last executing test programs: 26m59.388588596s ago: executing program 32 (id=267): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) unshare(0x6a040000) unshare(0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) 24m8.100701922s ago: executing program 33 (id=706): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x103, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x5, 0x0, 0x0, 0x4, 0x1, 0x0, 0x100000]}}, 0x5c) r1 = openat(0xffffffffffffffff, &(0x7f0000004280)='./file0\x00', 0x0, 0x110) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x8, 0x2, 0x3, 0x0, 0x10}) getdents64(r1, &(0x7f0000000540)=""/66, 0x42) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="3ef26edc390f01da00009aef3821c880800f38c97d00bad004b0f4ee8e430066ed0f016f0fd24200baa100ec", 0x2c}], 0x1, 0x44, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 21m5.068387014s ago: executing program 3 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$qrtrtun(r2, &(0x7f0000000300), 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, 0x0) 21m4.070134991s ago: executing program 3 (id=1138): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21m3.672212856s ago: executing program 3 (id=1139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x58, 0xa, 0x0, "3205c546e8b51e04f4bf40070700", 0x4f424752}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0xbf7f, 0x8000, 0x0, 0x2cb}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) setitimer(0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) ftruncate(r6, 0xffff) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000100)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x11a0}, 0x1, 0x0, 0x0, 0x20048804}, 0x24004080) r10 = fcntl$dupfd(r7, 0x0, r7) prlimit64(r0, 0x6, &(0x7f0000000300)={0xfff, 0x4}, &(0x7f0000000340)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 21m1.69017077s ago: executing program 3 (id=1142): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x14, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) 21m0.408827594s ago: executing program 3 (id=1145): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/382], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/66}, 0x20) 20m59.609210683s ago: executing program 3 (id=1147): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x103, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x5, 0x0, 0x0, 0x4, 0x1, 0x0, 0x100000]}}, 0x5c) lseek(0xffffffffffffffff, 0x100, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x2, 0x3, 0x0, 0x10}) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/66, 0x42) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="3ef26edc390f01da00009aef3821c880800f38c97d00bad004b0f4ee8e430066ed0f016f0fd24200baa100ec", 0x2c}], 0x1, 0x44, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 20m43.437981814s ago: executing program 34 (id=1147): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x103, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x5, 0x0, 0x0, 0x4, 0x1, 0x0, 0x100000]}}, 0x5c) lseek(0xffffffffffffffff, 0x100, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x2, 0x3, 0x0, 0x10}) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/66, 0x42) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="3ef26edc390f01da00009aef3821c880800f38c97d00bad004b0f4ee8e430066ed0f016f0fd24200baa100ec", 0x2c}], 0x1, 0x44, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 18m50.289297763s ago: executing program 7 (id=1443): socket$inet(0x2, 0x80000, 0x0) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0xa176) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) syz_io_uring_setup(0x239, &(0x7f00000001c0)={0x0, 0x0, 0x11900}, &(0x7f0000000000), &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x28, 0x0, 0x60, 0x8, 0x23, @mcast1, @rand_addr=' \x01\x00', 0x0, 0x8700, 0x3, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x6b}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000000000000000000300000000030000000200000002000000000000000000000105000000100000000100000000000011010000000000000000"], 0x0, 0x53, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) 18m45.868341816s ago: executing program 7 (id=1450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 18m40.073361501s ago: executing program 7 (id=1462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 18m37.387469196s ago: executing program 7 (id=1472): r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, &(0x7f0000000100)) r1 = getpgrp(r0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x8000, 0x4, {0x0, 0x1}, 0x3, 0x800}) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000bbdffc)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r12, 0x2, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x24, 0xa]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, r12, 0x0], 0x3}) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) 18m35.649641504s ago: executing program 7 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r0}, 0x10) 18m35.147177707s ago: executing program 7 (id=1478): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x100}}, 0x50) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x81, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r2 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 18m19.142130203s ago: executing program 35 (id=1478): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x100}}, 0x50) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x81, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r2 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 9m35.885589082s ago: executing program 0 (id=2842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(0x0, 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab780ef39fa3910d96072000001ea800000000fdffffff0000faffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001700", "90be8bf4bd00000000000000000000000000001000"}}) recvfrom$rose(r4, &(0x7f00000001c0)=""/144, 0x90, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000062d4d68e5722f64e2b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 9m34.707858781s ago: executing program 0 (id=2844): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x8200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x4, "d2c4924f5689213dc64c3b6e6ff82a75e5318fca4288c20600000072020bcd2c"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') close_range(r0, r4, 0x0) 9m34.128791726s ago: executing program 0 (id=2847): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', '', [], 0xa, "3712c10b033b0a218f3acd0835bb78428271166e14a1881483cb67d8d4f829d6322b14e1499c83c5371b9cd10f68b0fd439c5d03a424629217b9111b68cee37b5cae434e44ae411ae07ead24235bc79d1185c85c8eadae04059258273754f53cf6be24fa5aa9661a0cd1d54eac4e7d9a74099555bc668f76ddb28b2811c06ba4712816f952337f665614183cabdef611e31c4012616c7145f8495c9cf07c6b33bdbec0e73987cce86435edeb6410e6af2ffad4b3a0baec7edee445de215b4b678aee87c1b708347a34fe0a83a78be37d3e923e3187fdf977ceb704c4dd5b57d566533e2ef31643ef46dac85a8f81ae1e1696300bb1d5f771037a9000f60aae5dac99a4b2e888101a3397adbdd32ae8f0b94b2b7818abbbebd7"}, 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000200)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 9m29.373969972s ago: executing program 0 (id=2856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x1d, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0xf, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 9m28.476166398s ago: executing program 0 (id=2860): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x4, 0x7f, 0x48, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x37d51e65b9d0ef44, 0x20, 0x5, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x50, 0x49, 0x300, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x17, 0x0, r1, 0x100}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$inet6(0xa, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() socket$kcm(0x2, 0x200000000000004, 0x106) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="080026008f0900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4054}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f00000000c0)=0x1) 9m19.670564997s ago: executing program 0 (id=2878): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 9m4.063289737s ago: executing program 36 (id=2878): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 3m31.910229116s ago: executing program 6 (id=3630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000024001280080001006772650018000280040012"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m31.680584838s ago: executing program 6 (id=3633): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20", @ANYRESDEC=r0], 0xd6) 3m30.498886707s ago: executing program 6 (id=3638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffff7cffffff86dd60f4adf700082c00fe"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m29.440283085s ago: executing program 6 (id=3641): fsopen(&(0x7f0000000040)='afs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r1}) 3m28.320659354s ago: executing program 6 (id=3644): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m27.52366828s ago: executing program 6 (id=3651): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x11, 0x803, 0x401) io_submit(0x0, 0x0, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r4, &(0x7f00000028c0)=[{0x0}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x5f490cf9, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x8c) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x208090, 0x0) 3m12.210581998s ago: executing program 37 (id=3651): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x11, 0x803, 0x401) io_submit(0x0, 0x0, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r4, &(0x7f00000028c0)=[{0x0}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x5f490cf9, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x8c) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x208090, 0x0) 2m52.329384351s ago: executing program 8 (id=3741): openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x408000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, 0x0, 0x0, 0x20004000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffae) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000280)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="a9", 0x1}], 0x1}, 0x200448c1) socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) read(r4, &(0x7f0000005f40)=""/175, 0xaf) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TCFLSH(r5, 0x400455c8, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018afecae983b34947ef6053fe4231ecb000007000000000c0000000c00000002000059ba504217aaa60cbc521adac126db80f2e0f4e9250dec80e46b0c06baf7a4133c63c01598b38a0e86c5063f71c7687c8b3fa76ca3ab8230726b852aeb13ee6f48e23d9283d0df3512fbc76b1daee53b9cdb5d92e8a2e2df4698fa3b16bca1530854d6961fa057"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m51.050235591s ago: executing program 8 (id=3745): syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x800, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={0x0}, 0x1) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 2m47.526089828s ago: executing program 8 (id=3748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00001ebd5ed9da010000000000003d6aeeff037c000004000000140001800600060080d275600a000008"], 0x2c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) 2m46.552622886s ago: executing program 8 (id=3751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1) close_range(r2, r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x4b7f, 0x0) 2m45.497197674s ago: executing program 8 (id=3754): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 2m43.152561172s ago: executing program 8 (id=3761): sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x0) fcntl$notify(r1, 0x402, 0x4) fcntl$notify(r1, 0x402, 0x3ef) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffde4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = fanotify_init(0x200, 0x0) dup(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x6bf1c2d5adba8c32}) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r7, @ANYRES64=r5, @ANYRESDEC=r6], 0x18}, 0x0, 0x4000010, 0x1}) io_uring_enter(r8, 0x414, 0x80ffff, 0x0, 0x0, 0x0) 2m27.282508534s ago: executing program 38 (id=3761): sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x0) fcntl$notify(r1, 0x402, 0x4) fcntl$notify(r1, 0x402, 0x3ef) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffde4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = fanotify_init(0x200, 0x0) dup(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x6bf1c2d5adba8c32}) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r7, @ANYRES64=r5, @ANYRESDEC=r6], 0x18}, 0x0, 0x4000010, 0x1}) io_uring_enter(r8, 0x414, 0x80ffff, 0x0, 0x0, 0x0) 17.070115858s ago: executing program 1 (id=4080): ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f00005da000/0x3000)=nil, 0x3000, 0x100000c, 0x10010, 0xffffffffffffffff, 0x173b1000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r3, 0x0, 0x1500}, 0x38) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0xba) lseek(r4, 0x104, 0x0) getdents(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000a31000/0x4000)=nil, r8, 0x3000001, 0x810, r4, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000600)={r6, 0x0, 0x8, 0x80000000, 0x6}) 15.392064981s ago: executing program 1 (id=4083): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) poll(&(0x7f00000001c0)=[{r4, 0x2}], 0x1, 0x101) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r0, 0x2, 0x6, @remote}, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80080, 0x0) getdents64(r6, 0x0, 0x0) 14.19687226s ago: executing program 1 (id=4088): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) io_uring_enter(r6, 0x2bc, 0x827, 0x5, &(0x7f0000000380)={[0x2]}, 0x8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r8, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0xc8) r9 = socket(0x2a, 0x2, 0x0) sendto(r9, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 13.998831712s ago: executing program 4 (id=4089): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 12.819630291s ago: executing program 1 (id=4091): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000240)='./file0/file0/file0/file0/file0\x00', 0x400141042, 0x10) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x24}}, 0x50) 12.572571613s ago: executing program 4 (id=4093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00'}, 0x10) mkdir(0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x44}}, 0x80) 12.286483715s ago: executing program 4 (id=4094): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x3}, {0x3, 0x0, 0x1}}, {{0x2}, {0x0, 0x1, 0x0, 0x1}}], 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 12.223189955s ago: executing program 2 (id=4095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r0, &(0x7f0000000f40)=[{&(0x7f0000000340)="2e9b3d93dfb6c575963f88640000000000", 0x11}, {&(0x7f0000000180)="64c09f7c66ab", 0x6}, {&(0x7f0000000c40)="af5e917b057bcbeaa145d313916fef8f45a8da888557c48cc28d54b1c333f5a1028f906fc3d85f5f9b7cfbd5006e65aed6565f8f9f0bc361a9f630cb121efc7ba5bd88de1cdc90d78df4f9bd3fe5c0060e483bef0848e33a2f2f176c019fb5", 0x5f}], 0x3) 12.043086587s ago: executing program 2 (id=4097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sctp_probe_path\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mq_unlink(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001880)=""/113, 0x71}], 0x2}, 0x2}, {{&(0x7f0000001c80)=@l2tp={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001f00)=""/4096, 0x1000}, 0x8}], 0x2, 0x100, &(0x7f0000002fc0)={0x0, 0x3938700}) io_uring_setup(0xd6c, &(0x7f0000000080)={0x0, 0xf6fe, 0x20, 0x1, 0x23a}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1282, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11.724400939s ago: executing program 4 (id=4099): unshare(0x400) pipe(&(0x7f00000042c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000001c0), 0x4e) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x9) tee(r0, 0xffffffffffffffff, 0x1476, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2010, r3, 0x69dec000) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000005e007f029ea69801d76ab059d261de06fe3114ed3a886ea2", 0x1c}], 0x1}, 0x0) 11.475695011s ago: executing program 1 (id=4100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) timer_delete(0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x63, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000003277fbac141416e000030a89079f03b180004408050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa00734611196", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340862800702c1ffe80000000000000"], 0xffdd) 10.826141547s ago: executing program 2 (id=4101): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 9.435536147s ago: executing program 9 (id=4103): creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$proc_mixer(r0, 0x0, 0x178) dup3(r1, r0, 0x0) 9.197188499s ago: executing program 2 (id=4104): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x89ffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' '], 0x86) fsopen(&(0x7f0000000040)='virtiofs\x00', 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) dup3(r3, r1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x10, 0x0, 0x11) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=']) chdir(&(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 9.192890839s ago: executing program 5 (id=4105): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) 8.293364166s ago: executing program 2 (id=4106): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x04\x00\'\xbb\x9c\xf5\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x86\x97\x82', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0xc1fd, 0xc, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @broadcast, @empty}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket(0xf, 0x3, 0xffffffff) syz_io_uring_setup(0x1f59, &(0x7f0000000540)={0x0, 0xfad6, 0x10000, 0x1000000, 