, 0xffff, 0x8c31, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "64000000000000000100"}}}}}}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f00000000c0)={0xfffffffffffffffe}) 21m56.749403169s ago: executing program 36 (id=478): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close(0xffffffffffffffff) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r4, &(0x7f0000000000), 0x0, 0x5, 0x3ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002600010000000000000000000800", @ANYRESHEX], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000001000030500"/18, @ANYBLOB="08000100", @ANYBLOB="a0177acee13a27814117d5c8d227add23f760a31dbf3a8b55ec167f00ba61ec4834733bb18b9733897ff4c311f9c78367885dae619857274d0143600254295573c9b8538907c72dc1d88530e565da72ceeef1f812220b04a522bc9355919863ccafade3b76327b3dafc0c1173b5cf9ce9a9031516abad4989ce0817db9e40dc9d3ee3ecca59cfe78731715effbe5119415000ff9d6845dcfe3db5eeaf4e7940ffe8d89e4fecad74d5d395865146e23"], 0x90}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x20, 0x5, 0x7, 0x1d, @private0, @loopback={0xfec0ffff00000000, 0x2}, 0x8000, 0x8, 0x3, 0x13}}) 21m19.465024495s ago: executing program 37 (id=510): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000090a805406708129885400000000109022c0001000000"], 0x0) 21m4.08732971s ago: executing program 38 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x4c}}, 0x0) io_setup(0x0, &(0x7f0000000280)=0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='7', 0x1, 0x4}]) openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) socket(0x10, 0x2, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000040)={r7}) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 11m58.142774581s ago: executing program 9 (id=2512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 11m57.680825602s ago: executing program 9 (id=2515): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00", 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 11m57.164924545s ago: executing program 9 (id=2518): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xc2, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000480), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000001080)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r1, @ANYBLOB="690b450ab565d1a6cd53b908d15f416f7d6b013668ba7d32617422a371c38124b500de406e49d9b239efca6de46c27443dcb3d733af15f8d5dbfcb5826e7854569e1a28092acd5bb43277e39d986b9c8f4d5f6a6aeac6ab5f74ed4e61fd86c1fb3ce10eef1836d532f4fcaa8bd48cf48938f03ef09d7f5ad92abfa55f533673909eb4cb61d1c0a61c5e10693f18558827a32cec087e5d0800253eba6d2177a0c18edbccdc0a177a23ff8f3be118eb35296315b0580bb1fa22c8ffa70549cc1f3b286a60cc188e0fa26b30386715f7f79eb7c84961d", @ANYRES16=r0], &(0x7f0000000400)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x1, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000011c0)='rpcb_unregister\x00', r2, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x237, &(0x7f0000000fc0)={0x0, 0x80fd, 0x10, 0x5, 0x2cc}, &(0x7f0000000380)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x4}) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x0) 11m56.129898038s ago: executing program 9 (id=2526): ioperm(0x5, 0x9, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) fdatasync(r0) 11m55.355272959s ago: executing program 9 (id=2528): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00"/27, 0x1b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 11m52.368863967s ago: executing program 9 (id=2531): prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/40) syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast=0xffff0038}, 0x10, 0x0}}], 0x68000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 11m36.788835505s ago: executing program 39 (id=2531): prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/40) syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast=0xffff0038}, 0x10, 0x0}}], 0x68000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 9m27.762919111s ago: executing program 4 (id=3044): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000300)={0xed, 0x2}, &(0x7f0000000340)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='4\x00'/12, @ANYBLOB="cd15f5c66e1ef327ead425d0fcc1a0dd41b184bf14cc5a9c4233507575ba8d9c37a4444ae3aebfa28c97b97a95610c0770f5f7", @ANYRES64], 0x20) r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x400003, 0x4, 0x7) lseek(r3, 0xe, 0x3) r4 = dup2(r2, r2) preadv(r1, 0x0, 0x0, 0x6, 0x0) bind$tipc(r4, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x3}}, 0x10) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r6) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, r7, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000640)="13d8fa01a6a14532081d4d4e26844c993ed62a895f435fd3c4f4cb3dce89a270", 0x20}], 0x1, 0x10000012, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe) 9m27.168035073s ago: executing program 4 (id=3047): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x25a5, 0x0) 9m26.778917079s ago: executing program 4 (id=3051): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socket$nl_netfilter(0x10, 0x3, 0xc) 9m25.585264248s ago: executing program 0 (id=3057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0x80000001, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206210800000000000000000000000014000780080011400000000105001500fe0000000500010006000000050005000a00000005000400000000000900020073797a30000000000900020073797a3200000000fe6d962f180f04f54867d0"], 0x58}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'caif0\x00', 0x401}) socket$packet(0x11, 0xa, 0x300) socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f00000000c0)={'vlan0\x00', 0x40}) 9m25.138807391s ago: executing program 0 (id=3061): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x25a5, 0x0) 9m24.318888545s ago: executing program 4 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 9m24.318437249s ago: executing program 0 (id=3065): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x7, 0x7218, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x5, 0x300, 0x175, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0) 9m23.943822054s ago: executing program 0 (id=3069): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x0, 0xb03, 0x3, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x4}]}]}, 0x20}}, 0x0) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000012c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001280), 0x13f}}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x4}]}]}]}, 0xa4}}, 0x0) r6 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000000)={{0x2, 0x67067eee6d38f69e, 0xea76, 0x2, '\x00', 0x241}, 0x0, [0x8, 0x1, 0x4, 0x4, 0x800, 0x8, 0x101, 0xb, 0x401, 0x401, 0x3, 0x7fffffffffffffff, 0xc0f, 0x4, 0xffffffffffffff80, 0x9, 0x3, 0x800, 0x5, 0x8000, 0x0, 0x800, 0x5, 0x9, 0x3, 0x0, 0xfffffffffffffffe, 0x2, 0xc, 0x7fff, 0x3, 0x10, 0x3, 0x7, 0x3, 0x2f, 0xffff, 0x4349, 0x44, 0x2, 0x8, 0x2, 0x1000, 0x5, 0x101, 0x6, 0x6, 0x372, 0x9, 0x80000000, 0x91e0, 0x1, 0x9, 0x2, 0x0, 0x5, 0x7, 0x0, 0x5, 0x3, 0x1000, 0x1, 0x47, 0x7ce, 0x6, 0x2, 0x6, 0x8, 0x100000001, 0x5, 0x6, 0x3, 0x8, 0xe1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x2, 0xa339, 0x5, 0x8, 0x8, 0x3, 0x6, 0x800, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x1e, 0x3, 0x6, 0x401, 0x4, 0x7, 0x7fffffff, 0x5, 0x1, 0x8, 0x1, 0x8000, 0x3, 0x8, 0xe8c, 0x400, 0x9, 0x58, 0x4, 0xff, 0x8, 0x3, 0x400, 0x7, 0x9, 0x0, 0x9, 0x7, 0x7, 0x5559, 0x269d, 0x4, 0x6, 0x8000000000000000, 0x0, 0x7, 0x9, 0x8]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r9}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000000)={r12, 0x5}, &(0x7f0000000040)=0x8) r13 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r13, 0x2004, 0x0) 9m23.165783543s ago: executing program 4 (id=3072): io_uring_setup(0x38eb, &(0x7f0000000300)={0x0, 0x342a, 0x40, 0x0, 0x3d7}) syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 9m21.97463196s ago: executing program 4 (id=3073): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m18.579106472s ago: executing program 0 (id=3079): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x40004) 9m17.866595244s ago: executing program 0 (id=3082): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9m6.564273457s ago: executing program 40 (id=3073): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m2.233939964s ago: executing program 41 (id=3082): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8m47.948369111s ago: executing program 1 (id=3138): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0xd1) recvmsg$kcm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/144, 0x90}], 0x1}, 0x40) 8m47.251447256s ago: executing program 1 (id=3141): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000004c0)="d25a9850a9726be16838807cc61ed582f1e1dd983ba54758342b615d7a36ce462db6495d16c821c4411a9e15dd606b2812942db68742157ec9a6e00e05899749e9a3fe062f9be4f34fe28714e5d851233444ea11f8a5bb5b5eef3a64d54971d00d1b5842e1879d4c57fe4bf5a2b3fcd76c2ae622b9755a56605a", 0x7a, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 8m46.770950933s ago: executing program 1 (id=3143): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 8m45.994642053s ago: executing program 1 (id=3145): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 8m45.356998282s ago: executing program 1 (id=3148): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, 0x0, 0x40c4) 8m43.912985545s ago: executing program 1 (id=3151): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000140)='rw\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000000004"], 0x7c}}, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) 8m28.474941383s ago: executing program 42 (id=3151): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000140)='rw\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000000004"], 0x7c}}, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 6m34.102404785s ago: executing program 6 (id=3468): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000940)=""/132, 0x84}, {0x0}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000002d40)=""/201, 0xc9}], 0x4}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0x56}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x40000000, 0x0) 6m33.35894388s ago: executing program 6 (id=3472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632b77fbac141416ac14141694089ffe4d2f87e5890c6aab845013f2325f1a39014403038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0xfe, 0x60000000}, 0x50) 6m31.518664821s ago: executing program 6 (id=3475): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x1d8e0, 0x1a704}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 6m29.776578822s ago: executing program 6 (id=3478): syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x500) r0 = io_uring_setup(0x38eb, &(0x7f0000000300)={0x0, 0x342a, 0x40, 0x0, 0x3d7}) syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x9) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 6m28.421350163s ago: executing program 6 (id=3481): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) 6m26.808950547s ago: executing program 6 (id=3487): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40140, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sg(0x0, 0x0, 0x48e01) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0xe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x4, 0x9, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0xfffd, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x100000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fce, 0x20000000, 0x0, 0x81]}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x9020}], 0x1, 0x0, 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 6m11.369445129s ago: executing program 43 (id=3487): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40140, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sg(0x0, 0x0, 0x48e01) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0xe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x4, 0x9, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0xfffd, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x100000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fce, 0x20000000, 0x0, 0x81]}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x9020}], 0x1, 0x0, 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 6.250243606s ago: executing program 5 (id=4433): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3]) 5.481083286s ago: executing program 5 (id=4435): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000000300)=[{0x63, 0x4200, 0x0, 0x0}], 0x1}) 5.197320744s ago: executing program 8 (id=4438): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 4.470191549s ago: executing program 8 (id=4444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416940807034d2f87e5890c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0xfe, 0x60000000, 0x0, 0x155, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x50) 4.038453417s ago: executing program 7 (id=4446): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000640)=""/261, 0x105}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002ac0)=""/4108, 0x100c}, {&(0x7f00000017c0)=""/222, 0xde}, {&(0x7f0000000540)=""/208, 0xd0}], 0x7}, 0x80000000}], 0x4, 0x40000030, 0x0) 3.97807575s ago: executing program 2 (id=4447): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) 3.946503009s ago: executing program 8 (id=4448): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000003440)="172cd448287c5a6c51", 0x9, 0x20000000, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x8001, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@dev}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x8, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ifreq(r5, 0x8922, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags=0x1}) 3.315260344s ago: executing program 2 (id=4449): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x31, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) 3.182669669s ago: executing program 3 (id=4450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x6, 0x2, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2, 0x4, 0x0, 0x8], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.135877083s ago: executing program 5 (id=4451): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) 2.782772715s ago: executing program 7 (id=4452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 2.506713386s ago: executing program 5 (id=4453): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 2.506438547s ago: executing program 2 (id=4454): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000013c0)="5802009400140091d491321dcea4acd70729723b478925450db4564df63e79dbf050a10004226c1aac9891343d24", 0x2e}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 2.307832356s ago: executing program 8 (id=4455): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 2.181375314s ago: executing program 3 (id=4456): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) 2.018018779s ago: executing program 5 (id=4457): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000001f00), 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 1.926831406s ago: executing program 2 (id=4458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe9, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416940807034d2f87e5890c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f40000", 0x0, 0xfe, 0x60000000, 0x0, 0x155, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x50) 1.92663366s ago: executing program 7 (id=4459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 1.845699215s ago: executing program 8 (id=4460): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3]) 1.528651231s ago: executing program 5 (id=4461): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000000300)=[{0x2, 0xf210, 0x0, 0x0}], 0x1}) 1.525327644s ago: executing program 2 (id=4462): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) recvmmsg(r0, 0x0, 0x0, 0x40000030, 0x0) 1.5237656s ago: executing program 3 (id=4463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x10320, 0x1b400}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.478745988s ago: executing program 7 (id=4464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.214093043s ago: executing program 8 (id=4465): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000003440)="172cd448287c5a6c51", 0x9, 