last executing test programs: 2m7.46782177s ago: executing program 4 (id=217): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3", 0x15}, 0x48, 0xffffffffffffffff) keyctl$negate(0x4, r5, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f0000000480), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x2, 0x6, 0x67, 0x173}, {0x7, 0x6, 0x0, 0x2}, {0x8000, 0x3, 0x40, 0x9}, {0x9bd, 0x4, 0x7, 0xd96}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file1\x00') 2m3.663134135s ago: executing program 4 (id=231): r0 = syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000007080)={0x0, 0x0, &(0x7f0000007040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x6cfc}, 0x1, 0x0, 0x0, 0x40}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x3, &(0x7f0000000180)) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffc9c) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'tunl0\x00', 0x3ff, 0x800000}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x80010000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m2.673355358s ago: executing program 4 (id=233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x7) ioctl$TCSETA(r2, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffd}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m53.374534943s ago: executing program 4 (id=251): socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m52.200055365s ago: executing program 4 (id=255): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000270c0)=""/102400, 0x19000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002800)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x1c, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}]}, 0x1c}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x11, 0x1, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x0, 0x62, 0x0, 0x0, 0x6, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe5c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x128, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x0, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x40, 0x5, 0xf8f, 'snmp_trap\x00', {0x8}}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff000000], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x24b9, 0x8001, 0x1a, 0x6, 0x9, 0x8, 0x5, 0x18, 0xd8}, {0x7}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m51.312713767s ago: executing program 4 (id=257): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) socket$vsock_stream(0x28, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m36.217499404s ago: executing program 32 (id=257): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) socket$vsock_stream(0x28, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m24.804701578s ago: executing program 2 (id=311): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x20000004, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xffffff74, 0x0, 0x1}) 1m23.544536849s ago: executing program 2 (id=313): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xfff5, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x9, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m23.264787198s ago: executing program 2 (id=315): syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x76, &(0x7f0000000000)=@string={0x76, 0x3, "8385764c10bb5ad361dd08f62e320122cb37341ba57206c246966b32bb75d07333da8db8d88a685243fd9e41b5b87e43b86a8fd0a17b71072b9e85f1685a3282f5f549c5233465211bf158e908854aa1aae3e6806ab9439332d9a18c106f1cf5b3f3b67a04ef5f978d4e2038f162e7d50f12a8ef"}}, {0x7b, &(0x7f0000000280)=@string={0x7b, 0x3, "0bf8492bfb3f05bbfb56ccf013fa76a863b93f7f2cfc46c2da090ad892699873d0c2bd1615d9f86d8cdf41cedb369ca6defd76b58386a45451ebcdc8bbeb9cb86b6c6a3b0f3f3b8b6cd86fcd74086bdbf5efee2be0c97b177017776bd7626c30bc47b25b6c76f9c63999fe83c2c991681c48c5a0b0c3c040ad"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x240a}}, {0x0, 0x0}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 1m20.228553943s ago: executing program 2 (id=323): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) r4 = dup2(r2, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x5, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0xf2, '\x00', 0x0, r4, 0x0, 0x2000001, 0x0, 0x200000000000000}, 0x50) 1m18.276984976s ago: executing program 2 (id=328): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) 1m18.153798899s ago: executing program 3 (id=331): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x5, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}, @struct={0xb, 0x3, 0x0, 0x4, 0x0, 0xffffff44, [{0x7, 0x4, 0x1}, {0x3, 0x2, 0x4}, {0xe, 0x1, 0x7}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x7, [{0x5, 0xfffffff9, 0x26}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0x6, 0x5}, {0xb, 0x5}, {0xd, 0x3}, {}, {0x2, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x51, 0x0]}}, &(0x7f00000004c0)=""/245, 0xdd, 0xf5, 0x1, 0x1, 0x10000}, 0x28) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xbf3}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(r5, 0x200004) sendfile(0xffffffffffffffff, r5, 0x0, 0x80001d00c0d1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x6, 0x7f, 0xfffffffc, 0x5, 0x7, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0xffffffff, 0x1, 0x7, 0x101, 0x0, 0x2, 0x8, 0x8000, 0x2, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x63e, 0x5, 0xb, 0xfffffffe, 0x0, 0xfffffff8]}) 1m16.272023404s ago: executing program 3 (id=333): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r0, r0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x5, 0x2, 0x4000, 0x2000, &(0x7f0000228000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4b, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r8, 0x0) 1m14.916577315s ago: executing program 2 (id=336): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000140)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m14.755972021s ago: executing program 33 (id=336): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000140)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m14.632838674s ago: executing program 3 (id=339): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000006c0)={0x2, {0x1, 0x6, 0x58c3, 0xb}, {0x5, 0x8, 0x3, 0x5}, {0x7, 0x9}}) 1m14.541891734s ago: executing program 3 (id=341): socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.604750001s ago: executing program 3 (id=343): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000005c0)) 1m13.449725677s ago: executing program 3 (id=344): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x5, 0x4, 0x8a0f, 0x7fff, 0x200]}, &(0x7f0000000080)=0x78) 58.260561503s ago: executing program 34 (id=344): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x5, 0x4, 0x8a0f, 0x7fff, 0x200]}, &(0x7f0000000080)=0x78) 19.26847484s ago: executing program 0 (id=473): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r0 = getpid() prlimit64(r0, 0x9, &(0x7f0000000140)={0x11f5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r6, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r7, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000040)={0x4, 0x7, 0x3}) 12.364477016s ago: executing program 0 (id=484): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) shutdown(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) listen(0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0xfaff, 0x4003, &(0x7f0000000000)=0x106, 0x5, 0x2) 12.049944539s ago: executing program 6 (id=485): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000200), 