0xd6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x16, 0x0, 0x0, 0x4, &(0x7f0000000600)={0x0, 0x989680}, 0x1, 0x10}) r7 = dup(0xffffffffffffffff) listen(r7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000040)={{@my=0x0, 0x645}, 0x1, 0x1, 0x3}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x6}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB="080004000001"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 7.362656963s ago: executing program 4 (id=4107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r0, &(0x7f0000000f40)=[{&(0x7f0000000340)="2e9b3d93dfb6c575963f88640000000000", 0x11}, {&(0x7f0000000180)="64c09f7c66ab", 0x6}, {&(0x7f0000000c40)="af5e917b057bcbeaa145d313916fef8f45a8da888557c48cc28d54b1c333f5a1028f906fc3d85f5f9b7cfbd5006e65aed6565f8f9f0bc361a9f630cb121efc7ba5bd88de1cdc90d78df4f9bd3fe5c0060e483bef0848e33a2f2f176c019fb5", 0x5f}], 0x3) 6.862704047s ago: executing program 9 (id=4108): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6.646992278s ago: executing program 9 (id=4109): r0 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) fsopen(&(0x7f0000000200)='pvfs2\x00', 0x0) mq_open(&(0x7f00000001c0)='$*\x00', 0x40, 0x58, &(0x7f0000000280)={0x6, 0x6739, 0x0, 0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008b02"]) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001540), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_register(r7, &(0x7f0000001580)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '\xff\xff', 0x3a, '', 0x3a, './bus', 0x3a, [0x4f, 0x50]}, 0x29) 4.575252965s ago: executing program 5 (id=4110): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000240)='./file0/file0/file0/file0/file0\x00', 0x400141042, 0x10) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x24}}, 0x50) 4.534498125s ago: executing program 9 (id=4111): syz_open_pts(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) inotify_init() sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000400)='FROZEN\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xbcd3caced2889e7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.720628081s ago: executing program 5 (id=4112): bind(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6(0xa, 0x3, 0x20) socket$kcm(0x10, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500003c000000000021907800000000ffffffff05039078e0000037380800000002000000000000ac1e00011adad3b187bdac141400830302864600"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev(r5, 0x0, 0x0, 0xffff, 0x9) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 3.251948015s ago: executing program 9 (id=4113): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) io_uring_enter(r6, 0x2bc, 0x827, 0x5, &(0x7f0000000380)={[0x2]}, 0x8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@null, @remote, @netrom, @bcast, @null, @remote, @remote, @default]}, &(0x7f0000000300)=0x48, 0x0) r8 = socket(0x2a, 0x2, 0x0) sendto(r8, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2.414165571s ago: executing program 5 (id=4114): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r2}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 1.462853388s ago: executing program 9 (id=4115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYRES64], 0x50}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) 1.26134224s ago: executing program 2 (id=4116): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x200012, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040020) 1.17166114s ago: executing program 5 (id=4117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000001040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x40, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000003b0007010000000000000000017c0000093531b517da26db96e1c3dcb7f710107ce300c16c9528b440e1d20ecc3d8cb0189e3cb6ec187dc7dd46d7ffe5c4e4c746d443789bced999ad1d48d79a059da431e401d56f795ec2e86982b772d403f540b7ff804e6781c18dd34894bf82edc49be9f8eb2b6c35b4"], 0x14}}, 0xc000) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.140389121s ago: executing program 1 (id=4118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sctp_probe_path\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mq_unlink(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001880)=""/113, 0x71}], 0x2}, 0x2}, {{&(0x7f0000001c80)=@l2tp={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001f00)=""/4096, 0x1000}, 0x8}], 0x2, 0x100, &(0x7f0000002fc0)={0x0, 0x3938700}) io_uring_setup(0xd6c, &(0x7f0000000080)={0x0, 0xf6fe, 0x20, 0x1, 0x23a}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1282, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.132465981s ago: executing program 4 (id=4119): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdd49, 0x80008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc2002, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 0s ago: executing program 5 (id=4120): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x2701, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) r1 = syz_open_procfs(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, 0x0, 0x44004) getsockopt$inet6_int(r4, 0x29, 0x13, 0x0, &(0x7f00000000c0)) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x52) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): type 4 has an invalid length. [ 906.429434][T11645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1922'. [ 906.925501][T11644] netlink: 'syz.0.1920': attribute type 4 has an invalid length. [ 907.303790][T11657] fuse: Bad value for 'fd' [ 908.736871][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1929'. [ 909.055250][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1930'. [ 910.504534][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1937'. [ 911.667754][T11706] device bridge_slave_1 entered promiscuous mode [ 911.973524][T11701] device bridge_slave_1 left promiscuous mode [ 911.995658][T11710] netlink: 'syz.5.1940': attribute type 4 has an invalid length. [ 912.751972][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1944'. [ 913.732260][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1945'. [ 916.742621][T11755] 9pnet_fd: Insufficient options for proto=fd [ 917.454853][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1956'. [ 918.493217][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1958'. [ 920.735584][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 921.799074][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'. [ 925.266028][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1976'. [ 927.584715][T11863] 9pnet_fd: Insufficient options for proto=fd [ 931.836604][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.842996][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.231064][T11901] 9pnet_fd: Insufficient options for proto=fd [ 933.183334][T11909] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1995'. [ 933.373391][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1997'. [ 939.248794][T11946] device team0 entered promiscuous mode [ 939.297368][T11945] device team0 left promiscuous mode [ 940.520395][T11968] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2012'. [ 943.651037][T11996] device team0 entered promiscuous mode [ 943.701568][T11995] device team0 left promiscuous mode [ 943.963218][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2023'. [ 945.555296][T12015] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2027'. [ 948.482794][T12041] device team0 entered promiscuous mode [ 948.491875][T12039] device team0 left promiscuous mode [ 949.646871][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2035'. [ 950.967573][T12057] 9pnet_fd: Insufficient options for proto=fd [ 955.192095][T12082] device team0 entered promiscuous mode [ 955.213972][T12081] device team0 left promiscuous mode [ 955.856019][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'. [ 956.564354][T12100] 9pnet_fd: Insufficient options for proto=fd [ 959.926063][T12126] device team0 entered promiscuous mode [ 959.933334][T12125] device team0 left promiscuous mode [ 960.907214][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2062'. [ 965.911231][T12179] device team0 entered promiscuous mode [ 965.920762][T12178] device team0 left promiscuous mode [ 966.805321][T12190] device bridge_slave_1 entered promiscuous mode [ 967.954178][T12163] device bridge_slave_1 left promiscuous mode [ 970.540016][T12226] device team0 entered promiscuous mode [ 970.554735][T12225] device team0 left promiscuous mode [ 975.507026][T12258] 9pnet_fd: Insufficient options for proto=fd [ 976.971632][T12269] device team0 entered promiscuous mode [ 976.999675][T12268] device team0 left promiscuous mode [ 981.556408][T12313] 9pnet_fd: Insufficient options for proto=fd [ 983.662487][T12334] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2116'. [ 984.356692][T12327] device team0 entered promiscuous mode [ 984.362355][T12327] device team_slave_0 entered promiscuous mode [ 984.394675][T12327] device team_slave_1 entered promiscuous mode [ 984.423708][T12326] device team0 left promiscuous mode [ 984.432671][T12326] device team_slave_0 left promiscuous mode [ 984.448803][T12326] device team_slave_1 left promiscuous mode [ 984.467978][T12340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 984.475429][T12340] infiniband syz2: set active [ 984.518007][T12340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 984.549208][T12340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 984.665576][ T4304] vcan0 speed is unknown, defaulting to 1000 [ 985.724312][T12344] delete_channel: no stack [ 987.224878][T12375] device team0 entered promiscuous mode [ 987.247686][T12374] device team0 left promiscuous mode [ 991.975082][T12423] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 992.214281][T12423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.230036][T12423] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 992.274591][T12422] device team0 entered promiscuous mode [ 992.286386][T12422] device team_slave_0 entered promiscuous mode [ 992.312748][T12422] device team_slave_1 entered promiscuous mode [ 992.367953][T12421] device team0 left promiscuous mode [ 992.393727][T12421] device team_slave_0 left promiscuous mode [ 992.429847][T12421] device team_slave_1 left promiscuous mode [ 992.915933][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.922530][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.302517][T12533] fuse: Bad value for 'fd' [ 1004.258776][T12539] SET target dimension over the limit! [ 1005.441475][T12542] device team0 entered promiscuous mode [ 1005.476177][ T4298] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1005.502396][T12541] device team0 left promiscuous mode [ 1005.688151][ T4298] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1005.714829][ T4298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.782476][ T4298] usb 9-1: config 0 descriptor?? [ 1008.414110][ T4298] ath6kl: Failed to submit usb control message: -110 [ 1008.425444][ T4298] ath6kl: unable to send the bmi data to the device: -110 [ 1008.442658][ T4298] ath6kl: Unable to send get target info: -110 [ 1008.504783][ T4298] ath6kl: Failed to init ath6kl core: -110 [ 1008.622543][ T4298] ath6kl_usb: probe of 9-1:0.0 failed with error -110 [ 1008.874652][ T4427] usb 9-1: USB disconnect, device number 2 [ 1012.144241][T12597] device team0 entered promiscuous mode [ 1012.193211][T12596] device team0 left promiscuous mode [ 1016.783528][T12657] device team0 entered promiscuous mode [ 1016.786532][ T4427] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1016.791121][T12656] device team0 left promiscuous mode [ 1016.987967][ T4427] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1017.030835][ T4427] usb 9-1: config 1 has no interface number 0 [ 1017.060046][ T4427] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.287738][ T4427] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1017.297264][ T4427] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1017.318465][ T4427] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.583227][ T4427] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.591442][ T4427] usb 9-1: Product: syz [ 1018.595737][ T4427] usb 9-1: Manufacturer: syz [ 1018.600639][ T4427] usb 9-1: SerialNumber: syz [ 1020.514987][ T4427] cdc_ncm 9-1:1.1: bind() failure [ 1020.702682][ T4427] usb 9-1: USB disconnect, device number 3 [ 1021.759607][T12708] device bridge_slave_1 entered promiscuous mode [ 1022.366405][T12698] device bridge_slave_1 left promiscuous mode [ 1022.727681][T12702] device team0 entered promiscuous mode [ 1022.754881][T12701] device team0 left promiscuous mode [ 1026.952503][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2228'. [ 1035.968433][T12800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.996628][ T27] audit: type=1326 audit(1741550411.744:2): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=12801 comm="syz.1.2244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbefb8d169 code=0x0 [ 1036.055537][T12800] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1036.081875][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 1036.153589][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 1036.180076][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1044.518880][T12877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2264'. [ 1045.106855][T12877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1049.386395][ T27] audit: type=1326 audit(1741550424.584:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12907 comm="syz.1.2272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbefb8d169 code=0x0 [ 1054.502826][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.515270][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.983744][T12960] netlink: 'syz.6.2287': attribute type 10 has an invalid length. [ 1055.273743][T12960] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1056.426365][ T4268] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 1056.476855][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2287'. [ 1056.828202][T12965] bond0: (slave bridge0): Releasing backup interface [ 1058.777701][T12986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1058.845622][T12986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1058.935401][T12986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1058.944930][T12986] device bridge_slave_0 left promiscuous mode [ 1058.958292][T12986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.970091][T12986] device bridge_slave_1 left promiscuous mode [ 1060.008228][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.099991][T12986] bond0: (slave bond_slave_0): Releasing backup interface [ 1060.140623][T12986] bond0: (slave bond_slave_1): Releasing backup interface [ 1060.339800][T12986] team0: Port device team_slave_0 removed [ 1060.431153][T12986] team0: Port device team_slave_1 removed [ 1062.213618][T12986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.239291][T12986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.258579][T12986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.266433][T12986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.212168][T13032] 9pnet_fd: Insufficient options for proto=fd [ 1066.661501][T13053] block nbd8: shutting down sockets [ 1067.055498][T13046] device syzkaller0 entered promiscuous mode [ 1068.820185][ T4427] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1069.874558][ T4427] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1070.092706][ T4427] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1070.263039][ T4427] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.307137][ T4427] usb 9-1: Product: syz [ 1070.311368][ T4427] usb 9-1: Manufacturer: syz [ 1070.347149][ T4427] usb 9-1: SerialNumber: syz [ 1071.369755][ T4427] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1071.500964][T13083] 9pnet_fd: Insufficient options for proto=fd [ 1071.591639][ T4427] usb 9-1: USB disconnect, device number 4 [ 1071.608305][ T4427] usblp0: removed [ 1073.322066][T13099] kvm [13098]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1075.718839][T13062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1075.728862][T13062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1075.737385][T13062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1076.234363][T13107] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1078.289045][T13130] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2331'. [ 1081.351060][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1081.362094][T13146] bond0: (slave batadv0): Releasing backup interface [ 1081.471047][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.480717][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1084.088985][T13146] syz.1.2336 (13146) used greatest stack depth: 18904 bytes left [ 1085.477486][T13177] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2343'. [ 1085.508802][T13174] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1090.594692][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2350'. [ 1093.109974][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1093.875608][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1093.916493][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1095.727467][T13261] netlink: 372 bytes leftover after parsing attributes in process `syz.6.2360'. [ 1098.734347][T13291] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2368'. [ 1099.154266][T13297] kvm [13294]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1102.862003][ T4908] Bluetooth: hci5: Frame reassembly failed (-84) [ 1102.984604][T13330] Bluetooth: hci5: Frame reassembly failed (-84) [ 1103.091037][ T4908] Bluetooth: hci5: Frame reassembly failed (-84) [ 1104.883964][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1106.373356][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2381'. [ 1108.040884][T13372] kernel profiling