0x20000000, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x8001, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@dev}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x8, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ifreq(r5, 0x8922, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags=0x1}) 1.083992698s ago: executing program 7 (id=4466): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x6c, r3, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x4d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x32}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r5, r0, 0x0, 0x10000a007) 935.00049ms ago: executing program 3 (id=4467): getpid() syz_emit_vhci(0x0, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 905.653531ms ago: executing program 2 (id=4468): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x33, 0x8, 0x700512e, "8f5151239582"}}) 393.273714ms ago: executing program 3 (id=4469): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0x0, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0xc9, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7e5}]}, 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 274.818914ms ago: executing program 7 (id=4470): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 0s ago: executing program 3 (id=4471): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000001f00), 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): e_0) entered blocking state [ 1535.524685][T10736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.565569][T15588] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1535.652470][T10736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.660274][T10736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.718446][T15588] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1535.818604][T15588] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1538.884948][T15734] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3159'. [ 1539.002730][T15588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.227982][T15588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.331520][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.339203][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.434925][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.442508][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.330600][T15560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.281142][T15560] veth0_vlan: entered promiscuous mode [ 1541.393186][T15560] veth1_vlan: entered promiscuous mode [ 1541.546681][T15745] netlink: 'syz.2.3162': attribute type 39 has an invalid length. [ 1541.850929][T15560] veth0_macvtap: entered promiscuous mode [ 1541.940924][T15560] veth1_macvtap: entered promiscuous mode [ 1542.122867][T15560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.207977][T15560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.303313][T15560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.312557][T15560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.322611][T15560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.331861][T15560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.904453][T15750] lo: entered allmulticast mode [ 1542.942664][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3163'. [ 1543.925386][T15588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.968683][T15748] lo: left allmulticast mode [ 1548.862080][T15588] veth0_vlan: entered promiscuous mode [ 1548.904535][T15786] netlink: 'syz.2.3172': attribute type 39 has an invalid length. [ 1548.962800][T15588] veth1_vlan: entered promiscuous mode [ 1549.334488][T15588] veth0_macvtap: entered promiscuous mode [ 1549.441947][T15588] veth1_macvtap: entered promiscuous mode [ 1549.736917][T15588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1549.781672][ T8425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1549.814693][T15588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.826562][ T8425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1549.855683][ T8425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1549.892876][ T8425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1549.906658][ T8425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1549.921113][T15588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.931404][T15588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.940590][T15588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.949784][T15588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.053792][T15797] lo: entered allmulticast mode [ 1550.099453][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3174'. [ 1550.601108][T15792] lo: left allmulticast mode [ 1551.544189][T15793] chnl_net:caif_netlink_parms(): no params data found [ 1551.584435][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3178'. [ 1551.681480][T15820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1552.064585][T13535] Bluetooth: hci0: command tx timeout [ 1552.882797][T10712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.035287][T10712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.075159][T15843] netlink: 'syz.2.3181': attribute type 39 has an invalid length. [ 1553.240108][T10712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.448675][T10712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.590208][T15793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.598503][T15793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.606475][T15793] bridge_slave_0: entered allmulticast mode [ 1553.616063][T15793] bridge_slave_0: entered promiscuous mode [ 1553.716600][T15793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.724755][T15793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.732464][T15793] bridge_slave_1: entered allmulticast mode [ 1553.743219][T15793] bridge_slave_1: entered promiscuous mode [ 1553.940273][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1553.985951][T15793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.998389][T10731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.006680][T10731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.059350][T15852] lo: entered allmulticast mode [ 1554.136055][T13535] Bluetooth: hci0: command tx timeout [ 1554.136265][T15793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.155569][T15849] lo: left allmulticast mode [ 1554.199431][T10731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.207628][T10731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.490142][T10712] bridge_slave_1: left allmulticast mode [ 1554.496230][T10712] bridge_slave_1: left promiscuous mode [ 1554.502827][T10712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.619400][T10712] bridge_slave_0: left allmulticast mode [ 1554.625710][T10712] bridge_slave_0: left promiscuous mode [ 1554.632364][T10712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.756846][T15861] fuse: Bad value for 'rootmode' [ 1554.860390][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3187'. [ 1555.196120][T10712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.263054][T10712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.293054][T10712] bond0 (unregistering): Released all slaves [ 1555.510844][T15865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1555.650404][T15869] @: renamed from vlan0 (while UP) [ 1555.710477][T15793] team0: Port device team_slave_0 added [ 1555.800217][T15793] team0: Port device team_slave_1 added [ 1556.217425][T13535] Bluetooth: hci0: command tx timeout [ 1556.302448][T15882] netlink: 'syz.3.3191': attribute type 39 has an invalid length. [ 1556.337420][T10712] hsr_slave_0: left promiscuous mode [ 1556.355345][T10712] hsr_slave_1: left promiscuous mode [ 1556.360395][ T30] audit: type=1326 audit(2000001215.200:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.2.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0f8e969 code=0x7ffc0000 [ 1556.364525][T10712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1556.384002][ T30] audit: type=1326 audit(2000001215.200:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.2.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0f8e969 code=0x7ffc0000 [ 1556.391328][T10712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1556.450096][T10712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1556.458820][T10712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.459705][ T30] audit: type=1326 audit(2000001215.290:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.2.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8a0f8d2d0 code=0x7ffc0000 [ 1556.489484][ T30] audit: type=1326 audit(2000001215.290:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.2.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0f8e969 code=0x7ffc0000 [ 1556.512777][ T30] audit: type=1326 audit(2000001215.290:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.2.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0f8e969 code=0x7ffc0000 [ 1556.568058][T10712] veth1_macvtap: left promiscuous mode [ 1556.576462][T10712] veth0_macvtap: left promiscuous mode [ 1556.587024][T10712] veth1_vlan: left promiscuous mode [ 1556.593267][T10712] veth0_vlan: left promiscuous mode [ 1557.254609][T10712] team0 (unregistering): Port device team_slave_1 removed [ 1557.330153][T10712] team0 (unregistering): Port device team_slave_0 removed [ 1557.673836][T15892] fuse: Unknown parameter 'use00000000000000000000' [ 1557.691081][T15793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.699726][T15793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.727143][T15793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.866488][T15793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.874061][T15793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.900754][T15793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.042520][T15896] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1558.296217][T13535] Bluetooth: hci0: command tx timeout [ 1558.426950][T15793] hsr_slave_0: entered promiscuous mode [ 1558.437237][T15793] hsr_slave_1: entered promiscuous mode [ 1558.445893][T15793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1558.453793][T15793] Cannot create hsr debugfs directory [ 1558.651193][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.659630][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.971338][T10712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.979760][T10712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.267097][T15920] fuse: Unknown parameter 'use00000000000000000000' [ 1560.304753][T15793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1560.386692][T15793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1560.465119][T15793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1560.534970][T15793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1561.234131][T13535] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1566.408351][T15793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.352971][T15793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.420283][T10736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.428088][T10736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.533041][T10736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.540715][T10736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.995021][T15954] fuse: Unknown parameter 'use00000000000000000000' [ 1570.342460][T15793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.924956][T15985] fuse: Unknown parameter 'user_i00000000000000000000' [ 1572.176809][T16002] netlink: 'syz.8.3236': attribute type 6 has an invalid length. [ 1572.185095][T16002] netlink: 'syz.8.3236': attribute type 7 has an invalid length. [ 1572.193288][T16002] netlink: 13182 bytes leftover after parsing attributes in process `syz.8.3236'. [ 1572.816333][T15793] veth0_vlan: entered promiscuous mode [ 1572.953133][T15793] veth1_vlan: entered promiscuous mode [ 1573.314231][T15793] veth0_macvtap: entered promiscuous mode [ 1573.358540][T16018] fuse: Unknown parameter 'user_i00000000000000000000' [ 1573.379270][T15793] veth1_macvtap: entered promiscuous mode [ 1573.545893][T15793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1573.709010][T15793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1573.801093][T15793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.811689][T15793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.821568][T15793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.830826][T15793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.046296][ T1874] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1574.274694][ T1874] usb 7-1: Using ep0 maxpacket: 32 [ 1574.303218][ T1874] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1574.314510][ T1874] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1574.326571][ T1874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 255, changing to 11 [ 1574.339113][ T1874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1574.351224][ T1874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.576959][ T1874] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1574.586588][ T1874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.595318][ T1874] usb 7-1: Product: syz [ 1574.599742][ T1874] usb 7-1: Manufacturer: syz [ 1574.605185][ T1874] usb 7-1: SerialNumber: syz [ 1574.700263][ T1874] usb 7-1: config 0 descriptor?? [ 1575.169787][T16039] netlink: 'syz.2.3249': attribute type 6 has an invalid length. [ 1575.178110][T16039] netlink: 'syz.2.3249': attribute type 7 has an invalid length. [ 1575.186352][T16039] netlink: 13182 bytes leftover after parsing attributes in process `syz.2.3249'. [ 1576.433949][T16058] fuse: Unknown parameter 'user_i00000000000000000000' [ 1577.229680][ T7378] usb 7-1: USB disconnect, device number 2 [ 1579.265407][T16085] netlink: 'syz.2.3262': attribute type 6 has an invalid length. [ 1579.273846][T16085] netlink: 'syz.2.3262': attribute type 7 has an invalid length. [ 1579.281813][T16085] netlink: 13182 bytes leftover after parsing attributes in process `syz.2.3262'. [ 1580.395769][T16097] fuse: Unknown parameter 'user_id00000000000000000000' [ 1581.635808][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.642536][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1581.719931][ T5076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.729431][ T5076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.989105][T10734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.001206][T10734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.296597][T16120] netlink: 'syz.8.3275': attribute type 6 has an invalid length. [ 1582.309042][T16120] netlink: 'syz.8.3275': attribute type 7 has an invalid length. [ 1582.317347][T16120] netlink: 13182 bytes leftover after parsing attributes in process `syz.8.3275'. [ 1582.472417][T16122] overlayfs: failed to resolve './file1': -2 [ 1584.191681][T12754] IPVS: starting estimator thread 0... [ 1584.198573][T16126] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1584.219797][T16134] lo speed is unknown, defaulting to 1000 [ 1584.227035][T16134] lo speed is unknown, defaulting to 1000 [ 1584.234140][T16134] lo speed is unknown, defaulting to 1000 [ 1584.254522][T16134] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1584.302231][T16134] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1584.425764][T16135] IPVS: using max 336 ests per chain, 16800 per kthread [ 1584.449172][T16134] lo speed is unknown, defaulting to 1000 [ 1584.458000][T16134] lo speed is unknown, defaulting to 1000 [ 1584.466618][T16134] lo speed is unknown, defaulting to 1000 [ 1584.475239][T16134] lo speed is unknown, defaulting to 1000 [ 1584.483994][T16134] lo speed is unknown, defaulting to 1000 [ 1584.553780][T16142] tmpfs: Unknown parameter 'smackfsroot' [ 1584.614675][T16141] batadv_slave_0: mtu less than device minimum [ 1586.118345][ T8425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1586.137297][ T8425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1586.147184][ T8425] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1586.167162][ T8425] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1586.181285][ T8425] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1586.345621][T16164] netlink: 'syz.3.3289': attribute type 6 has an invalid length. [ 