last executing test programs: 23m58.552454419s ago: executing program 2 (id=3): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_setup(0x1548, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f00003a8000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x63465000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) process_vm_readv(r0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019340)=""/102400, 0x19000) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x2f00, 0xff, 0xd09a, 0xfff7ffff, 0x0, 0x6, 0x20000024, 0xfffffffa, 0xfffffe04, 0x9, 0xb, 0x1005, 0xe2, 0x5, 0xffff, 0x6, 0x5, 0x40000029, 0x66a, 0x30000, 0x5, 0x2, 0x407fb, 0xe2df, 0x2, 0xd41, 0x9, 0x3, 0x4, 0x5, 0x200030d]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000080)={0xc000002, 0x0, 0x0, 0x2, 0x1}) 23m56.31794035s ago: executing program 2 (id=6): syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x82e81, 0x0) 23m49.079552309s ago: executing program 2 (id=15): r0 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x400, 0x2}, 0xe) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_GET_FS(0x1e, r1, 0x0, 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x26}, 0x28) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x790, 0x5a8, 0x0, 0x258, 0x0, 0x120, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @local, [0x0, 0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "9978", 0xff}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'bridge_slave_1\x00', {}, {0xff}}, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x0, [0x1000, 0x499, 0x6, 0x8, 0xffff, 0xd15e, 0xa, 0x0, 0x4, 0x8, 0x100, 0x1, 0x8, 0x9, 0xffff, 0x7], 0x1}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0xfe}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x37}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x1, 0x2c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f0) 23m47.157877169s ago: executing program 2 (id=17): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000004980)=""/196, 0xc4}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x1, @generic=0xf}], 0x8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) read(r4, 0x0, 0x21) 23m44.112680226s ago: executing program 3 (id=20): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000004980)=""/196, 0xc4}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x1, @generic=0xf}], 0x8) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x5, 0x3, 0x4, @generic=0xffffe861}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) read(r4, 0x0, 0x21) 23m41.222105567s ago: executing program 3 (id=22): syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "042817c644f84e53"}}}}, 0x0) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x213) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x2) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="4ede09a60c2664517ab8fbfe7fee08c7de2c047a87bda78445a195ff1ab296331205d618359d9932ee536be15babde5c28da1537e179ab4c2b858845c3ed03e70372340c82f317c1fe675988d71cd9d978969239e41c3a917505ff6b31de3c220515c518d91196c1c05a49739e4c4ef2ef98ac9b4c106bb48e50eb7fb7c19a2e9446fe704c604aec7fd77531857254fc539fac8377791cc1cc254cfc4d01f8f3955ec66d6005162b7e9f6a587fbd75a600000000"], 0xb4) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147441, 0x94) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'udf\x00', 0x3a, 'udf\x00', 0x3a, './file1'}, 0x2f) msgget(0x1, 0x501) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 23m38.123183665s ago: executing program 3 (id=25): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="fa669e9d5ef4cf57c2ceb1cd351329d177d059c93981634017e5403f2b13281c4e6659ed", 0x24) dup(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) close(r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) 23m34.885500047s ago: executing program 3 (id=27): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r2 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x3, 0x6, 0xe044}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) 23m31.027014499s ago: executing program 32 (id=17): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000004980)=""/196, 0xc4}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x1, @generic=0xf}], 0x8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) read(r4, 0x0, 0x21) 23m30.99903066s ago: executing program 3 (id=29): r0 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x400, 0x2}, 0xe) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x26}, 0x28) 23m25.575189911s ago: executing program 3 (id=34): close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x64000600) 23m10.387736692s ago: executing program 33 (id=34): close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x64000600) 21m5.186561538s ago: executing program 1 (id=246): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r3, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x4}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21m2.59418545s ago: executing program 1 (id=248): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={0xffffffffffffffff, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x4}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20m51.802435461s ago: executing program 1 (id=253): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r3, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20m50.611326759s ago: executing program 1 (id=256): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r3, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x4}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20m46.332293774s ago: executing program 1 (id=258): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r3, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20m45.355515805s ago: executing program 1 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0xff, 0x8002) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000016c0)={0x0, 0x0, {0x6, 0x7, 0x5, 0x93a}}) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000305000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/60, 0x3c}, &(0x7f0000000540)=0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 20m29.733691539s ago: executing program 34 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0xff, 0x8002) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000016c0)={0x0, 0x0, {0x6, 0x7, 0x5, 0x93a}}) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000305000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/60, 0x3c}, &(0x7f0000000540)=0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 10m25.121861534s ago: executing program 4 (id=1943): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}], 0x20, 0x8000}, 0x4000000) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2062) 10m25.063144266s ago: executing program 4 (id=1944): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)="709ecbbe5ca2fb3282", 0x94, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 10m24.640911689s ago: executing program 4 (id=1948): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48085) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m23.431511917s ago: executing program 4 (id=1954): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x41, 0x495, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) 10m20.709720663s ago: executing program 4 (id=1963): socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x20, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @broadcast}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9, 0x100, @val=0x80}}}}}}}, 0x0) r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) dup(r2) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x176, &(0x7f0000000000)="$eJzskj9OAkEUxr9Zlj9aGEmsaCCRGCyUZVFjbLTE3gNIcEXiosKSKIRijTEUFsbSE3ANEy+ghfEA1BTE2oyZ2bfj4BWcX8G38837M++Fs6ATpAF8z4YNHECSwBLeGYMNIM8ib2pF+kT6Qco550LfKO6Q/DvSXIAM4Ptet7BXQFYY/cF5XRoAvqSnrGD/1sJUlvqcDRvi41hrwqmJHpMA0NFicjawIofgKsbGL+Ve+6oc9AcbrXa96TW9C9et7jhbjrPtlk9bvudEv0xrYclyoi2wDkDsa0G7TwK4p83NkwfTniZYBJiemwLwSHel1flsSx+dlOFF5aYB1fUIa2LRuA6Z5hZlFRtypBoYEnSoxCthqldGXmw2Lv2TERhYnDaGrWpUJkiqg6sfqrth/OwRaZG0RjomncTL+fOXSSKLEA90KoVACjf1Xq9bEUuKvpTnKs9dDvWFia7P1vxwrxYMBoPBYDAYDAaD4b/zEwAA//9yiHzx") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) close_range(r0, 0xffffffffffffffff, 0x0) 10m19.681408425s ago: executing program 4 (id=1964): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) tee(r2, r2, 0x2, 0xa) close(0x3) 10m4.460104725s ago: executing program 35 (id=1964): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) tee(r2, r2, 0x2, 0xa) close(0x3) 4m18.442768903s ago: executing program 7 (id=2546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000540)={'#! ', '', [{0x20, 'THAWED\x00'}]}, 0x4) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4m14.923154024s ago: executing program 7 (id=2549): syz_open_procfs(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbef7, 0x8031, 0xffffffffffffffff, 0x4000) r2 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000040), 0xb0f, 0x44483) 4m13.227345438s ago: executing program 7 (id=2550): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xc5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) fstat(r1, 0x0) fdatasync(r0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000800)={0x0, 0x1, [0x2f9, 0xe05, 0xabd, 0xa7d]}) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x201, &(0x7f00000002c0)="$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") io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x21) io_submit(0x0, 0x1, &(0x7f0000004540)=[0x0]) 4m11.015011817s ago: executing program 6 (id=2553): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m10.370606518s ago: executing program 6 (id=2554): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) unshare(0x26000400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setresuid(0x0, 0x0, 0x0) ptrace(0x4206, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c) 4m7.885562566s ago: executing program 6 (id=2556): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x20000000000001e8, &(0x7f0000000040)=[{0x806, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x5, 0x7ff) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0xfffffffffffffe47) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000440)=0xffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1000) write$cgroup_int(r7, &(0x7f0000000040), 0x12) 4m6.400719453s ago: executing program 6 (id=2558): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b0001"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 4m5.683763635s ago: executing program 6 (id=2559): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbef7, 0x8031, 0xffffffffffffffff, 0x4000) r2 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000040), 0xb0f, 0x44483) 4m3.991300949s ago: executing program 6 (id=2560): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x56f2, &(0x7f0000000000)={0x0, 0x70ee, 0x2, 0x2, 0xfe}) r6 = io_uring_setup(0x3d9f, &(0x7f0000000340)={0x0, 0xf354, 0x40, 0xffffffff, 0x3c5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x700}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000200), 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r7, @ANYBLOB="0800040064010104080008000001000008000200e000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) close_range(r0, r0, 0x0) 4m3.189661654s ago: executing program 7 (id=2561): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000007c0)=ANY=[], 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4m0.984468013s ago: executing program 7 (id=2565): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rt_sigqueueinfo(r1, 0x23, &(0x7f0000000500)={0x41, 0x3, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') 3m59.528384359s ago: executing program 7 (id=2566): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x20000000000001e8, &(0x7f0000000040)=[{0x806, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x5, 0x7ff) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0xfffffffffffffe47) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000440)=0xffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1000) write$cgroup_int(r7, &(0x7f0000000040), 0x12) 3m48.398191349s ago: executing program 36 (id=2560): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x56f2, &(0x7f0000000000)={0x0, 0x70ee, 0x2, 0x2, 0xfe}) r6 = io_uring_setup(0x3d9f, &(0x7f0000000340)={0x0, 0xf354, 0x40, 0xffffffff, 0x3c5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x700}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000200), 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r7, @ANYBLOB="0800040064010104080008000001000008000200e000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) close_range(r0, r0, 0x0) 3m42.723376179s ago: executing program 37 (id=2566): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x20000000000001e8, &(0x7f0000000040)=[{0x806, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x5, 0x7ff) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0xfffffffffffffe47) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000440)=0xffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1000) write$cgroup_int(r7, &(0x7f0000000040), 0x12) 1m9.216041512s ago: executing program 5 (id=2733): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x100000001) 1m8.217162163s ago: executing program 5 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x6f0e6a9a}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000340)=r5}, 0x20) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m7.969921462s ago: executing program 5 (id=2736): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket(0x10, 0x800, 0x0) bind$vsock_stream(r1, 0x0, 0x0) syz_emit_ethernet(0x62, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x80002, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x400000006, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r5, 0x5421, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000001c0)=0x5, 0x4) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/cpuinfo\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2824805, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESDEC=r7], 0x1, 0x247, &(0x7f0000000840)="$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") 1m6.14992439s ago: executing program 5 (id=2737): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) 1m1.229724198s ago: executing program 5 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x6f0e6a9a}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000340)=r5}, 0x20) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m1.095119572s ago: executing program 5 (id=2745): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 44.527087513s ago: executing program 38 (id=2745): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 28.833927006s ago: executing program 0 (id=2792): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001000000000000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 26.329408276s ago: executing program 0 (id=2794): socket$inet6_udp(0xa, 0x2, 0x0) epoll_create(0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000340)={{0x0, 0x6, 0x943, 0x2, 'syz1\x00', 0xb}, 0x3, 0x100, 0x2, 0x0, 0x5, 0x8000, 'syz0\x00', &(0x7f0000000280)=[' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', '*[\x00', '@&-$\x00', '@*\x00', '*!