last executing test programs: 2m41.843636207s ago: executing program 3 (id=22): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1) 2m40.238571344s ago: executing program 3 (id=26): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x64048080) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) listen(r1, 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendmmsg$alg(r4, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb", 0x1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0}) 2m31.145711733s ago: executing program 3 (id=37): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2m23.283342505s ago: executing program 3 (id=50): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x2, 0x1}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f, 0xa}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m21.541612465s ago: executing program 3 (id=52): socket$can_raw(0x1d, 0x3, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0xfffc, @loopback}, 0x10, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x10, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) 2m17.507968477s ago: executing program 3 (id=59): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0xc482, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc}) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180600000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 2m1.552361121s ago: executing program 32 (id=59): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0xc482, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc}) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180600000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 1m52.306310091s ago: executing program 4 (id=100): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x64048080) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100), 0x0) listen(r1, 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendmmsg$alg(r4, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb", 0x1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0}) 1m51.217963732s ago: executing program 4 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) 1m47.744452244s ago: executing program 4 (id=106): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x74e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_enter(r7, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r10 = accept$alg(r9, 0x0, 0x0) write$binfmt_script(r10, &(0x7f0000000600), 0xfec8) recvmmsg(r10, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/99, 0x63}], 0x2}, 0x9}], 0x1, 0xcb, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x10201}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r11, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r12, 0x0, 0xffffffffffffffff, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 1m46.305387669s ago: executing program 4 (id=107): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1) 1m41.190084968s ago: executing program 4 (id=119): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000880000008"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) getpid() socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2000600) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x5, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 1m37.576854586s ago: executing program 4 (id=121): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x74e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_enter(r6, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) recvmmsg(r8, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/99, 0x63}], 0x2}, 0x9}], 0x1, 0xcb, 0x0) 1m22.464444971s ago: executing program 33 (id=121): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x74e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_enter(r6, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) recvmmsg(r8, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/99, 0x63}], 0x2}, 0x9}], 0x1, 0xcb, 0x0) 42.186913051s ago: executing program 5 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x804) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9f0000000000000030000000300000000400000002000000000000110300000000000000000800000500000d000000000000000000000000020000000000000c020000000000610000000000"], 0x0, 0x4c, 0x0, 0x0, 0xffffffff}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x37, 0x1, {0x1, 0x1, 0x400, 0x0, 0x1, '-'}}, 0x1f) 29.989627699s ago: executing program 2 (id=239): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 29.715344802s ago: executing program 5 (id=242): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0xc482, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180600000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 29.699071293s ago: executing program 2 (id=243): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 28.438574223s ago: executing program 2 (id=246): pipe(&(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010000f0ffffffffffff000000", @ANYBLOB="7e53afc97bf88b9dbed608605c82ca996de2f6f2ae91f94addfede78d61ecdb7c1eb8890e6a57c68c1d9c39d", @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000810) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 27.611670985s ago: executing program 2 (id=249): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18a280fe0094a200000000000100010095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r5 = getpid() syz_pidfd_open(r5, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x72, 0x20000}, 0x20) 25.422592546s ago: executing program 2 (id=251): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0xb, 0x1, 0x4f424752, 0x2, 0x11, 0x5, 0x1, 0xa, 0x0, 0x1, 0x0, 0x4}}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) r6 = socket$rxrpc(0x21, 0x2, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d0001002cbd70dbdf2502", @ANYRES32=0x0, @ANYBLOB="01008000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname(r6, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x80) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x6, 0x1}, 0x20) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x11, 0x0, 0x1, [@nested={0xc, 0x23, 0x0, 0x1, [@typed={0x8, 0x12b, 0x0, 0x0, @pid}]}]}]}, 0x28}], 0x1}, 0x0) 22.466626879s ago: executing program 2 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x804) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9f0000000000000030000000300000000400000002000000000000110300000000000000000800000500000d000000000000000000000000020000000000000c020000000000610000000000"], 0x0, 0x4c, 0x0, 0x0, 0xffffffff}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x37, 0x1, {0x1, 0x1, 0x400, 0x0, 0x1, '-'}}, 0x1f) 21.484654054s ago: executing program 5 (id=255): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0xad088180, 0x0, 0xffffffffffffff31, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(r0, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.284601709s ago: executing program 5 (id=263): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 17.789275309s ago: executing program 6 (id=267): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x74e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_enter(r7, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r10 = accept$alg(r9, 0x0, 0x0) write$binfmt_script(r10, &(0x7f0000000600), 0xfec8) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x10201}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r12, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r11, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r12, 0x0, 0xffffffffffffffff, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 16.546943297s ago: executing program 1 (id=269): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) 16.147701077s ago: executing program 5 (id=270): socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 15.366500615s ago: executing program 6 (id=271): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.168980024s ago: executing program 1 (id=273): socket(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 14.975215315s ago: executing program 6 (id=274): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 14.398090954s ago: executing program 1 (id=276): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00f018ff09010800000000fe1c0000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0xff, 0x1, 0x0, 0x4, @random="48bd00"}, 0x10) 12.947477867s ago: executing program 0 (id=278): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x74e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_enter(r7, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r9 = accept$alg(r8, 0x0, 0x0) write$binfmt_script(r9, &(0x7f0000000600), 0xfec8) recvmmsg(r9, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/99, 0x63}], 0x2}, 0x9}], 0x1, 0xcb, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x10201}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r11, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 11.3786092s ago: executing program 0 (id=279): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x74e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_enter(r7, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r10 = accept$alg(r9, 0x0, 0x0) write$binfmt_script(r10, &(0x7f0000000600), 0xfec8) recvmmsg(r10, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/99, 0x63}], 0x2}, 0x9}], 0x1, 0xcb, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r12, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) close_range(r1, 0xffffffffffffffff, 0x0) 11.322073438s ago: executing program 1 (id=280): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(0x0, r0, 0x27) openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0) pipe2$9p(0x0, 0x84880) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x100) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x3216042, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 10.158650421s ago: executing program 0 (id=282): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 10.081935171s ago: executing program 5 (id=283): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0xc482, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180600000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 9.810648723s ago: executing program 6 (id=285): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000040)=0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 8.206376501s ago: executing program 6 (id=286): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.80935839s ago: executing program 7 (id=287): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007", @ANYRES32], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 7.76521112s ago: executing program 0 (id=288): socket(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 7.555296787s ago: executing program 1 (id=289): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) splice(r0, 0x0, r2, 0x0, 0x400000, 0x3) 7.481236266s ago: executing program 7 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_setup(0x36df, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa}) utimes(&(0x7f0000000100)='./file0\x00', 0x0) 7.412848649s ago: executing program 0 (id=291): socket(0x10, 0x803, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r2, 0x1000000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'pimreg0\x00', @multicast}) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) 7.302150073s ago: executing program 34 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x804) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9f0000000000000030000000300000000400000002000000000000110300000000000000000800000500000d000000000000000000000000020000000000000c020000000000610000000000"], 0x0, 0x4c, 0x0, 0x0, 0xffffffff}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x37, 0x1, {0x1, 0x1, 0x400, 0x0, 0x1, '-'}}, 0x1f) 5.545533685s ago: executing program 1 (id=293): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010000f0ffffffffffff000000", @ANYBLOB="7e53afc97bf88b9dbed608605c82ca996de2f6f2ae91f94addfede78d61ecdb7c1eb8890e6a57c68c1d9c39d", @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000810) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.437115495s ago: executing program 7 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 3.218599419s ago: executing program 7 (id=295): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.023825717s ago: executing program 7 (id=296): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 1.606339571s ago: executing program 7 (id=297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 175.153347ms ago: executing program 6 (id=298): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 0s ago: executing program 0 (id=299): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000880000008"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x5, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 83.813075][ T5804] cgroup: Unknown subsys name 'net' [ 83.959575][ T5804] cgroup: Unknown subsys name 'cpuset' [ 83.969180][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.488910][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.002215][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.028647][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.036716][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.045226][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.052953][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.061406][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.069429][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.082773][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.083574][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.095132][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.099223][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.104495][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.111408][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.117831][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.132795][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.133183][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.140724][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.148058][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.158100][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.161150][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.176800][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.180537][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.192557][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.193533][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.206863][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.214719][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.225077][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.232364][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.244328][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.252483][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.051197][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.107736][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.130746][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.260373][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 89.319804][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.345041][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 89.452065][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.459736][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.467242][ T5829] bridge_slave_0: entered allmulticast mode [ 89.474867][ T5829] bridge_slave_0: entered promiscuous mode [ 89.540325][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.547666][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.554957][ T5829] bridge_slave_1: entered allmulticast mode [ 89.562434][ T5829] bridge_slave_1: entered promiscuous mode [ 89.641087][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.648334][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.655627][ T5827] bridge_slave_0: entered allmulticast mode [ 89.663037][ T5827] bridge_slave_0: entered promiscuous mode [ 89.670822][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.678258][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.685476][ T5830] bridge_slave_0: entered allmulticast mode [ 89.692992][ T5830] bridge_slave_0: entered promiscuous mode [ 89.741809][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.748984][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.756450][ T5827] bridge_slave_1: entered allmulticast mode [ 89.763950][ T5827] bridge_slave_1: entered promiscuous mode [ 89.771534][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.779163][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.786591][ T5830] bridge_slave_1: entered allmulticast mode [ 89.794068][ T5830] bridge_slave_1: entered promiscuous mode [ 89.823252][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.836342][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.958010][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.965240][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.972386][ T5824] bridge_slave_0: entered allmulticast mode [ 89.980217][ T5824] bridge_slave_0: entered promiscuous mode [ 89.990487][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.024250][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.031588][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.039044][ T5823] bridge_slave_0: entered allmulticast mode [ 90.046604][ T5823] bridge_slave_0: entered promiscuous mode [ 90.058346][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.068428][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.075852][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.083028][ T5824] bridge_slave_1: entered allmulticast mode [ 90.090670][ T5824] bridge_slave_1: entered promiscuous mode [ 90.100409][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.110174][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.117442][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.124661][ T5825] bridge_slave_0: entered allmulticast mode [ 90.132302][ T5825] bridge_slave_0: entered promiscuous mode [ 90.142332][ T5829] team0: Port device team_slave_0 added [ 90.148692][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.156339][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.163715][ T5823] bridge_slave_1: entered allmulticast mode [ 90.171436][ T5823] bridge_slave_1: entered promiscuous mode [ 90.181097][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.214158][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.221471][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.228907][ T5825] bridge_slave_1: entered allmulticast mode [ 90.235451][ T52] Bluetooth: hci0: command tx timeout [ 90.237598][ T5825] bridge_slave_1: entered promiscuous mode [ 90.251482][ T5829] team0: Port device team_slave_1 added [ 90.252955][ T52] Bluetooth: hci2: command tx timeout [ 90.314803][ T5828] Bluetooth: hci3: command tx timeout [ 90.314809][ T5835] Bluetooth: hci1: command tx timeout [ 90.315133][ T52] Bluetooth: hci4: command tx timeout [ 90.325122][ T5835] Bluetooth: hci5: command tx timeout [ 90.332107][ T5830] team0: Port device team_slave_0 added [ 90.394128][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.405567][ T5830] team0: Port device team_slave_1 added [ 90.413980][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.436434][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.443400][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.469732][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.482891][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.489905][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.515869][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.529929][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.541601][ T5827] team0: Port device team_slave_0 added [ 90.576261][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.599231][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.612022][ T5827] team0: Port device team_slave_1 added [ 90.646627][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.709514][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.716675][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.742589][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.756113][ T5824] team0: Port device team_slave_0 added [ 90.762375][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.769361][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.795303][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.817889][ T5825] team0: Port device team_slave_0 added [ 90.852419][ T5824] team0: Port device team_slave_1 added [ 90.885611][ T5825] team0: Port device team_slave_1 added [ 90.907987][ T5823] team0: Port device team_slave_0 added [ 90.914389][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.921547][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.948217][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.010294][ T5823] team0: Port device team_slave_1 added [ 91.016953][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.023904][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.049995][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.079153][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.086495][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.112849][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.130869][ T5829] hsr_slave_0: entered promiscuous mode [ 91.137408][ T5829] hsr_slave_1: entered promiscuous mode [ 91.162330][ T5830] hsr_slave_0: entered promiscuous mode [ 91.169408][ T5830] hsr_slave_1: entered promiscuous mode [ 91.176163][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 91.181939][ T5830] Cannot create hsr debugfs directory [ 91.203871][ T29] cfg80211: failed to load regulatory.db [ 91.222787][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.229817][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.256145][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.268381][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.275467][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.302100][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.315646][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.322591][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.348864][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.361545][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.368588][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.394959][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.422423][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.429510][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.455769][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.539429][ T5827] hsr_slave_0: entered promiscuous mode [ 91.546127][ T5827] hsr_slave_1: entered promiscuous mode [ 91.552315][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 91.558610][ T5827] Cannot create hsr debugfs directory [ 91.647085][ T5824] hsr_slave_0: entered promiscuous mode [ 91.653826][ T5824] hsr_slave_1: entered promiscuous mode [ 91.660626][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 91.666417][ T5824] Cannot create hsr debugfs directory [ 91.766045][ T5825] hsr_slave_0: entered promiscuous mode [ 91.772565][ T5825] hsr_slave_1: entered promiscuous mode [ 91.779558][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 91.785626][ T5825] Cannot create hsr debugfs directory [ 91.895441][ T5823] hsr_slave_0: entered promiscuous mode [ 91.901900][ T5823] hsr_slave_1: entered promiscuous mode [ 91.908711][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 91.914477][ T5823] Cannot create hsr debugfs directory [ 92.314938][ T5835] Bluetooth: hci2: command tx timeout [ 92.320358][ T5835] Bluetooth: hci0: command tx timeout [ 92.394739][ T5835] Bluetooth: hci4: command tx timeout [ 92.394780][ T52] Bluetooth: hci3: command tx timeout [ 92.404754][ T5835] Bluetooth: hci5: command tx timeout [ 92.405927][ T5828] Bluetooth: hci1: command tx timeout [ 92.540537][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.552680][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.573348][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.585272][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.658438][ T5829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.671740][ T5829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.682627][ T5829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.694361][ T5829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.779610][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.807391][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.820946][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.831912][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.963065][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.970861][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.982687][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.995858][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.009248][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.083581][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.125145][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.132348][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.182473][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.193645][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.201046][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.230657][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.260524][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.270580][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.307562][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.326370][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.358591][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.365771][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.409130][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.437408][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.444555][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.506036][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.544278][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.552291][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.581368][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.599965][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.607159][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.627485][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.655981][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.663146][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.713693][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.813453][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.864043][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.903520][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.924544][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.955463][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.962612][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.998092][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.005406][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.081565][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.121408][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.128579][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.198909][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.206127][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.230289][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.384371][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.400942][ T52] Bluetooth: hci2: command tx timeout [ 94.406893][ T5828] Bluetooth: hci0: command tx timeout [ 94.409698][ T5830] veth0_vlan: entered promiscuous mode [ 94.426932][ T5830] veth1_vlan: entered promiscuous mode [ 94.451636][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.481059][ T52] Bluetooth: hci5: command tx timeout [ 94.486626][ T5828] Bluetooth: hci4: command tx timeout [ 94.486665][ T5833] Bluetooth: hci1: command tx timeout [ 94.500883][ T5835] Bluetooth: hci3: command tx timeout [ 94.575371][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.607450][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.664440][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.671667][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.730171][ T5830] veth0_macvtap: entered promiscuous mode [ 94.748842][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.756046][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.781804][ T5830] veth1_macvtap: entered promiscuous mode [ 94.886602][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.897242][ T5825] veth0_vlan: entered promiscuous mode [ 94.949208][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.002551][ T5825] veth1_vlan: entered promiscuous mode [ 95.046467][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.059179][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.068400][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.084391][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.108883][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.191049][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.259282][ T5825] veth0_macvtap: entered promiscuous mode [ 95.273181][ T5829] veth0_vlan: entered promiscuous mode [ 95.299492][ T5825] veth1_macvtap: entered promiscuous mode [ 95.359610][ T5829] veth1_vlan: entered promiscuous mode [ 95.429039][ T619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.454815][ T619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.503186][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.546147][ T5827] veth0_vlan: entered promiscuous mode [ 95.571663][ T5829] veth0_macvtap: entered promiscuous mode [ 95.581926][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.589791][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.624952][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.627050][ T5829] veth1_macvtap: entered promiscuous mode [ 95.645517][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.654241][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.681948][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.697107][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.711347][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729296][ T5827] veth1_vlan: entered promiscuous mode [ 95.750706][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.786757][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.854326][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.901243][ T5827] veth0_macvtap: entered promiscuous mode [ 95.926081][ T1159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.935452][ T1159] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.954240][ T5827] veth1_macvtap: entered promiscuous mode [ 95.969004][ T1159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.978158][ T1159] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.012299][ T5824] veth0_vlan: entered promiscuous mode [ 96.040775][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.053458][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.072954][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.097794][ T5824] veth1_vlan: entered promiscuous mode [ 96.114951][ T5903] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.149935][ T5823] veth0_vlan: entered promiscuous mode [ 96.161677][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.173004][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.174767][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.237495][ T5823] veth1_vlan: entered promiscuous mode [ 96.265323][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.274550][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.288381][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.290143][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.304655][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.310821][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.328340][ T5903] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 96.355200][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.368038][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.382172][ T5903] usb 3-1: config 0 descriptor?? [ 96.397620][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.411100][ T5903] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 96.434350][ T5824] veth0_macvtap: entered promiscuous mode [ 97.262420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.347765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.615232][ T5835] Bluetooth: hci2: command tx timeout [ 97.616808][ T5833] Bluetooth: hci0: command tx timeout [ 97.620700][ T52] Bluetooth: hci3: command tx timeout [ 97.626082][ T5833] Bluetooth: hci1: command tx timeout [ 97.631763][ T5828] Bluetooth: hci5: command tx timeout [ 97.636798][ T5833] Bluetooth: hci4: command tx timeout [ 98.670283][ T5824] veth1_macvtap: entered promiscuous mode [ 98.727927][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.747952][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.760602][ T5823] veth0_macvtap: entered promiscuous mode [ 98.785930][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.809258][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.819017][ T5823] veth1_macvtap: entered promiscuous mode [ 98.835248][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.858243][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.958915][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.975323][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.997764][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.008488][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.018142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.028703][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.061289][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.074290][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.133833][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.217039][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.247235][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.277914][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.075168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.395079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.419415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.505106][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.511844][ T5910] usb 3-1: USB disconnect, device number 2 [ 100.519371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.584809][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.756964][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.791256][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.865640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.874347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.904343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 100.912711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.118691][ T5989] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7'. [ 101.880022][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.932493][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.030410][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.049555][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.148265][ T5991] ALSA: mixer_oss: invalid OSS volume '' [ 110.935929][ T6031] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 112.514235][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'. [ 113.124733][ T5837] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.473993][ T5837] usb 6-1: config 0 has no interfaces? [ 113.482436][ T5837] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 113.568912][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.778406][ T5837] usb 6-1: config 0 descriptor?? [ 