enabled (shift: 17) [ 1108.751181][T13379] netlink: 'syz.6.2393': attribute type 4 has an invalid length. [ 1108.808817][T13379] netlink: 'syz.6.2393': attribute type 4 has an invalid length. [ 1109.863269][T13392] 9pnet_fd: Insufficient options for proto=fd [ 1110.206756][ T4268] Bluetooth: hci1: unexpected event for opcode 0x0004 [ 1111.282868][T13404] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2401'. [ 1111.745857][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'. [ 1114.763431][T13009] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1115.116131][T13009] usb 7-1: Using ep0 maxpacket: 16 [ 1115.555578][T13009] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.720276][T13009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.790851][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.797336][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.906235][T13009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1115.915950][T13009] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1115.956160][T13009] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.000121][T13009] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1116.010828][T13009] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1116.041023][T13009] usb 7-1: Manufacturer: syz [ 1116.107263][T13009] usb 7-1: config 0 descriptor?? [ 1116.174357][T13438] 9pnet_fd: Insufficient options for proto=fd [ 1117.626728][T13009] rc_core: IR keymap rc-hauppauge not found [ 1117.633406][T13009] Registered IR keymap rc-empty [ 1117.687442][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1118.227724][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1119.293534][T13009] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1119.335737][T13009] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 1119.528753][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1119.566239][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1119.611490][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1119.702368][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1119.906550][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1120.541910][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1120.586209][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1120.614058][T13476] 9pnet_fd: Insufficient options for proto=fd [ 1120.648676][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1120.726428][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1120.766345][T13009] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1120.799284][T13009] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1120.842817][T13009] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1121.681072][T13009] usb 7-1: USB disconnect, device number 3 [ 1123.210713][T13509] device dummy0 entered promiscuous mode [ 1123.223943][T13509] device dummy0 left promiscuous mode [ 1124.133542][T13522] netlink: 'syz.1.2438': attribute type 4 has an invalid length. [ 1124.153720][T13522] netlink: 'syz.1.2438': attribute type 4 has an invalid length. [ 1124.486765][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1124.513443][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1124.531109][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1124.548950][T13518] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1124.573343][T13528] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1124.590201][T13528] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1124.619384][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1125.230494][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1125.277311][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1125.393630][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1125.400703][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1125.408826][T13528] hsr0 speed is unknown, defaulting to 1000 [ 1125.824159][T13551] netlink: 'syz.6.2450': attribute type 4 has an invalid length. [ 1125.948655][T13556] 9pnet_fd: Insufficient options for proto=fd [ 1125.957563][T13551] netlink: 'syz.6.2450': attribute type 4 has an invalid length. [ 1127.296201][ T4476] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1127.494823][ T4476] usb 9-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1127.684234][T13564] device team0 entered promiscuous mode [ 1127.701252][T13561] device team0 left promiscuous mode [ 1127.711824][ T4476] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1128.006253][T13009] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1128.101904][ T4476] usb 9-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 1128.111153][ T4476] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.123353][ T4476] usb 9-1: config 0 descriptor?? [ 1128.129935][T13567] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1128.298019][T13009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.370045][T13009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.403036][ T4476] usbhid 9-1:0.0: can't add hid device: -71 [ 1128.413545][T13009] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1128.416268][ T4476] usbhid: probe of 9-1:0.0 failed with error -71 [ 1128.437351][T13009] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1128.472999][ T4476] usb 9-1: USB disconnect, device number 5 [ 1128.482726][T13009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.534999][T13009] usb 2-1: config 0 descriptor?? [ 1128.992998][T13009] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1129.522568][T13009] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1130.737334][T13009] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 1131.683208][T13609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2470'. [ 1131.712480][T13609] device veth0_to_team entered promiscuous mode [ 1132.268155][ T4298] usb 2-1: USB disconnect, device number 3 [ 1132.690068][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2473'. [ 1132.749365][ C0] vcan0: j1939_session_tx_dat: 0xffff888056a83800: queue data error: -100 [ 1132.837543][T13630] netlink: 'syz.1.2476': attribute type 4 has an invalid length. [ 1132.857708][T13625] netlink: 'syz.1.2476': attribute type 4 has an invalid length. [ 1132.938410][ T4476] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1133.166367][ T4476] usb 6-1: Using ep0 maxpacket: 32 [ 1133.214339][ T4476] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.373206][ T4476] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.578211][ T4476] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1133.621489][ T4476] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1133.993758][ T4476] usb 6-1: Product: syz [ 1133.998321][ T4476] usb 6-1: Manufacturer: syz [ 1134.016824][ T4476] hub 6-1:4.0: USB hub found [ 1135.126201][ T4476] hub 6-1:4.0: 2 ports detected [ 1135.626586][ T4427] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1135.737825][ T4476] usb 6-1: USB disconnect, device number 3 [ 1135.793833][T13662] netlink: 'syz.6.2487': attribute type 4 has an invalid length. [ 1135.826363][T13662] netlink: 'syz.6.2487': attribute type 4 has an invalid length. [ 1135.846339][ T4427] usb 2-1: Using ep0 maxpacket: 16 [ 1135.854705][ T4427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.878485][ T4427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.894269][ T4427] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1135.921923][ T4427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.941422][ T4427] usb 2-1: config 0 descriptor?? [ 1136.452480][ T4427] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0005/input/input7 [ 1136.891135][ T4427] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 1136.983206][ T4427] usb 2-1: USB disconnect, device number 4 [ 1139.933817][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2501'. [ 1140.237364][T13706] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.246801][T13706] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.256302][T13706] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.265041][T13706] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.025187][T13706] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.034451][T13706] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.043488][T13706] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.052466][T13706] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.931133][T13733] kvm [13732]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1147.246896][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2529'. [ 1151.552687][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'. [ 1151.557680][T13843] kvm [13841]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1154.654780][T13882] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1154.666773][ T4298] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1155.310735][T13885] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1155.400690][ T4298] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1155.437241][ T4298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.471319][ T4298] usb 9-1: config 0 descriptor?? [ 1155.485079][ T4298] cp210x 9-1:0.0: cp210x converter detected [ 1155.780523][T13896] kvm [13895]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1155.892063][ T4298] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1155.913634][ T4298] cp210x 9-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1155.943019][ T4298] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 1155.968397][ T4298] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1155.987929][ T4298] usb 9-1: USB disconnect, device number 6 [ 1156.022901][ T4298] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1156.064743][ T4298] cp210x 9-1:0.0: device disconnected [ 1157.029866][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2567'. [ 1157.057270][T13915] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1159.390746][T13949] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2578'. [ 1160.216199][T13948] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1160.356711][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2578'. [ 1160.635986][T13970] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2583'. [ 1161.257329][T13976] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2587'. [ 1161.275449][T13976] device gretap0 entered promiscuous mode [ 1161.326459][T13977] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2587'. [ 1161.369060][T13977] 0ªî{X¹¦: renamed from gretap0 [ 1161.610174][T13977] device 30ªî{X¹¦ left promiscuous mode [ 1161.627903][T13977] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1161.758465][ T4268] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 1162.597524][ T4268] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1165.207137][T13995] netlink: 'syz.6.2592': attribute type 3 has an invalid length. [ 1166.601352][T14013] netlink: 'syz.0.2599': attribute type 4 has an invalid length. [ 1166.653604][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2597'. [ 1167.220684][T14021] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2603'. [ 1167.387990][T14019] netlink: 'syz.8.2602': attribute type 5 has an invalid length. [ 1167.448337][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2603'. [ 1170.867824][T14066] netlink: 'syz.0.2615': attribute type 1 has an invalid length. [ 1170.904721][T14066] netlink: 'syz.0.2615': attribute type 2 has an invalid length. [ 1170.983497][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2614'. [ 1172.625658][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2621'. [ 1172.756447][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2621'. [ 1177.196456][T14130] device bridge_slave_1 entered promiscuous mode [ 1177.802914][T14123] device bridge_slave_1 left promiscuous mode [ 1179.065231][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.104833][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.133450][T14149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2643'. [ 1181.882028][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2648'. [ 1182.089974][T14168] netlink: 'syz.8.2650': attribute type 4 has an invalid length. [ 1182.131260][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2648'. [ 1182.976284][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2653'. [ 1183.277358][T14183] device bridge_slave_1 entered promiscuous mode [ 1183.831929][T14174] device bridge_slave_1 left promiscuous mode [ 1184.087667][T14189] device syzkaller0 entered promiscuous mode [ 1185.503605][T14209] loop7: detected capacity change from 0 to 6 [ 1188.906194][ T4268] Bluetooth: hci3: command 0x2016 tx timeout [ 1190.090865][T13331] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 1192.678489][T14216] netlink: 'syz.8.2663': attribute type 4 has an invalid length. [ 1194.743771][T14266] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2678'. [ 1195.519459][T14282] futex_wake_op: syz.1.2675 tries to shift op by -1; fix this program [ 1195.897201][T14280] vcan0 speed is unknown, defaulting to 1000 [ 1196.807563][T14294] netlink: 'syz.0.2681': attribute type 4 has an invalid length. [ 1198.271302][T14296] device syzkaller0 entered promiscuous mode [ 1201.917513][T14280] hsr0 speed is unknown, defaulting to 1000 [ 1202.288873][T14329] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2689'. [ 1203.989390][T14352] netlink: 'syz.5.2695': attribute type 4 has an invalid length. [ 1204.510191][T14354] netlink: set zone limit has 8 unknown bytes [ 1204.661956][T14333] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 1204.662052][T14333] netlink: 'syz.1.2688': attribute type 2 has an invalid length. [ 1205.194464][T14362] device syzkaller0 entered promiscuous mode [ 1205.635095][T14373] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2701'. [ 1207.985905][T14393] x_tables: duplicate underflow at hook 1 [ 1208.019882][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 1208.028635][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 1208.308264][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 1208.315081][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 1208.334672][T14390] ceph: No mds server is up or the cluster is laggy [ 1215.552783][T14435] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2716'. [ 1215.906710][T14441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1215.950262][T14441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1218.407285][T14466] netlink: 'syz.6.2726': attribute type 2 has an invalid length. [ 1218.407782][T14464] vcan0 speed is unknown, defaulting to 1000 [ 1219.195383][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1219.222146][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1219.239979][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1219.249520][ T4265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1219.259113][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1219.267636][ T4268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1220.412795][T14482] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2729'. [ 1220.680590][ T9042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.785433][T14472] vcan0 speed is unknown, defaulting to 1000 [ 1220.841568][ T9042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.898467][T14464] hsr0 speed is unknown, defaulting to 1000 [ 1221.031176][ T9042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.332411][ T9042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.361828][T14472] hsr0 speed is unknown, defaulting to 1000 [ 1221.882461][ T4268] Bluetooth: hci5: command 0x0409 tx timeout [ 1223.219582][T14521] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2741'. [ 1223.946272][ T4268] Bluetooth: hci5: command 0x041b tx timeout [ 1224.078071][T14472] chnl_net:caif_netlink_parms(): no params data found [ 1226.036207][ T4268] Bluetooth: hci5: command 0x040f tx timeout [ 1226.331384][T14472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.338898][ T9840] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1226.360040][T14472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.557613][ T9840] usb 9-1: config 0 has an invalid interface number: 177 but max is 0 [ 1226.658391][ T9840] usb 9-1: config 0 has no interface number 0 [ 1226.676688][T14472] device bridge_slave_0 entered promiscuous mode [ 1226.759500][ T9840] usb 9-1: config 0 interface 177 has no altsetting 0 [ 1227.015722][T14565] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2752'. [ 1227.202040][ T9840] usb 9-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=60.1c [ 1227.211309][T14472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.211350][ T9840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.227806][ T9840] usb 9-1: Product: syz [ 1227.232021][ T9840] usb 9-1: Manufacturer: syz [ 1227.238222][ T9840] usb 9-1: SerialNumber: syz [ 1227.246572][T14472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.257642][ T9840] usb 9-1: config 0 descriptor?? [ 1227.273954][T14472] device bridge_slave_1 entered promiscuous mode [ 1227.379417][T14472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.404950][T14472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.473464][ T9840] dvb-usb: found a 'DiBcom STK807xPVR reference design' in warm state. [ 1227.560520][ T9840] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1227.580040][ T9840] dvbdev: DVB: registering new adapter (DiBcom STK807xPVR reference design) [ 1227.589984][ T9840] usb 9-1: media controller created [ 1228.106598][ T4268] Bluetooth: hci5: command 0x0419 tx timeout [ 1228.596985][ T9840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1228.772535][ T9840] DVB: Unable to find symbol dib8000_attach() [ 1228.778805][ T9840] dvb-usb: no frontend was attached by 'DiBcom STK807xPVR reference design' [ 1228.852595][ T9840] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1228.901939][T14472] team0: Port device