}\x85\x00'], 0x20}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xd) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 24.180303245s ago: executing program 0 (id=2795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x6f0e6a9a}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000340)=r5}, 0x20) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 14.172911526s ago: executing program 0 (id=2802): socket$inet6_udp(0xa, 0x2, 0x0) epoll_create(0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000340)={{0x0, 0x6, 0x943, 0x2, 'syz1\x00', 0xb}, 0x3, 0x100, 0x2, 0x0, 0x5, 0x8000, 'syz0\x00', &(0x7f0000000280)=[' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', '*[\x00', '@&-$\x00', '@*\x00', '*!}\x85\x00'], 0x20}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xd) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 11.949008237s ago: executing program 0 (id=2803): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f00000000c0)='./file0/file1\x00') lstat(&(0x7f0000000940)='./file0/file2\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(0x0, 0x0, r0) 9.477803796s ago: executing program 9 (id=2806): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 8.697751171s ago: executing program 8 (id=2807): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf0) 6.839421981s ago: executing program 9 (id=2808): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048800, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x6) socket$nl_generic(0x10, 0x3, 0x10) 5.088563797s ago: executing program 9 (id=2809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x6f0e6a9a}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000340)=r5}, 0x20) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.819781295s ago: executing program 8 (id=2810): socket$inet6_udp(0xa, 0x2, 0x0) epoll_create(0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000340)={{0x0, 0x6, 0x943, 0x2, 'syz1\x00', 0xb}, 0x3, 0x100, 0x2, 0x0, 0x5, 0x8000, 'syz0\x00', &(0x7f0000000280)=[' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', '*[\x00', '@&-$\x00', '@*\x00', '*!}\x85\x00'], 0x20}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xd) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 3.097948121s ago: executing program 8 (id=2811): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000480)={[{@test_dummy_encryption}, {@init_itable_val}, {@minixdf}, {@noacl}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@resuid}, {@nobarrier}, {@auto_da_alloc}, {@test_dummy_encryption}, {@abort}]}, 0xdf, 0x475, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000340), 0x400000000000085, 0x4000800) 1.693296056s ago: executing program 9 (id=2812): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x87) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 1.488266742s ago: executing program 8 (id=2813): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x20, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5b30, 0xa}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x44100}, 0x40001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85512, 0x0) 1.462830353s ago: executing program 9 (id=2814): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x3, &(0x7f0000000280)={0x1b, 0x1, 0x5}) 1.378237756s ago: executing program 0 (id=2815): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x9) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c000301035100095b66000000000000090503130000680000032701030fb976379bcb6295e088c64db4fd54add854556f9ea423a737f818b587e2e9abb2a56c66a7636898e07f7181c3777b5cc32e059e60b9465b9e22d0482c6f68401dc425592e2e04f2119fa650958ad2e7edf7b0abd3ec680d9eed764c8695ec5893e5395f9bdd05d2bf07b738538a731e285405430fb60204404a2fc9732b6fc5b845fb71cc51065974fb2b0f1be755633d75940c02427801e42a6b33e5b74fae5f8300625839ccb9cf6a9d265a93ba00bc2ed3"], 0x0) 1.097914955s ago: executing program 9 (id=2816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioprio_get$uid(0x3, 0x0) 390.448927ms ago: executing program 8 (id=2817): r0 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x40) ptrace(0x4207, r0) prlimit64(r0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=2818): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x23, &(0x7f0000000500)={0x41, 0x3, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') creat(0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) kernel console output (not intermixed with test programs): 1 has 1 interface, different from the descriptor's value: 3 [ 644.128624][ T8777] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 644.163332][ T8777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.209045][ T8777] usb 6-1: Product: syz [ 644.229067][ T8777] usb 6-1: Manufacturer: syz [ 644.245998][ T8777] usb 6-1: SerialNumber: syz [ 644.815922][ T8777] usb 6-1: unit 0 not found! [ 644.938123][ T8777] usb 6-1: USB disconnect, device number 5 [ 645.033932][T10056] udevd[10056]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.289988][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 645.453514][ T5849] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 646.532692][ T5849] usb 5-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 646.544347][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.561535][ T5849] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 646.575318][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 646.584132][ T5849] usb 5-1: SerialNumber: syz [ 646.819993][ T5849] usb 5-1: 0:2 : does not exist [ 646.866238][ T5849] usb 5-1: USB disconnect, device number 5 [ 646.910286][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.045786][T10370] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 651.694259][T10426] netlink: 'syz.4.870': attribute type 4 has an invalid length. [ 652.332130][T10448] raw_sendmsg: syz.4.879 forgot to set AF_INET. Fix it! [ 652.830920][ T5852] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 653.072506][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.087217][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.097459][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.110650][ T5852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.119726][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.120638][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 653.135125][ T5852] usb 5-1: config 0 descriptor?? [ 655.439509][ T1195] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 655.447222][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 655.689351][ T5852] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 655.697730][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 655.710140][ T1195] usb 6-1: Using ep0 maxpacket: 8 [ 655.720994][ T5852] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 655.730854][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.746759][ T1195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.759079][ T5852] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 655.772048][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 655.785640][ T1195] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 655.802968][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 655.812916][ T1195] usb 6-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 655.822683][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.832929][ T1195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.846280][ T23] usb 1-1: config 0 descriptor?? [ 655.861240][ T1195] usb 6-1: config 0 descriptor?? [ 655.975280][ T8777] usb 5-1: USB disconnect, device number 6 [ 656.087590][ T1195] usbhid 6-1:0.0: can't add hid device: -71 [ 656.105769][ T1195] usbhid: probe of 6-1:0.0 failed with error -71 [ 656.127515][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 656.151517][ T1195] usb 6-1: USB disconnect, device number 6 [ 656.159495][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 656.184770][ T23] usb 1-1: USB disconnect, device number 5 [ 656.820317][ T23] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 656.878229][T10501] syzkaller0: tun_net_xmit 1280 [ 656.884452][T10501] syzkaller0: create flow: hash 2883694163 index 2 [ 656.910319][ T1195] syzkaller0: tun_net_xmit 76 [ 656.967596][T10500] syzkaller0: delete flow: hash 2883694163 index 2 [ 657.031919][ T23] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 657.045095][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.074958][ T23] usb 7-1: config 0 descriptor?? [ 657.084535][ T23] cp210x 7-1:0.0: cp210x converter detected [ 657.525809][ T23] usb 7-1: cp210x converter now attached to ttyUSB0 [ 657.656484][T10519] binder_alloc: 10518: binder_alloc_buf size 4294966816 failed, no address space [ 657.668959][T10519] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 657.706249][ T1195] usb 7-1: USB disconnect, device number 4 [ 657.743874][ T1195] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 657.785877][ T1195] cp210x 7-1:0.0: device disconnected [ 658.257217][ T8777] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 658.629141][ T8777] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 658.710314][ T8777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.749883][ T8777] usb 1-1: config 0 descriptor?? [ 658.798549][ T8777] asix: probe of 1-1:0.0 failed with error -22 [ 661.038759][ T1195] usb 1-1: USB disconnect, device number 6 [ 662.985593][T10604] kvm: apic: phys broadcast and lowest prio [ 663.434157][T10621] netlink: 184 bytes leftover after parsing attributes in process `syz.6.945'. [ 665.089136][T10650] syzkaller0: create flow: hash 2883694163 index 2 [ 665.202011][ T7049] syzkaller0: tun_net_xmit 76 [ 665.207966][ T7049] syzkaller0: tun_net_xmit 48 [ 665.216910][T10649] syzkaller0: delete flow: hash 2883694163 index 2 [ 665.224326][ T788] syzkaller0: tun_net_xmit 76 [ 665.611011][ T788] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 665.820328][ T788] usb 5-1: Using ep0 maxpacket: 16 [ 665.827979][ T788] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.839793][ T788] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.854195][ T788] usb 5-1: config 0 interface 0 has no altsetting 0 [ 665.868387][ T788] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 665.878663][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.898161][ T788] usb 5-1: config 0 descriptor?? [ 665.944504][ T1195] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 666.139006][ T1195] usb 1-1: Using ep0 maxpacket: 32 [ 666.176577][ T1195] usb 1-1: unable to get BOS descriptor or descriptor too short [ 666.201262][ T1195] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 666.214424][ T1195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.234095][ T1195] usb 1-1: Product: syz [ 666.238382][ T1195] usb 1-1: Manufacturer: syz [ 666.247592][ T1195] usb 1-1: SerialNumber: syz [ 666.348405][ T788] hid (null): nested delimiters [ 666.353776][ T788] hid (null): nested delimiters [ 666.358824][ T788] hid (null): nested delimiters [ 666.364767][ T788] hid (null): global environment stack underflow [ 666.549736][ T788] usb 5-1: USB disconnect, device number 7 [ 666.707647][ T1195] usb 1-1: unit 0 not found! [ 666.923130][ T1195] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 666.953497][ T1195] usb 1-1: unit 0 not found! [ 666.982409][ T1195] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 667.012290][ T1195] usb 1-1: unit 0 not found! [ 667.154254][ T1195] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 667.176365][ T1195] usb 1-1: USB disconnect, device number 7 [ 667.219288][T10191] udevd[10191]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.920574][ T27] audit: type=1326 audit(1779988662.668:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.4.976" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01b9ce59 code=0x7fc00000 [ 670.585124][T10675] netlink: 'syz.6.966': attribute type 4 has an invalid length. [ 670.810317][T10676] netlink: 'syz.6.966': attribute type 4 has an invalid length. [ 671.486194][T10735] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 672.760199][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 672.972673][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 672.983861][ T23] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 672.992449][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 673.030691][ T23] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 673.039952][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.078901][ T23] usb 6-1: Product: syz [ 673.087727][ T23] usb 6-1: Manufacturer: syz [ 673.097194][ T23] usb 6-1: SerialNumber: syz [ 673.107632][ T23] usb 6-1: config 0 descriptor?? [ 673.120607][ T23] hub 6-1:0.0: bad descriptor, ignoring hub [ 673.126684][ T23] hub: probe of 6-1:0.0 failed with error -5 [ 673.150181][ T23] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 673.204481][ T23] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 673.263391][ T23] usbtouchscreen: probe of 6-1:0.0 failed with error -90 [ 673.560807][ T47] usb 6-1: USB disconnect, device number 7 [ 673.660299][ T5822] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 673.840413][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 673.848695][ T5822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 673.858123][ T5822] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x82 has invalid maxpacket 32 [ 673.868329][ T5822] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 64 [ 673.879091][ T5822] usb 1-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.892547][ T5822] usb 1-1: config 1 interface 0 has no altsetting 0 [ 673.904989][ T5822] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.914816][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.924106][ T5822] usb 1-1: Product: syz [ 673.928332][ T5822] usb 1-1: Manufacturer: syz [ 673.933545][ T5822] usb 1-1: SerialNumber: syz [ 673.942087][T10781] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 673.949694][T10781] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 674.289912][ T5822] usb 1-1: bad CDC descriptors [ 674.315257][ T5822] usb 1-1: USB disconnect, device number 8 [ 675.610352][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 675.860502][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 675.946179][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 676.034903][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.140835][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.163644][ T23] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 676.186003][T10817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1016'. [ 676.196020][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.209572][ T23] usb 5-1: Product: syz [ 676.214441][T10817] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1016'. [ 676.229727][ T23] usb 5-1: Manufacturer: syz [ 676.234971][ T23] usb 5-1: SerialNumber: syz [ 676.301534][ T8777] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 676.490304][ T8777] usb 7-1: Using ep0 maxpacket: 16 [ 676.497605][ T8777] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.514241][ T8777] usb 7-1: config 0 has no interfaces? [ 676.536744][ T8777] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 676.550296][ T8777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.568691][ T8777] usb 7-1: Product: syz [ 676.578874][ T8777] usb 7-1: Manufacturer: syz [ 676.597193][ T8777] usb 7-1: SerialNumber: syz [ 676.614706][ T8777] usb 7-1: config 0 descriptor?? [ 676.948355][ T23] usb 5-1: USB disconnect, device number 8 [ 678.656333][ T8777] usb 7-1: USB disconnect, device number 5 [ 680.003563][T10865] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 680.900861][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 681.221571][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 681.528776][ T23] usb 6-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 681.538606][ T23] usb 6-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 681.549123][ T23] usb 6-1: config 218 has no interface number 0 [ 681.555543][ T23] usb 6-1: config 218 interface 95 altsetting 64 has an invalid endpoint with address 0xFF, skipping [ 681.580120][ T23] usb 6-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 681.597875][ T23] usb 6-1: config 218 interface 95 has no altsetting 0 [ 681.784089][ T23] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 681.800117][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.808297][ T23] usb 6-1: Product: syz [ 681.812600][ T23] usb 6-1: Manufacturer: syz [ 681.817343][ T23] usb 6-1: SerialNumber: syz [ 682.058592][ T23] usbtouchscreen: probe of 6-1:218.95 failed with error -8 [ 682.114131][ T23] usb 6-1: USB disconnect, device number 8 [ 684.849051][T10958] 9pnet_fd: Insufficient options for proto=fd [ 685.550238][ T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 685.811957][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.833771][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.849853][ T23] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 685.871370][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 685.879479][ T23] usb 6-1: SerialNumber: syz [ 686.282965][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.294329][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.014294][ T23] usb 6-1: 0:2 : does not exist [ 687.041114][ T23] usb 6-1: unit 5: unexpected type 0x09 [ 687.133825][ T23] usb 6-1: USB disconnect, device number 9 [ 687.237007][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 687.601327][T10988] binder_alloc: 10985: binder_alloc_buf, no vma [ 688.734396][ T5822] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 688.808608][T11009] block device autoloading is deprecated and will be removed. [ 688.817015][T11009] syz.0.1087: attempt to access beyond end of device [ 688.817015][T11009] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 688.831448][T11009] EXT4-fs (loop0): unable to read superblock [ 688.940151][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 688.947731][ T5822] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 688.960322][ T5822] usb 5-1: config 179 has no interface number 0 [ 688.972737][ T5822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 688.984464][ T5822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 688.996684][ T5822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 689.028721][ T5822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 689.062217][ T5822] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 689.096487][ T5822] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 689.106836][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.131865][T10987] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 689.415505][T11023] binder_alloc: 11021: binder_alloc_buf, no vma [ 689.586849][T11028] pimreg: entered allmulticast mode [ 689.612559][ T23] usb 5-1: USB disconnect, device number 9 [ 689.612643][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 689.626960][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 691.535189][T11069] capability: warning: `syz.5.1107' uses 32-bit capabilities (legacy support in use) [ 696.488029][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1130'. [ 697.003672][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 699.012723][T11205] binder: BINDER_SET_CONTEXT_MGR already set [ 699.019373][T11205] binder: 11203:11205 ioctl 4018620d 200000004a80 returned -16 [ 702.749318][T11273] x_tables: duplicate underflow at hook 3 [ 705.302000][T11337] Bluetooth: MGMT ver 1.22 [ 705.659748][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.679632][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.693048][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.708326][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.726638][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.737310][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.749604][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.769521][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.789781][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.797754][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.815514][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.843256][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.869148][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.887258][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.898881][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.909749][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.917776][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.928196][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.948649][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.969474][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.982040][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.989620][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 705.999468][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.017647][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.034659][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.042899][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.056969][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.067206][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.079647][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.088745][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.100906][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.108555][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.121635][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.129378][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.155492][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.171285][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.191986][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.210981][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.228345][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.241656][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.267819][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.282229][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.303222][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.321372][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.337280][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.353714][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.366301][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.381063][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.402550][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.433860][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.450873][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.470188][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.498147][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.510089][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.540124][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.547632][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.590118][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.614977][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.624804][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.638486][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.661063][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.686400][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.720679][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.738566][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.746245][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.778486][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.786210][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.812391][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.867147][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.890798][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.925125][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 706.957468][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.200552][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.746876][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.754938][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.763212][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.772063][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.779658][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.787814][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.803332][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.811280][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.818734][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.848170][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.872325][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.896821][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.910079][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.927865][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.952704][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 707.997094][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.026675][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.035370][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.059746][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.068141][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.088234][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.097936][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.110897][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.123637][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.136461][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.144976][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.158357][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.168642][ T5789] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 708.210082][ T5789] hid-generic 0000:0000:0004.0005: hidraw0: HID v0.03 Device [syz1] on syz0 [ 708.415407][T11388] fido_id[11388]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 713.745311][T11450] input: syz0 as /devices/virtual/input/input10 [ 717.257821][T11493] 9pnet: p9_errstr2errno: server reported unknown error @b§)ð_4¶c^ŒÞí†FÞRšRå2è¸è±xgöš˜ýoÞnÔÆçm¹ mü"¿?Â|r•ýŠx!HÄ [ 724.199177][T11547] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1249'. [ 724.608533][T11560] binder: BINDER_SET_CONTEXT_MGR already set [ 724.626927][T11560] binder: 11557:11560 ioctl 4018620d 200000004a80 returned -16 [ 726.473861][T11585] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 730.615296][T11650] TCP: TCP_TX_DELAY enabled [ 734.170269][T11692] syz.0.1304 uses obsolete (PF_INET,SOCK_PACKET) [ 734.304408][T11698] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 747.696831][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.703556][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.729813][T11845] binder_alloc: binder_alloc_mmap_handler: 11844 200000ffe000-200001000000 already mapped failed -16 [ 748.460394][ T8777] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 748.755070][ T8777] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 748.790524][ T8777] usb 6-1: config 4 has no interface number 0 [ 748.796748][ T8777] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 748.833739][ T8777] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.856268][T11858] binder: 11856:11858 ioctl 4018620d 0 returned -22 [ 748.857687][ T8777] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 748.890335][ T8777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.926563][ T8777] hub 6-1:4.128: USB hub found [ 749.146138][ T8777] hub 6-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 749.682473][ T5789] usb 6-1: USB disconnect, device number 10 [ 754.394661][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1399'. [ 758.273806][T12006] binder: BINDER_SET_CONTEXT_MGR already set [ 758.305411][T12006] binder: 12005:12006 ioctl 4018620d 200000004a80 returned -16 [ 762.949235][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1443'. [ 778.934664][T12248] pim6reg1: entered promiscuous mode [ 778.949505][T12248] pim6reg1: entered allmulticast mode [ 779.007163][T12251] 9pnet_fd: Insufficient options for proto=fd [ 783.590188][ T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 783.703719][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.712666][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.732189][T12332] bridge0: entered allmulticast mode [ 783.780826][T12332] bridge_slave_1: left allmulticast mode [ 783.792469][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.809900][T12332] bridge_slave_1: left promiscuous mode [ 783.817142][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.836125][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.846850][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.867634][ T23] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.890207][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.892283][T12332] bridge_slave_0: left allmulticast mode [ 783.907757][ T23] usb 6-1: config 0 descriptor?? [ 783.950181][T12332] bridge_slave_0: left promiscuous mode [ 783.980575][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.348207][ T23] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 784.374124][ T23] plantronics 0003:047F:FFFF.0006: parse failed [ 784.402709][ T23] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 784.577114][ T8777] usb 6-1: USB disconnect, device number 11 [ 785.962654][T12363] Illegal XDP return value 4294967294 on prog (id 68) dev syz_tun, expect packet loss! [ 809.128259][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.135235][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.974952][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1693'. [ 823.251189][ T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 823.760593][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.831337][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.917703][ T23] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.989305][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.075300][ T23] usb 6-1: config 0 descriptor?? [ 826.567336][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 826.573728][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 826.593250][ T23] usb 6-1: USB disconnect, device number 12 [ 830.776079][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1714'. [ 838.230254][ T5852] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 838.660213][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 838.672189][ T5852] usb 5-1: unable to get BOS descriptor or descriptor too short [ 838.688167][ T5852] usb 5-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 838.710071][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.722150][ T5852] usb 5-1: Product: syz [ 838.726451][ T5852] usb 5-1: Manufacturer: syz [ 838.749097][ T5852] usb 5-1: SerialNumber: syz [ 839.929384][ T5852] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 839.990710][ T5852] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 840.032316][ T5852] usb 5-1: USB disconnect, device number 10 [ 840.095144][T12871] udevd[12871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.206074][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1740'. [ 851.527838][T12986] 9pnet_virtio: no channels available for device syz [ 852.657713][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 854.112837][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'. [ 860.161130][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 861.325710][ T27] audit: type=1326 audit(1779989110.247:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 861.357199][ T27] audit: type=1326 audit(1779989110.277:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 861.384456][ T27] audit: type=1326 audit(1779989110.277:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 861.450195][ T27] audit: type=1326 audit(1779989110.247:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 861.493325][ T27] audit: type=1326 audit(1779989110.277:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 862.631880][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1800'. [ 862.643333][ T27] audit: type=1326 audit(1779989110.277:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 862.674806][ T27] audit: type=1326 audit(1779989110.277:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 862.699623][ T27] audit: type=1326 audit(1779989110.277:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 862.724904][ T27] audit: type=1326 audit(1779989110.277:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fac01b9ce59 code=0x7ffc0000 [ 862.763486][ T27] audit: type=1326 audit(1779989110.277:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13075 comm="syz.4.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac01b96bd7 code=0x7ffc0000 [ 868.280093][ T5822] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 868.500507][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.520021][ T5822] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 868.539812][ T5822] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.560355][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.584768][ T5822] usb 5-1: config 0 descriptor?? [ 871.015491][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.022137][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.133804][ T8777] usb 5-1: USB disconnect, device number 11 [ 871.742388][T13191] 9pnet_fd: Insufficient options for proto=fd [ 874.311575][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 874.410506][T13204] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1849'. [ 874.784016][T13212] 9pnet_fd: Insufficient options for proto=fd [ 876.088712][T13218] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 877.940310][ T1195] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 878.140923][ T1195] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.161957][ T1195] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 878.190586][ T1195] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 878.199719][ T1195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.239766][ T1195] usb 5-1: config 0 descriptor?? [ 880.180481][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1858'. [ 881.538243][ T1195] usb 5-1: USB disconnect, device number 12 [ 883.211538][T13275] 9pnet_fd: Insufficient options for proto=fd [ 883.790117][ T5825] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 883.992146][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 884.011737][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.035344][ T5825] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 884.050500][ T5825] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 884.068275][ T5825] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 885.190197][ T5825] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 885.231604][ T5825] usb 5-1: config 1 interface 1 has no altsetting 0 [ 885.247972][ T5825] usb 5-1: string descriptor 0 read error: -22 [ 885.254680][ T5825] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 886.036579][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.210318][T13304] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1883'. [ 886.270852][ T5825] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 886.512093][ T5825] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 886.555646][ T5825] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 887.595699][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1886'. [ 887.684155][ T5825] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 887.743976][ T5825] usb 5-1: USB disconnect, device number 13 [ 889.604733][ T5825] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 889.807437][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.830749][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 889.854577][ T5825] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 889.880318][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.901112][ T5825] usb 5-1: config 0 descriptor?? [ 889.931122][ T5825] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 892.220324][ T5822] usb 5-1: USB disconnect, device number 14 [ 895.164449][T13355] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1897'. [ 898.053361][T13378] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1909'. [ 912.722672][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'. [ 925.879423][T11045] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 925.919471][T11045] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 925.942190][T11045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 925.970061][T11045] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 925.990280][T11045] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 925.997856][T11045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 926.040198][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 926.060233][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 926.140364][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 926.159607][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 926.170059][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 926.177588][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 926.440256][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.545435][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.857056][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.231755][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.581486][ T5783] Bluetooth: hci4: command tx timeout [ 928.755687][T13622] chnl_net:caif_netlink_parms(): no params data found [ 930.466444][T13622] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.482125][T13622] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.489822][T13622] bridge_slave_0: entered allmulticast mode [ 930.532079][T13622] bridge_slave_0: entered promiscuous mode [ 930.648336][ T5783] Bluetooth: hci4: command tx timeout [ 930.656009][T13622] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.680149][T13622] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.730775][T13622] bridge_slave_1: entered allmulticast mode [ 930.769025][T13622] bridge_slave_1: entered promiscuous mode [ 931.074587][T13622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.231511][T13622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.476009][T13622] team0: Port device team_slave_0 added [ 931.503887][T13622] team0: Port device team_slave_1 added [ 931.739713][T13622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.760643][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.903920][T13622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.940241][T13622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.972434][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.056374][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.065719][T13622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.082447][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.356231][T13622] hsr_slave_0: entered promiscuous mode [ 932.400911][T13622] hsr_slave_1: entered promiscuous mode [ 932.422103][T13622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.440975][T13622] Cannot create hsr debugfs directory [ 932.462941][ T27] kauditd_printk_skb: 201 callbacks suppressed [ 932.463043][ T27] audit: type=1326 audit(1779989181.387:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 932.538802][ T27] audit: type=1326 audit(1779989181.387:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 932.618923][ T27] audit: type=1326 audit(1779989181.427:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 932.711276][ T27] audit: type=1326 audit(1779989181.427:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 932.749973][ T5783] Bluetooth: hci4: command tx timeout [ 932.793840][ T27] audit: type=1326 audit(1779989181.427:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 933.977579][ T27] audit: type=1326 audit(1779989181.427:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 934.060047][ T27] audit: type=1326 audit(1779989181.427:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 934.085370][ T1138] hsr_slave_0: left promiscuous mode [ 934.102248][ T1138] hsr_slave_1: left promiscuous mode [ 934.113251][ T27] audit: type=1326 audit(1779989181.427:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 934.138943][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.152545][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.185435][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.194518][ T27] audit: type=1326 audit(1779989181.437:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc46119ce59 code=0x7ffc0000 [ 934.229600][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.249875][ T27] audit: type=1326 audit(1779989181.437:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13692 comm="syz.0.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc461196bd7 code=0x7ffc0000 [ 934.275340][ T1138] bridge_slave_1: left allmulticast mode [ 934.285757][ T1138] bridge_slave_1: left promiscuous mode [ 934.300216][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.339595][ T1138] bridge_slave_0: left allmulticast mode [ 934.346241][ T1138] bridge_slave_0: left promiscuous mode [ 934.352843][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.463633][ T1138] veth1_macvtap: left promiscuous mode [ 934.469222][ T1138] veth0_macvtap: left promiscuous mode [ 934.485776][ T1138] veth1_vlan: left promiscuous mode [ 934.500335][ T1138] veth0_vlan: left promiscuous mode [ 934.800284][ T5783] Bluetooth: hci4: command tx timeout [ 937.148578][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 937.262967][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 937.378863][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.469689][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.179232][ T1138] bond0 (unregistering): Released all slaves [ 939.168398][T13622] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 939.219536][T13622] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 940.281618][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2022'. [ 940.470105][T13622] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 940.543782][T13622] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 941.115692][T13622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.199443][T13622] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.263128][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.270709][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.322808][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.330096][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.539115][T13622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.262956][T13622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.573864][T13622] veth0_vlan: entered promiscuous mode [ 945.606022][T13622] veth1_vlan: entered promiscuous mode [ 945.728145][T13622] veth0_macvtap: entered promiscuous mode [ 945.757780][T13622] veth1_macvtap: entered promiscuous mode [ 945.836988][T13622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.870342][T13622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.907123][T13622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.944564][T13622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.960401][T13622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.981196][T13622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.014498][T13622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.094298][T13622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.143427][T13622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.180168][T13622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.212246][T13622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.240206][T13622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.371133][T13622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.392482][T13622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.453568][T13622] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.500028][T13622] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.508817][T13622] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.534766][T13622] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.676307][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2030'. [ 