114.965221][ T5940] usb 6-1: USB disconnect, device number 2 [ 115.504992][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.645580][ T791] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.926036][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 116.084887][ T5896] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 116.122976][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.149996][ T5896] usb 1-1: Product: syz [ 116.154194][ T5896] usb 1-1: Manufacturer: syz [ 116.186922][ T5896] usb 1-1: SerialNumber: syz [ 116.226678][ T791] usb 5-1: config 0 has no interfaces? [ 116.232203][ T791] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 116.415940][ T5896] usb 1-1: config 0 descriptor?? [ 116.431461][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.514426][ T6064] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 117.238208][ T5896] gspca_main: se401-2.14.0 probing 047d:5003 [ 117.387420][ T791] usb 5-1: config 0 descriptor?? [ 117.762298][ T5896] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 117.974019][ T5896] usb 1-1: USB disconnect, device number 2 [ 117.982116][ T6068] netlink: 'syz.1.27': attribute type 4 has an invalid length. [ 118.040387][ T6071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.067459][ T5805] usb 5-1: USB disconnect, device number 2 [ 118.073612][ T6068] netlink: 'syz.1.27': attribute type 4 has an invalid length. [ 125.944718][ T5997] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.140278][ T5997] usb 2-1: config 0 has no interfaces? [ 126.146076][ T5997] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 126.194734][ T5997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.225811][ T5997] usb 2-1: config 0 descriptor?? [ 126.804743][ T5903] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.974743][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 127.002566][ T5903] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 127.041583][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.073855][ T5903] usb 1-1: Product: syz [ 127.095334][ T5903] usb 1-1: Manufacturer: syz [ 127.112215][ T5903] usb 1-1: SerialNumber: syz [ 127.150779][ T5903] usb 1-1: config 0 descriptor?? [ 127.192641][ T5903] gspca_main: se401-2.14.0 probing 047d:5003 [ 127.898977][ T5903] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 127.926900][ T5903] usb 1-1: USB disconnect, device number 3 [ 127.994411][ T6124] netlink: 56 bytes leftover after parsing attributes in process `syz.4.40'. [ 128.941680][ T5805] usb 2-1: USB disconnect, device number 2 [ 129.184753][ T6042] IPVS: starting estimator thread 0... [ 129.490385][ T6140] IPVS: using max 26 ests per chain, 62400 per kthread [ 132.181770][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.971153][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.262625][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.48'. [ 133.603671][ T6162] netlink: 44 bytes leftover after parsing attributes in process `syz.4.49'. [ 135.656631][ T6171] netlink: 34 bytes leftover after parsing attributes in process `syz.3.52'. [ 137.877921][ T6194] xt_TCPMSS: Only works on TCP SYN packets [ 137.887907][ T6194] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 139.194411][ T6199] input: syz1 as /devices/virtual/input/input7 [ 140.032288][ T6211] netlink: 'syz.5.61': attribute type 4 has an invalid length. [ 140.717417][ T6210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.728639][ T6228] netlink: 34 bytes leftover after parsing attributes in process `syz.1.67'. [ 150.005689][ T6256] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 151.671941][ T6265] netlink: 'syz.1.76': attribute type 4 has an invalid length. [ 152.904764][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.724759][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 153.778231][ T5837] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 153.987483][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.035165][ T5837] usb 2-1: Product: syz [ 154.039371][ T5837] usb 2-1: Manufacturer: syz [ 154.043973][ T5837] usb 2-1: SerialNumber: syz [ 154.853692][ T5837] usb 2-1: config 0 descriptor?? [ 154.872757][ T5837] gspca_main: se401-2.14.0 probing 047d:5003 [ 154.952109][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.80'. [ 155.383855][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.394882][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.402719][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.444092][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.453237][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.492708][ T5837] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 155.590728][ T5837] usb 2-1: USB disconnect, device number 3 [ 157.545355][ T5833] Bluetooth: hci6: command tx timeout [ 158.442940][ T6315] netlink: 'syz.1.89': attribute type 4 has an invalid length. [ 158.451834][ T6290] chnl_net:caif_netlink_parms(): no params data found [ 160.486157][ T5833] Bluetooth: hci6: command tx timeout [ 161.279249][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.286577][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.294186][ T6290] bridge_slave_0: entered allmulticast mode [ 161.302959][ T6290] bridge_slave_0: entered promiscuous mode [ 161.312072][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.325110][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.332355][ T6290] bridge_slave_1: entered allmulticast mode [ 161.340796][ T6290] bridge_slave_1: entered promiscuous mode [ 161.477961][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.229314][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.487443][ T6290] team0: Port device team_slave_0 added [ 162.498684][ T6290] team0: Port device team_slave_1 added [ 162.565566][ T5833] Bluetooth: hci6: command tx timeout [ 162.693291][ T6344] evm: overlay not supported [ 162.891953][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.937053][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.024448][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.312657][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.336954][ T5997] IPVS: starting estimator thread 0... [ 163.354995][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.391139][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.584725][ T6354] IPVS: using max 29 ests per chain, 69600 per kthread [ 164.099358][ T6290] hsr_slave_0: entered promiscuous mode [ 164.140441][ T6290] hsr_slave_1: entered promiscuous mode [ 164.226212][ T6290] debugfs: 'hsr0' already exists in 'hsr' [ 164.252855][ T6290] Cannot create hsr debugfs directory [ 164.635428][ T5833] Bluetooth: hci6: command tx timeout [ 167.250015][ T5903] IPVS: starting estimator thread 0... [ 167.362203][ T6376] IPVS: using max 25 ests per chain, 60000 per kthread [ 167.555569][ T6290] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 167.626756][ T6290] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.191249][ T6382] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 168.383960][ T6290] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.452348][ T6290] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 168.775682][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.449336][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.829576][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.099461][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.358063][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.881071][ T6290] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.435188][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.442338][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.956810][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.963971][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.856722][ T6429] Bluetooth: MGMT ver 1.23 [ 174.982823][ T6290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.077167][ T12] bridge_slave_1: left allmulticast mode [ 175.082924][ T12] bridge_slave_1: left promiscuous mode [ 175.155990][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.349037][ T6438] mmap: syz.5.117 (6438) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 176.437202][ T12] bridge_slave_0: left allmulticast mode [ 176.468388][ T12] bridge_slave_0: left promiscuous mode [ 176.474146][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.343321][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.378849][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.463164][ T12] bond0 (unregistering): Released all slaves [ 178.660749][ T6417] ALSA: mixer_oss: invalid OSS volume '' [ 181.097162][ T6290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.017430][ T12] hsr_slave_0: left promiscuous mode [ 185.099486][ T12] hsr_slave_1: left promiscuous mode [ 185.145980][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.153419][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.230724][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.247371][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.343920][ T12] veth1_macvtap: left promiscuous mode [ 185.365999][ T12] veth0_macvtap: left promiscuous mode [ 185.376453][ T12] veth1_vlan: left promiscuous mode [ 185.381877][ T12] veth0_vlan: left promiscuous mode [ 185.464782][ T6042] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.626930][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.654204][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.676830][ T6042] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 185.686138][ T6042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.734181][ T6042] usb 3-1: config 0 descriptor?? [ 186.624859][ T6042] usbhid 3-1:0.0: can't add hid device: -71 [ 186.644364][ T6042] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 186.688298][ T6042] usb 3-1: USB disconnect, device number 3 [ 187.202849][ T12] team0 (unregistering): Port device team_slave_1 removed [ 188.048779][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.840044][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.854735][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.258682][ T6290] veth0_vlan: entered promiscuous mode [ 194.316966][ T6290] veth1_vlan: entered promiscuous mode [ 194.863067][ T6290] veth0_macvtap: entered promiscuous mode [ 194.963076][ T6290] veth1_macvtap: entered promiscuous mode [ 195.000319][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.039637][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.206296][ T1102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.254463][ T1102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.264590][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.275201][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.283437][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.297385][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.310566][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.352774][ T1102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.384721][ T1102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.935533][ T791] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 196.114443][ T791] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 196.143927][ T791] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 196.154303][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.190621][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.205142][ T791] usb 1-1: Product: syz [ 196.217789][ T791] usb 1-1: Manufacturer: syz [ 196.238971][ T791] usb 1-1: SerialNumber: syz [ 196.281015][ T791] usb 1-1: config 0 descriptor?? [ 196.298569][ T791] ch341 1-1:0.0: ch341-uart converter detected [ 196.602877][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.613818][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.863510][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.076974][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.435179][ T5828] Bluetooth: hci4: command tx timeout [ 197.526244][ T791] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 197.545262][ T5896] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 197.646006][ T6596] xt_TCPMSS: Only works on TCP SYN packets [ 197.685939][ T6596] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 198.311870][ T791] usb 1-1: USB disconnect, device number 4 [ 198.320363][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 198.339915][ T5896] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 198.358212][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.380955][ T791] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 198.393706][ T5896] usb 6-1: Product: syz [ 198.405317][ T791] ch341 1-1:0.0: device disconnected [ 198.412748][ T5896] usb 6-1: Manufacturer: syz [ 198.444849][ T5896] usb 6-1: SerialNumber: syz [ 198.465296][ T5896] usb 6-1: config 0 descriptor?? [ 198.497409][ T5896] gspca_main: se401-2.14.0 probing 047d:5003 [ 198.509575][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.728765][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.890869][ T6562] chnl_net:caif_netlink_parms(): no params data found [ 199.112067][ T5896] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 199.190713][ T5896] usb 6-1: USB disconnect, device number 3 [ 199.516765][ T5828] Bluetooth: hci4: command tx timeout [ 202.861390][ T5828] Bluetooth: hci4: command tx timeout [ 203.197962][ T12] bridge_slave_1: left allmulticast mode [ 203.203658][ T12] bridge_slave_1: left promiscuous mode [ 203.921217][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.007335][ T12] bridge_slave_0: left allmulticast mode [ 204.014652][ T12] bridge_slave_0: left promiscuous mode [ 204.020473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.414538][ T5828] Bluetooth: hci4: command tx timeout [ 206.265352][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.340327][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.357216][ T12] bond0 (unregistering): Released all slaves [ 206.389900][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.498073][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.584391][ T6645] input: syz1 as /devices/virtual/input/input10 [ 206.630130][ T6562] bridge_slave_0: entered allmulticast mode [ 206.653078][ T6562] bridge_slave_0: entered promiscuous mode [ 206.673028][ T6635] netlink: 'syz.6.154': attribute type 4 has an invalid length. [ 206.890385][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.932292][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.941889][ T6562] bridge_slave_1: entered allmulticast mode [ 207.044191][ T6562] bridge_slave_1: entered promiscuous mode [ 207.494720][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.070390][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.344719][ T5896] usb 7-1: Using ep0 maxpacket: 16 [ 209.351678][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.363810][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.376339][ T5896] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 209.434138][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.456286][ T5896] usb 7-1: config 0 descriptor?? [ 209.464842][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.628744][ T6660] ALSA: mixer_oss: invalid OSS volume '' [ 209.745720][ T6562] team0: Port device team_slave_0 added [ 210.159448][ T6649] Zero length message leads to an empty skb [ 210.229940][ T12] hsr_slave_0: left promiscuous mode [ 210.239466][ T5896] creative-sb0540 0003:041E:3100.0001: unexpected long global item [ 210.266708][ T12] hsr_slave_1: left promiscuous mode [ 210.290633][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.293076][ T5896] creative-sb0540 0003:041E:3100.0001: parse failed [ 210.337602][ T5896] creative-sb0540 0003:041E:3100.0001: probe with driver creative-sb0540 failed with error -22 [ 210.371060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.411827][ T5896] usb 7-1: USB disconnect, device number 2 [ 210.449648][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.614038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.748544][ T12] veth1_macvtap: left promiscuous mode [ 210.776237][ T12] veth0_macvtap: left promiscuous mode [ 210.788007][ T12] veth1_vlan: left promiscuous mode [ 210.793275][ T12] veth0_vlan: left promiscuous mode [ 211.014714][ T5896] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 211.035266][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 211.035877][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 211.041300][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 211.047364][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 211.184444][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.663606][ T5896] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 211.877125][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.968456][ T5896] usb 1-1: config 0 descriptor?? [ 212.345845][ T6669] 9p: Bad value for 'wfdno' [ 212.409168][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 212.424770][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 212.464306][ T5896] usb 1-1: USB disconnect, device number 5 [ 214.816655][ T12] team0 (unregistering): Port device team_slave_1 removed [ 214.881923][ T12] team0 (unregistering): Port device team_slave_0 removed [ 216.244195][ T6562] team0: Port device team_slave_1 added [ 216.434985][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.473940][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.664798][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.892246][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.977367][ T6713] netlink: 34 bytes leftover after parsing attributes in process `syz.2.171'. [ 217.213176][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.330311][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.756259][ T6562] hsr_slave_0: entered promiscuous mode [ 217.779989][ T6562] hsr_slave_1: entered promiscuous mode [ 217.815678][ T6562] debugfs: 'hsr0' already exists in 'hsr' [ 