team_slave_0 added [ 1228.914871][ T9840] dvbdev: DVB: registering new adapter (DiBcom STK807xPVR reference design) [ 1228.949900][ T9840] usb 9-1: media controller created [ 1228.978780][ T9840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1229.028725][T14472] team0: Port device team_slave_1 added [ 1229.316795][ T9840] DVB: Unable to find symbol dib8000_attach() [ 1229.323014][ T9840] dvb-usb: no frontend was attached by 'DiBcom STK807xPVR reference design' [ 1230.007276][T14472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.014429][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1230.040581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1230.072886][T14472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.104797][T14472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.179533][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1230.205512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1230.225381][T14472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.556176][ T9840] rc_core: IR keymap rc-dib0700-rc5 not found [ 1230.562342][ T9840] Registered IR keymap rc-empty [ 1230.607228][ T9840] dvb-usb: could not initialize remote control. [ 1230.613537][ T9840] dvb-usb: DiBcom STK807xPVR reference design successfully initialized and connected. [ 1230.736858][ T9840] usb 9-1: USB disconnect, device number 7 [ 1230.823583][ T9840] dvb-usb: DiBcom STK807xPVR reference design successfully deinitialized and disconnected. [ 1230.883956][T14472] device hsr_slave_0 entered promiscuous mode [ 1231.022315][T14472] device hsr_slave_1 entered promiscuous mode [ 1231.036026][T14607] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2763'. [ 1231.060476][T14472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1231.076862][T14472] Cannot create hsr debugfs directory [ 1231.084902][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2761'. [ 1232.394581][ T9042] device hsr_slave_0 left promiscuous mode [ 1232.477641][ T9042] device hsr_slave_1 left promiscuous mode [ 1232.555445][ T9042] device bridge0 left promiscuous mode [ 1232.615637][ T9042] device veth1_macvtap left promiscuous mode [ 1232.626483][ T9042] device veth0_macvtap left promiscuous mode [ 1232.664471][ T9042] device veth1_vlan left promiscuous mode [ 1233.163827][ T9042] device veth0_vlan left promiscuous mode [ 1234.620194][T14638] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2774'. [ 1236.794174][ T9042] bond0 (unregistering): Released all slaves [ 1237.010509][T14644] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2775'. [ 1238.747121][T14472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1238.809262][T14472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1238.856918][T14472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1238.867326][T14472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1239.544223][T14694] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2789'. [ 1239.862459][T14472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.880352][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.889165][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.955318][T14472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.980877][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1240.143545][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1240.183074][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.190292][ T9040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.234681][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1240.304159][T14702] netlink: 'syz.8.2791': attribute type 4 has an invalid length. [ 1240.328187][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1240.356559][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1240.387984][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.395191][ T9040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.411251][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1240.433265][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1240.488381][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1240.508827][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1240.562555][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1240.585598][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1240.603291][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1241.074896][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1241.125501][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1241.169487][T14472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1241.224900][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1241.244560][T14708] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1241.261598][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1243.809113][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.855394][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.770145][T14730] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2799'. [ 1245.108806][T14743] netlink: 'syz.6.2803': attribute type 4 has an invalid length. [ 1245.474928][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1245.489468][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1245.523162][T14472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.571404][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1245.590516][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1245.683230][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1245.708405][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1245.744007][T14472] device veth0_vlan entered promiscuous mode [ 1245.764330][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1245.800962][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1245.830437][T14472] device veth1_vlan entered promiscuous mode [ 1245.884653][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1245.904049][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1245.916351][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1245.928023][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1245.945776][T14472] device veth0_macvtap entered promiscuous mode [ 1245.974835][T14472] device veth1_macvtap entered promiscuous mode [ 1246.095463][T14472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.135227][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1246.204994][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1246.221142][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1246.253258][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1246.338681][T14472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.755032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1246.785361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1246.851337][T14472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.951271][T14472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.373426][T14472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.423193][T14472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.737873][ T9042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.766128][ T9042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.829194][T14768] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2811'. [ 1248.834049][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1248.849556][ T9033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.873502][ T9033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.028005][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1254.530969][T14819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2823'. [ 1254.607089][T14819] netlink: 'syz.5.2823': attribute type 4 has an invalid length. [ 1254.626551][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2825'. [ 1260.550126][T14869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2840'. [ 1260.652336][T14869] netlink: 'syz.0.2840': attribute type 4 has an invalid length. [ 1266.974804][T14912] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2852'. [ 1267.044006][T14915] netlink: 'syz.8.2852': attribute type 4 has an invalid length. [ 1268.395592][T14936] ALSA: mixer_oss: invalid OSS volume 'L' [ 1272.513050][T14962] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2865'. [ 1272.552948][T14962] netlink: 'syz.6.2865': attribute type 4 has an invalid length. [ 1275.030698][T14984] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2873'. [ 1277.026589][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2876'. [ 1277.546385][ T4268] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1277.556518][ T4268] Bluetooth: hci3: Injecting HCI hardware error event [ 1277.591095][T13331] Bluetooth: hci3: hardware error 0x00 [ 1277.693704][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2879'. [ 1279.626971][T13331] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1282.765625][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2890'. [ 1283.490230][T15042] sctp: [Deprecated]: syz.8.2892 (pid 15042) Use of int in max_burst socket option. [ 1283.490230][T15042] Use struct sctp_assoc_value instead [ 1285.509906][T15063] netlink: 'syz.8.2897': attribute type 2 has an invalid length. [ 1285.516083][ T4296] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1285.554220][T15059] vcan0 speed is unknown, defaulting to 1000 [ 1285.686254][ T4296] usb 7-1: device descriptor read/64, error -71 [ 1285.711154][T15059] hsr0 speed is unknown, defaulting to 1000 [ 1285.956049][ T4296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1287.662395][T15078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2904'. [ 1291.037748][T15100] ufs: You didn't specify the type of your ufs filesystem [ 1291.037748][T15100] [ 1291.037748][T15100] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1291.037748][T15100] [ 1291.037748][T15100] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1291.069286][T15100] ufs: ufstype=old is supported read-only [ 1291.080527][T15100] ufs: ufs_fill_super(): bad magic number [ 1294.576039][T15118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1294.701526][T15123] vcan0 speed is unknown, defaulting to 1000 [ 1294.743305][T15124] netlink: 'syz.5.2916': attribute type 2 has an invalid length. [ 1295.822015][T15123] hsr0 speed is unknown, defaulting to 1000 [ 1299.008728][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1299.019627][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1299.028084][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1299.063166][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1299.072090][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1299.080068][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1299.595011][T15000] syz.0.2878 (15000): drop_caches: 1 [ 1299.693595][T15161] vcan0 speed is unknown, defaulting to 1000 [ 1301.906765][T13331] Bluetooth: hci1: command 0x0409 tx timeout [ 1304.105434][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 1305.406381][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.412725][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.444560][T15161] hsr0 speed is unknown, defaulting to 1000 [ 1306.196535][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 1306.222853][T15233] device bridge_slave_1 entered promiscuous mode [ 1306.817664][T15225] device bridge_slave_1 left promiscuous mode [ 1307.017815][T15161] chnl_net:caif_netlink_parms(): no params data found [ 1307.528112][T15161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.563959][T15161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.898166][T15161] device bridge_slave_0 entered promiscuous mode [ 1307.927661][T15161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.943026][T15161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.970643][T15161] device bridge_slave_1 entered promiscuous mode [ 1308.156456][T15161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.222703][T15161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.266270][T13331] Bluetooth: hci1: command 0x0419 tx timeout [ 1308.508866][T15161] team0: Port device team_slave_0 added [ 1308.554398][T15161] team0: Port device team_slave_1 added [ 1309.094970][T15161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.143734][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.189070][T15161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.210923][T15161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.223785][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.263180][T15161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.402222][T15161] device hsr_slave_0 entered promiscuous mode [ 1309.606392][T15161] device hsr_slave_1 entered promiscuous mode [ 1309.657298][T15161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1309.664930][T15161] Cannot create hsr debugfs directory [ 1310.987597][T15276] kvm [15275]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1311.684900][T15161] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1311.719065][T15161] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1311.758786][T15161] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1311.872459][T15288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1311.911455][T15161] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1312.244579][T15161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.261335][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1312.279260][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1312.463970][T15161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.488595][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1312.590933][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1312.814382][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.821642][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.238894][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1313.533780][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1313.557769][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1313.619531][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.626758][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.672633][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1313.682149][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1313.691768][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1313.702949][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1313.716561][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1315.400182][T15161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1315.434331][T15161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1315.453685][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1315.534173][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1315.564789][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1315.602661][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1315.618036][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1315.635076][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1315.660818][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1315.683392][T15333] netlink: 'syz.5.2975': attribute type 4 has an invalid length. [ 1317.827509][T15362] ALSA: mixer_oss: invalid OSS volume 'L' [ 1318.760455][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1318.772623][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1318.874720][T15161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.303123][T15379] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1319.803265][T15385] netlink: 'syz.8.2989': attribute type 4 has an invalid length. [ 1320.000375][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1320.064316][T15390] infiniband syz0: set down [ 1320.126138][ T7813] smc: removing ib device syz0 [ 1320.911201][ T4330] vcan0 speed is unknown, defaulting to 1000 [ 1321.331203][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1321.357053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1322.270453][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1322.280059][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1322.397301][T15161] device veth0_vlan entered promiscuous mode [ 1322.636204][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1322.654632][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1323.067129][T15425] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1323.152037][T15161] device veth1_vlan entered promiscuous mode [ 1323.160748][T15422] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3000'. [ 1323.284520][T15418] hsr0 speed is unknown, defaulting to 1000 [ 1323.352071][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1323.413461][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1323.462482][T15161] device veth0_macvtap entered promiscuous mode [ 1323.493334][T15161] device veth1_macvtap entered promiscuous mode [ 1323.524559][T15429] netlink: 'syz.8.3001': attribute type 4 has an invalid length. [ 1323.611502][T15161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.655222][T15161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.698031][T15161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.722410][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1323.754780][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1323.777723][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1323.801201][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1323.870116][T15161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.890704][T15161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.905691][T15161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.922825][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1323.963716][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1324.823023][T15161] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.840798][T15161] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.886008][T15161] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.900794][T15161] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.806858][T15450] hsr0 