1586.353732][T16164] netlink: 'syz.3.3289': attribute type 7 has an invalid length. [ 1586.361969][T16164] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.3289'. [ 1587.108068][T16172] fuse: Bad value for 'fd' [ 1587.161750][T16172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3294'. [ 1587.216159][T16178] netlink: 'syz.5.3292': attribute type 1 has an invalid length. [ 1587.834762][T16159] chnl_net:caif_netlink_parms(): no params data found [ 1588.305797][T13535] Bluetooth: hci3: command tx timeout [ 1589.799970][T16201] lo speed is unknown, defaulting to 1000 [ 1589.806920][T16201] lo speed is unknown, defaulting to 1000 [ 1589.815949][T16201] lo speed is unknown, defaulting to 1000 [ 1589.866054][T16201] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1589.923996][T16201] lo speed is unknown, defaulting to 1000 [ 1589.932662][T16201] lo speed is unknown, defaulting to 1000 [ 1589.941678][T16201] lo speed is unknown, defaulting to 1000 [ 1589.950401][T16201] lo speed is unknown, defaulting to 1000 [ 1589.959069][T16201] lo speed is unknown, defaulting to 1000 [ 1589.967621][T16201] lo speed is unknown, defaulting to 1000 [ 1590.382402][T13535] Bluetooth: hci3: command tx timeout [ 1590.690029][T16159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.697691][T16159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.705618][T16159] bridge_slave_0: entered allmulticast mode [ 1590.715726][T16159] bridge_slave_0: entered promiscuous mode [ 1590.954292][ T7378] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1591.002391][T16213] fuse: Bad value for 'fd' [ 1591.017366][T16159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.025418][T16159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.033350][T16159] bridge_slave_1: entered allmulticast mode [ 1591.047670][T16159] bridge_slave_1: entered promiscuous mode [ 1591.068583][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 1591.095290][T10718] bridge_slave_1: left allmulticast mode [ 1591.101207][T10718] bridge_slave_1: left promiscuous mode [ 1591.108326][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.149460][T10718] bridge_slave_0: left allmulticast mode [ 1591.155712][T10718] bridge_slave_0: left promiscuous mode [ 1591.162493][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.184880][ T7378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.196668][ T7378] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1591.207321][ T7378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.238646][ T7378] usb 6-1: config 0 descriptor?? [ 1591.667623][ T7378] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1592.154710][T10718] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1592.354352][ T7378] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0014/input/input21 [ 1592.463021][T13535] Bluetooth: hci3: command tx timeout [ 1592.493002][T10718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.512064][T10718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.525332][T10718] bond0 (unregistering): Released all slaves [ 1592.548709][T10718] bond1 (unregistering): Released all slaves [ 1592.572570][T10718] bond2 (unregistering): Released all slaves [ 1592.599856][T10718] bond3 (unregistering): Released all slaves [ 1592.622715][T10718] bond4 (unregistering): Released all slaves [ 1592.645030][T10718] bond5 (unregistering): Released all slaves [ 1594.755411][T13535] Bluetooth: hci3: command tx timeout [ 1595.757763][ T7378] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1595.849722][T16159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.025587][T16159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.725408][ T7378] usb 6-1: USB disconnect, device number 6 [ 1596.991504][T16226] fido_id[16226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1597.254940][T10718] hsr_slave_0: left promiscuous mode [ 1598.231085][T10718] hsr_slave_1: left promiscuous mode [ 1598.239188][T10718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.266034][T10718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.835936][T10718] team0 (unregistering): Port device team_slave_1 removed [ 1599.926516][T10718] team0 (unregistering): Port device team_slave_0 removed [ 1600.456779][T16159] team0: Port device team_slave_0 added [ 1600.611443][T16159] team0: Port device team_slave_1 added [ 1601.387315][T16159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.394719][T16159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.421625][T16159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.447108][T16249] fuse: Bad value for 'fd' [ 1601.493127][T10718] IPVS: stop unused estimator thread 0... [ 1601.527078][T16249] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3316'. [ 1601.628039][T16159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.636275][T16159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.666683][T16159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.520704][T16159] hsr_slave_0: entered promiscuous mode [ 1604.531209][T16159] hsr_slave_1: entered promiscuous mode [ 1604.916102][T16266] siw: device registration error -23 [ 1605.083955][T16266] batadv_slave_0: mtu less than device minimum [ 1606.386190][T16279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3325'. [ 1606.410076][T16277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1606.526302][T16159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1606.625512][T16159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1607.025695][T16283] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3328'. [ 1607.075988][T16159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1607.186972][T13535] Bluetooth: min 6 > max 0 [ 1607.374909][T16159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1609.274932][T13535] Bluetooth: hci5: command tx timeout [ 1609.634394][T16306] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3335'. [ 1609.747119][T16307] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3335'. [ 1609.859697][T16159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.266659][T16159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.360117][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.367791][T10725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.384808][T10725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.392417][T10725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.503144][T16159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1610.514208][T16159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1610.823273][T13535] Bluetooth: min 6 > max 0 [ 1611.185106][T16322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3341'. [ 1612.904555][T13535] Bluetooth: hci5: command tx timeout [ 1613.117267][T16159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.198152][T16342] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3348'. [ 1613.267231][T16342] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3348'. [ 1613.727266][T16159] veth0_vlan: entered promiscuous mode [ 1613.892119][T16159] veth1_vlan: entered promiscuous mode [ 1614.151371][T16159] veth0_macvtap: entered promiscuous mode [ 1614.236995][T16159] veth1_macvtap: entered promiscuous mode [ 1614.314500][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3352'. [ 1614.329282][T13535] Bluetooth: min 6 > max 0 [ 1614.398838][T16159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.440263][T16159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.579047][T16159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.588255][T16159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.600868][T16159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.611117][T16159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.384094][T13535] Bluetooth: hci2: command tx timeout [ 1617.871946][T12754] IPVS: starting estimator thread 0... [ 1618.395935][T16384] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1619.451003][T16386] IPVS: using max 336 ests per chain, 16800 per kthread [ 1619.546480][T13535] Bluetooth: min 6 > max 0 [ 1619.685799][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3365'. [ 1621.613868][T13535] Bluetooth: hci0: command tx timeout [ 1621.903192][T16416] siw: device registration error -23 [ 1621.912245][T16416] batadv_slave_0: mtu less than device minimum [ 1623.517447][T13535] Bluetooth: min 6 > max 0 [ 1624.962997][T16420] could not allocate digest TFM handle sha384-avx2 [ 1625.416413][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3377'. [ 1625.497448][T16441] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1625.574074][T13535] Bluetooth: hci2: command tx timeout [ 1627.315765][T16462] siw: device registration error -23 [ 1627.325005][T16462] batadv_slave_0: mtu less than device minimum [ 1627.430285][T13535] Bluetooth: min 6 > max 0 [ 1627.983983][T10734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.992322][T10734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.233323][T10718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.246090][T10718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.464165][T16476] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1628.474573][T12754] IPVS: starting estimator thread 0... [ 1628.543893][ T1537] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1628.694165][T16479] IPVS: using max 240 ests per chain, 12000 per kthread [ 1628.743890][ T1537] usb 6-1: Using ep0 maxpacket: 8 [ 1628.798587][ T1537] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 1628.807374][ T1537] usb 6-1: config 0 has no interface number 0 [ 1628.871910][ T1537] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 1628.881739][ T1537] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.890241][ T1537] usb 6-1: Product: syz [ 1628.894731][ T1537] usb 6-1: Manufacturer: syz [ 1628.899546][ T1537] usb 6-1: SerialNumber: syz [ 1629.002059][ T1537] usb 6-1: config 0 descriptor?? [ 1629.058547][ T1537] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected [ 1629.125771][ T1537] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1629.260100][ T1537] usb 6-1: USB disconnect, device number 7 [ 1629.332109][ T1537] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1629.348714][ T1537] kobil_sct 6-1:0.148: device disconnected [ 1629.404834][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3391'. [ 1629.499077][T13535] Bluetooth: hci0: command tx timeout [ 1631.537565][T13535] Bluetooth: min 6 > max 0 [ 1632.937496][T16510] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1633.314727][T16513] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1633.323853][T16513] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1633.575603][T13535] Bluetooth: hci0: command tx timeout [ 1633.781679][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3405'. [ 1634.898805][T16530] Bluetooth: MGMT ver 1.23 [ 1635.664937][T13535] Bluetooth: min 6 > max 0 [ 1637.804460][ T8425] Bluetooth: hci3: command tx timeout [ 1638.488687][T11228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1638.741362][T11228] usb 4-1: Using ep0 maxpacket: 16 [ 1638.791924][T11228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.803826][T11228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.814022][T11228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1638.827287][T11228] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1638.837033][T11228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.901098][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3421'. [ 1639.208765][T11228] usb 4-1: config 0 descriptor?? [ 1639.574551][ T8425] Bluetooth: hci2: command 0x0406 tx timeout [ 1639.758269][T11228] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 1640.072623][T11228] HID 045e:07da: Invalid code 65791 type 1 [ 1640.082381][T11228] HID 045e:07da: Invalid code 768 type 1 [ 1640.088946][T11228] HID 045e:07da: Invalid code 769 type 1 [ 1640.099597][T11228] HID 045e:07da: Invalid code 770 type 1 [ 1640.106268][T11228] HID 045e:07da: Invalid code 771 type 1 [ 1640.112150][T11228] HID 045e:07da: Invalid code 772 type 1 [ 1640.118217][T11228] HID 045e:07da: Invalid code 773 type 1 [ 1640.124384][T11228] HID 045e:07da: Invalid code 774 type 1 [ 1640.130248][T11228] HID 045e:07da: Invalid code 775 type 1 [ 1640.136346][T11228] HID 045e:07da: Invalid code 776 type 1 [ 1641.969606][T11228] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input22 [ 1642.463984][T13535] Bluetooth: hci7: command 0x0c1a tx timeout [ 1642.609349][T11228] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1642.646085][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.655207][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1642.794895][T11228] usb 4-1: USB disconnect, device number 3 [ 1644.864050][T13535] Bluetooth: hci5: command 0x0406 tx timeout [ 1646.101314][T12754] IPVS: starting estimator thread 0... [ 1646.107302][T16590] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1646.221133][T16595] IPVS: using max 288 ests per chain, 14400 per kthread [ 1646.865359][T16591] fido_id[16591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1649.662600][T16619] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1649.669693][T16619] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.696040][T16619] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1651.374754][T12754] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1651.604140][T12754] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1651.614174][T12754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.827345][T12754] usb 3-1: config 0 descriptor?? [ 1652.165448][T12754] cp210x 3-1:0.0: cp210x converter detected [ 1652.360879][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.371983][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.481576][T16635] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1655.853724][T16642] fuse: Invalid rootmode [ 1655.908145][T12754] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1655.942729][T12754] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1655.951382][T12754] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1656.016214][T12754] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1656.095011][T12754] usb 3-1: USB disconnect, device number 2 [ 1656.135820][T12754] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1656.147650][T12754] cp210x 3-1:0.0: device disconnected [ 1656.754276][T16655] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1656.761124][T16655] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1656.790897][T16655] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1657.814423][T11228] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1658.025604][T11228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.037334][T11228] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1658.046843][T11228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.089999][T16678] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3460'. [ 1658.391678][T11228] usb 6-1: config 0 descriptor?? [ 1658.907047][T11228] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1659.237138][T11228] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0016/input/input23 [ 1659.968674][T11228] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1660.292179][T11228] usb 6-1: USB disconnect, device number 8 [ 1661.132788][T16688] fuse: Invalid rootmode [ 1662.783042][T16686] fido_id[16686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1668.016522][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 1669.782546][ T8425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1669.827860][ T8425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1669.869590][ T8425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1669.925368][ T8425] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1669.997421][ T8425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1670.362446][T16740] lo speed is unknown, defaulting to 1000 [ 1672.134209][T13535] Bluetooth: hci1: command tx timeout [ 1674.246013][ T8425] Bluetooth: hci1: command tx timeout [ 1674.314755][T16740] chnl_net:caif_netlink_parms(): no params data found [ 1675.494033][T13535] Bluetooth: hci0: command 0x0406 tx timeout [ 1676.303914][T13535] Bluetooth: hci1: command tx timeout [ 1677.068118][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.075716][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.083339][T16740] bridge_slave_0: entered allmulticast mode [ 1677.091752][T16740] bridge_slave_0: entered promiscuous mode [ 1677.153608][T10731] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1677.167028][T10731] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.226911][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.234945][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.242526][T16740] bridge_slave_1: entered allmulticast mode [ 1677.252781][T16740] bridge_slave_1: entered promiscuous mode [ 1678.197932][ T30] audit: type=1326 audit(2000001337.010:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.222004][ T30] audit: type=1326 audit(2000001337.030:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.245358][ T30] audit: type=1326 audit(2000001337.030:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.268190][ T30] audit: type=1326 audit(2000001337.030:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.293700][ T30] audit: type=1326 audit(2000001337.030:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.317574][ T30] audit: type=1326 audit(2000001337.030:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.340432][ T30] audit: type=1326 audit(2000001337.030:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.363510][ T30] audit: type=1326 audit(2000001337.030:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.389106][ T30] audit: type=1326 audit(2000001337.030:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.396930][T13535] Bluetooth: hci1: command tx timeout [ 1678.412337][ T30] audit: type=1326 audit(2000001337.030:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16782 comm="syz.3.