948.950506][ T7049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.958513][ T7049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.051320][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.066795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.651458][T13853] block device autoloading is deprecated and will be removed. [ 955.167301][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'. [ 957.103838][T13898] netlink: 'syz.0.2047': attribute type 11 has an invalid length. [ 957.133931][T13898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2047'. [ 958.759348][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 961.291084][ T7049] wlan1: Trigger new scan to find an IBSS to join [ 962.027205][T13958] futex_wake_op: syz.5.2056 tries to shift op by 144; fix this program [ 964.825022][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 966.278854][ T59] wlan1: Trigger new scan to find an IBSS to join [ 968.653373][ T1138] wlan1: Creating new IBSS network, BSSID 8e:54:5d:f2:b0:fc [ 970.736269][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 976.572745][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2081'. [ 979.047695][T14084] binder: 14083:14084 ioctl 4018620d 0 returned -22 [ 979.055300][T14084] binder: 14083:14084 ioctl c00c620f 0 returned -14 [ 979.070667][T14084] binder: 14083:14084 ioctl c0306201 0 returned -14 [ 979.078529][T14084] binder: 14083:14084 ioctl c0306201 0 returned -14 [ 983.351483][T14130] block device autoloading is deprecated and will be removed. [ 984.886534][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2090'. [ 992.486026][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2099'. [ 993.504232][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.520705][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.119976][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 998.670346][ T1320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1004.290236][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 1005.443824][T14266] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1009.700026][ T5822] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 1009.913416][ T5822] usb 8-1: config 0 has an invalid interface number: 112 but max is 0 [ 1009.928675][ T5822] usb 8-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 1009.944083][T14336] netlink: 'syz.0.2121': attribute type 11 has an invalid length. [ 1009.958451][ T5822] usb 8-1: config 0 has no interface number 0 [ 1009.970956][ T5822] usb 8-1: too many endpoints for config 0 interface 112 altsetting 59: 195, using maximum allowed: 30 [ 1009.986988][ T5822] usb 8-1: config 0 interface 112 altsetting 59 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1009.997457][ T5822] usb 8-1: config 0 interface 112 altsetting 59 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 1010.012409][ T5822] usb 8-1: config 0 interface 112 altsetting 59 endpoint 0x8F has invalid maxpacket 12392, setting to 8 [ 1010.026615][ T5822] usb 8-1: config 0 interface 112 altsetting 59 has 3 endpoint descriptors, different from the interface descriptor's value: 195 [ 1010.047422][ T5822] usb 8-1: config 0 interface 112 has no altsetting 0 [ 1010.054531][ T5822] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1010.093531][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.117178][ T5822] usb 8-1: config 0 descriptor?? [ 1010.129662][T14319] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1010.143899][ T5822] hub 8-1:0.112: bad descriptor, ignoring hub [ 1010.178557][ T5822] hub: probe of 8-1:0.112 failed with error -5 [ 1010.220731][ T5822] sierra 8-1:0.112: Sierra USB modem converter detected [ 1010.370454][ T5822] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1010.481612][ T5822] usb 8-1: USB disconnect, device number 2 [ 1010.528863][ T5822] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1010.612111][ T5822] sierra 8-1:0.112: device disconnected [ 1014.388872][T14367] ======================================================= [ 1014.388872][T14367] WARNING: The mand mount option has been deprecated and [ 1014.388872][T14367] and is ignored by this kernel. Remove the mand [ 1014.388872][T14367] option from the mount to silence this warning. [ 1014.388872][T14367] ======================================================= [ 1017.480027][ T5783] Bluetooth: hci4: hcon ffff888026f34000 sent 0 < count 1 [ 1017.625861][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2136'. [ 1017.892600][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2136'. [ 1023.476318][T14430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1023.487575][T14430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1023.500573][T14430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1023.530932][T11045] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1023.538918][T11045] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1023.548260][T11045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1024.076478][T14428] chnl_net:caif_netlink_parms(): no params data found [ 1024.357344][T14428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.381504][T14428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.388894][T14428] bridge_slave_0: entered allmulticast mode [ 1026.690629][T11045] Bluetooth: hci3: command tx timeout [ 1026.730128][T14428] bridge_slave_0: entered promiscuous mode [ 1026.799823][T14428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.807595][T14428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.837610][T14428] bridge_slave_1: entered allmulticast mode [ 1026.870243][T14428] bridge_slave_1: entered promiscuous mode [ 1027.097186][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.330615][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.359851][T14428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.501291][T14428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.616177][T14428] team0: Port device team_slave_0 added [ 1028.718328][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.729296][T11045] Bluetooth: hci3: command tx timeout [ 1028.770151][T14428] team0: Port device team_slave_1 added [ 1029.019020][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.110889][T14428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.117924][T14428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.197382][T14428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.228357][T14428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.250279][T14428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.330036][T14428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.738690][T14428] hsr_slave_0: entered promiscuous mode [ 1029.884551][T14428] hsr_slave_1: entered promiscuous mode [ 1031.979234][T11045] Bluetooth: hci3: command tx timeout [ 1031.994374][ T1138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1034.000076][T11045] Bluetooth: hci3: command tx timeout [ 1037.799719][T14428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1037.823624][T14428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1039.149955][T14428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1039.183709][T14428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1039.325269][ T1143] hsr_slave_0: left promiscuous mode [ 1039.362029][ T1143] hsr_slave_1: left promiscuous mode [ 1039.410582][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.440396][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.471224][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.478738][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.547030][ T1143] veth1_macvtap: left promiscuous mode [ 1039.556849][ T1143] veth0_macvtap: left promiscuous mode [ 1039.566815][ T1143] veth1_vlan: left promiscuous mode [ 1039.583035][ T1143] veth0_vlan: left promiscuous mode [ 1043.086792][T14553] fuse: Bad value for 'fd' [ 1043.424152][ T27] kauditd_printk_skb: 134 callbacks suppressed [ 1043.424170][ T27] audit: type=1326 audit(1779989292.347:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.513581][ T27] audit: type=1326 audit(1779989292.347:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.575460][ T27] audit: type=1326 audit(1779989292.357:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.625775][ T27] audit: type=1326 audit(1779989292.357:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.691521][ T27] audit: type=1326 audit(1779989292.357:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.741585][ T27] audit: type=1326 audit(1779989292.357:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.810146][ T27] audit: type=1326 audit(1779989292.357:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.855039][ T27] audit: type=1326 audit(1779989292.357:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.910051][ T27] audit: type=1326 audit(1779989292.357:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1043.972619][ T27] audit: type=1326 audit(1779989292.357:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.6.2176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1046.167237][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1047.696604][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1047.897531][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.076446][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.440860][ T27] kauditd_printk_skb: 447 callbacks suppressed [ 1048.440877][ T27] audit: type=1326 audit(1779989297.367:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdff5d5d68e code=0x7ffc0000 [ 1048.530489][ T27] audit: type=1326 audit(1779989297.397:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff5d96bd7 code=0x7ffc0000 [ 1048.580118][ T27] audit: type=1326 audit(1779989297.397:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff5d3e1d9 code=0x7ffc0000 [ 1048.636239][ T27] audit: type=1326 audit(1779989297.407:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdff5d5d68e code=0x7ffc0000 [ 1048.710228][ T27] audit: type=1326 audit(1779989297.407:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fdff5d9ce59 code=0x7ffc0000 [ 1048.774213][ T27] audit: type=1326 audit(1779989297.407:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdff5d5d68e code=0x7ffc0000 [ 1048.828210][ T27] audit: type=1326 audit(1779989297.407:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff5d96bd7 code=0x7ffc0000 [ 1048.859075][ T27] audit: type=1326 audit(1779989297.417:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff5d3e1d9 code=0x7ffc0000 [ 1048.896936][ T27] audit: type=1326 audit(1779989297.417:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff5d96bd7 code=0x7ffc0000 [ 1048.939758][ T27] audit: type=1326 audit(1779989297.417:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff5d3e1d9 code=0x7ffc0000 [ 1050.442454][ T1143] bond0 (unregistering): Released all slaves [ 1050.526048][ T1195] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1050.733639][ T1195] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.770178][ T1195] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.791109][ T1195] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1050.831151][ T1195] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1050.849244][ T1195] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.865599][T14428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.908020][ T1195] usb 8-1: config 0 descriptor?? [ 1050.967788][T14428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.021460][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.028756][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.134339][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.141633][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.343908][ T1195] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1051.390357][ T1195] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1051.421957][ T1195] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1051.429460][ T1195] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1051.480369][ T1195] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1051.487879][ T1195] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1051.520151][ T1195] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1051.528636][ T1195] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 1051.561753][ T1195] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1051.630595][ T1195] usb 8-1: USB disconnect, device number 3 [ 1051.761146][T14614] fido_id[14614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1051.798086][T14428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.881135][T14428] veth0_vlan: entered promiscuous mode [ 1051.908668][T14428] veth1_vlan: entered promiscuous mode [ 1051.951325][T14428] veth0_macvtap: entered promiscuous mode [ 1051.965972][T14428] veth1_macvtap: entered promiscuous mode [ 1051.987995][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.999517][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.010304][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.039965][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.050257][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.070669][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.881512][T14428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.887419][T11045] Bluetooth: hci4: command 0x0406 tx timeout [ 1052.965842][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.000796][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.029964][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.041105][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.051093][T14428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.061755][T14428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.073503][T14428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.086238][T14428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.095811][T14428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.104664][T14428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.117977][T14428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.355143][T14569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.387077][T14569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.450829][ T27] kauditd_printk_skb: 318 callbacks suppressed [ 1053.450845][ T27] audit: type=1326 audit(1779989302.377:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdff5d5d68e code=0x7ffc0000 [ 