217.821447][ T6562] Cannot create hsr debugfs directory [ 220.108282][ T6741] netlink: 34 bytes leftover after parsing attributes in process `syz.0.179'. [ 221.565665][ T6562] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.388858][ T6562] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 223.296652][ T6562] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 223.674130][ T6562] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 224.667966][ T6801] ALSA: mixer_oss: invalid OSS volume '' [ 225.298668][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.407898][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.499762][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.507006][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.413243][ T6562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.424216][ T6562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.533591][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.540779][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.705832][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.272860][ T6853] syz.6.201 uses obsolete (PF_INET,SOCK_PACKET) [ 229.429604][ T31] audit: type=1326 audit(1771335236.377:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 229.488776][ T31] audit: type=1326 audit(1771335236.437:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 229.515794][ T31] audit: type=1326 audit(1771335236.467:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 230.725500][ T31] audit: type=1326 audit(1771335236.467:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 230.725873][ T31] audit: type=1326 audit(1771335236.497:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 230.726044][ T31] audit: type=1326 audit(1771335236.497:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 230.726302][ T31] audit: type=1326 audit(1771335236.497:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 230.726650][ T31] audit: type=1326 audit(1771335236.497:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 230.726811][ T31] audit: type=1326 audit(1771335236.497:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 230.727070][ T31] audit: type=1326 audit(1771335236.497:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9bab5c84e code=0x7ffc0000 [ 231.974130][ T6562] veth0_vlan: entered promiscuous mode [ 232.080649][ T6562] veth1_vlan: entered promiscuous mode [ 232.269686][ T6562] veth0_macvtap: entered promiscuous mode [ 232.274130][ T6562] veth1_macvtap: entered promiscuous mode [ 232.387840][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.442209][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.548563][ T1159] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.548657][ T1159] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.548701][ T1159] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.548743][ T1159] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.057106][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.117596][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.557629][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.586784][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.377317][ T6944] netlink: 'syz.2.223': attribute type 4 has an invalid length. [ 239.954747][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 240.928632][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.956663][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.005782][ T5896] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 241.056058][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.115186][ T5896] usb 1-1: config 0 descriptor?? [ 242.361459][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 242.367605][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 244.316917][ T5896] usb 1-1: USB disconnect, device number 6 [ 244.825045][ T6997] netlink: 'syz.2.235': attribute type 4 has an invalid length. [ 247.145987][ T7020] netlink: 'syz.1.241': attribute type 4 has an invalid length. [ 249.919956][ T31] audit: type=1326 audit(1771335256.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 250.193019][ T31] audit: type=1326 audit(1771335256.857:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 251.027026][ T31] audit: type=1326 audit(1771335256.857:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 251.071466][ T31] audit: type=1326 audit(1771335256.857:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 251.094481][ T31] audit: type=1326 audit(1771335256.857:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 251.117495][ T31] audit: type=1326 audit(1771335256.857:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 252.414754][ T31] audit: type=1326 audit(1771335256.907:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 252.454131][ T31] audit: type=1326 audit(1771335256.907:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 252.594867][ T31] audit: type=1326 audit(1771335256.907:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9bab5c84e code=0x7ffc0000 [ 252.904249][ T31] audit: type=1326 audit(1771335256.907:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bab9bf79 code=0x7ffc0000 [ 255.049227][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.058097][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.444893][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.256'. [ 256.978788][ T7105] xt_TCPMSS: Only works on TCP SYN packets [ 257.025974][ T7105] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 259.039823][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880339e4400: rx timeout, send abort [ 259.549787][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880339e4400: abort rx timeout. Force session deactivation [ 261.268473][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.271'. [ 262.117012][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 262.123475][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 262.163653][ T7152] erspan1: entered allmulticast mode [ 262.465785][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 262.477786][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 262.595358][ T7159] xt_TCPMSS: Only works on TCP SYN packets [ 262.635008][ T7159] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 263.232171][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 263.241415][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 263.857937][ T7146] ceph: No mds server is up or the cluster is laggy [ 264.169255][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 264.176224][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 268.818367][ T7201] trusted_key: encrypted_key: insufficient parameters specified [ 273.464269][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.487028][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.504776][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.535190][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.548289][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.684749][ T5842] Bluetooth: hci0: command tx timeout [ 276.005312][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.286'. [ 276.338143][ T6007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.706916][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 277.760015][ T5833] Bluetooth: hci0: command tx timeout [ 278.335180][ T7256] ================================================================== [ 278.343306][ T7256] BUG: KASAN: slab-out-of-bounds in try_module_get+0x46/0xc0 [ 278.350692][ T7256] Write of size 4 at addr ffff88802bfc3508 by task syz.0.299/7256 [ 278.358489][ T7256] [ 278.360806][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) [ 278.360840][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.360851][ T7256] Call Trace: [ 278.360861][ T7256] [ 278.360869][ T7256] dump_stack_lvl+0xe8/0x150 [ 278.360898][ T7256] print_report+0xba/0x230 [ 278.360921][ T7256] ? try_module_get+0x46/0xc0 [ 278.360948][ T7256] kasan_report+0x117/0x150 [ 278.360970][ T7256] ? try_module_get+0x46/0xc0 [ 278.361001][ T7256] kasan_check_range+0x264/0x2c0 [ 278.361023][ T7256] try_module_get+0x46/0xc0 [ 278.361051][ T7256] dvb_device_open+0xef/0x350 [ 278.361077][ T7256] ? do_raw_spin_unlock+0xf5/0x210 [ 278.361097][ T7256] chrdev_open+0x4cd/0x5e0 [ 278.361118][ T7256] ? __pfx_chrdev_open+0x10/0x10 [ 278.361145][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.361167][ T7256] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 278.361197][ T7256] ? __pfx_chrdev_open+0x10/0x10 [ 278.361216][ T7256] do_dentry_open+0x785/0x14e0 [ 278.361249][ T7256] vfs_open+0x3b/0x340 [ 278.361270][ T7256] ? path_openat+0x2df0/0x3860 [ 278.361307][ T7256] path_openat+0x2e08/0x3860 [ 278.361341][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.361364][ T7256] ? __pfx_stack_trace_save+0x10/0x10 [ 278.361383][ T7256] ? stack_depot_save_flags+0x33/0x810 [ 278.361408][ T7256] ? __pfx_path_openat+0x10/0x10 [ 278.361434][ T7256] ? __x64_sys_openat+0x138/0x170 [ 278.361457][ T7256] ? do_syscall_64+0x14d/0xf80 [ 278.361479][ T7256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.361501][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.361522][ T7256] ? __lock_acquire+0x6b5/0x2cf0 [ 278.361548][ T7256] do_file_open+0x23e/0x4a0 [ 278.361578][ T7256] ? __pfx_do_file_open+0x10/0x10 [ 278.361617][ T7256] ? _raw_spin_unlock+0x28/0x50 [ 278.361635][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.361656][ T7256] ? alloc_fd+0x64b/0x6c0 [ 278.361683][ T7256] do_sys_openat2+0x113/0x200 [ 278.361708][ T7256] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.361732][ T7256] ? exc_page_fault+0x6a/0xc0 [ 278.361754][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.361775][ T7256] ? do_user_addr_fault+0xc6f/0x1340 [ 278.361801][ T7256] __x64_sys_openat+0x138/0x170 [ 278.361827][ T7256] do_syscall_64+0x14d/0xf80 [ 278.361849][ T7256] ? trace_irq_disable+0x3b/0x150 [ 278.361874][ T7256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.361895][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.361913][ T7256] RIP: 0033:0x7fb18675c84e [ 278.361931][ T7256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.361945][ T7256] RSP: 002b:00007fb187615b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.361964][ T7256] RAX: ffffffffffffffda RBX: 00007fb1876166c0 RCX: 00007fb18675c84e [ 278.361977][ T7256] RDX: 0000000000040002 RSI: 00007fb187615c00 RDI: ffffffffffffff9c [ 278.361990][ T7256] RBP: 00007fb187615c00 R08: 0000000000000000 R09: 0000000000000000 [ 278.362001][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 278.362013][ T7256] R13: 00007fb186a16038 R14: 00007fb186a15fa0 R15: 00007ffd5a59fdf8 [ 278.362034][ T7256] [ 278.362041][ T7256] [ 278.674564][ T7256] Allocated by task 1: [ 278.678611][ T7256] kasan_save_track+0x3e/0x80 [ 278.683291][ T7256] __kasan_kmalloc+0x93/0xb0 [ 278.687861][ T7256] __kmalloc_cache_noprof+0x31c/0x660 [ 278.693229][ T7256] bus_add_driver+0x162/0x670 [ 278.697901][ T7256] driver_register+0x23a/0x320 [ 278.702669][ T7256] i2c_register_driver+0xbb/0x1a0 [ 278.707676][ T7256] do_one_initcall+0x250/0x8d0 [ 278.712453][ T7256] do_initcall_level+0x104/0x190 [ 278.717405][ T7256] do_initcalls+0x59/0xa0 [ 278.721817][ T7256] kernel_init_freeable+0x2a6/0x3e0 [ 278.727008][ T7256] kernel_init+0x1d/0x1d0 [ 278.731328][ T7256] ret_from_fork+0x51e/0xb90 [ 278.735925][ T7256] ret_from_fork_asm+0x1a/0x30 [ 278.740772][ T7256] [ 278.743073][ T7256] The buggy address belongs to the object at ffff88802bfc3400 [ 278.743073][ T7256] which belongs to the cache kmalloc-256 of size 256 [ 278.757105][ T7256] The buggy address is located 56 bytes to the right of [ 278.757105][ T7256] allocated 208-byte region [ffff88802bfc3400, ffff88802bfc34d0) [ 278.771676][ T7256] [ 278.773978][ T7256] The buggy address belongs to the physical page: [ 278.780366][ T7256] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bfc2 [ 278.789111][ T7256] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 278.797593][ T7256] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 278.805119][ T7256] page_type: f5(slab) [ 278.809096][ T7256] raw: 00fff00000000040 ffff88813fea3b40 dead000000000100 dead000000000122 [ 278.817666][ T7256] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 278.826236][ T7256] head: 00fff00000000040 ffff88813fea3b40 dead000000000100 dead000000000122 [ 278.834939][ T7256] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 278.843595][ T7256] head: 00fff00000000001 ffffea0000aff081 00000000ffffffff 00000000ffffffff [ 278.852250][ T7256] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 278.860899][ T7256] page dumped because: kasan: bad access detected [ 278.867287][ T7256] page_owner tracks the page as allocated [ 278.872976][ T7256] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12203392272, free_ts 0 [ 278.892826][ T7256] post_alloc_hook+0x231/0x280 [ 278.897688][ T7256] get_page_from_freelist+0x24dc/0x2580 [ 278.903226][ T7256] __alloc_frozen_pages_noprof+0x18d/0x380 [ 278.909037][ T7256] allocate_slab+0x77/0x660 [ 278.913537][ T7256] refill_objects+0x331/0x3c0 [ 278.918286][ T7256] __pcs_replace_empty_main+0x2b9/0x620 [ 278.923816][ T7256] __kmalloc_cache_noprof+0x392/0x660 [ 278.929180][ T7256] bus_add_driver+0x162/0x670 [ 278.933927][ T7256] driver_register+0x23a/0x320 [ 278.938671][ T7256] usb_register_driver+0x1e4/0x390 [ 278.943772][ T7256] do_one_initcall+0x250/0x8d0 [ 278.948524][ T7256] do_initcall_level+0x104/0x190 [ 278.953449][ T7256] do_initcalls+0x59/0xa0 [ 278.957765][ T7256] kernel_init_freeable+0x2a6/0x3e0 [ 278.962974][ T7256] kernel_init+0x1d/0x1d0 [ 278.967292][ T7256] ret_from_fork+0x51e/0xb90 [ 278.971869][ T7256] page_owner free stack trace missing [ 278.977214][ T7256] [ 278.979515][ T7256] Memory state around the buggy address: [ 278.985118][ T7256] ffff88802bfc3400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 278.993168][ T7256] ffff88802bfc3480: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 279.001212][ T7256] >ffff88802bfc3500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 279.009249][ T7256] ^ [ 279.013576][ T7256] ffff88802bfc3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 279.021638][ T7256] ffff88802bfc3600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 279.029763][ T7256] ================================================================== [ 279.040090][ T7256] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 279.047299][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) [ 279.056474][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.066512][ T7256] Call Trace: [ 279.069776][ T7256] [ 279.072693][ T7256] vpanic+0x56c/0xa60 [ 279.076680][ T7256] ? __pfx_vpanic+0x10/0x10 [ 279.081267][ T7256] panic+0xc5/0xd0 [ 279.084995][ T7256] ? __pfx_panic+0x10/0x10 [ 279.089441][ T7256] ? try_module_get+0x46/0xc0 [ 279.094117][ T7256] ? try_module_get+0x46/0xc0 [ 279.098794][ T7256] check_panic_on_warn+0x89/0xb0 [ 279.103720][ T7256] ? try_module_get+0x46/0xc0 [ 279.108396][ T7256] end_report+0x73/0x180 [ 279.112638][ T7256] ? try_module_get+0x46/0xc0 [ 279.117312][ T7256] kasan_report+0x128/0x150 [ 279.121803][ T7256] ? try_module_get+0x46/0xc0 [ 279.126479][ T7256] kasan_check_range+0x264/0x2c0 [ 279.131407][ T7256] try_module_get+0x46/0xc0 [ 279.135974][ T7256] dvb_device_open+0xef/0x350 [ 279.140735][ T7256] ? do_raw_spin_unlock+0xf5/0x210 [ 279.145844][ T7256] chrdev_open+0x4cd/0x5e0 [ 279.150270][ T7256] ? __pfx_chrdev_open+0x10/0x10 [ 279.155278][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.160896][ T7256] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 279.167230][ T7256] ? __pfx_chrdev_open+0x10/0x10 [ 279.172168][ T7256] do_dentry_open+0x785/0x14e0 [ 279.176978][ T7256] vfs_open+0x3b/0x340 [ 279.181056][ T7256] ? path_openat+0x2df0/0x3860 [ 279.185819][ T7256] path_openat+0x2e08/0x3860 [ 279.190413][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.196041][ T7256] ? __pfx_stack_trace_save+0x10/0x10 [ 279.201396][ T7256] ? stack_depot_save_flags+0x33/0x810 [ 279.206843][ T7256] ? __pfx_path_openat+0x10/0x10 [ 279.211778][ T7256] ? __x64_sys_openat+0x138/0x170 [ 279.216799][ T7256] ? do_syscall_64+0x14d/0xf80 [ 279.221553][ T7256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.227605][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.233224][ T7256] ? __lock_acquire+0x6b5/0x2cf0 [ 279.238152][ T7256] do_file_open+0x23e/0x4a0 [ 279.242655][ T7256] ? __pfx_do_file_open+0x10/0x10 [ 279.247686][ T7256] ? _raw_spin_unlock+0x28/0x50 [ 279.252522][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.258157][ T7256] ? alloc_fd+0x64b/0x6c0 [ 279.262571][ T7256] do_sys_openat2+0x113/0x200 [ 279.267246][ T7256] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.272436][ T7256] ? exc_page_fault+0x6a/0xc0 [ 279.277105][ T7256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.282730][ T7256] ? do_user_addr_fault+0xc6f/0x1340 [ 279.288123][ T7256] __x64_sys_openat+0x138/0x170 [ 279.292967][ T7256] do_syscall_64+0x14d/0xf80 [ 279.297547][ T7256] ? trace_irq_disable+0x3b/0x150 [ 279.302567][ T7256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.308635][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.314547][ T7256] RIP: 0033:0x7fb18675c84e [ 279.318957][ T7256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.338544][ T7256] RSP: 002b:00007fb187615b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.346947][ T7256] RAX: ffffffffffffffda RBX: 00007fb1876166c0 RCX: 00007fb18675c84e [ 279.354925][ T7256] RDX: 0000000000040002 RSI: 00007fb187615c00 RDI: ffffffffffffff9c [ 279.362913][ T7256] RBP: 00007fb187615c00 R08: 0000000000000000 R09: 0000000000000000 [ 279.370865][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 279.378829][ T7256] R13: 00007fb186a16038 R14: 00007fb186a15fa0 R15: 00007ffd5a59fdf8 [ 279.386796][ T7256] [ 279.389908][ T7256] Kernel Offset: disabled [ 279.394219][ T7256] Rebooting in 86400 seconds..