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5f18e969 code=0x7fc00000 [ 1678.566952][T10731] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.577829][T10731] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.988288][T10731] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.999140][T10731] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.073272][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.211693][T10731] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1679.222506][T10731] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.393879][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.735240][T16740] team0: Port device team_slave_0 added [ 1679.936591][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3503'. [ 1680.050234][T16794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.059256][T16794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.292090][T16794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1680.310865][T16794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.674199][T16794] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.685655][T16794] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.695375][T16794] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.704622][T16794] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.851108][T16740] team0: Port device team_slave_1 added [ 1682.502360][T10731] ip6gretap0 (unregistering): left promiscuous mode [ 1683.153715][T10731] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1683.335752][T10731] bond0 (unregistering): Released all slaves [ 1683.358620][T10731] bond1 (unregistering): Released all slaves [ 1683.588593][T10731] bond2 (unregistering): Released all slaves [ 1683.606466][T10731] bond3 (unregistering): Released all slaves [ 1683.769953][T16808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1683.785752][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.792919][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.821765][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.004221][T10731] tipc: Disabling bearer [ 1684.009974][T10731] tipc: Left network mode [ 1684.062088][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.069629][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.096462][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.628439][T16740] hsr_slave_0: entered promiscuous mode [ 1684.643078][T16740] hsr_slave_1: entered promiscuous mode [ 1684.651658][T16740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1684.659508][T16740] Cannot create hsr debugfs directory [ 1685.030401][T10731] hsr_slave_0: left promiscuous mode [ 1685.086426][T10731] hsr_slave_1: left promiscuous mode [ 1685.163046][T10731] veth1_macvtap: left promiscuous mode [ 1685.169343][T10731] veth0_macvtap: left promiscuous mode [ 1685.175593][T10731] veth1_vlan: left promiscuous mode [ 1685.181234][T10731] veth0_vlan: left promiscuous mode [ 1687.370558][T12754] lo speed is unknown, defaulting to 1000 [ 1687.376834][T12754] infiniband syz2: ib_query_port failed (-19) [ 1687.504959][ T8425] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1687.544708][ T8425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1687.555413][ T8425] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1687.576963][ T8425] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1687.605592][ T8425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1688.324081][T10731] IPVS: stop unused estimator thread 0... [ 1688.689120][T16848] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3521'. [ 1688.798041][T16850] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3521'. [ 1689.154068][T16740] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1689.221032][T16740] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1689.257419][T16740] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1689.369559][T16740] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1689.470343][T16853] netlink: 'syz.3.3522': attribute type 10 has an invalid length. [ 1689.479648][T16853] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1689.641782][T16853] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1689.740003][T13535] Bluetooth: hci4: command tx timeout [ 1690.017633][T16838] chnl_net:caif_netlink_parms(): no params data found [ 1692.510130][T13535] Bluetooth: hci4: command tx timeout [ 1694.241256][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.533972][T13535] Bluetooth: hci4: command tx timeout [ 1694.601688][T16838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.609540][T16838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.621081][T16838] bridge_slave_0: entered allmulticast mode [ 1694.630518][T16838] bridge_slave_0: entered promiscuous mode [ 1694.742729][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.794117][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.801679][T10731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.846332][T16838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.855014][T16838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.862821][T16838] bridge_slave_1: entered allmulticast mode [ 1694.875306][T16838] bridge_slave_1: entered promiscuous mode [ 1694.889193][T16887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3531'. [ 1694.935335][T16294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.942889][T16294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.961920][T16889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3531'. [ 1695.079204][T16890] netlink: 'syz.3.3532': attribute type 6 has an invalid length. [ 1695.087454][T16890] netlink: 'syz.3.3532': attribute type 7 has an invalid length. [ 1695.096975][T16890] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1695.323859][T16838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.444700][T16838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.801635][T16838] team0: Port device team_slave_0 added [ 1695.832933][T16838] team0: Port device team_slave_1 added [ 1696.009406][T16898] ip6t_rpfilter: unknown options [ 1696.693549][T13535] Bluetooth: hci4: command tx timeout [ 1698.979660][T16838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1698.986957][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.015224][T16838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.061911][T16838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.069467][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.098578][T16838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.827294][T16838] hsr_slave_0: entered promiscuous mode [ 1700.836409][T16838] hsr_slave_1: entered promiscuous mode [ 1700.844346][T16838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1700.852028][T16838] Cannot create hsr debugfs directory [ 1700.923809][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1701.685153][T16927] netlink: 'syz.5.3542': attribute type 6 has an invalid length. [ 1701.694485][T16927] netlink: 'syz.5.3542': attribute type 7 has an invalid length. [ 1701.702470][T16927] netlink: 13182 bytes leftover after parsing attributes in process `syz.5.3542'. [ 1701.745819][T16930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3543'. [ 1701.788347][T16931] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3543'. [ 1702.619671][T16838] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1702.697839][T16838] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1702.769055][T16838] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1702.895518][T16838] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1703.555304][T16740] veth0_vlan: entered promiscuous mode [ 1703.858734][T16740] veth1_vlan: entered promiscuous mode [ 1704.101560][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1704.108808][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1704.504783][T16740] veth0_macvtap: entered promiscuous mode [ 1704.640594][T16740] veth1_macvtap: entered promiscuous mode [ 1704.985899][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1705.160627][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1705.350961][T16740] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.360473][T16740] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.370119][T16740] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.379415][T16740] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.793927][T16838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1706.328230][T16838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1706.591123][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.598856][T10714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.745524][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.753127][T10714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.889700][T16962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1706.911418][T16962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1706.952901][T16961] netlink: 'syz.3.3552': attribute type 6 has an invalid length. [ 1706.964075][T16961] netlink: 'syz.3.3552': attribute type 7 has an invalid length. [ 1706.972047][T16961] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1709.864577][T16838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1710.940956][T16997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1710.979199][T16996] netlink: 'syz.3.3562': attribute type 6 has an invalid length. [ 1710.987688][T16996] netlink: 'syz.3.3562': attribute type 7 has an invalid length. [ 1710.996071][T16996] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.3562'. [ 1711.025093][T16997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1711.258500][T13535] Bluetooth: hci3: command 0x0406 tx timeout [ 1712.439274][T16838] veth0_vlan: entered promiscuous mode [ 1712.584856][T16838] veth1_vlan: entered promiscuous mode [ 1712.880795][T16838] veth0_macvtap: entered promiscuous mode [ 1712.965337][T16838] veth1_macvtap: entered promiscuous mode [ 1713.166157][T16838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.277028][T16838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1713.359630][T16838] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.371814][T16838] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.381968][T16838] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.391172][T16838] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.912362][T10736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.923279][T10736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.261495][T10725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.269813][T10725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.359723][T10714] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.790601][T17038] netlink: 'syz.2.3575': attribute type 6 has an invalid length. [ 1714.799177][T17038] netlink: 'syz.2.3575': attribute type 7 has an invalid length. [ 1714.807404][T17038] netlink: 13182 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1714.914390][T17035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3574'. [ 1714.984183][T17037] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3574'. [ 1715.069165][T10714] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.301973][T10714] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.552196][T10714] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.798239][T17049] fuse: Bad value for 'rootmode' [ 1715.975217][T10714] bridge_slave_1: left allmulticast mode [ 1715.981183][T10714] bridge_slave_1: left promiscuous mode [ 1715.988269][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.034946][T10714] bridge_slave_0: left allmulticast mode [ 1716.040897][T10714] bridge_slave_0: left promiscuous mode [ 1716.048567][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.684636][T10714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1716.745168][T10714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.760952][T10714] bond0 (unregistering): Released all slaves [ 1717.913853][T10714] hsr_slave_0: left promiscuous mode [ 1717.955689][T10714] hsr_slave_1: left promiscuous mode [ 1717.963955][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.971823][T10714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.067475][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1718.075453][T10714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1718.196403][T10714] veth1_macvtap: left promiscuous mode [ 1718.202327][T10714] veth0_macvtap: left promiscuous mode [ 1718.208547][T10714] veth1_vlan: left promiscuous mode [ 1718.214697][T10714] veth0_vlan: left promiscuous mode [ 1719.364064][T10714] team0 (unregistering): Port device team_slave_1 removed [ 1719.502706][T17073] netlink: 'syz.2.3585': attribute type 6 has an invalid length. [ 1719.511446][T17073] netlink: 'syz.2.3585': attribute type 7 has an invalid length. [ 1719.519577][T17073] netlink: 13182 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1719.661352][T10714] team0 (unregistering): Port device team_slave_0 removed [ 1720.459630][T17080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1720.500723][T17080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1720.643001][T10714] IPVS: stop unused estimator thread 0... [ 1721.414188][T17095] fuse: Bad value for 'fd' [ 1729.206091][T17117] netlink: 'syz.3.3598': attribute type 6 has an invalid length. [ 1729.214669][T17117] netlink: 'syz.3.3598': attribute type 7 has an invalid length. [ 1729.222636][T17117] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1729.363195][T17121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1729.433920][T17121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1730.081130][T17132] fuse: Bad value for 'rootmode' [ 1733.760462][T17143] random: crng reseeded on system resumption [ 1735.573891][ T45] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1735.772879][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1735.783634][ T45] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1735.794024][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1735.804094][ T45] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1735.964267][ T45] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1735.973971][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.982252][ T45] usb 6-1: Product: syz [ 1735.986839][ T45] usb 6-1: Manufacturer: syz [ 1735.991684][ T45] usb 6-1: SerialNumber: syz [ 1736.079576][T10714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.082985][ T45] usb 6-1: config 0 descriptor?? [ 1736.088682][T10714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.213685][ T45] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1736.389877][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1736.389959][ T30] audit: type=1800 audit(2000001395.230:849): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3611" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1736.424171][T10712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.432242][T10712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.507054][ T45] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1736.579602][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3611'. [ 1736.731403][ T45] usb 6-1: USB disconnect, device number 9 [ 1737.232187][T17161] netlink: 'syz.3.3612': attribute type 6 has an invalid length. [ 1737.240895][T17161] netlink: 'syz.3.3612': attribute type 7 has an invalid length. [ 1737.249257][T17161] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1738.048252][T17163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.058030][T17163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.445536][T17163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1738.490819][T17163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1739.681168][T17163] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.691259][T17163] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.701215][T17163] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.710609][T17163] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.237539][T17165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3613'. [ 1743.740458][T17173] fuse: Unknown parameter 'use00000000000000000000' [ 1750.037995][T17210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.050113][T17210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.256632][T17210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.287418][T17210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1752.274132][T17210] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.285921][T17210] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.295543][T17210] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.304936][T17210] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.544117][T17217] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3630'. [ 1755.732734][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1755.742594][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1755.752377][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1755.809487][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1755.819682][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1762.625680][T17267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3645'. [ 1762.766189][T17267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3645'. [ 1764.217627][T17280] atomic_op ffff88804b41d928 conn xmit_atomic 0000000000000000 [ 1765.223568][ T30] audit: type=1326 audit(2000001423.490:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.7.3646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9967f8e969 code=0x0 [ 1766.314959][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1766.321879][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1768.971875][T17300] program syz.3.3658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1769.578982][ T1537] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1769.683189][T17312] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3661'. [ 1769.725226][T17312] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3661'. [ 1769.816425][ T1537] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1769.825939][ T1537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.881175][ T1537] usb 3-1: config 0 descriptor?? [ 1769.891135][T17318] netlink: 'syz.5.3662': attribute type 3 has an invalid length. [ 1769.899432][T17318] netlink: 'syz.5.3662': attribute type 4 has an invalid length. [ 1769.907612][T17318] netlink: 'syz.5.3662': attribute type 5 has an invalid length. [ 1769.915824][T17318] netlink: 'syz.5.3662': attribute type 6 has an invalid length. [ 1769.924066][T17318] netlink: 'syz.5.3662': attribute type 7 has an invalid length. [ 1769.933045][T17318] netlink: 'syz.5.3662': attribute type 7 has an invalid length. [ 1769.941446][T17318] netlink: 12922 bytes leftover after parsing attributes in process `syz.5.3662'. [ 1770.000068][ T1537] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1770.882693][ T1537] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1772.194999][ T1537] gspca_cpia1: usb_control_msg 02, error -71 [ 1772.201278][ T1537] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1773.213831][ T1537] usb 3-1: USB disconnect, device number 3 [ 1773.891531][T17339] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1774.499789][T17352] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3675'. [ 1774.524789][T17352] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3675'. [ 1777.381133][ T1537] IPVS: starting estimator thread 0... [ 1777.389774][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3680'. [ 1777.504726][T17374] IPVS: using max 192 ests per chain, 9600 per kthread [ 1777.994008][ T1537] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1778.012466][T17380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1778.024715][T17380] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1778.036462][T17380] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1778.051675][T17380] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1778.184060][ T1537] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1778.193711][ T1537] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.323127][ T1537] usb 8-1: config 0 descriptor?? [ 1778.334946][T12754] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1778.383518][ T1537] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1778.526917][T12754] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1778.541306][T12754] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1778.551873][T12754] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.667210][T12754] usb 9-1: config 0 descriptor?? [ 1778.769272][ T1537] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 1779.014518][ T1537] gspca_cpia1: usb_control_msg 01, error -71 [ 1779.020780][ T1537] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1779.092124][T12754] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 1779.098510][ T1537] usb 8-1: USB disconnect, device number 3 [ 1779.196207][T17392] program syz.5.3688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1779.227609][T12754] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0017/input/input24 [ 1779.262298][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.272221][T17390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.568341][T17390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1779.600072][T17390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1779.926114][T12754] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1780.015498][T12754] usb 9-1: USB disconnect, device number 46 [ 1780.088677][T17390] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.099126][T17390] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.108561][T17390] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.117871][T17390] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.128740][T17405] lo speed is unknown, defaulting to 1000 [ 1781.137208][T17405] lo speed is unknown, defaulting to 1000 [ 1781.144408][T17405] lo speed is unknown, defaulting to 1000 [ 1781.193828][T17405] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1781.244484][T17407] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3693'. [ 1781.264367][T17405] lo speed is unknown, defaulting to 1000 [ 1781.273080][T17405] lo speed is unknown, defaulting to 1000 [ 1781.281819][T17405] lo speed is unknown, defaulting to 1000 [ 1781.290823][T17405] lo speed is unknown, defaulting to 1000 [ 1781.301953][T17405] lo speed is unknown, defaulting to 1000 [ 1781.347596][T17407] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3693'. [ 1781.805541][T17402] fido_id[17402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1782.691046][T17422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3699'. [ 1783.704100][T17429] program syz.8.3700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1784.236849][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1784.498883][ T45] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1784.508559][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.646945][ T45] usb 4-1: config 0 descriptor?? [ 1784.724390][T17436] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3703'. [ 1784.870299][ T45] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1785.483918][ T45] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1786.304044][ T45] gspca_cpia1: usb_control_msg 01, error -71 [ 1786.310554][ T45] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1786.509637][T17448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1786.537240][T17448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1786.551783][T17449] siw: device registration error -23 [ 1786.552759][ T45] usb 4-1: USB disconnect, device number 4 [ 1786.583904][ T1537] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1786.865021][ T1537] usb 9-1: device descriptor read/64, error -71 [ 1787.214388][ T1537] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1787.374944][ T1537] usb 9-1: device descriptor read/64, error -71 [ 1787.428080][T17457] random: crng reseeded on system resumption [ 1787.758093][ T1537] usb usb9-port1: attempt power cycle [ 1788.303895][ T1537] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1788.395527][ T1537] usb 9-1: device descriptor read/8, error -71 [ 1788.618160][T17461] program syz.7.3713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1788.674681][ T1537] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1788.764898][ T1537] usb 9-1: device descriptor read/8, error -71 [ 1788.882778][ T1537] usb usb9-port1: unable to enumerate USB device [ 1789.005856][T17469] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3716'. [ 1789.498851][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.508693][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.810308][T17471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1789.834083][T17471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1790.202836][T17471] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.212473][T17471] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.223103][T17471] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.232483][T17471] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.294578][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1790.398558][T17487] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3722'. [ 1790.412353][T17488] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3722'. [ 1790.531287][ T45] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1790.541070][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.597369][ T45] usb 3-1: config 0 descriptor?? [ 1790.624433][ T45] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1790.964940][T17495] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3726'. [ 1791.050711][ T45] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1791.263967][ T45] gspca_cpia1: usb_control_msg 01, error -71 [ 1791.270296][ T45] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1791.324506][ T45] usb 3-1: USB disconnect, device number 4 [ 1791.471211][T17500] program syz.5.3728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.758912][T17508] random: crng reseeded on system resumption [ 1792.056214][T17507] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1792.834412][T17516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1792.877600][T17514] tipc: Enabling of bearer rejected, failed to enable media [ 1792.904298][T17516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1792.941175][T17514] tipc: Failed to obtain node identity [ 1792.947398][T17514] tipc: Enabling of bearer rejected, failed to enable media [ 1793.380358][T13535] Bluetooth: hci1: command 0x0406 tx timeout [ 1794.453159][T17537] netlink: 'syz.5.3741': attribute type 3 has an invalid length. [ 1794.461956][T17537] netlink: 'syz.5.3741': attribute type 4 has an invalid length. [ 1794.470170][T17537] netlink: 'syz.5.3741': attribute type 5 has an invalid length. [ 1794.478325][T17537] netlink: 'syz.5.3741': attribute type 6 has an invalid length. [ 1794.486683][T17537] netlink: 'syz.5.3741': attribute type 7 has an invalid length. [ 1794.494857][T17537] netlink: 'syz.5.3741': attribute type 7 has an invalid length. [ 1794.502890][T17537] netlink: 12922 bytes leftover after parsing attributes in process `syz.5.3741'. [ 1794.549313][T17535] program syz.2.3742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1794.938995][T17544] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3745'. [ 1795.015298][ T1537] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1796.421390][T17557] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3750'. [ 1796.474329][T17557] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3750'. [ 1796.496500][ T45] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1796.692044][ T45] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1796.702444][ T45] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1796.716168][ T45] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1796.725598][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.087690][ T1537] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1797.097372][ T1537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.154155][ T45] usb 6-1: usb_control_msg returned -32 [ 1797.160386][ T45] usbtmc 6-1:16.0: can't read capabilities [ 1797.248341][ T1537] usb 4-1: config 0 descriptor?? [ 1797.268932][ T1537] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1797.798089][T17566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.808371][T17566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.226993][ T1537] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1798.434046][ T1537] gspca_cpia1: usb_control_msg 01, error -71 [ 1798.440416][ T1537] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1798.457355][ T1537] usb 4-1: USB disconnect, device number 5 [ 1799.797867][T17579] random: crng reseeded on system resumption [ 1800.049503][T17580] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1800.111046][ T1537] usb 6-1: USB disconnect, device number 10 [ 1800.188081][T17585] netlink: 'syz.2.3759': attribute type 3 has an invalid length. [ 1800.196674][T17585] netlink: 'syz.2.3759': attribute type 4 has an invalid length. [ 1800.204774][T17585] netlink: 'syz.2.3759': attribute type 5 has an invalid length. [ 1800.212637][T17585] netlink: 'syz.2.3759': attribute type 6 has an invalid length. [ 1800.220597][T17585] netlink: 'syz.2.3759': attribute type 7 has an invalid length. [ 1800.228874][T17585] netlink: 'syz.2.3759': attribute type 7 has an invalid length. [ 1800.237031][T17585] netlink: 12922 bytes leftover after parsing attributes in process `syz.2.3759'. [ 1800.914856][T17590] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1800.978048][T17591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1801.921980][T17607] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.964341][ T1537] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1802.297863][ T1537] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1802.307762][ T1537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.389501][T17611] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3772'. [ 1802.485116][ T1537] usb 6-1: config 0 descriptor?? [ 1802.599963][ T1537] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1803.015536][ T1537] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 1803.252863][ T1537] gspca_cpia1: usb_control_msg 01, error -71 [ 1803.259530][ T1537] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1803.403069][ T1537] usb 6-1: USB disconnect, device number 11 [ 1803.552786][T17623] netlink: 'syz.8.3775': attribute type 3 has an invalid length. [ 1803.561341][T17623] netlink: 'syz.8.3775': attribute type 4 has an invalid length. [ 1803.569572][T17623] netlink: 'syz.8.3775': attribute type 5 has an invalid length. [ 1803.577622][T17623] netlink: 'syz.8.3775': attribute type 6 has an invalid length. [ 