speed is unknown, defaulting to 1000 [ 1326.837295][T15451] netlink: 'syz.5.3008': attribute type 2 has an invalid length. [ 1326.855705][ T9048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.893253][ T9048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.007934][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1327.085796][T14131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.121570][T14131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.197134][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1327.292042][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3011'. [ 1327.302551][T15461] netlink: 'syz.8.3011': attribute type 4 has an invalid length. [ 1333.045718][T13331] Bluetooth: hci5: link tx timeout [ 1333.051351][T13331] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1335.064188][T15517] netlink: 'syz.6.3025': attribute type 2 has an invalid length. [ 1335.114201][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 1335.134803][T15515] hsr0 speed is unknown, defaulting to 1000 [ 1338.410277][T15552] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1338.419231][T15552] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1338.428181][T15552] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1338.437079][T15552] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1343.804343][T15586] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1347.506233][T13932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1347.718052][T13932] usb 2-1: Using ep0 maxpacket: 8 [ 1347.750342][T13932] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1347.760238][T13932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.772498][T13932] usb 2-1: Product: syz [ 1347.778782][T13932] usb 2-1: Manufacturer: syz [ 1347.784237][T13932] usb 2-1: SerialNumber: syz [ 1347.842140][T13932] usb 2-1: config 0 descriptor?? [ 1348.215599][T13932] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1350.719939][T13932] usb write operation failed. (-71) [ 1350.729565][T13932] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1350.750460][T13932] dvbdev: DVB: registering new adapter (Terratec H7) [ 1350.780664][T13932] usb 2-1: media controller created [ 1350.797007][T13932] usb read operation failed. (-71) [ 1350.810473][T13932] usb write operation failed. (-71) [ 1350.820960][T13932] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 1350.856318][T13932] usb 2-1: USB disconnect, device number 5 [ 1353.166369][ T4296] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1353.406084][ T4296] usb 9-1: Using ep0 maxpacket: 16 [ 1353.433945][ T4296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.648487][ T4296] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.666396][ T4268] Bluetooth: hci1: link tx timeout [ 1353.672018][ T4268] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.682166][ T4268] Bluetooth: hci1: link tx timeout [ 1353.687400][ T4268] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.695215][ T4268] Bluetooth: hci1: link tx timeout [ 1353.700467][ T4268] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.715766][ T4296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1353.722512][ T4296] usb 9-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 1353.732368][ T4296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.917180][ T4296] usb 9-1: config 0 descriptor?? [ 1355.514630][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3065'. [ 1355.716132][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 1358.549059][ T4296] usbhid 9-1:0.0: can't add hid device: -71 [ 1358.555083][ T4296] usbhid: probe of 9-1:0.0 failed with error -71 [ 1358.627072][ T4296] usb 9-1: USB disconnect, device number 8 [ 1360.373136][T15715] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1366.670032][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3094'. [ 1368.569571][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.576051][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.691981][T15755] ALSA: mixer_oss: invalid OSS volume 'L' [ 1369.927075][T15757] Set syz1 is full, maxelem 65536 reached [ 1372.458500][ T4363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.857615][ T4268] Bluetooth: hci5: link tx timeout [ 1374.862851][ T4268] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1375.340898][ T4363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.972667][ T4363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.443210][ T4363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.196164][ T4330] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1383.851888][ T4330] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1383.872410][ T4330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.893019][ T4330] usb 10-1: Product: syz [ 1383.907013][ T4330] usb 10-1: Manufacturer: syz [ 1383.930551][ T4330] usb 10-1: SerialNumber: syz [ 1383.975816][ T4330] usb 10-1: config 0 descriptor?? [ 1385.233070][ T4330] usb 10-1: Firmware version (0.0) predates our first public release. [ 1385.319294][ T4330] usb 10-1: Please update to version 0.2 or newer [ 1385.738042][ T4363] device hsr_slave_0 left promiscuous mode [ 1385.749155][ T4363] device hsr_slave_1 left promiscuous mode [ 1385.856543][ T4363] device veth1_macvtap left promiscuous mode [ 1385.864431][ T4363] device veth0_macvtap left promiscuous mode [ 1385.870949][ T4363] device veth1_vlan left promiscuous mode [ 1385.877404][ T4363] device veth0_vlan left promiscuous mode [ 1387.030105][ T4427] usb 10-1: USB disconnect, device number 2 [ 1388.715380][T15901] tmpfs: Unknown parameter 'quota' [ 1391.330375][T15926] program syz.6.3140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1394.673577][ T4363] bond0 (unregistering): Released all slaves [ 1395.386631][T15963] tipc: Failed to remove unknown binding: 66,1,1/0:3597329377/3597329379 [ 1395.395454][T15963] tipc: Failed to remove unknown binding: 66,1,1/0:3597329377/3597329379 [ 1396.226115][T15969] loop4: detected capacity change from 0 to 524287999 [ 1396.291945][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1396.301574][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1396.312268][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1396.322112][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1396.347283][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1396.356573][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1396.486412][T15969] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1396.536112][T15969] Buffer I/O error on dev loop4, logical block 0, async page read [ 1396.713968][T15969] ldm_validate_partition_table(): Disk read failed. [ 1397.998608][T15969] Dev loop4: unable to read RDB block 0 [ 1398.037747][T15969] loop4: unable to read partition table [ 1398.064105][T15969] loop4: partition table beyond EOD, truncated [ 1398.182791][T15969] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 1398.519195][T15989] netlink: 'syz.5.3160': attribute type 4 has an invalid length. [ 1400.588951][T15993] sg_write: data in/out 2031668/73 bytes for SCSI command 0x26-- guessing data in; [ 1400.588951][T15993] program syz.6.3161 not setting count and/or reply_len properly [ 1401.113581][T16010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3166'. [ 1403.614011][T16035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1406.705527][T16040] netlink: 'syz.1.3174': attribute type 4 has an invalid length. [ 1406.883142][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3175'. [ 1408.332448][T16071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3181'. [ 1416.302363][T16121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3194'. [ 1425.716490][T13331] Bluetooth: hci5: command 0x0406 tx timeout [ 1426.337333][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3213'. [ 1428.112597][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.119970][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.672384][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3226'. [ 1445.993402][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3245'. [ 1447.411990][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3250'. [ 1447.421196][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3250'. [ 1449.003330][T16340] block nbd8: shutting down sockets [ 1449.806985][ T4298] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1450.036902][ T4298] usb 7-1: Using ep0 maxpacket: 32 [ 1450.051549][ T4298] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1450.063860][T16360] ALSA: mixer_oss: invalid OSS volume 'L' [ 1450.070056][ T4298] usb 7-1: config 0 has no interface number 0 [ 1450.079058][ T4298] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1450.088829][ T4298] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1450.110811][ T4298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.126216][ T4298] usb 7-1: Product: syz [ 1450.140664][ T4298] usb 7-1: Manufacturer: syz [ 1450.145322][ T4298] usb 7-1: SerialNumber: syz [ 1450.199591][ T4298] usb 7-1: config 0 descriptor?? [ 1450.237551][ T4298] smsc75xx v1.0.0 [ 1450.348471][T16370] hsr0 speed is unknown, defaulting to 1000 [ 1451.827035][ T4298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): EEPROM is busy [ 1452.032748][ T4298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1452.080509][ T4298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1452.106598][ T4298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1452.127643][ T4298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1452.149243][ T4298] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 1452.317279][ T4298] usb 7-1: USB disconnect, device number 6 [ 1456.674385][T16406] ALSA: mixer_oss: invalid OSS volume 'L' [ 1458.070761][T16422] /dev/nbd8: Can't open blockdev [ 1464.003626][T16475] fuse: Bad value for 'fd' [ 1471.173482][T16527] hsr0 speed is unknown, defaulting to 1000 [ 1475.246225][ T4296] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1476.166090][ T4296] usb 2-1: Using ep0 maxpacket: 32 [ 1476.267185][ T4296] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1476.280299][ T4296] usb 2-1: config 0 has no interface number 0 [ 1476.286849][ T4296] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1476.368719][ T4296] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1476.396192][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.404316][ T4296] usb 2-1: Product: syz [ 1476.445989][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 1476.507169][ T4296] usb 2-1: Manufacturer: syz [ 1476.511840][ T4296] usb 2-1: SerialNumber: syz [ 1476.523459][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3317'. [ 1476.528720][ T4296] usb 2-1: config 0 descriptor?? [ 1476.542307][ T4296] smsc75xx v1.0.0 [ 1476.988470][ T4296] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1477.021689][ T4296] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 1477.094576][ T4296] usb 2-1: USB disconnect, device number 6 [ 1482.676115][T16639] tty tty38: ldisc open failed (-12), clearing slot 37 [ 1484.774832][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 1484.801368][T16657] Error parsing options; rc = [-22] [ 1484.924709][ C1] vcan0: j1939_session_tx_dat: 0xffff888058f70000: queue data error: -100 [ 1486.790187][T16673] input: syz0 as /devices/virtual/input/input10 [ 1489.550380][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.556770][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.744679][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1497.082044][T16725] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1503.007404][T16720] block nbd1: shutting down sockets [ 1503.675980][T14709] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1503.876222][T14709] usb 7-1: Using ep0 maxpacket: 8 [ 1503.883583][T14709] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1503.925999][T14709] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1503.989861][T14709] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1504.047846][T14709] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1504.816435][T14709] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1504.830331][T14709] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1504.839878][T14709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.017922][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1505.028082][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1505.041107][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1505.068256][T14709] usb 7-1: usb_control_msg returned -32 [ 1505.073891][T14709] usbtmc 7-1:16.0: can't read capabilities [ 1505.148551][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1505.217910][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1505.227007][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1506.702391][ T9840] usb 7-1: USB disconnect, device number 7 [ 1506.750397][T16744] hsr0 speed is unknown, defaulting to 1000 [ 1507.388054][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 1508.069852][T16744] chnl_net:caif_netlink_parms(): no params data found [ 1508.245136][T16744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.282681][T16744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.444411][T16744] device bridge_slave_0 entered promiscuous mode [ 1508.453671][T16744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.495106][T16744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.511160][T16744] device bridge_slave_1 entered promiscuous mode [ 1509.443582][T16744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.466177][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 1509.497640][T16744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.615109][T16744] team0: Port device team_slave_0 added [ 1509.635767][T16744] team0: Port device team_slave_1 added [ 1509.688564][T16744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.697209][T16744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.856596][T16744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.914935][T16744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.925276][T16744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.935817][T16744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.355379][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 1512.619481][T16744] device hsr_slave_0 entered promiscuous mode [ 1513.967001][T16744] device hsr_slave_1 entered promiscuous mode [ 1514.125953][T16744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1514.178738][T16744] Cannot create hsr debugfs directory [ 1514.184419][T16813] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3380'. [ 1514.425969][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 1516.649926][T16744] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.182828][T16744] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.567210][T16744] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.054751][T16744] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.567121][T16851] block nbd1: Device being setup by another task [ 1520.865702][T16744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1521.064046][T16744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1521.122714][T16744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1521.201489][T16744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1521.737119][T16864] ALSA: mixer_oss: invalid OSS volume 'L' [ 1521.806314][T15031] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1521.964623][T16744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.016579][T15031] usb 10-1: Using ep0 maxpacket: 16 [ 1522.040855][T15031] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.107447][T15031] usb 10-1: config 0 has no interfaces? [ 1522.129806][T15031] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1522.146052][T15031] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.154805][T15031] usb 10-1: Product: syz [ 1522.159328][T15031] usb 10-1: Manufacturer: syz [ 1522.164400][T15031] usb 10-1: SerialNumber: syz [ 1522.191695][T15031] usb 10-1: config 0 descriptor?? [ 1522.240069][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1522.270440][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1522.312903][T16744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.347204][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.368475][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.388471][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.395625][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.482429][T16744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1522.502468][T16744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1522.607998][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1522.897093][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1522.913081][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1523.034189][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.041484][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.074733][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1523.374518][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1523.462523][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1524.428388][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1524.463931][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1524.495703][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1524.532536][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1524.542108][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1524.552159][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1524.562060][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1524.571814][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1524.580933][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1524.842624][ T4296] usb 10-1: USB disconnect, device number 3 [ 