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setreuid(0xffffffffffffffff, 0xee01) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 11.972849787s ago: executing program 5 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000080) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) 11.260263671s ago: executing program 5 (id=488): r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) sendmmsg$unix(r4, 0x0, 0x0, 0x2400c000) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xd0, &(0x7f0000000540)=""/208}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$qrtr(r0, 0x0, 0x0) 10.188502932s ago: executing program 1 (id=490): socket(0xa, 0x3, 0x3a) r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r0, 0x409, 0x3f) socket$kcm(0x11, 0x8, 0x300) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000f0000000300000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000057e3ff3b39b5da8331a36e861800"/31], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1f7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000001000/0x3000)=nil, 0x1000, 0x1, 0x10, r3, 0x82000000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000040)=0xad59) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000020, r1, &(0x7f00000000c0)='./file0\x00') r4 = fsopen(&(0x7f0000000340)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='$\b\x003so', &(0x7f00000008c0)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<\xa5\xdd\x97\xa2\xd6\aE\xc8.\b\xba9\xf8g\xef#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xab\xd5P\xa6^\xf0\xb7\xf7\xd4\x1c\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@8\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14;\x1aa\xf3\xa1@\xc7%-\x1c\x8d\xa6w\x1a\xd5Y<\x91\x85\x04\xee]y\xecng\xdb]a\xa4\x1e}x\x85\x13\xf0\x8f\xa0\xacB\xb87\x18\x00\xeb]\x84\xf2\xee\xab\xc4\xe7\ase\bl\xccn\xbbZ\x9e\xea\x87\xc3\xe3\xe4\x06\x97X\xded=\xfa04T\xa1\x04;\xa0\xaa\xe6\xb6\xffY\xa3;1\xb52\xf9Hd;\xba?\xb4\xc8r\xfe\x8b\x90!\xc1\x01\xf5\x19\x9c\xd36lb\xae\xe5B0\xc0_\xec!\xca\x1e\xf5\xeaS$5\xa2D\x10y\xfc\xea\xcd\x8f\xb3\t\xceRR3\xf1\xc7\xb6\xd3\xb7p~\x8c\xdc\xfb\xe8\xc5\xe6\x9b^\xf2\x94\n@{\xcbu&>\xc4\x1a\xc2cW\xe6%\xa4#\x8dx\xb2\xceM\x81\xf9\xde\xc9\x0f\xfcD\x12{\xea\xc6Yc\x99\xa1\x90lT]l\xaa\xbe\x85\bl\x82\t\x87\b\x0f\xdc\\\xfd\xaf0\xb0g\x83V\x90]^\x8d\xd9Xe\xd6\xf2y\xfe\x19E2+M\xfb\xc7\x82\xafl\x14\x96V\x97>\xc9\xfa\x84\xa9\xc1\xb3\xffep\x95\x1b Nf\'\x10\xbaX0\x91\xa3nOQ+\x9d\x18\x12>F\xa5\xca\xf2\x9a\\b\x0f\xd2\xd7if\x14&\xe3,\x1d\xe9\xc9A2\xe4\xe6\x9a\xfe\nJ\xd6\x84\x91\xafK\xea\x9e\x19N\xe9\xe0\xbf\xfc\x03\xdc\xda\xf7^\xf6\xb6k\r\x97n\tRs\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdc\xce\xaf\tO&\xa2\xc7\xff\xc5\x0f\xd8\x93\x89:wps\v\xdbWP\xfa5\x91\x9e\xc6\xbd\x83\x83\xe3\x1a@\xcb\r\x7f\x15\xd3\xabre\x82\x8c\xa5r\xf2S\n<\xe3\xbc\x9efet-\x7f\x81A\xba\xf3U\xc4\xba\xbb\x873F\x9d\xc8\xf3\xb9Xx3U^\xf0tj\xeb\x9a\xce\x9d\xdb\xeb\xfd\x9a\x9b', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0x7c, 0x3ff, 0x7, 0xb, 0xf, "03f30102000038f4"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) 9.371039197s ago: executing program 5 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\x00'], 0x40, 0x4040800}}], 0x1, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x48}}, 0x4020000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4081) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x6, 0x6, 0xcb18, 0x1080, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x7}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0xffffffffffffff80, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 8.342809394s ago: executing program 1 (id=493): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fcntl$setlease(r0, 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100, 0x9, 0x2, 0xfffe}, 'syz1\x00', 0x3b}) ioctl$UI_DEV_CREATE(r4, 0x5501) 8.060804903s ago: executing program 0 (id=495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mount(0x0, 0x0, 0x0, 0x3000005, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) r2 = open(0x0, 0x0, 0x0) getdents(r2, &(0x7f0000000540)=""/55, 0x37) r3 = socket$kcm(0x29, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') sync_file_range(r4, 0x3fffc000000, 0xb438, 0x7) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 7.788700141s ago: executing program 5 (id=496): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2401000028d56e5471f25bb11e77b69a0a4eb1ebba1a1a3320db60edb49a912563c0453bf3b71eab8402e1ef123584f30a3ccc35a3f4d3c3bbf745f2f9bc3bffee24279dbd010400ea78eeb6316e568c9ed84f67490a9ee062e9f624085014ac9b7b523d18da72de7bac412c78a08ea61bcc795a029d9f63782c4b14650d0bfa285ecdd880a7f72b9ce9c0276e384566f54fe54d", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x240, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0xb50, 0x2, 0xfffffdfd}, {0xf4ef, 0xfffffffe}, {0x4, 0x4}, 0x1, 0x100, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x16e3, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) 7.234578289s ago: executing program 6 (id=498): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0340110800450000380000000000019078971e0001ac1414aa097215fa120002282520000000000000332f00007f000001ffffffff000088beffff00"/70], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 5.97520497s ago: executing program 7 (id=500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x1c62, 0x2, 0x7}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) 5.712955127s ago: executing program 1 (id=501): r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) sendmmsg$unix(r4, 0x0, 0x0, 0x2400c000) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xd0, &(0x7f0000000540)=""/208}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$qrtr(r0, 0x0, 0x0) 4.830953398s ago: executing program 5 (id=502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 4.33276095s ago: executing program 5 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, 0x0, 0x0}, 0x94) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) 4.252445809s ago: executing program 7 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000230001030ec00000fcdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x20002844}, 0x0) 4.175584416s ago: executing program 1 (id=505): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close_range(r0, 0xffffffffffffffff, 0x0) 3.988934496s ago: executing program 6 (id=506): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x8400) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000100)={0x2, 0xf37}) 3.823198263s ago: executing program 6 (id=507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}}, 0x0) 3.822432813s ago: executing program 7 (id=508): syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), 0x0, &(0x7f0000000340), {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x20000004, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) socket$kcm(0x10, 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xffffff74, 0x0, 0x1}) 3.769360879s ago: executing program 0 (id=509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x98, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004004) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101300, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) 3.5640475s ago: executing program 1 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315842, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000180)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000100)={{@host, 0x80000001}, 0x1, 0x0, 0x3}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0x5, 