1803.585843][T17623] netlink: 12922 bytes leftover after parsing attributes in process `syz.8.3775'. [ 1803.588134][T17622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1803.689240][T17622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1804.423139][T17636] random: crng reseeded on system resumption [ 1804.988427][T17641] loop2: detected capacity change from 0 to 7 [ 1805.068915][T17641] Dev loop2: unable to read RDB block 7 [ 1805.075343][T17641] loop2: unable to read partition table [ 1805.245448][T17641] loop2: partition table beyond EOD, truncated [ 1805.252167][T17641] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1808.834792][T17647] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3786'. [ 1809.057222][T17654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.077997][T17654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.118221][T17654] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1809.643766][ T45] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1809.813159][T17670] validate_nla: 2 callbacks suppressed [ 1809.813255][T17670] netlink: 'syz.3.3793': attribute type 3 has an invalid length. [ 1809.827903][T17670] netlink: 'syz.3.3793': attribute type 4 has an invalid length. [ 1809.836079][T17670] netlink: 'syz.3.3793': attribute type 5 has an invalid length. [ 1809.844285][T17670] netlink: 'syz.3.3793': attribute type 6 has an invalid length. [ 1809.852241][T17670] netlink: 'syz.3.3793': attribute type 7 has an invalid length. [ 1809.860417][T17670] netlink: 'syz.3.3793': attribute type 7 has an invalid length. [ 1809.868620][T17670] netlink: 12922 bytes leftover after parsing attributes in process `syz.3.3793'. [ 1809.899671][ T45] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1809.909479][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.929256][ T45] usb 9-1: config 0 descriptor?? [ 1809.949623][ T45] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1810.355497][ T45] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 1810.574087][T17677] random: crng reseeded on system resumption [ 1810.810148][ T45] gspca_cpia1: usb_control_msg 01, error -71 [ 1810.816656][ T45] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1810.975521][ T45] usb 9-1: USB disconnect, device number 51 [ 1811.533776][T17682] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3801'. [ 1811.970737][T17688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1812.027212][T17688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1813.402443][T17715] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3816'. [ 1813.664693][ T8425] Bluetooth: hci4: command 0x0406 tx timeout [ 1813.676516][T17718] random: crng reseeded on system resumption [ 1814.765432][T17725] siw: device registration error -23 [ 1816.680678][T17730] Can't find ip_set type ha [ 1818.353936][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3826'. [ 1819.077449][T17745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1819.996842][T17753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1826.395447][T17773] random: crng reseeded on system resumption [ 1826.951332][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1826.959022][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1828.833991][T17792] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3846'. [ 1829.739204][T17805] siw: device registration error -23 [ 1832.835405][T17807] Can't find ip_set type hash: [ 1836.267895][T17830] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3861'. [ 1837.297377][T17842] siw: device registration error -23 [ 1841.815776][T17865] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3876'. [ 1842.286182][T17873] dummy0: entered promiscuous mode [ 1848.644632][T17908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3891'. [ 1848.713991][ T7378] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1848.944482][ T7378] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.955176][ T7378] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1849.005555][ T7378] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1849.015418][ T7378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.023976][ T7378] usb 9-1: Product: syz [ 1849.028384][ T7378] usb 9-1: Manufacturer: syz [ 1849.033252][ T7378] usb 9-1: SerialNumber: syz [ 1849.620840][T17917] siw: device registration error -23 [ 1849.805627][ T7378] usb 9-1: 0:2 : does not exist [ 1849.810753][ T7378] usb 9-1: unit 255 not found! [ 1850.265418][ T7378] usb 9-1: USB disconnect, device number 52 [ 1850.922969][T16216] udevd[16216]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1851.134156][T17922] fuse: Bad value for 'fd' [ 1855.824874][T17944] program syz.7.3901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1856.062616][T17947] lo speed is unknown, defaulting to 1000 [ 1857.380218][T17953] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3906'. [ 1858.565376][T17956] siw: device registration error -23 [ 1858.825077][T17958] overlayfs: missing 'lowerdir' [ 1859.983641][ T7378] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1861.077078][T17967] Cannot find add_set index 0 as target [ 1861.236742][ T7378] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.247694][ T7378] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1861.341739][ T7378] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1861.351491][ T7378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.360289][ T7378] usb 6-1: Product: syz [ 1861.364998][ T7378] usb 6-1: Manufacturer: syz [ 1861.370032][ T7378] usb 6-1: SerialNumber: syz [ 1861.779116][ T7378] usb 6-1: 0:2 : does not exist [ 1861.786653][ T7378] usb 6-1: unit 255 not found! [ 1862.076723][ T7378] usb 6-1: USB disconnect, device number 12 [ 1863.872304][T16216] udevd[16216]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1864.552791][T17987] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1864.816249][T17990] lo speed is unknown, defaulting to 1000 [ 1864.873496][T17992] program syz.2.3918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1865.721858][T17999] siw: device registration error -23 [ 1869.302832][T18025] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3932'. [ 1869.984370][T18029] fuse: Unknown parameter 'fd00000000000000000000003' [ 1872.523471][T18039] lo speed is unknown, defaulting to 1000 [ 1872.847728][T18046] siw: device registration error -23 [ 1873.730728][ T30] audit: type=1326 audit(2000001532.510:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.754790][ T30] audit: type=1326 audit(2000001532.510:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.777807][ T30] audit: type=1326 audit(2000001532.520:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.800870][ T30] audit: type=1326 audit(2000001532.520:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.823725][ T30] audit: type=1326 audit(2000001532.520:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.846572][ T30] audit: type=1326 audit(2000001532.520:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.869306][ T30] audit: type=1326 audit(2000001532.520:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.892198][ T30] audit: type=1326 audit(2000001532.520:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.915166][ T30] audit: type=1326 audit(2000001532.530:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1873.937945][ T30] audit: type=1326 audit(2000001532.530:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.7.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 1875.104610][T18057] siw: device registration error -23 [ 1875.115211][T18057] batadv_slave_0: mtu less than device minimum [ 1876.928008][T18083] Bluetooth: MGMT ver 1.23 [ 1877.644547][T18091] siw: device registration error -23 [ 1877.654522][T18091] batadv_slave_0: mtu less than device minimum [ 1878.568161][T18092] lo speed is unknown, defaulting to 1000 [ 1879.111295][ T8425] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 1882.673134][T18131] siw: device registration error -23 [ 1882.681829][T18131] batadv_slave_0: mtu less than device minimum [ 1885.047986][T18151] lo speed is unknown, defaulting to 1000 [ 1885.324558][T18157] siw: device registration error -23 [ 1885.390977][T18147] lo speed is unknown, defaulting to 1000 [ 1885.613581][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1886.054173][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 1886.133191][ T45] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1886.142767][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.151328][ T45] usb 3-1: Product: syz [ 1886.155918][ T45] usb 3-1: Manufacturer: syz [ 1886.160761][ T45] usb 3-1: SerialNumber: syz [ 1886.257936][ T45] usb 3-1: config 0 descriptor?? [ 1886.285881][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1886.294453][ T45] usb 3-1: setting power ON [ 1886.299190][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 1886.380549][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1886.450604][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1886.465368][ T45] usb 3-1: media controller created [ 1886.562255][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1886.709188][T18166] dvb-usb: bulk message failed: -22 (3/0) [ 1886.715606][T18166] usb 3-1: gpio_write failed. [ 1886.720515][T18166] dvb-usb: bulk message failed: -22 (3/0) [ 1887.441056][ T45] usb 3-1: selecting invalid altsetting 6 [ 1887.447422][ T45] usb 3-1: digital interface selection failed (-22) [ 1887.454402][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1887.541554][ T45] usb 3-1: setting power OFF [ 1887.547119][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 1887.553063][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1887.563894][ T45] (NULL device *): no alternate interface [ 1887.604159][T18173] siw: device registration error -23 [ 1887.618643][T18173] batadv_slave_0: mtu less than device minimum [ 1888.059449][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1888.081716][ T45] usb 3-1: USB disconnect, device number 5 [ 1888.435199][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1888.442011][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1892.833222][T18208] lo speed is unknown, defaulting to 1000 [ 1893.035579][T16799] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1893.054737][ T7378] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1893.849252][ T7378] usb 8-1: config index 0 descriptor too short (expected 1051, got 27) [ 1893.858131][ T7378] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 1893.866717][ T7378] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1893.876017][ T7378] usb 8-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 1893.887237][ T7378] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1893.895107][T16799] usb 9-1: Using ep0 maxpacket: 8 [ 1893.984038][T16799] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1893.993670][T16799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.001971][T16799] usb 9-1: Product: syz [ 1894.006775][T16799] usb 9-1: Manufacturer: syz [ 1894.011606][T16799] usb 9-1: SerialNumber: syz [ 1894.019801][T18216] siw: device registration error -23 [ 1894.044257][ T7378] usb 8-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 1894.054009][ T7378] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.062308][ T7378] usb 8-1: Product: syz [ 1894.066925][ T7378] usb 8-1: Manufacturer: syz [ 1894.071764][ T7378] usb 8-1: SerialNumber: syz [ 1894.079573][T18216] batadv_slave_0: mtu less than device minimum [ 1894.102467][T16799] usb 9-1: config 0 descriptor?? [ 1894.186305][T16799] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1894.194707][T16799] usb 9-1: setting power ON [ 1894.199502][T16799] dvb-usb: bulk message failed: -22 (2/0) [ 1894.555868][ T7378] usb 8-1: config 0 descriptor?? [ 1894.572906][T16799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1894.595768][T16799] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1894.604896][T16799] usb 9-1: media controller created [ 1894.702393][T16799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1894.847816][T18225] netlink: 'syz.2.4003': attribute type 1 has an invalid length. [ 1894.925415][T18225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1894.985345][T18225] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1895.003844][T16799] usb 9-1: selecting invalid altsetting 6 [ 1895.010107][T16799] usb 9-1: digital interface selection failed (-22) [ 1895.017943][T16799] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1895.030782][T16799] usb 9-1: setting power OFF [ 1895.036021][T16799] dvb-usb: bulk message failed: -22 (2/0) [ 1895.042266][T16799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1895.052771][T16799] (NULL device *): no alternate interface [ 1895.333086][T16799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1895.505528][T16799] usb 9-1: USB disconnect, device number 53 [ 1898.860528][ T7378] keyspan 8-1:0.0: Keyspan 4 port adapter converter detected [ 1898.868841][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 1898.877128][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 1898.887212][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 1898.895450][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 1899.037428][T18241] loop6: detected capacity change from 0 to 7 [ 1899.055146][ T7378] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1899.068612][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 82 [ 1899.076931][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 1899.077149][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.093037][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.101188][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.109246][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.117318][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.125559][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.133614][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.141604][T18241] ldm_validate_partition_table(): Disk read failed. [ 1899.148603][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.156774][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.165020][T18241] Buffer I/O error on dev loop6, logical block 0, async page read [ 1899.173135][T18241] Dev loop6: unable to read RDB block 0 [ 1899.180234][T18241] loop6: unable to read partition table [ 1899.235760][ T7378] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1899.249086][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 1899.257603][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 3 [ 1899.278295][T18241] loop6: partition table beyond EOD, truncated [ 1899.285134][T18241] loop_reread_partitions: partition scan of loop6 (3I>9tPΪóA8}!3#yXe) failed (rc=-5) [ 1899.380585][ T7378] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1899.392130][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 84 [ 1899.400301][ T7378] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 1899.503792][ T7378] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1899.605090][ T7378] usb 8-1: USB disconnect, device number 4 [ 1899.687971][ T7378] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1899.790942][ T7378] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1899.925676][ T7378] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1900.107374][T18252] lo speed is unknown, defaulting to 1000 [ 1900.263240][ T7378] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1900.276585][ T7378] keyspan 8-1:0.0: device disconnected [ 1900.564668][ T5146] ldm_validate_partition_table(): Disk read failed. [ 1900.571891][ T5146] Dev loop6: unable to read RDB block 0 [ 1900.578244][ T5146] loop6: unable to read partition table [ 1900.626096][ T5146] loop6: partition table beyond EOD, truncated [ 1900.764122][T18259] siw: device registration error -23 [ 1900.773152][T18259] batadv_slave_0: mtu less than device minimum [ 1900.803656][T16799] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1900.973895][T16799] usb 4-1: Using ep0 maxpacket: 8 [ 1901.050596][T16799] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1901.060883][T16799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.069307][T16799] usb 4-1: Product: syz [ 1901.073778][T16799] usb 4-1: Manufacturer: syz [ 1901.078581][T16799] usb 4-1: SerialNumber: syz [ 1901.105199][T18264] netlink: 'syz.7.4016': attribute type 1 has an invalid length. [ 1901.271084][T18264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1901.324862][T16799] usb 4-1: config 0 descriptor?? [ 1901.344625][T16799] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1901.352870][T16799] usb 4-1: setting power ON [ 1901.357762][T16799] dvb-usb: bulk message failed: -22 (2/0) [ 1901.378061][T16799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1901.391872][T16799] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1901.400844][T16799] usb 4-1: media controller created [ 1901.438989][T18266] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4016'. [ 1901.523092][T16799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1901.933932][T18273] xt_hashlimit: max too large, truncated to 1048576 [ 1902.750247][T16799] usb 4-1: selecting invalid altsetting 6 [ 1902.758205][T16799] usb 4-1: digital interface selection failed (-22) [ 1902.767383][T16799] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1903.801174][T16799] usb 4-1: setting power OFF [ 1903.806498][T16799] dvb-usb: bulk message failed: -22 (2/0) [ 1903.812836][T16799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1903.822844][T16799] (NULL device *): no alternate interface [ 1903.840717][ T8425] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1903.898264][ T8425] Bluetooth: hci0: command 0x0406 tx timeout [ 1905.381512][T16799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1906.057249][T16799] usb 4-1: USB disconnect, device number 6 [ 1907.487450][T18299] siw: device registration error -23 [ 1907.497633][T18299] batadv_slave_0: mtu less than device minimum [ 1907.701628][T18302] netlink: 'syz.5.4030': attribute type 1 has an invalid length. [ 1907.812665][T18302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1907.959866][T18302] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4030'. [ 1908.165038][T18300] lo speed is unknown, defaulting to 1000 [ 1909.869509][T18321] syz.8.4036 (18321): drop_caches: 2 [ 1913.024614][T18349] netlink: 'syz.8.4045': attribute type 1 has an invalid length. [ 1913.132446][T18349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1913.161736][T18354] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4045'. [ 1913.320426][T18353] batadv_slave_0: mtu less than device minimum [ 1913.405022][T18356] netlink: 4492 bytes leftover after parsing attributes in process `syz.2.4047'. [ 1914.365584][T18362] loop8: detected capacity change from 0 to 8 [ 1914.417660][T18362] Dev loop8: unable to read RDB block 8 [ 1914.424519][T18362] loop8: unable to read partition table [ 1914.504924][T18362] loop8: partition table beyond EOD, truncated [ 1914.511889][T18362] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1916.564628][T18369] random: crng reseeded on system resumption [ 1919.156403][T18381] lo speed is unknown, defaulting to 1000 [ 1920.083461][T18390] netlink: 'syz.5.4058': attribute type 1 has an invalid length. [ 1920.202009][T18390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1920.248590][T18391] netlink: 4492 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1920.640110][T18395] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4058'. [ 1920.792039][T18396] batadv_slave_0: mtu less than device minimum [ 1921.507418][T18401] lo speed is unknown, defaulting to 1000 [ 1926.695007][T18427] random: crng reseeded on system resumption [ 1927.196258][T18432] netlink: 4492 bytes leftover after parsing attributes in process `syz.3.4073'. [ 1927.942914][T18438] netlink: 'syz.3.4074': attribute type 1 has an invalid length. [ 1928.054675][T18440] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1928.054962][T18438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1928.266485][T18436] lo speed is unknown, defaulting to 1000 [ 1929.789986][T18444] batadv_slave_0: mtu less than device minimum [ 1930.063834][T18455] input: syz0 as /devices/virtual/input/input25 [ 1933.544795][T18472] lo speed is unknown, defaulting to 1000 [ 1933.652565][T18477] netlink: 'syz.5.4086': attribute type 1 has an invalid length. [ 1933.837318][T18477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1933.958524][T18481] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4086'. [ 1934.337199][T18486] random: crng reseeded on system resumption [ 1935.159639][T18489] xt_hashlimit: max too large, truncated to 1048576 [ 1936.668917][T18494] lo speed is unknown, defaulting to 1000 [ 1939.249765][T18518] netlink: 'syz.3.4100': attribute type 4 has an invalid length. [ 1939.391388][T18519] netlink: 'syz.3.4100': attribute type 4 has an invalid length. [ 1940.139899][T18524] siw: device registration error -23 [ 1940.148990][T18524] batadv_slave_0: mtu less than device minimum [ 1940.245889][T18529] xt_hashlimit: max too large, truncated to 1048576 [ 1940.676616][T18528] lo speed is unknown, defaulting to 1000 [ 1941.352034][T18540] program syz.5.4105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1942.650771][T18549] lo speed is unknown, defaulting to 1000 [ 1946.368317][T18570] siw: device registration error -23 [ 1946.376989][T18570] batadv_slave_0: mtu less than device minimum [ 1946.974416][ T45] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1947.280579][ T45] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1947.289477][ T45] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.300102][ T45] usb 9-1: config 0 has no interface number 0 [ 1947.306937][ T45] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 1947.318845][ T45] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1947.330274][ T45] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1947.340730][ T45] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1947.354038][ T45] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1947.880968][ T45] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1947.890814][ T45] usb 9-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1947.899510][ T45] usb 9-1: Product: syz [ 1947.904025][ T45] usb 9-1: SerialNumber: syz [ 1948.055471][ T45] usb 9-1: config 0 descriptor?? [ 1949.830639][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1949.837680][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1950.391115][ T45] usb 9-1: Can not set alternate setting to 1, error: -71 [ 1950.398870][ T45] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1950.491701][ T45] usb 9-1: USB disconnect, device number 54 [ 1951.070043][T18581] program syz.2.4120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1952.010181][T18597] lo speed is unknown, defaulting to 1000 [ 1953.061649][T18608] batadv_slave_0: mtu less than device minimum [ 1954.929576][T18622] program syz.2.4134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1956.202545][T18632] siw: device registration error -23 [ 1956.213457][T18632] batadv_slave_0: mtu less than device minimum [ 1957.259319][T18651] lo speed is unknown, defaulting to 1000 [ 1961.819205][T18664] program syz.8.4150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1965.567134][T18684] siw: device registration error -23 [ 1965.575703][T18684] batadv_slave_0: mtu less than device minimum [ 1967.980654][T18702] lo speed is unknown, defaulting to 1000 [ 1968.367298][T18707] program syz.3.4165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1974.376047][T18746] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1974.857172][T18749] program syz.8.4179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1977.144808][T18763] lo speed is unknown, defaulting to 1000 [ 1979.886698][T18788] program syz.7.4195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1980.807393][T18797] fuse: Unknown parameter 'grou00000000000000000000' [ 1981.861486][T18810] lo speed is unknown, defaulting to 1000 [ 1982.645890][T18826] program syz.5.4208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1984.422601][T18827] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1984.521831][ T1874] IPVS: starting estimator thread 0... [ 1984.643985][T18835] IPVS: using max 240 ests per chain, 12000 per kthread [ 1985.501650][T18848] fuse: Unknown parameter 'grou00000000000000000000' [ 1988.738627][ T1874] IPVS: starting estimator thread 0... [ 1988.746332][T18864] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1988.835479][T18874] IPVS: using max 240 ests per chain, 12000 per kthread [ 1992.156675][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1992.156751][ T30] audit: type=1326 audit(2000001650.990:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18875 comm="syz.7.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7fc00000 [ 1992.647903][ T30] audit: type=1326 audit(2000001651.040:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18875 comm="syz.7.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9967f8e969 code=0x7fc00000 [ 1994.300348][T18900] fuse: Unknown parameter 'group_i00000000000000000000' [ 1997.485387][ T30] audit: type=1326 audit(2000001656.320:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.7.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7fc00000 [ 1997.508052][ C1] vkms_vblank_simulate: vblank timer overrun [ 2006.381103][ T8425] Bluetooth: hci2: command 0x0406 tx timeout [ 2006.483788][T19013] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2006.490465][T19013] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2006.636967][T19013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2006.644163][T19013] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2006.736772][T19013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2006.743726][T19013] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2006.789095][T19013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2006.796160][T19013] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2006.817032][T19013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2006.824132][T19013] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2007.233702][T16799] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 2007.541370][T16799] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 2007.550722][T16799] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.562105][T16799] usb 9-1: config 0 has no interface number 0 [ 2007.569338][T16799] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 2007.581835][T16799] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2007.593512][T16799] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2007.604412][T16799] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2007.618070][T16799] usb 9-1: config 0 interface 52 has no altsetting 0 [ 2008.099547][T16799] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 2008.109196][T16799] usb 9-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 2008.117871][T16799] usb 9-1: Product: syz [ 2008.122323][T16799] usb 9-1: SerialNumber: syz [ 2008.373647][T16799] usb 9-1: config 0 descriptor?? [ 2008.544638][ T8425] Bluetooth: hci2: command 0x0406 tx timeout [ 2008.697408][ T8425] Bluetooth: hci0: command 0x0406 tx timeout [ 2008.773576][ T8425] Bluetooth: hci3: command 0x0406 tx timeout [ 2008.875247][ T8425] Bluetooth: hci4: command 0x0406 tx timeout [ 2008.881657][T18271] Bluetooth: hci1: command 0x0406 tx timeout [ 2010.245068][T16799] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2010.464241][ T7378] usb 9-1: USB disconnect, device number 55 [ 2010.671959][T16799] usb 3-1: Using ep0 maxpacket: 32 [ 2010.773717][T18271] Bluetooth: hci0: command 0x0406 tx timeout [ 2010.845873][T16799] usb 3-1: config 0 has an invalid interface number: 155 but max is 0 [ 2010.854834][T16799] usb 3-1: config 0 has no interface number 0 [ 2010.876496][T18271] Bluetooth: hci3: command 0x0406 tx timeout [ 2010.933748][T18271] Bluetooth: hci1: command 0x0406 tx timeout [ 2010.940449][ T8425] Bluetooth: hci4: command 0x0406 tx timeout [ 2011.246204][T16799] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 2011.255973][T16799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.264565][T16799] usb 3-1: Product: syz [ 2011.268977][T16799] usb 3-1: Manufacturer: syz [ 2011.274078][T16799] usb 3-1: SerialNumber: syz [ 2011.277988][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2011.285618][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2011.533435][T16799] usb 3-1: config 0 descriptor?? [ 2014.236415][T16799] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.155/input/input26 [ 2014.274488][ T5131] bcm5974 3-1:0.155: could not read from device [ 2014.303376][ T5131] bcm5974 3-1:0.155: could not read from device [ 2014.373581][ T5131] bcm5974 3-1:0.155: could not read from device [ 2014.396417][T16799] usb 3-1: USB disconnect, device number 6 [ 2014.435595][ T5131] bcm5974 3-1:0.155: could not read from device [ 2014.480542][T18271] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 2016.729076][T19092] program syz.5.4299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2016.739960][ T1874] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 2016.958388][ T1874] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 2016.967209][ T1874] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.977862][ T1874] usb 9-1: config 0 has no interface number 0 [ 2016.984305][ T1874] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 2016.996411][ T1874] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2017.008032][ T1874] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2017.018197][ T1874] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2017.031549][ T1874] usb 9-1: config 0 interface 52 has no altsetting 0 [ 2017.075493][ T1874] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 2017.084969][ T1874] usb 9-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 2017.093728][ T1874] usb 9-1: Product: syz [ 2017.098129][ T1874] usb 9-1: SerialNumber: syz [ 2017.122150][ T1874] usb 9-1: config 0 descriptor?? [ 2017.516664][T18271] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 2019.944604][ T1874] usb 9-1: USB disconnect, device number 56 [ 2020.442923][T19130] program syz.3.4314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2021.118411][T19145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2022.253524][T16799] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 2022.467837][T16799] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 2022.476635][T16799] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.487121][T16799] usb 9-1: config 0 has no interface number 0 [ 2022.493545][T16799] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 2022.505397][T16799] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2022.516755][T16799] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2022.526960][T16799] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2022.540458][T16799] usb 9-1: config 0 interface 52 has no altsetting 0 [ 2022.749442][T16799] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 2022.759557][T16799] usb 9-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 2022.768255][T16799] usb 9-1: Product: syz [ 2022.772641][T16799] usb 9-1: SerialNumber: syz [ 2023.761713][T16799] usb 9-1: config 0 descriptor?? [ 2024.956030][T19175] program syz.3.4329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2025.802946][T16799] usb 9-1: USB disconnect, device number 57 [ 2030.674499][T19212] program syz.2.4342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2031.838116][T19235] fuse: Bad value for 'user_id' [ 2031.843698][T19235] fuse: Bad value for 'user_id' [ 2035.535413][T18271] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 2035.807853][T19256] program syz.5.4356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2036.905690][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4365'. [ 2037.250944][T19280] fuse: Bad value for 'user_id' [ 2037.256688][T19280] fuse: Bad value for 'user_id' [ 2037.591038][T18271] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 2038.546592][T19301] program syz.3.4375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2038.565700][T16799] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2038.763559][T16799] usb 3-1: Using ep0 maxpacket: 8 [ 2038.791691][T16799] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2038.805008][T16799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.813819][T16799] usb 3-1: Product: syz [ 