1525.999019][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1526.034939][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1526.094779][T16744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.372392][T16919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3406'. [ 1527.735603][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1527.762417][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1527.886873][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1527.919373][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1527.937444][T16744] device veth0_vlan entered promiscuous mode [ 1527.950587][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1527.980052][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1528.026509][ T4427] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1528.236175][ T4427] usb 10-1: Using ep0 maxpacket: 32 [ 1528.254190][ T4427] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1528.263290][ T4427] usb 10-1: config 0 has no interface number 0 [ 1528.271561][ T4427] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1528.306131][ T4427] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1528.316274][ T4427] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.324540][ T4427] usb 10-1: Product: syz [ 1528.332638][ T4427] usb 10-1: Manufacturer: syz [ 1528.339111][ T4427] usb 10-1: SerialNumber: syz [ 1528.396960][ T4427] usb 10-1: config 0 descriptor?? [ 1528.447727][ T4427] smsc75xx v1.0.0 [ 1528.465150][T16744] device veth1_vlan entered promiscuous mode [ 1528.651197][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1528.677049][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1528.702808][T16744] device veth0_macvtap entered promiscuous mode [ 1528.714714][T16744] device veth1_macvtap entered promiscuous mode [ 1528.755521][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.791605][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.840524][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.870931][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.891062][T16744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1528.902381][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1528.933211][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1528.952574][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1528.977270][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1529.006585][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.042442][ T4427] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1529.045189][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.063642][ T4427] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1529.096010][ T4427] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1529.116033][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.126035][ T4427] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 1529.136830][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.180007][ T4427] usb 10-1: USB disconnect, device number 4 [ 1529.659406][T16744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.983107][T12781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1530.029417][T12781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1530.048018][T16744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.075967][T16744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.084728][T16744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.110565][T16744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.028545][ T9048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.058205][ T9048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.183637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1531.208069][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.567231][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.600434][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1532.129517][T16956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1532.823330][T16964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3419'. [ 1532.872654][ C1] vcan0: j1939_session_tx_dat: 0xffff888029369c00: queue data error: -100 [ 1535.383206][T16987] hsr0 speed is unknown, defaulting to 1000 [ 1535.452745][T16996] device syzkaller1 entered promiscuous mode [ 1537.615708][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3431'. [ 1539.586059][T14709] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1539.778650][T14709] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1539.802713][T14709] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1539.839843][T14709] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1539.851759][T14709] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1539.864875][T14709] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1539.887807][T14709] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1539.918908][T14709] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1539.963270][T14709] usb 10-1: Product: syz [ 1539.986407][T14709] usb 10-1: Manufacturer: syz [ 1540.129501][T14709] cdc_wdm 10-1:1.0: skipping garbage [ 1540.211092][T14709] cdc_wdm 10-1:1.0: skipping garbage [ 1540.379881][T14709] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1540.411757][T14709] cdc_wdm 10-1:1.0: Unknown control protocol [ 1540.450222][T14709] usb 10-1: USB disconnect, device number 5 [ 1541.095998][T14709] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1541.303096][T14709] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1541.325031][T14709] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1541.508195][T14709] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1541.734887][T14709] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1541.791339][T14709] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1541.830909][T14709] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1541.858565][T14709] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1541.888972][T14709] usb 10-1: Product: syz [ 1541.905922][T14709] usb 10-1: Manufacturer: syz [ 1542.011108][T14709] usb 10-1: can't set config #1, error -71 [ 1542.046171][T14709] usb 10-1: USB disconnect, device number 6 [ 1542.392993][T17043] hsr0 speed is unknown, defaulting to 1000 [ 1546.346771][T17070] block nbd5: Device being setup by another task [ 1550.989885][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.996537][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.436887][T17119] block nbd9: shutting down sockets [ 1556.259486][T17170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3481'. [ 1559.357342][T17197] delete_channel: no stack [ 1564.378300][T17238] dccp_close: ABORT with 64 bytes unread [ 1570.116025][T17277] block nbd6: Device being setup by another task [ 1572.086063][T17292] block nbd5: Device being setup by another task [ 1572.216149][T17270] hsr0 speed is unknown, defaulting to 1000 [ 1577.586172][T17342] block nbd8: Device being setup by another task [ 1582.378710][T17380] device syzkaller1 entered promiscuous mode [ 1584.456454][T17402] block nbd6: Device being setup by another task [ 1584.457786][T17398] hsr0 speed is unknown, defaulting to 1000 [ 1586.877105][T17396] input: syz0 as /devices/virtual/input/input12 [ 1588.627781][T17430] hsr0 speed is unknown, defaulting to 1000 [ 1589.598110][T17435] device syzkaller1 entered promiscuous mode [ 1591.197530][T17449] block nbd1: Device being setup by another task [ 1593.226102][T17457] block nbd1: Device being setup by another task [ 1593.393921][T17461] hsr0 speed is unknown, defaulting to 1000 [ 1593.578331][T17468] fuse: Unknown parameter 'group_i00000000000000000000' [ 1598.463967][T17510] fuse: Unknown parameter 'group_i00000000000000000000' [ 1600.108359][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3578'. [ 1601.525899][ T9995] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1601.741396][ T9995] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1601.768322][ T9995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.792158][ T9995] usb 6-1: Product: syz [ 1601.796997][ T9995] usb 6-1: Manufacturer: syz [ 1601.801629][ T9995] usb 6-1: SerialNumber: syz [ 1601.826439][ T9995] usb 6-1: config 0 descriptor?? [ 1601.839316][ T9995] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1602.636122][ T9995] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1602.655930][ T9995] sq905c 6-1:0.0: Reading version command failed [ 1602.662397][ T9995] sq905c: probe of 6-1:0.0 failed with error -110 [ 1602.687965][T17551] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.696983][T17551] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.705715][T17551] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.714590][T17551] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.910330][T13932] usb 6-1: USB disconnect, device number 4 [ 1603.359313][T17559] ALSA: mixer_oss: invalid OSS volume 'L' [ 1604.586985][T17565] block nbd1: Device being setup by another task [ 1606.601033][T17573] delete_channel: no stack [ 1611.696122][T17614] block nbd9: Device being setup by another task [ 1612.432262][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.443261][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.332715][T17622] ALSA: mixer_oss: invalid OSS volume 'L' [ 1614.021435][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3605'. [ 1615.022580][T17630] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3605'. [ 1617.556152][T17654] block nbd1: Device being setup by another task [ 1619.547276][T17678] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3619'. [ 1624.843809][T17712] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3630'. [ 1625.925950][ T9995] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1626.117748][ T9995] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1626.137758][ T9995] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1626.156137][ T9995] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1626.341156][ T9995] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1626.380665][ T9995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.428464][ T9995] usb 6-1: Product: syz [ 1626.522276][ T9995] usb 6-1: Manufacturer: syz [ 1626.554483][ T9995] usb 6-1: SerialNumber: syz [ 1626.941108][ T9995] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1627.261539][T17709] usblp0:failed reading printer status (-71) [ 1627.266262][ T7] usb 6-1: USB disconnect, device number 5 [ 1627.468935][T17708] usblp0: removed [ 1628.356555][T17761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3643'. [ 1629.468475][T17779] hsr0 speed is unknown, defaulting to 1000 [ 1631.060091][T17791] input: syz0 as /devices/virtual/input/input13 [ 1632.646264][T17803] x_tables: duplicate underflow at hook 1 [ 1633.170968][T13932] libceph: connect (1)[c::]:6789 error -101 [ 1633.187479][T13932] libceph: mon0 (1)[c::]:6789 connect error [ 1633.663028][ T9840] libceph: connect (1)[c::]:6789 error -101 [ 1633.670249][ T9840] libceph: mon0 (1)[c::]:6789 connect error [ 1633.687910][T17801] ceph: No mds server is up or the cluster is laggy [ 1634.302417][ T9840] libceph: connect (1)[c::]:6789 error -101 [ 1634.310299][ T9840] libceph: mon0 (1)[c::]:6789 connect error [ 1639.121019][T17856] xt_TCPMSS: Only works on TCP SYN packets [ 1641.599020][T17758] libceph: connect (1)[c::]:6789 error -101 [ 1641.622661][T17758] libceph: mon0 (1)[c::]:6789 connect error [ 1641.922981][T17758] libceph: connect (1)[c::]:6789 error -101 [ 1642.046984][T17758] libceph: mon0 (1)[c::]:6789 connect error [ 1642.362973][T17889] ceph: No mds server is up or the cluster is laggy [ 1643.258618][ T4476] kworker/dying (4476) used greatest stack depth: 12544 bytes left [ 1643.266273][T17758] libceph: connect (1)[c::]:6789 error -101 [ 1643.357466][T17758] libceph: mon0 (1)[c::]:6789 connect error [ 1644.771569][T17930] fuse: Bad value for 'fd' [ 1647.653838][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1647.666261][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1647.675282][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1647.684095][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1647.691946][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1647.704888][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1647.897273][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3697'. [ 1648.051422][T17953] hsr0 speed is unknown, defaulting to 1000 [ 1649.257975][T17970] fuse: Bad value for 'fd' [ 1649.619108][T17953] chnl_net:caif_netlink_parms(): no params data found [ 1650.127114][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 1651.165479][T17953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.186712][T17981] syz.1.3703 (17981): drop_caches: 2 [ 1651.204910][T17953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.247899][T17953] device bridge_slave_0 entered promiscuous mode [ 1651.284507][T17953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.292595][T17953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.301518][T17953] device bridge_slave_1 entered promiscuous mode [ 1651.376667][T17999] device syzkaller1 entered promiscuous mode [ 1651.435180][T17953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.450118][T17953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.933794][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 1653.276238][T17953] team0: Port device team_slave_0 added [ 1653.303386][T17953] team0: Port device team_slave_1 added [ 1654.055331][T17953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.114624][T17953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.256849][T17953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.270903][T17953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.278652][T17953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.304940][ C1] vkms_vblank_simulate: vblank timer overrun [ 1654.328188][T17953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.985931][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 1655.282559][T17953] device hsr_slave_0 entered promiscuous mode [ 1655.416459][T17953] device hsr_slave_1 entered promiscuous mode [ 1655.451683][T17953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1655.461895][T17953] Cannot create hsr debugfs directory [ 1657.327393][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 1658.802431][T18054] device syzkaller1 entered promiscuous mode [ 1660.395411][T17953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1660.433176][T17953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1660.465085][T17953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1660.481311][T17953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1660.876354][T17953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.938829][ T93] block nbd6: Possible stuck request ffff888025778000: control (read@1024,512B). Runtime 30 seconds [ 1661.957816][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1661.986117][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1662.325018][T17953] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.339886][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1663.378396][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1663.437212][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.444309][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.500080][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1663.636094][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1663.689507][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1663.709333][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.716530][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.785648][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1663.813569][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1663.865645][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1663.898951][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1663.947181][T18107] device syzkaller1 entered promiscuous mode [ 1664.126460][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1664.278653][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1664.330090][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1664.350365][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1664.359685][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1664.369762][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1664.383299][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1664.421489][T17953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1667.555262][T18134] ALSA: mixer_oss: invalid OSS volume '' [ 1668.969486][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1669.015354][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1669.101148][T17953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.406398][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1671.426676][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1671.499175][T18177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.626686][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.142823][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1673.194406][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1673.327933][T17953] device veth0_vlan entered promiscuous mode [ 1673.377602][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1673.387632][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1673.419800][T17953] device veth1_vlan entered promiscuous mode [ 1673.545320][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1673.578343][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1673.622513][T17953] device veth0_macvtap entered promiscuous mode [ 1673.718826][T17953] device veth1_macvtap entered promiscuous mode [ 