0x5}}, 0xe8) 2.748965074s ago: executing program 7 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2008050}, 0x0) 2.572792813s ago: executing program 6 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r4, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30b8fb058ec066b8000000000f23d80f21f86635000000500f23f8660fc77706660f38800a260f23a5360fc7350f01c50f9dcff2aa", 0x44}], 0x1, 0x51, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r12, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x0, 0x101000, 0x8}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.515933129s ago: executing program 0 (id=513): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) shutdown(r0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x3b) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000002, 0x0) 2.188927992s ago: executing program 7 (id=514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) shutdown(r0, 0x1) 534.051724ms ago: executing program 1 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 163.403383ms ago: executing program 7 (id=516): r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) sendmmsg$unix(r3, 0x0, 0x0, 0x2400c000) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xd0, &(0x7f0000000540)=""/208}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$qrtr(r0, 0x0, 0x0) 16.290798ms ago: executing program 6 (id=517): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @private=0xa010102}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x54) 0s ago: executing program 0 (id=518): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000040) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[], 0xa) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) dup(r4) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSTI(r3, 0x5412, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) sendfile(r5, r5, 0x0, 0x200000) kernel console output (not intermixed with test programs): to_bridge: link becomes ready [ 58.754080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.765759][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.772837][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.781100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.796890][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.808960][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.837743][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.849488][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.863197][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.873263][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.882472][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.892166][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.901714][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.911345][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.920786][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.930095][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.938667][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.961126][ T4181] device veth0_macvtap entered promiscuous mode [ 58.972249][ T4181] device veth1_macvtap entered promiscuous mode [ 58.981502][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.990989][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.000581][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.011044][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.019390][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.028158][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.062268][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.071237][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.089557][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.110073][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.130077][ T4180] device veth0_vlan entered promiscuous mode [ 59.138756][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.157906][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.173911][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.183415][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.192955][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.201487][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.216531][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.224405][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.232944][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.241909][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.251136][ T4187] device veth0_vlan entered promiscuous mode [ 59.284112][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.292774][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.309312][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.320578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.333462][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.349042][ T4187] device veth1_vlan entered promiscuous mode [ 59.358657][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.378293][ T4180] device veth1_vlan entered promiscuous mode [ 59.388646][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.404061][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.420843][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.429928][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.463859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.472495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.482439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.491748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.499995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.508710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.533655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.543282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.562721][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.611116][ T4180] device veth0_macvtap entered promiscuous mode [ 59.620841][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.630093][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.640403][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.649647][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.659045][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.667957][ T4187] device veth0_macvtap entered promiscuous mode [ 59.683593][ T4180] device veth1_macvtap entered promiscuous mode [ 59.692152][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.708564][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.721930][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.742530][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.752524][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.761121][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.770864][ T4187] device veth1_macvtap entered promiscuous mode [ 59.797572][ T4182] device veth0_vlan entered promiscuous mode [ 