1053.511761][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.534628][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.542949][ T27] audit: type=1326 audit(1779989302.377:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdff5d5d68e code=0x7ffc0000 [ 1053.615820][ T27] audit: type=1326 audit(1779989302.377:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff5d96bd7 code=0x7ffc0000 [ 1053.653254][ T27] audit: type=1326 audit(1779989302.407:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdff5d5d68e code=0x7ffc0000 [ 1053.718972][ T27] audit: type=1326 audit(1779989302.407:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff5d3e1d9 code=0x7ffc0000 [ 1053.757790][ T27] audit: type=1326 audit(1779989302.407:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff5d96bd7 code=0x7ffc0000 [ 1053.783693][ T27] audit: type=1326 audit(1779989302.407:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdff5d3e1d9 code=0x7ffc0000 [ 1053.845179][ T27] audit: type=1326 audit(1779989302.407:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fdff5d9ce59 code=0x7ffc0000 [ 1053.900026][ T27] audit: type=1326 audit(1779989302.417:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdff5d5d68e code=0x7ffc0000 [ 1053.951603][ T27] audit: type=1326 audit(1779989302.417:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.5.2194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdff5d96bd7 code=0x7ffc0000 [ 1055.801011][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.807353][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.261527][T14677] IPVS: length: 24 != 792 [ 1063.081927][T14683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.102669][T14683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.110192][T14683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.949416][ T1008] wlan1: Trigger new scan to find an IBSS to join [ 1067.684632][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2220'. [ 1070.330201][ T7049] wlan1: Trigger new scan to find an IBSS to join [ 1072.420686][ T1143] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 1078.630315][ T27] kauditd_printk_skb: 73 callbacks suppressed [ 1078.630333][ T27] audit: type=1326 audit(1779989327.547:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1078.715248][ T27] audit: type=1326 audit(1779989327.547:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1079.940039][ T27] audit: type=1326 audit(1779989327.607:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1079.984100][ T27] audit: type=1326 audit(1779989327.607:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1080.008721][ T27] audit: type=1326 audit(1779989327.617:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1080.033452][ T27] audit: type=1326 audit(1779989327.617:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1080.058511][ T27] audit: type=1326 audit(1779989327.617:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1080.084948][ T27] audit: type=1326 audit(1779989327.617:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1080.121792][ T27] audit: type=1326 audit(1779989327.617:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1080.146827][ T27] audit: type=1326 audit(1779989327.617:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.6.2244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1086.546402][ T27] kauditd_printk_skb: 161 callbacks suppressed [ 1086.546419][ T27] audit: type=1326 audit(1779989335.467:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1086.790473][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 1086.911910][ T27] audit: type=1326 audit(1779989335.517:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1087.203842][ T27] audit: type=1326 audit(1779989335.517:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1087.228524][ T27] audit: type=1326 audit(1779989335.517:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1087.276781][ T27] audit: type=1326 audit(1779989335.517:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1087.356324][ T27] audit: type=1326 audit(1779989335.587:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1087.437752][ T27] audit: type=1326 audit(1779989335.627:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1087.469227][ T27] audit: type=1326 audit(1779989335.637:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1087.520127][ T27] audit: type=1326 audit(1779989335.637:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240d99ce59 code=0x7ffc0000 [ 1087.602852][ T27] audit: type=1326 audit(1779989335.637:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.6.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f240d996bd7 code=0x7ffc0000 [ 1090.452337][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2275'. [ 1094.690208][T14884] dvmrp8: entered allmulticast mode [ 1096.088941][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2284'. [ 1100.640227][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2294'. [ 1102.501058][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1110.586839][T15006] IPVS: length: 24 != 792 [ 1114.737771][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2328'. [ 1116.106143][ T27] kauditd_printk_skb: 171 callbacks suppressed [ 1116.106160][ T27] audit: type=1326 audit(1779989365.027:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.171133][ T27] audit: type=1326 audit(1779989365.027:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.206640][ T27] audit: type=1326 audit(1779989365.027:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.331048][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.338627][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.374951][ T27] audit: type=1326 audit(1779989365.027:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.404820][ T27] audit: type=1326 audit(1779989365.027:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.441134][ T27] audit: type=1326 audit(1779989365.047:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.471336][ T27] audit: type=1326 audit(1779989365.047:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.501080][ T27] audit: type=1326 audit(1779989365.047:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.568953][ T27] audit: type=1326 audit(1779989365.047:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1116.615447][ T27] audit: type=1326 audit(1779989365.047:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.7.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f010359ce59 code=0x7ffc0000 [ 1117.145229][T15043] IPVS: length: 24 != 792 [ 1119.941542][T15061] block device autoloading is deprecated and will be removed. [ 1135.146305][ T7049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1149.167408][T11045] Bluetooth: hci3: command 0x0406 tx timeout [ 1158.292235][T15258] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2398'. [ 1167.816909][T14580] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1177.772087][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.778504][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1195.084383][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2453'. [ 1199.879470][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1201.171157][T15483] /dev/loop0: Can't lookup blockdev [ 1220.083973][T11045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1220.098791][T11045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1220.108110][T11045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1220.118364][T11045] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1220.136221][T11045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1220.144728][T11045] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1221.440521][ T1320] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.651200][ T1320] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.822392][ T1320] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.999135][ T1320] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.243713][ T5783] Bluetooth: hci0: command tx timeout [ 1223.153728][T15582] chnl_net:caif_netlink_parms(): no params data found [ 1224.900599][ T5783] Bluetooth: hci0: command tx timeout [ 1225.463487][T15582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.502448][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.540437][T15582] bridge_slave_0: entered allmulticast mode [ 1225.548167][T15582] bridge_slave_0: entered promiscuous mode [ 1225.719278][T15582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.760714][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.775125][T15582] bridge_slave_1: entered allmulticast mode [ 1225.801460][T15582] bridge_slave_1: entered promiscuous mode [ 1227.089869][T11045] Bluetooth: hci0: command tx timeout [ 1227.177562][T15582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.264571][T15582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.551596][T15582] team0: Port device team_slave_0 added [ 1227.591821][T15582] team0: Port device team_slave_1 added [ 1227.946353][ T1320] dvmrp8 (unregistering): left allmulticast mode [ 1227.987468][T15582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.010445][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.491264][T15582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.091007][T15582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.120086][T11045] Bluetooth: hci0: command tx timeout [ 1229.136589][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.204774][T15582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.161107][ T1320] hsr_slave_0: left promiscuous mode [ 1230.181659][ T1320] hsr_slave_1: left promiscuous mode [ 1230.191673][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.220164][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.228445][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.243925][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.265239][ T1320] bridge_slave_1: left allmulticast mode [ 1230.288274][ T1320] bridge_slave_1: left promiscuous mode [ 1230.306001][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.522157][T15458] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1231.706040][ T1320] bridge_slave_0: left allmulticast mode [ 1232.054872][ T1320] bridge_slave_0: left promiscuous mode [ 1232.111472][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.668489][ T1320] veth1_macvtap: left promiscuous mode [ 1232.689084][ T1320] veth0_macvtap: left promiscuous mode [ 1232.705402][ T1320] veth1_vlan: left promiscuous mode [ 1233.706903][ T1320] veth0_vlan: left promiscuous mode [ 1239.228616][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.235062][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.560619][ T1320] team0 (unregistering): Port device team_slave_1 removed [ 1242.751049][ T1320] team0 (unregistering): Port device team_slave_0 removed [ 1242.943344][ T1320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.309524][ T1320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.115828][ T1320] bond0 (unregistering): Released all slaves [ 1248.412231][T15582] hsr_slave_0: entered promiscuous mode [ 1248.430727][T15582] hsr_slave_1: entered promiscuous mode [ 1248.446212][T15582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.473291][T15582] Cannot create hsr debugfs directory [ 1252.804655][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 1256.723620][T15582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1256.748780][T15582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1256.796070][T15582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1256.833032][T15582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1257.972936][T15582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.094117][T15582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.167388][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.174739][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.281579][T15458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.288775][T15458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.471805][T15582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.889854][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1265.316206][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1267.344310][T15582] veth0_vlan: entered promiscuous mode [ 1267.402747][T15582] veth1_vlan: entered promiscuous mode [ 1267.564818][T15582] veth0_macvtap: entered promiscuous mode [ 1267.619502][T15582] veth1_macvtap: entered promiscuous mode [ 1267.684277][T15582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1267.729971][T15582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.763467][T15582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1267.803526][T15582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.851772][T15582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1267.910113][T15582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.968276][T15582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.034118][T15582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1268.046074][T15582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.084205][T15582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1268.128681][T15582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.173815][T15582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1268.292493][T15582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.347939][T15582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.463327][T15582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.539864][T15582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.548661][T15582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.590015][T15582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.869697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.935003][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.072409][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.120096][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.438371][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1293.236569][T16024] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 1298.288108][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1298.560116][T11045] Bluetooth: hci0: command tx timeout [ 1299.890171][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2560'. [ 1300.835227][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.841895][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.015803][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1304.031034][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1304.040072][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1304.060853][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1304.081474][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1304.090659][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1306.446074][ T5783] Bluetooth: hci1: command tx timeout [ 1306.855139][T16058] chnl_net:caif_netlink_parms(): no params data found [ 1307.082082][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2578'. [ 1307.460639][T16058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.467993][T16058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.527923][T16058] bridge_slave_0: entered allmulticast mode [ 1307.541696][T16058] bridge_slave_0: entered promiscuous mode [ 1307.590565][T16058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.597868][T16058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.710017][T16058] bridge_slave_1: entered allmulticast mode [ 1307.717681][T16058] bridge_slave_1: entered promiscuous mode [ 1308.081304][T11045] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1308.099017][T11045] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1308.107817][T11045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1308.122182][T11045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1308.130214][T11045] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1308.138558][T11045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1308.492138][T11045] Bluetooth: hci1: command tx timeout [ 1308.625591][T16058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.903922][T16058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.492023][T16058] team0: Port device team_slave_0 added [ 1310.242864][T11045] Bluetooth: hci2: command tx timeout [ 1310.561594][T11045] Bluetooth: hci1: command tx timeout [ 1310.895219][ T7049] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.295595][T16058] team0: Port device team_slave_1 added [ 1312.320186][T11045] Bluetooth: hci2: command tx timeout [ 1312.639927][T11045] Bluetooth: hci1: command tx timeout [ 1312.690705][ T27] kauditd_printk_skb: 82 callbacks suppressed [ 1312.690758][ T27] audit: type=1326 audit(1779989561.597:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1312.792450][ T27] audit: type=1326 audit(1779989561.617:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1313.109891][ T27] audit: type=1326 audit(1779989561.617:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1313.210186][ T27] audit: type=1326 audit(1779989561.717:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1313.244708][ T27] audit: type=1326 audit(1779989561.717:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1313.287159][ T27] audit: type=1326 audit(1779989561.717:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1313.311606][ T27] audit: type=1326 audit(1779989561.717:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1313.358142][ T27] audit: type=1326 audit(1779989561.717:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1313.391831][ T27] audit: type=1326 audit(1779989561.717:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff81879ce59 code=0x7ffc0000 [ 1313.432019][ T27] audit: type=1326 audit(1779989561.717:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.0.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff818796bd7 code=0x7ffc0000 [ 1314.161980][ T7049] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.989972][T11045] Bluetooth: hci2: command tx timeout [ 1315.014368][T16058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.025801][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.052480][T16058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.021925][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 1316.060925][ T7049] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.115434][T16058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.123039][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.166584][T16058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.367381][ T7049] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.039992][T11045] Bluetooth: hci2: command tx timeout [ 1317.066597][T16058] hsr_slave_0: entered promiscuous mode [ 1317.103809][T16058] hsr_slave_1: entered promiscuous mode [ 1317.126383][T16058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1317.144518][T16058] Cannot create hsr debugfs directory [ 1317.621971][T16079] chnl_net:caif_netlink_parms(): no params data found [ 1322.027127][T16079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.038063][T16079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.061124][T16079] bridge_slave_0: entered allmulticast mode [ 1322.068478][T16079] bridge_slave_0: entered promiscuous mode [ 1322.501232][T16079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.508780][T16079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.516707][T16079] bridge_slave_1: entered allmulticast mode [ 1322.524648][T16079] bridge_slave_1: entered promiscuous mode [ 1322.562868][T16079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.044496][T16079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.789698][T16079] team0: Port device team_slave_0 added [ 1325.102316][T16079] team0: Port device team_slave_1 added [ 1325.157505][T16058] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1325.231993][T16058] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1325.370599][T16058] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1325.500176][T16058] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1325.560090][T16079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.567273][T16079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.669970][T16079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.660693][T16079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.667732][T16079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.749860][T16079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.094302][T16079] hsr_slave_0: entered promiscuous mode [ 1328.150785][T16079] hsr_slave_1: entered promiscuous mode [ 1328.191233][T16079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1328.198906][T16079] Cannot create hsr debugfs directory [ 1329.796031][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1330.446093][ T7049] hsr_slave_0: left promiscuous mode [ 1330.453009][ T7049] hsr_slave_1: left promiscuous mode [ 1330.460244][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.467843][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.479230][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.492723][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.529315][ T7049] bridge_slave_1: left allmulticast mode [ 1330.535304][ T7049] bridge_slave_1: left promiscuous mode [ 1330.541802][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.561717][ T7049] bridge_slave_0: left allmulticast mode [ 1330.576337][ T7049] bridge_slave_0: left promiscuous mode [ 1330.584180][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.725115][ T7049] veth1_macvtap: left promiscuous mode [ 1330.731014][ T7049] veth0_macvtap: left promiscuous mode [ 1330.738047][ T7049] veth1_vlan: left promiscuous mode [ 1330.769002][ T7049] veth0_vlan: left promiscuous mode [ 1331.660279][ T7049] pimreg (unregistering): left allmulticast mode [ 1334.241216][ T7049] team0 (unregistering): Port device team_slave_1 removed [ 1334.385064][ T7049] team0 (unregistering): Port device team_slave_0 removed [ 1334.500428][ T7049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.633072][ T7049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.722280][ T7049] bond0 (unregistering): Released all slaves [ 1338.272336][T16221] input: syz1 as /devices/virtual/input/input12 [ 1338.781461][T16058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.979634][T16058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.053204][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.060540][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.747889][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.755224][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.803213][T16079] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1341.664076][T16079] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1341.857162][T16079] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1341.911399][T16079] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1342.472860][ T7049] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.842433][ T7049] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.904783][T16079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.163959][ T7049] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.314492][ T7049] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.367715][T16079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.416520][T16058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.511255][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.518481][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.562897][T15458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.570158][T15458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.884879][T16079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.002680][T16058] veth0_vlan: entered promiscuous mode [ 1348.498497][T16058] veth1_vlan: entered promiscuous mode [ 1350.254638][T16058] veth0_macvtap: entered promiscuous mode [ 1350.289900][T16058] veth1_macvtap: entered promiscuous mode [ 1351.155047][T16079] veth0_vlan: entered promiscuous mode [ 1351.223920][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.236272][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.247642][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.258382][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.268744][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.279684][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.301986][T16058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.474336][T16079] veth1_vlan: entered promiscuous mode [ 1352.699872][ T7049] hsr_slave_0: left promiscuous mode [ 1352.720685][ T7049] hsr_slave_1: left promiscuous mode [ 1352.815092][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.840086][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.890662][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.898196][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.960971][ T7049] bridge_slave_1: left allmulticast mode [ 1352.967157][ T7049] bridge_slave_1: left promiscuous mode [ 1352.986512][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.038710][ T7049] bridge_slave_0: left allmulticast mode [ 1353.060122][ T7049] bridge_slave_0: left promiscuous mode [ 1353.065885][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.284256][ T7049] veth1_macvtap: left promiscuous mode [ 1353.305394][ T7049] veth0_macvtap: left promiscuous mode [ 1353.330216][ T7049] veth1_vlan: left promiscuous mode [ 1353.335661][ T7049] veth0_vlan: left promiscuous mode [ 1355.134116][ T7049] team0 (unregistering): Port device team_slave_1 removed [ 1355.227250][ T7049] team0 (unregistering): Port device team_slave_0 removed [ 1355.360738][ T7049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.480445][ T7049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.375156][ T7049] bond0 (unregistering): Released all slaves [ 1356.585618][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.630054][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.641834][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.685503][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.727019][T16058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.814399][T16058] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.839919][T16058] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.848706][T16058] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.040124][T16058] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.893197][T16079] veth0_macvtap: entered promiscuous mode [ 1359.146543][T16079] veth1_macvtap: entered promiscuous mode [ 1359.382964][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.397920][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.409882][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.433712][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.469897][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.480809][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.518392][T16079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.551788][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.571419][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.589850][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.611196][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.629901][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.649797][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.690441][T16079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.727066][T15458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.768497][T15458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.813950][T16079] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.861420][T16079] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.874498][T16079] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.890120][T16079] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.993551][T15458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.032456][T15458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.823308][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.833923][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.896896][T14470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.952706][T14470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.190672][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.197072][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.317085][T16446] syzkaller0: entered promiscuous mode [ 1374.322719][T16446] syzkaller0: entered allmulticast mode [ 1420.642716][T16738] Bluetooth: hci0: command 0x0406 tx timeout [ 1424.923139][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.929598][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.663159][T16804] Bluetooth: hci1: command 0x0406 tx timeout [ 1431.663174][T16803] Bluetooth: hci2: command 0x0406 tx timeout [ 1443.678889][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'. [ 1456.338844][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'. [ 1457.600303][T16738] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1457.705457][T17000] 9pnet_virtio: no channels available for device syz [ 1461.944163][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'. [ 1463.725585][T16738] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 1474.339992][T17134] binder_alloc: 17133: binder_alloc_buf, no vma [ 1484.977425][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.984151][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.881145][T11045] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1485.910435][T11045] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1485.919392][T11045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1485.934182][T11045] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1485.951396][T11045] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1485.958899][T11045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1486.124565][ T27] kauditd_printk_skb: 163 callbacks suppressed [ 1486.124582][ T27] audit: type=1326 audit(1779989735.047:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1486.211094][ T27] audit: type=1326 audit(1779989735.077:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1486.323121][ T27] audit: type=1326 audit(1779989735.077:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1486.412168][ T27] audit: type=1326 audit(1779989735.087:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1486.515160][ T27] audit: type=1326 audit(1779989735.087:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1486.660159][ T27] audit: type=1326 audit(1779989735.087:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1486.741682][ T27] audit: type=1326 audit(1779989735.087:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1486.819102][T11045] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1486.830550][ T27] audit: type=1326 audit(1779989735.087:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1486.903320][T17233] syzkaller0: entered promiscuous mode [ 1486.930294][ T27] audit: type=1326 audit(1779989735.097:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed82596bd7 code=0x7ffc0000 [ 1486.968721][T17233] syzkaller0: entered allmulticast mode [ 1487.037906][ T27] audit: type=1326 audit(1779989735.097:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17217 comm="syz.8.