2038.818246][T16799] usb 3-1: Manufacturer: syz [ 2038.823111][T16799] usb 3-1: SerialNumber: syz [ 2038.858615][T16799] usb 3-1: config 0 descriptor?? [ 2038.883860][T16799] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2038.892230][T16799] usb 3-1: setting power ON [ 2038.897240][T16799] dvb-usb: bulk message failed: -22 (2/0) [ 2038.914351][T16799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2038.929802][T16799] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2038.939002][T16799] usb 3-1: media controller created [ 2039.015223][T16799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2039.207518][T19312] netlink: 'syz.3.4379': attribute type 10 has an invalid length. [ 2039.216033][T19312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4379'. [ 2039.232128][T19312] bridge0: port 3(dummy0) entered blocking state [ 2039.239359][T19312] bridge0: port 3(dummy0) entered disabled state [ 2039.246464][T19312] dummy0: entered allmulticast mode [ 2039.255481][T19312] dummy0: entered promiscuous mode [ 2039.303164][T16799] usb 3-1: selecting invalid altsetting 6 [ 2039.309355][T16799] usb 3-1: digital interface selection failed (-22) [ 2039.316565][T16799] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2039.332404][T16799] usb 3-1: setting power OFF [ 2039.337699][T16799] dvb-usb: bulk message failed: -22 (2/0) [ 2039.343858][T16799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2039.353638][T16799] (NULL device *): no alternate interface [ 2039.606447][T19317] lo speed is unknown, defaulting to 1000 [ 2039.855476][T16799] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2039.872485][T16799] usb 3-1: USB disconnect, device number 7 [ 2040.016297][T18271] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 2040.250227][T19328] fuse: Bad value for 'user_id' [ 2040.257340][T19328] fuse: Bad value for 'user_id' [ 2041.277994][T19340] program syz.5.4389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2041.868779][T19353] program syz.5.4395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2041.954052][ T45] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2042.124643][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 2042.191202][ T45] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2042.201066][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.209499][ T45] usb 8-1: Product: syz [ 2042.214087][ T45] usb 8-1: Manufacturer: syz [ 2042.218925][ T45] usb 8-1: SerialNumber: syz [ 2042.312203][ T45] usb 8-1: config 0 descriptor?? [ 2042.369416][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2042.378056][ T45] usb 8-1: setting power ON [ 2042.382819][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 2042.438034][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2042.509382][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2042.520649][ T45] usb 8-1: media controller created [ 2042.543382][T19351] dvb-usb: bulk message failed: -22 (3/0) [ 2042.625659][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2042.723103][T19369] fuse: Bad value for 'fd' [ 2042.868072][ T45] usb 8-1: selecting invalid altsetting 6 [ 2042.877433][ T45] usb 8-1: digital interface selection failed (-22) [ 2042.886017][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2042.935766][ T45] usb 8-1: setting power OFF [ 2042.940881][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 2042.947092][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2042.956725][ T45] (NULL device *): no alternate interface [ 2043.290198][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2043.425376][ T45] usb 8-1: USB disconnect, device number 5 [ 2044.191429][T19379] program syz.2.4405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2044.402429][ T30] audit: type=1326 audit(2000001703.220:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.425692][ T30] audit: type=1326 audit(2000001703.220:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.448791][ T30] audit: type=1326 audit(2000001703.230:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.471752][ T30] audit: type=1326 audit(2000001703.230:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.494818][ T30] audit: type=1326 audit(2000001703.230:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.517679][ T30] audit: type=1326 audit(2000001703.230:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.540656][ T30] audit: type=1326 audit(2000001703.230:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.563516][ T30] audit: type=1326 audit(2000001703.230:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.586358][ T30] audit: type=1326 audit(2000001703.240:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9967f8e969 code=0x7ffc0000 [ 2044.609273][ T30] audit: type=1326 audit(2000001703.240:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.7.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9967f85927 code=0x7ffc0000 [ 2045.577540][T19391] program syz.3.4409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2046.744979][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2046.975793][T19404] cgroup2: Unknown parameter 'smackfsdef' [ 2047.014124][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 2047.065048][ T45] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2047.074712][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.082982][ T45] usb 3-1: Product: syz [ 2047.087607][ T45] usb 3-1: Manufacturer: syz [ 2047.092471][ T45] usb 3-1: SerialNumber: syz [ 2047.201526][ T45] usb 3-1: config 0 descriptor?? [ 2047.272353][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2047.280971][ T45] usb 3-1: setting power ON [ 2047.287602][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 2047.354483][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2047.387379][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2047.396623][ T45] usb 3-1: media controller created [ 2047.446603][T19402] dvb-usb: bulk message failed: -22 (3/0) [ 2047.534332][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2047.669678][ T45] usb 3-1: selecting invalid altsetting 6 [ 2047.676224][ T45] usb 3-1: digital interface selection failed (-22) [ 2047.683048][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2047.702141][ T45] usb 3-1: setting power OFF [ 2047.708243][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 2047.714415][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2047.724071][ T45] (NULL device *): no alternate interface [ 2047.804166][T19414] program syz.5.4420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2048.025473][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2048.098058][ T45] usb 3-1: USB disconnect, device number 8 [ 2048.382028][T19421] program syz.5.4423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2048.654985][ T45] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2048.842124][ T45] usb 8-1: Using ep0 maxpacket: 32 [ 2048.909540][ T45] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2048.951342][ T45] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2048.960994][ T45] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2048.969785][ T45] usb 8-1: Product: syz [ 2048.974266][ T45] usb 8-1: Manufacturer: syz [ 2048.978991][ T45] usb 8-1: SerialNumber: syz [ 2049.549732][ T45] usb 8-1: config 0 descriptor?? [ 2049.558988][T19423] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2049.749545][T19438] siw: device registration error -23 [ 2049.772669][T19438] batadv_slave_0: mtu less than device minimum [ 2050.800839][T19448] program syz.5.4433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2051.570653][ T1874] usb 8-1: USB disconnect, device number 6 [ 2051.716110][ T45] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2051.735341][T19458] program syz.8.4438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2051.902233][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 2051.915372][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4441'. [ 2051.981115][ T45] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2051.990748][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.999276][ T45] usb 6-1: Product: syz [ 2052.003906][ T45] usb 6-1: Manufacturer: syz [ 2052.008769][ T45] usb 6-1: SerialNumber: syz [ 2052.166591][ T45] usb 6-1: config 0 descriptor?? [ 2052.219059][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2052.227443][ T45] usb 6-1: setting power ON [ 2052.232169][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 2052.303012][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2052.369698][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2052.379254][ T45] usb 6-1: media controller created [ 2052.415612][T19455] dvb-usb: bulk message failed: -22 (3/0) [ 2052.489561][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2052.732488][ T45] usb 6-1: selecting invalid altsetting 6 [ 2052.738979][ T45] usb 6-1: digital interface selection failed (-22) [ 2052.746132][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2052.774247][ T45] usb 6-1: setting power OFF [ 2052.779255][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 2052.785787][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2052.796196][ T45] (NULL device *): no alternate interface [ 2052.817687][T19472] program syz.3.4445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2053.637409][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2053.685262][ T45] usb 6-1: USB disconnect, device number 13 [ 2053.794040][T19480] siw: device registration error -23 [ 2053.826912][T19480] batadv_slave_0: mtu less than device minimum [ 2054.609034][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4455'. [ 2055.116712][T19505] program syz.8.4460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2055.564054][T16799] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2056.069158][T19521] netdevsim netdevsim2: Direct firmware load for .Q failed with error -2 [ 2056.078660][T19521] netdevsim netdevsim2: Falling back to sysfs fallback for: .Q [ 2056.319402][T19523] siw: device registration error -23 [ 2056.328040][T19523] batadv_slave_0: mtu less than device minimum [ 2056.363559][T16799] usb 6-1: Using ep0 maxpacket: 8 [ 2056.398660][T16799] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2056.408411][T16799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.416844][T16799] usb 6-1: Product: syz [ 2056.421245][T16799] usb 6-1: Manufacturer: syz [ 2056.426140][T16799] usb 6-1: SerialNumber: syz [ 2056.510746][T16799] usb 6-1: config 0 descriptor?? [ 2056.569558][T16799] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2056.578139][T16799] usb 6-1: setting power ON [ 2056.582875][T16799] dvb-usb: bulk message failed: -22 (2/0) [ 2056.598876][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4470'. [ 2056.639633][T16799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2056.674412][T16799] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2056.683380][T16799] usb 6-1: media controller created [ 2056.752068][T16799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2056.771722][T19513] dvb-usb: bulk message failed: -22 (3/0) [ 2056.777946][T19513] ===================================================== [ 2056.785436][T19513] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 2056.792874][T19513] cxusb_i2c_xfer+0x1303/0x18e0 [ 2056.798140][T19513] __i2c_transfer+0xec7/0x30e0 [ 2056.803102][T19513] i2c_transfer+0x300/0x4b0 [ 2056.807909][T19513] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 2056.813046][T19513] i2cdev_ioctl+0xc36/0xf40 [ 2056.817899][T19513] __se_sys_ioctl+0x23c/0x400 [ 2056.822930][T19513] __x64_sys_ioctl+0x97/0xe0 [ 2056.827887][T19513] x64_sys_call+0x1ebe/0x3db0 [ 2056.832809][T19513] do_syscall_64+0xd9/0x1b0 [ 2056.837764][T19513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.843962][T19513] [ 2056.846386][T19513] Local variable i.i838 created at: [ 2056.851724][T19513] cxusb_i2c_xfer+0x304/0x18e0 [ 2056.857303][T19513] __i2c_transfer+0xec7/0x30e0 [ 2056.862265][T19513] [ 2056.864917][T19513] CPU: 0 UID: 0 PID: 19513 Comm: syz.5.4461 Not tainted 6.15.0-syzkaller #0 PREEMPT(undef) [ 2056.875414][T19513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2056.885997][T19513] ===================================================== [ 2056.893069][T19513] Disabling lock debugging due to kernel taint [ 2056.899564][T19513] Kernel panic - not syncing: kmsan.panic set ... [ 2056.906169][T19513] CPU: 0 UID: 0 PID: 19513 Comm: syz.5.4461 Tainted: G B 6.15.0-syzkaller #0 PREEMPT(undef) [ 2056.918029][T19513] Tainted: [B]=BAD_PAGE [ 2056.922310][T19513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2056.932570][T19513] Call Trace: [ 2056.935990][T19513] [ 2056.939066][T19513] __dump_stack+0x26/0x30 [ 2056.943632][T19513] dump_stack_lvl+0x53/0x270 [ 2056.948479][T19513] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2056.954596][T19513] dump_stack+0x1e/0x25 [ 2056.958966][T19513] panic+0x4bd/0xd50 [ 2056.963136][T19513] kmsan_report+0x29d/0x2a0 [ 2056.967896][T19513] ? vprintk_default+0x3f/0x50 [ 2056.972986][T19513] ? __msan_warning+0x96/0x120 [ 2056.977963][T19513] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 2056.983219][T19513] ? __i2c_transfer+0xec7/0x30e0 [ 2056.988353][T19513] ? i2c_transfer+0x300/0x4b0 [ 2056.993225][T19513] ? i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 2056.998550][T19513] ? i2cdev_ioctl+0xc36/0xf40 [ 2057.003423][T19513] ? __se_sys_ioctl+0x23c/0x400 [ 2057.008502][T19513] ? __x64_sys_ioctl+0x97/0xe0 [ 2057.013502][T19513] ? x64_sys_call+0x1ebe/0x3db0 [ 2057.018603][T19513] ? do_syscall_64+0xd9/0x1b0 [ 2057.023501][T19513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2057.029785][T19513] ? kmsan_get_metadata+0x105/0x1b0 [ 2057.035214][T19513] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2057.041758][T19513] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2057.048021][T19513] ? kmsan_get_metadata+0x105/0x1b0 [ 2057.053487][T19513] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2057.060050][T19513] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2057.066330][T19513] ? mutex_unlock+0x29/0x50 [ 2057.071042][T19513] ? kmsan_get_metadata+0x105/0x1b0 [ 2057.076463][T19513] __msan_warning+0x96/0x120 [ 2057.081263][T19513] cxusb_i2c_xfer+0x1303/0x18e0 [ 2057.086447][T19513] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2057.092723][T19513] ? kmsan_get_metadata+0x105/0x1b0 [ 2057.098132][T19513] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2057.104205][T19513] ? kmsan_get_metadata+0x105/0x1b0 [ 2057.109692][T19513] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 2057.115106][T19513] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 2057.120518][T19513] __i2c_transfer+0xec7/0x30e0 [ 2057.125482][T19513] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2057.132046][T19513] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 2057.137945][T19513] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2057.144207][T19513] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 2057.150112][T19513] i2c_transfer+0x300/0x4b0 [ 2057.154800][T19513] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 2057.159970][T19513] i2cdev_ioctl+0xc36/0xf40 [ 2057.164686][T19513] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2057.169899][T19513] __se_sys_ioctl+0x23c/0x400 [ 2057.174762][T19513] __x64_sys_ioctl+0x97/0xe0 [ 2057.179546][T19513] x64_sys_call+0x1ebe/0x3db0 [ 2057.184434][T19513] do_syscall_64+0xd9/0x1b0 [ 2057.189153][T19513] ? clear_bhb_loop+0x40/0x90 [ 2057.194005][T19513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2057.200078][T19513] RIP: 0033:0x7f5807d8e969 [ 2057.204637][T19513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2057.224453][T19513] RSP: 002b:00007f5808bfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2057.233052][T19513] RAX: ffffffffffffffda RBX: 00007f5807fb5fa0 RCX: 00007f5807d8e969 [ 2057.241170][T19513] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 2057.249264][T19513] RBP: 00007f5807e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2057.257368][T19513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2057.265466][T19513] R13: 0000000000000000 R14: 00007f5807fb5fa0 R15: 00007ffebd795b08 [ 2057.273618][T19513] [ 2057.277149][T19513] Kernel Offset: disabled [ 2057.281563][T19513] Rebooting in 86400 seconds..