59.818245][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.831949][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.843787][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.869273][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.881105][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.897480][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.908440][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.920169][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.932131][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.942710][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.952085][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.962507][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.978022][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.990187][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.002633][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.025614][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.036798][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.048184][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.058932][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.070202][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.089270][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.098614][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.108096][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.119014][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.128136][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.136904][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.149034][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.158914][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.167922][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.178383][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.190638][ T4182] device veth1_vlan entered promiscuous mode [ 60.202505][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.211441][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.220764][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.229577][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.251945][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.260414][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.272262][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.321318][ T4193] device veth0_vlan entered promiscuous mode [ 60.340319][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.349243][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.358400][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.366594][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.399365][ T4193] device veth1_vlan entered promiscuous mode [ 60.422065][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.432778][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.445554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.453965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.465163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.473905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.482904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.493656][ T4182] device veth0_macvtap entered promiscuous mode [ 60.512680][ T4193] device veth0_macvtap entered promiscuous mode [ 60.522362][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 60.529568][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 60.533470][ T4259] Bluetooth: hci0: command 0x040f tx timeout [ 60.542390][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 60.555241][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.563468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.574396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.602548][ T4193] device veth1_macvtap entered promiscuous mode [ 60.605338][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 60.613013][ T4182] device veth1_macvtap entered promiscuous mode [ 60.637786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.651109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.662253][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.685483][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.706980][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.745484][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.756372][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.770002][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.784414][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.792790][ T4289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.800091][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.827742][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.851797][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.864069][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.901744][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.913890][ T4289] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 60.924441][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.934020][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.936565][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.948271][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.952927][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.967315][ T4289] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 60.970028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.994533][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.009242][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.019494][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.040001][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.053750][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.076554][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.086603][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.097551][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.122694][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.391542][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.412226][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.430035][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.562139][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.573316][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.583756][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.596306][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.606717][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.617378][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.684114][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.697548][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.734838][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.736672][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.745727][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.853904][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.866747][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.878007][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.889263][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.900041][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.911818][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.930803][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.948642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.965434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.974515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.992329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.002985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.018007][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.028803][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.040186][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.051699][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.077296][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.095278][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.115860][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.136729][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.605411][ T4223] Bluetooth: hci3: command 0x0419 tx timeout [ 62.633108][ T4223] Bluetooth: hci0: command 0x0419 tx timeout [ 63.168049][ T4223] Bluetooth: hci1: command 0x0419 tx timeout [ 63.182260][ T4223] Bluetooth: hci4: command 0x0419 tx timeout [ 63.251421][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 63.273728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 63.469131][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 63.555681][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.556024][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.556800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.613453][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.613541][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.872941][ T26] audit: type=1326 audit(1766379195.451:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.0.1" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa1a06a749 code=0x0 [ 63.894310][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.410420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.483283][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.535198][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.595717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.608505][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 64.618206][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 64.634695][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 64.706426][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.825066][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.516935][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.533981][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.564392][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.628611][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.657885][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.784961][ T1110] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 65.844202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.374400][ T4351] sp0: Synchronizing with TNC [ 69.303757][ T1110] usb 1-1: unable to get BOS descriptor set [ 69.584796][ T1110] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 69.594772][ T1110] usb 1-1: can't read configurations, error -71 [ 71.427765][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.795669][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 74.801190][ T4406] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 74.833349][ T4406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 75.214742][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.585177][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.614230][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 75.814709][ T4223] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.968791][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.998731][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.454496][ T7] usb 3-1: Product: syz [ 76.464327][ T7] usb 3-1: Manufacturer: syz [ 76.469230][ T7] usb 3-1: SerialNumber: syz [ 76.475168][ T4223] usb 4-1: not running at top speed; connect to a high speed hub [ 77.255162][ T4223] usb 4-1: config 5 has an invalid interface number: 38 but max is 1 [ 77.263476][ T4223] usb 4-1: config 5 has an invalid interface number: 67 but max is 1 [ 77.281014][ T4223] usb 4-1: config 5 has no interface number 0 [ 77.288807][ T4223] usb 4-1: config 5 has no interface number 1 [ 77.314462][ T4223] usb 4-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 77.336592][ T4223] usb 4-1: config 5 interface 38 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 77.370717][ T4223] usb 4-1: config 5 interface 38 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 77.396707][ T4223] usb 4-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 77.436990][ T4223] usb 4-1: config 5 interface 38 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 77.468350][ T4223] usb 4-1: config 5 interface 38 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 77.501497][ T4223] usb 4-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x8, skipping [ 77.549869][ T4223] usb 4-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x6, skipping [ 77.579833][ T4223] usb 4-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x2, skipping [ 77.595997][ T4295] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 77.617084][ T4223] usb 4-1: config 5 interface 67 altsetting 133 has a duplicate endpoint with address 0x7, skipping [ 77.657158][ T4223] usb 4-1: config 5 interface 38 has no altsetting 0 [ 77.674132][ T4223] usb 4-1: config 5 interface 67 has no altsetting 0 [ 77.774910][ T7] cdc_ncm 3-1:1.0: bind() failure [ 77.785627][ T7] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 77.797815][ T7] cdc_ncm 3-1:1.1: bind() failure [ 77.826315][ T7] usb 3-1: USB disconnect, device number 2 [ 77.848214][ T4223] usb 4-1: New USB device found, idVendor=1557, idProduct=0002, bcdDevice= 5.96 [ 77.885040][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.903399][ T4223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.923744][ T4223] usb 4-1: Product: syz [ 77.928010][ T4223] usb 4-1: Manufacturer: syz [ 77.953401][ T4223] usb 4-1: SerialNumber: syz [ 77.985045][ T4295] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 77.986460][ T4421] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.994133][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.030466][ T4295] usb 1-1: config 0 descriptor?? [ 78.076026][ T4295] cp210x 1-1:0.0: cp210x converter detected [ 78.254945][ T13] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 78.264858][ T13] usb 5-1: config 0 has no interface number 0 [ 78.281519][ T13] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 78.296527][ T4421] udc-core: couldn't find an available UDC or it's busy [ 78.314802][ T4421] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.323628][ T13] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.508100][ T4223] usb 4-1: USB disconnect, device number 2 [ 78.522358][ T13] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 78.546251][ T4295] usb 1-1: cp210x converter now attached to ttyUSB0 [ 78.564272][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.583528][ T13] usb 5-1: Product: syz [ 78.610160][ T26] audit: type=1326 audit(1766379210.191:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 78.632573][ T13] usb 5-1: Manufacturer: syz [ 78.650054][ T13] usb 5-1: SerialNumber: syz [ 78.658022][ T13] usb 5-1: config 0 descriptor?? [ 78.663850][ T26] audit: type=1326 audit(1766379210.191:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 78.688388][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.748597][ T4455] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 78.790284][ T26] audit: type=1326 audit(1766379210.251:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 78.800451][ T4295] usb 1-1: USB disconnect, device number 4 [ 78.944866][ T26] audit: type=1326 audit(1766379210.251:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 78.946452][ T13] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 78.971325][ T26] audit: type=1326 audit(1766379210.251:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 79.105104][ T26] audit: type=1326 audit(1766379210.251:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 79.123389][ T4295] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 79.392595][ T13] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 