1673.874459][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.891873][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.399985][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1674.409540][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1674.470229][T17953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1674.497890][T17953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.516462][T17953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1674.527206][T17953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.538521][T17953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1674.573827][T17953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.698626][T17953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1674.844089][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1674.869878][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1675.111730][T17953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1675.148763][T17953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.165529][T17953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1675.193006][T17953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.204788][T17953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1675.230391][T17953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.242356][T17953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1675.252633][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1675.262603][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1675.446670][T17953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.464720][T17953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.484081][T17953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.493859][T17953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.395592][ T5180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.406772][ T5180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.447321][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1676.559668][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.605930][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.619973][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1684.336724][T18272] hsr0 speed is unknown, defaulting to 1000 [ 1688.662180][T18306] hsr0 speed is unknown, defaulting to 1000 [ 1689.452293][T17174] block nbd8: shutting down sockets [ 1692.699761][ T93] block nbd6: Possible stuck request ffff888025778000: control (read@1024,512B). Runtime 60 seconds [ 1696.141639][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1696.167653][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1696.197048][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1696.205154][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1696.213465][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1696.248962][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1696.554754][T18342] hsr0 speed is unknown, defaulting to 1000 [ 1698.587377][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 1699.029274][T18355] input: syz0 as /devices/virtual/input/input14 [ 1699.035725][T18355] input: failed to attach handler leds to device input14, error: -6 [ 1699.602739][T18342] chnl_net:caif_netlink_parms(): no params data found [ 1699.751400][T18364] hsr0 speed is unknown, defaulting to 1000 [ 1700.742590][T13331] Bluetooth: hci3: command 0x041b tx timeout [ 1700.908590][T18342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.916498][T18342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.934862][T18342] device bridge_slave_0 entered promiscuous mode [ 1700.970585][T18342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.997715][T18342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.025679][T18342] device bridge_slave_1 entered promiscuous mode [ 1701.147942][T18342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.902684][T18342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.262785][T18391] 9pnet_fd: Insufficient options for proto=fd [ 1702.740838][T18342] team0: Port device team_slave_0 added [ 1702.780656][T18342] team0: Port device team_slave_1 added [ 1702.825990][T13331] Bluetooth: hci3: command 0x040f tx timeout [ 1702.904253][T18342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.931918][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.959096][T18342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.995982][T18342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.025617][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.076062][T18342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.323867][T18342] device hsr_slave_0 entered promiscuous mode [ 1703.422800][T18342] device hsr_slave_1 entered promiscuous mode [ 1703.458391][T18342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1703.481168][T18342] Cannot create hsr debugfs directory [ 1704.924307][T13331] Bluetooth: hci3: command 0x0419 tx timeout [ 1709.387133][T18448] fuse: Unknown parameter 'use00000000000000000000' [ 1711.635749][T18462] netlink: 'syz.9.3833': attribute type 2 has an invalid length. [ 1711.665959][T18462] netlink: 'syz.9.3833': attribute type 1 has an invalid length. [ 1712.181496][T18342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1712.282611][T18479] fuse: Unknown parameter 'user_i00000000000000000000' [ 1712.321758][T18342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1712.376125][T18342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1712.492704][T18485] xt_connbytes: Forcing CT accounting to be enabled [ 1712.507361][T18485] --map-set only usable from mangle table [ 1712.551142][T18342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1714.084417][T18342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.370773][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1714.392890][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1714.425069][T18342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.450482][T18511] fuse: Unknown parameter 'user_i00000000000000000000' [ 1714.498011][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1714.527194][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1714.539683][T15096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.546955][T15096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.559363][T15096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1715.361917][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1715.379166][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1715.392263][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.399481][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1715.465355][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1716.126021][ T4848] device hsr_slave_0 left promiscuous mode [ 1716.137396][ T4848] device hsr_slave_1 left promiscuous mode [ 1716.220698][ T4848] device veth1_macvtap left promiscuous mode [ 1716.228363][ T4848] device veth0_macvtap left promiscuous mode [ 1716.242114][ T4848] device veth1_vlan left promiscuous mode [ 1716.248384][ T4848] device veth0_vlan left promiscuous mode [ 1716.912532][T18547] fuse: Unknown parameter 'user_i00000000000000000000' [ 1717.252344][T18552] input: syz0 as /devices/virtual/input/input15 [ 1721.019547][ T4848] bond0 (unregistering): Released all slaves [ 1721.102463][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1721.117589][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1721.134946][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1721.143763][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1721.167129][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1721.184010][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1721.193339][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1721.202883][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1721.219425][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1721.229004][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1721.246542][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3871'. [ 1721.372740][T18342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1721.557551][T18584] fuse: Unknown parameter 'user_id00000000000000000000' [ 1723.150984][ T93] block nbd6: Possible stuck request ffff888025778000: control (read@1024,512B). Runtime 90 seconds [ 1725.268289][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1725.280757][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1725.883410][T18342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.977983][T18342] device veth0_vlan entered promiscuous mode [ 1726.005657][T18342] device veth1_vlan entered promiscuous mode [ 1726.022211][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1726.035504][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1726.058156][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1726.098182][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1726.149798][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1726.207124][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1726.578380][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1726.875292][T14131] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1727.280175][T18342] device veth0_macvtap entered promiscuous mode [ 1727.359644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1727.411812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1727.451799][T18342] device veth1_macvtap entered promiscuous mode [ 1727.494941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1727.579776][T18631] fuse: Unknown parameter 'user_id00000000000000000000' [ 1727.590196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1727.615892][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3884'. [ 1727.645680][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.679254][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.705403][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.722968][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.733134][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.743802][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.753719][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.764298][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.777223][T18342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.810997][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.842445][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.883603][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.835192][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.968763][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.019975][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.091248][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.213718][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.393493][T18342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1729.996021][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1730.064690][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1730.177421][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1730.186526][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1730.200011][T18342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.229217][T18342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.247680][T18342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.271517][T18342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.669118][ T8024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.705997][ T8024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.747713][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.756921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1730.767579][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.807250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1732.634276][T18675] Bluetooth: MGMT ver 1.22 [ 1732.843197][T18680] fuse: Unknown parameter 'user_id00000000000000000000' [ 1735.310984][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.317476][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.851196][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3906'. [ 1739.455279][T18739] qrtr: Invalid version 48 [ 1742.024182][T18755] mac80211_hwsim hwsim24 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1749.696554][T18804] 9pnet_fd: Insufficient options for proto=fd [ 1750.185912][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3941'. [ 1750.489060][T18833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3943'. [ 1753.975820][ T93] block nbd6: Possible stuck request ffff888025778000: control (read@1024,512B). Runtime 120 seconds [ 1755.667198][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3955'. [ 1757.111183][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3957'. [ 1763.728108][T18936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1769.785587][T18986] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3984'. [ 1772.995622][T19011] input: syz0 as /devices/virtual/input/input19 [ 1773.555939][T13331] Bluetooth: hci2: command 0x0406 tx timeout [ 1777.698478][T19036] netlink: 'syz.4.3995': attribute type 21 has an invalid length. [ 1777.706627][T19036] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3995'. [ 1783.459531][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4006'. [ 1784.751426][ T93] block nbd6: Possible stuck request ffff888025778000: control (read@1024,512B). Runtime 150 seconds [ 1789.080154][T19126] qrtr: Invalid version 48 [ 1793.024027][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4030'. [ 1794.082703][T19161] netlink: 'syz.5.4030': attribute type 39 has an invalid length. [ 1795.004200][T19164] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4030'. [ 1796.820001][T19184] qrtr: Invalid version 48 [ 1796.827484][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.837220][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.202348][T19198] xt_connbytes: Forcing CT accounting to be enabled [ 1798.212914][T19198] Cannot find add_set index 0 as target [ 1803.460567][T19221] ALSA: mixer_oss: invalid OSS volume '' [ 1804.781660][T19231] qrtr: Invalid version 48 [ 1809.151834][ T27] audit: type=1326 audit(1741551184.904:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19261 comm="syz.1.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5209d8d169 code=0x7fc00000 [ 1809.766991][T19282] qrtr: Invalid version 48 [ 1809.935934][ T27] audit: type=1326 audit(1741551185.604:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19261 comm="syz.1.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5209d8d169 code=0x7fc00000 [ 1813.708912][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1815.352270][ T93] block nbd6: Possible stuck request ffff888025778000: control (read@1024,512B). Runtime 180 seconds [ 1817.584428][T19330] qrtr: Invalid version 48 [ 1819.626337][T13331] Bluetooth: hci3: command 0x0406 tx timeout [ 1820.233104][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4079'. [ 1823.113486][T19382] qrtr: Invalid version 48 [ 1824.182687][T19395] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1824.209517][T19395] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1824.226386][T19395] device gretap1 entered promiscuous mode [ 1824.542509][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4094'. [ 1826.137832][T19420] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1827.369598][T19428] ALSA: mixer_oss: invalid OSS volume '' [ 1827.401566][T19422] device syzkaller0 entered promiscuous mode [ 1828.110432][T19433] 9pnet_fd: Insufficient options for proto=fd [ 1828.456008][T15031] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1828.667779][T15031] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1828.701051][T15031] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1828.731742][T15031] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1828.778505][T15031] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1828.817514][T15031] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1828.870435][T15031] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1828.900544][T15031] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1828.941260][T15031] usb 6-1: Product: syz [ 1828.945571][T15031] usb 6-1: Manufacturer: syz [ 1828.985869][T15031] cdc_wdm 6-1:1.0: skipping garbage [ 1829.014681][T15031] cdc_wdm 6-1:1.0: skipping garbage [ 1829.202859][T15031] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1829.217116][T15031] cdc_wdm 6-1:1.0: Unknown control protocol [ 1829.289987][T15031] usb 6-1: USB disconnect, device number 6 [ 1829.895924][T15031] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1830.119483][T15031] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1830.135796][T15031] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1830.155795][T15031] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1830.173971][T15031] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1830.195532][T15031] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1830.228642][T15031] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1830.245837][T15031] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1830.253894][T15031] usb 6-1: Product: syz [ 1830.275875][T15031] usb 6-1: Manufacturer: syz [ 1830.286516][T15031] cdc_wdm 6-1:1.0: skipping garbage [ 1830.291836][T15031] cdc_wdm 6-1:1.0: skipping garbage [ 1830.313576][T15031] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1830.330374][T15031] cdc_wdm 6-1:1.0: Unknown control protocol [ 1830.857217][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.862957][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1830.870954][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.876688][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1830.897884][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 