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed8253e1d9 code=0x7ffc0000 [ 1487.055606][T17208] chnl_net:caif_netlink_parms(): no params data found [ 1488.218552][T11045] Bluetooth: hci4: command tx timeout [ 1488.655068][T17088] Set syz1 is full, maxelem 65536 reached [ 1488.897556][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.905509][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.912942][T17208] bridge_slave_0: entered allmulticast mode [ 1488.930485][T17208] bridge_slave_0: entered promiscuous mode [ 1488.944086][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.951596][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.959523][T17208] bridge_slave_1: entered allmulticast mode [ 1488.967232][T17208] bridge_slave_1: entered promiscuous mode [ 1489.134697][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.212464][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.902277][T11045] Bluetooth: hci4: command tx timeout [ 1492.693735][T17208] team0: Port device team_slave_0 added [ 1492.733631][T17208] team0: Port device team_slave_1 added [ 1492.915131][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.959889][T16738] Bluetooth: hci4: command tx timeout [ 1492.965483][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1493.049808][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.194942][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.209925][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1493.269809][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.463494][T17208] hsr_slave_0: entered promiscuous mode [ 1493.489015][T17208] hsr_slave_1: entered promiscuous mode [ 1493.500787][T17208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1493.522999][T17208] Cannot create hsr debugfs directory [ 1493.861250][T14580] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.111893][T14580] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.322413][T14580] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.929892][T14580] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.040526][T16738] Bluetooth: hci4: command tx timeout [ 1495.373609][ T27] kauditd_printk_skb: 170 callbacks suppressed [ 1495.373626][ T27] audit: type=1326 audit(1779989744.297:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1495.469844][ T27] audit: type=1326 audit(1779989744.337:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1495.586394][ T27] audit: type=1326 audit(1779989744.337:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1495.664518][ T27] audit: type=1326 audit(1779989744.337:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1495.750097][ T27] audit: type=1326 audit(1779989744.337:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1495.830048][ T27] audit: type=1326 audit(1779989744.337:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1495.899828][ T27] audit: type=1326 audit(1779989744.337:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1495.981005][ T27] audit: type=1326 audit(1779989744.347:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fed8259ce59 code=0x7ffc0000 [ 1496.083019][ T27] audit: type=1326 audit(1779989744.347:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed82596bd7 code=0x7ffc0000 [ 1496.178958][ T27] audit: type=1326 audit(1779989744.347:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.8.2779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed8253e1d9 code=0x7ffc0000 [ 1505.693797][ T27] kauditd_printk_skb: 122 callbacks suppressed [ 1505.693812][ T27] audit: type=1326 audit(1779989754.617:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916779ce59 code=0x7ffc0000 [ 1505.767971][ T27] audit: type=1326 audit(1779989754.657:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916779ce59 code=0x7ffc0000 [ 1507.400322][ T27] audit: type=1326 audit(1779989754.657:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916779ce59 code=0x7ffc0000 [ 1507.549598][ T27] audit: type=1326 audit(1779989754.657:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f916779ce59 code=0x7ffc0000 [ 1507.672835][ T27] audit: type=1326 audit(1779989754.657:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916779ce59 code=0x7ffc0000 [ 1507.758785][ T27] audit: type=1326 audit(1779989754.657:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916779ce59 code=0x7ffc0000 [ 1507.829892][ T27] audit: type=1326 audit(1779989754.657:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916779ce59 code=0x7ffc0000 [ 1507.911385][ T27] audit: type=1326 audit(1779989754.657:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f916779ce59 code=0x7ffc0000 [ 1508.002284][ T27] audit: type=1326 audit(1779989754.657:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9167796bd7 code=0x7ffc0000 [ 1508.079785][ T27] audit: type=1326 audit(1779989754.657:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.9.2790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f916773e1d9 code=0x7ffc0000 [ 1508.888505][T17208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1509.322286][T17208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1511.058673][T17208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1511.400171][T17208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1515.080434][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.264485][T17433] syz.0.2802 (17433) used greatest stack depth: 18736 bytes left [ 1517.867959][T14580] hsr_slave_0: left promiscuous mode [ 1517.911032][T14580] hsr_slave_1: left promiscuous mode [ 1517.918755][T14580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.949812][T14580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.971661][T14580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.979191][T14580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.011025][T14580] bridge_slave_1: left allmulticast mode [ 1518.016859][T14580] bridge_slave_1: left promiscuous mode [ 1518.059964][T14580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.091097][T14580] bridge_slave_0: left allmulticast mode [ 1518.107760][T14580] bridge_slave_0: left promiscuous mode [ 1518.118160][T14580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.030059][T14580] veth1_macvtap: left promiscuous mode [ 1520.035691][T14580] veth0_macvtap: left promiscuous mode [ 1520.048827][T14580] veth1_vlan: left promiscuous mode [ 1520.069602][T14580] veth0_vlan: left promiscuous mode [ 1635.649685][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1635.657239][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15458/1:b..l [ 1635.665921][ C1] rcu: (detected by 1, t=10502 jiffies, g=98213, q=195 ncpus=2) [ 1635.673693][ C1] task:kworker/u4:7 state:R running task stack:22632 pid:15458 ppid:2 flags:0x00004000 [ 1635.686194][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1635.694236][ C1] Call Trace: [ 1635.697633][ C1] [ 1635.700671][ C1] __schedule+0x1553/0x45a0 [ 1635.705503][ C1] ? asan.module_dtor+0x20/0x20 [ 1635.710488][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1635.715848][ C1] preempt_schedule_irq+0xbf/0x150 [ 1635.721020][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1635.726803][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1635.733102][ C1] irqentry_exit+0x67/0x70 [ 1635.737607][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1635.743870][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 1635.749272][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1635.769577][ C1] RSP: 0018:ffffc9000d9bf8a0 EFLAGS: 00000206 [ 1635.775801][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 7f741edcd67c8700 [ 1635.784279][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9a20 [ 1635.792396][ C1] RBP: ffffc9000d9bf9a8 R08: dffffc0000000000 R09: 1ffffffff22398a0 [ 1635.800421][ C1] R10: dffffc0000000000 R11: fffffbfff22398a1 R12: 1ffff92001b37f20 [ 1635.808445][ C1] R13: ffffffff8d132120 R14: 0000000000000246 R15: dffffc0000000000 [ 1635.816504][ C1] ? batadv_iv_ogm_schedule+0x3e7/0xf10 [ 1635.822122][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1635.827544][ C1] ? batadv_iv_ogm_queue_add+0xd90/0xd90 [ 1635.833519][ C1] batadv_iv_ogm_schedule+0x40b/0xf10 [ 1635.838952][ C1] ? batadv_iv_ogm_schedule+0x3e7/0xf10 [ 1635.844572][ C1] ? batadv_iv_ogm_schedule+0x3e7/0xf10 [ 1635.850180][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x830/0x830 [ 1635.857473][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72a/0x830 [ 1635.864675][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1635.869949][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1635.875864][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1635.881641][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1635.887355][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1635.892918][ C1] ? assign_work+0x3d2/0x5d0 [ 1635.897584][ C1] worker_thread+0xa55/0xfc0 [ 1635.902337][ C1] kthread+0x2fa/0x390 [ 1635.906457][ C1] ? pr_cont_work+0x560/0x560 [ 1635.911187][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1635.915830][ C1] ret_from_fork+0x48/0x80 [ 1635.920501][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1635.925141][ C1] ret_from_fork_asm+0x11/0x20 [ 1635.930084][ C1] [ 1635.933159][ C1] rcu: rcu_preempt kthread starved for 10528 jiffies! g98213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1635.944574][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1635.954679][ C1] rcu: RCU grace-period kthread stack dump: [ 1635.960607][ C1] task:rcu_preempt state:R running task stack:27656 pid:17 ppid:2 flags:0x00004000 [ 1635.971526][ C1] Call Trace: [ 1635.974846][ C1] [ 1635.977829][ C1] __schedule+0x1553/0x45a0 [ 1635.982494][ C1] ? _raw_spin_unlock_irqrestore+0x40/0x120 [ 1635.988544][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1635.994502][ C1] ? asan.module_dtor+0x20/0x20 [ 1635.999407][ C1] ? enqueue_timer+0x23d/0x550 [ 1636.004319][ C1] ? __mod_timer+0x984/0xdb0 [ 1636.008981][ C1] schedule+0xbd/0x170 [ 1636.013107][ C1] schedule_timeout+0x188/0x2d0 [ 1636.018015][ C1] ? console_conditional_schedule+0x40/0x40 [ 1636.023983][ C1] ? update_process_times+0x1b0/0x1b0 [ 1636.029418][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1636.035480][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 1636.040399][ C1] ? rcu_gp_init+0x1162/0x1560 [ 1636.045218][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1636.050123][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1636.056240][ C1] ? rcu_gp_init+0x1560/0x1560 [ 1636.061057][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 1636.065984][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1636.071240][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1636.076502][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 1636.081146][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1636.086319][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1636.091308][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1636.096402][ C1] kthread+0x2fa/0x390 [ 1636.100526][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1636.105699][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1636.110344][ C1] ret_from_fork+0x48/0x80 [ 1636.114822][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1636.119458][ C1] ret_from_fork_asm+0x11/0x20 [ 1636.124309][ C1] [ 1636.127366][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1636.133735][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1636.140803][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1636.150898][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1636.156622][ C1] Code: b8 1f 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 24 40 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1636.176275][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 1636.182401][ C1] RAX: 435f12db68d28c00 RBX: ffffffff8162aea1 RCX: 435f12db68d28c00 [ 1636.190416][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9a20 [ 1636.198438][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1636.206465][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 1636.214496][ C1] R13: dffffc0000000000 R14: 1ffff110037cd780 R15: 0000000000000000 [ 1636.222632][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1636.231713][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1636.238457][ C1] CR2: 00007fffc9466f00 CR3: 0000000068b0d000 CR4: 00000000003506e0 [ 1636.246622][ C1] DR0: 0000000000000000 DR1: 00000000000001f8 DR2: 0000000000000003 [ 1636.254672][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1636.262915][ C1] Call Trace: [ 1636.266360][ C1] [ 1636.269331][ C1] default_idle+0x13/0x20 [ 1636.273720][ C1] default_idle_call+0x6c/0xa0 [ 1636.278545][ C1] do_idle+0x221/0x590 [ 1636.282675][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1636.287936][ C1] ? do_idle+0x56d/0x590 [ 1636.292238][ C1] cpu_startup_entry+0x43/0x60 [ 1636.297062][ C1] start_secondary+0xee/0xf0 [ 1636.301718][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1636.307869][ C1]