79.433646][ T26] audit: type=1326 audit(1766379210.251:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 79.437013][ T4295] cp210x 1-1:0.0: device disconnected [ 79.509285][ T26] audit: type=1326 audit(1766379210.251:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 79.569500][ T26] audit: type=1326 audit(1766379210.251:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 79.622008][ T26] audit: type=1326 audit(1766379210.251:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df981d749 code=0x7ffc0000 [ 79.755037][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.205771][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.217272][ T23] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.241779][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.259940][ T23] usb 4-1: config 0 descriptor?? [ 80.297314][ T4295] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 80.634819][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 80.642093][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 80.668078][ T23] usb 4-1: USB disconnect, device number 3 [ 80.671690][ T4295] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 80.709487][ T4295] usb 1-1: config 0 has no interface number 0 [ 80.749423][ T4295] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 80.771357][ T4295] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 80.789598][ T4295] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 80.803696][ T4295] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.822885][ T4295] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 80.833004][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.864892][ T4295] usb 1-1: config 0 descriptor?? [ 80.875449][ T1110] usb 5-1: USB disconnect, device number 2 [ 80.885174][ T4480] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.892360][ T4480] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.905827][ T1110] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 80.955705][ T1110] cyberjack 5-1:0.69: device disconnected [ 80.973977][ T4295] ldusb 1-1:0.55: Interrupt in endpoint not found [ 81.134726][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.354101][ T4273] usb 1-1: USB disconnect, device number 5 [ 81.375056][ T4223] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.404982][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 81.579158][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.592519][ T23] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 81.602474][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.620271][ T23] usb 4-1: config 0 descriptor?? [ 81.654566][ T1107] cfg80211: failed to load regulatory.db [ 81.778803][ T4505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.56'. [ 81.885338][ T4223] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 81.894870][ T4223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.920942][ T4223] usb 2-1: config 0 descriptor?? [ 82.044909][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.064827][ T4223] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 82.207902][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.215607][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.223426][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.231096][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.248840][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.267681][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.278297][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.286153][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.294824][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.305069][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.315588][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.326162][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.336365][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.348380][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.356546][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.365938][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.375261][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.383684][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.392598][ T4223] gp8psk: usb in 128 operation failed. [ 82.399521][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.407632][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.415526][ T4223] gp8psk: usb in 137 operation failed. [ 82.421311][ T4223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.431189][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.440240][ T21] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 82.451528][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.462375][ T21] usb 3-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 82.472081][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.482950][ T4223] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 82.492363][ T21] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 82.502038][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.513506][ T4223] usb 2-1: media controller created [ 82.519716][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.531352][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.560238][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.573091][ T4223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.587519][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.598566][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.615144][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.623750][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.631791][ T4223] gp8psk_fe: Frontend attached [ 82.647422][ T4223] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 82.661669][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.670385][ T4223] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 82.686181][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.693724][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.712710][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.740794][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.775235][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.808153][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.834474][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.918169][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.926371][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.934008][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.942892][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.951179][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.959980][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.967532][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.975716][ T4223] gp8psk: usb in 138 operation failed. [ 82.981409][ T4223] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 82.991619][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 82.999475][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.007357][ T4223] gp8psk: found Genpix USB device pID = 203 (hex) [ 83.018186][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.045063][ T4223] usb 2-1: USB disconnect, device number 2 [ 