1830.907285][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.913004][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1830.919861][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.925667][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1830.935699][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.941425][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1830.947674][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.953386][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1830.959526][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.965223][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1830.971559][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.977280][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1830.983590][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1830.989290][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.013602][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.019339][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.025520][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.031329][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.058579][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.064336][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.070431][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.076121][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.094782][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.100546][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.114304][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.120043][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.135327][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.141059][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.147045][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.152754][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.160130][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.165825][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.171626][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.177486][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.183182][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.212841][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.218586][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.236060][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.241807][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.263198][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.268944][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.274912][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.280622][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.288626][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.294359][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.300457][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.306164][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.320870][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.326583][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.333902][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.339640][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.347462][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.353182][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.359198][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.364898][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.371551][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.377245][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.392376][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.398094][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.415908][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.421663][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.436659][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.442477][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.449507][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.455236][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.469223][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.475042][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.484057][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.489764][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.500012][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.505727][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.517953][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.523685][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.534599][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.540393][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.558576][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.564314][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.576861][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.582588][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.592602][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.598320][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.609327][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.615034][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.620902][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.626595][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.632444][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.638142][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.643939][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.655436][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.661150][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.667102][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.672800][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.687535][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.693258][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.700086][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.705783][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.711756][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.717456][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.723367][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.729062][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.735031][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.740722][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.746654][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.752355][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.758198][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.763891][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.769763][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.775475][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.785709][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.791423][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.802124][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.807863][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.818263][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.823986][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.835223][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.840956][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.848129][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.853834][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.861024][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.866726][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.872692][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.878409][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.892046][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.897780][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.924158][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 1831.929902][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 1831.957642][ T9995] usb 6-1: USB disconnect, device number 7 [ 1835.276627][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'. [ 1837.076671][ T28] INFO: task syz.8.3761:18202 blocked for more than 143 seconds. [ 1837.084440][ T28] Not tainted 6.1.130-syzkaller #0 [ 1837.266777][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1837.275690][ T28] task:syz.8.3761 state:D stack:27888 pid:18202 ppid:10131 flags:0x00004004 [ 1837.858410][ T28] Call Trace: [ 1837.874156][ T28] [ 1837.890799][ T28] __schedule+0x143f/0x4570 [ 1837.902405][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 1837.934037][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1837.981873][ T28] ? print_irqtrace_events+0x210/0x210 [ 1838.118947][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1838.162607][ T28] schedule+0xbf/0x180 [ 1838.200036][ T28] ? down_read+0x69f/0xa30 [ 1838.223603][ T28] schedule_preempt_disabled+0xf/0x20 [ 1838.273431][ T28] down_read+0x6ff/0xa30 [ 1838.293735][ T28] ? __down_common+0x8b0/0x8b0 [ 1838.466039][ T28] ? do_raw_spin_lock+0x14a/0x370 [ 1838.471333][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1838.486889][ T28] iterate_supers+0xac/0x1e0 [ 1838.491575][ T28] ? ksys_sync+0x1c0/0x1c0 [ 1838.547881][ T28] ksys_sync+0xb9/0x1c0 [ 1838.552138][ T28] ? sync_filesystem+0x220/0x220 [ 1838.588394][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1838.673885][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1838.712341][ T28] __do_sys_sync+0xa/0x10 [ 1838.728231][ T28] do_syscall_64+0x3b/0xb0 [ 1838.744284][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1838.754472][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1838.796911][ T28] RIP: 0033:0x7f59b498d169 [ 1838.819034][ T28] RSP: 002b:00007f59b58b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1838.861663][ T28] RAX: ffffffffffffffda RBX: 00007f59b4ba5fa0 RCX: 00007f59b498d169 [ 1838.892133][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.910939][ T28] RBP: 00007f59b4ba5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.924379][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1838.933458][ T28] R13: 0000000000000001 R14: 00007f59b4ba5fa0 R15: 00007ffffa8ce0a8 [ 1838.942017][ T28] [ 1838.947359][ T28] [ 1838.947359][ T28] Showing all locks held in the system: [ 1838.955203][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1838.961158][ T28] #0: ffffffff8d32e850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1839.005692][ T28] 1 lock held by rcu_tasks_trace/13: [ 1839.011714][ T28] #0: ffffffff8d32f050 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1839.023509][ T28] 1 lock held by khungtaskd/28: [ 1839.028932][ T28] #0: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1839.039835][ T28] 2 locks held by getty/4008: [ 1839.044635][ T28] #0: ffff88814cdf4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1839.054997][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 1839.066048][ T28] 2 locks held by kworker/u4:12/4380: [ 1839.071631][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 1839.084732][ T28] #1: ffffc9000460fd20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 1839.097226][ T28] 4 locks held by kworker/u4:23/8024: [ 1839.102838][ T28] #0: ffff88801a267938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 1839.115632][ T28] #1: ffffc900042d7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 1839.130450][ T28] #2: ffff88814cf580e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 1839.141718][ T28] #3: ffff88814cf5ab98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1e5/0x3de0 [ 1839.153453][ T28] 2 locks held by kworker/u4:26/9037: [ 1839.159356][ T28] 1 lock held by syz.6.3651/17785: [ 1839.164679][ T28] #0: ffff8880681780e0 (&type->s_umount_key#50/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 [ 1839.178082][ T28] 1 lock held by syz.8.3761/18202: [ 1839.183925][ T28] #0: ffff8880681780e0 (&type->s_umount_key#91){.+.+}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 1839.195006][ T28] 1 lock held by syz.5.4120/19497: [ 1839.200583][ T28] #0: ffffffff8d333b80 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 1839.211636][ T28] [ 1839.214135][ T28] ============================================= [ 1839.214135][ T28] [ 1839.228404][ T28] NMI backtrace for cpu 1 [ 1839.232796][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.130-syzkaller #0 [ 1839.240731][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1839.250822][ T28] Call Trace: [ 1839.254125][ T28] [ 1839.257077][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1839.261796][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 1839.267296][ T28] ? panic+0x764/0x764 [ 1839.271394][ T28] ? vprintk_emit+0x622/0x740 [ 1839.276102][ T28] ? printk_sprint+0x490/0x490 [ 1839.280981][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 1839.286134][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 1839.291115][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 1839.297386][ T28] ? _printk+0xd1/0x111 [ 1839.301574][ T28] ? panic+0x764/0x764 [ 1839.305693][ T28] ? __wake_up_klogd+0xcc/0x100 [ 1839.310570][ T28] ? panic+0x764/0x764 [ 1839.314674][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 1839.320774][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 1839.326811][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1839.332918][ T28] watchdog+0xf88/0xfd0 [ 1839.337123][ T28] ? watchdog+0x1f8/0xfd0 [ 1839.341494][ T28] kthread+0x28d/0x320 [ 1839.345593][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1839.350651][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1839.355272][ T28] ret_from_fork+0x1f/0x30 [ 1839.359745][ T28] [ 1839.363494][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1839.368790][ C0] NMI backtrace for cpu 0 [ 1839.368801][ C0] CPU: 0 PID: 4239 Comm: syz-executor Not tainted 6.1.130-syzkaller #0 [ 1839.368818][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1839.368828][ C0] RIP: 0010:mem_cgroup_handle_over_high+0xe5/0x2b0 [ 1839.368868][ C0] Code: 20 0e 36 e0 45 4a c7 04 32 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 60 0f 85 cb 01 00 00 48 8d 65 d8 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 49 81 c7 28 05 00 00 4c 89 f8 48 c1 e8 03 80 3c [ 1839.368882][ C0] RSP: 0018:ffffc90003bc7e98 EFLAGS: 00000246 [ 1839.368898][ C0] RAX: aa681076e374b300 RBX: ffff888024da3b80 RCX: ffffffff973c0103 [ 1839.368911][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: ffffc90003bc7e40 [ 1839.368925][ C0] RBP: ffffc90003bc7ea8 R08: dffffc0000000000 R09: ffffc90003bc7be0 [ 1839.368938][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1839.368949][ C0] R13: 0000000000000000 R14: 1ffff92000778fc4 R15: ffff888024da3b80 [ 1839.368961][ C0] FS: 000055558d549500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1839.368977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1839.368989][ C0] CR2: 000000110c3ee3f0 CR3: 0000000027b65000 CR4: 00000000003526f0 [ 1839.369004][ C0] DR0: fffffffffffffffc DR1: 0000000000000006 DR2: 0200000000000000 [ 1839.369016][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1839.369027][ C0] Call Trace: [ 1839.369032][ C0] [ 1839.369038][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1839.369056][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1839.369085][ C0] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 1839.369103][ C0] ? nmi_handle+0x25/0x440 [ 1839.369136][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1839.369153][ C0] ? nmi_handle+0x12e/0x440 [ 1839.369179][ C0] ? nmi_handle+0x25/0x440 [ 1839.369204][ C0] ? mem_cgroup_handle_over_high+0xe5/0x2b0 [ 1839.369230][ C0] ? default_do_nmi+0x62/0x150 [ 1839.369250][ C0] ? exc_nmi+0xa8/0x100 [ 1839.369267][ C0] ? end_repeat_nmi+0x16/0x31 [ 1839.369294][ C0] ? mem_cgroup_handle_over_high+0xe5/0x2b0 [ 1839.369321][ C0] ? mem_cgroup_handle_over_high+0xe5/0x2b0 [ 1839.369349][ C0] ? mem_cgroup_handle_over_high+0xe5/0x2b0 [ 1839.369376][ C0] [ 1839.369380][ C0] [ 1839.369386][ C0] exit_to_user_mode_loop+0x9b/0x100 [ 1839.369405][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1839.369423][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 1839.369446][ C0] do_syscall_64+0x47/0xb0 [ 1839.369461][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1839.369483][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1839.369503][ C0] RIP: 0033:0x7f54e27bf9e3 [ 1839.369516][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 1839.369530][ C0] RSP: 002b:00007fff990e9e98 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1839.369546][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f54e27bf9e3 [ 1839.369557][ C0] RDX: 00007fff990e9eb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1839.369567][ C0] RBP: 0000000000000000 R08: 00007fff991ed0b0 R09: 0000000000000010 [ 1839.369578][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff990ea300 [ 1839.369589][ C0] R13: 0000000000000004 R14: 00007fff990e9eec R15: 00007fff990e9f80 [ 1839.369608][ C0] [ 1840.041910][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1840.048799][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.130-syzkaller #0 [ 1840.056711][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1840.066793][ T28] Call Trace: [ 1840.070088][ T28] [ 1840.073033][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1840.077727][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 1840.083204][ T28] ? panic+0x764/0x764 [ 1840.087277][ T28] ? llist_add_batch+0x160/0x1d0 [ 1840.092220][ T28] ? vscnprintf+0x59/0x80 [ 1840.096589][ T28] panic+0x318/0x764 [ 1840.100492][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 1840.106644][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 1840.112030][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 1840.117408][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 1840.123578][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 1840.129744][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 1840.135909][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1840.142014][ T28] watchdog+0xfc7/0xfd0 [ 1840.146182][ T28] ? watchdog+0x1f8/0xfd0 [ 1840.150518][ T28] kthread+0x28d/0x320 [ 1840.154590][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1840.159620][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1840.164220][ T28] ret_from_fork+0x1f/0x30 [ 1840.168680][ T28] [ 1840.172006][ T28] Kernel Offset: disabled [ 1840.176331][ T28] Rebooting in 86400 seconds..