83.093689][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.139954][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.272292][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.305054][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.338242][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.370896][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.408491][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.449248][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.461160][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.475168][ T4223] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 83.490157][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.505965][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.514798][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.522839][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.530655][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.539652][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.549612][ T4502] Zero length message leads to an empty skb [ 83.562504][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.571012][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.621942][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.654330][ T4517] tipc: Started in network mode [ 83.660516][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.681482][ T4517] tipc: Node identity eaf2b967b57, cluster identity 4711 [ 83.697406][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.710944][ T4517] tipc: Enabled bearer , priority 0 [ 83.721517][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.732866][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.846060][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.854383][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.862574][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.870510][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.879662][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.882482][ T4523] device syzkaller0 entered promiscuous mode [ 83.917034][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 83.930144][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.656889][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.665121][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.672614][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.680636][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.688604][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.696635][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.704168][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.711626][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.719110][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.726665][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.734179][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.741640][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.749168][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.759239][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.766831][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.774526][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.782523][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.790526][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.799620][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.807160][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.814562][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.822188][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.830158][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.838916][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.846397][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.853895][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.861421][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.868940][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.876390][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.883866][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.891305][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.899577][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.907315][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.914763][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.922373][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.929912][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.937383][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.945207][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.953020][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.960673][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.968115][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.975655][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.983155][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.991330][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 84.999483][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.007153][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.014676][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.022189][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.030074][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.037619][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.045277][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.052849][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.060285][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.067995][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.076454][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.084054][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.091519][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.099306][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.108053][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.115740][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.123367][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.130958][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.138402][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.146084][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.153826][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.161535][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.169459][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.177370][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.185120][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.192835][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.200402][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.208649][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.216564][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.224051][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.231736][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.239362][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.246845][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.254360][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.261838][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.269304][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.277056][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.284874][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.292288][ T23] hid-generic 0003:0458:5016.0001: unknown main item tag 0x0 [ 85.314555][ T23] hid-generic 0003:0458:5016.0001: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 85.334528][ T23] usb 4-1: USB disconnect, device number 4 [ 85.411523][ T4516] tipc: Resetting bearer [ 85.442757][ T4223] usb 3-1: USB disconnect, device number 3 [ 85.623324][ T4516] tipc: Disabling bearer [ 86.249073][ T1107] tipc: Node number set to 1602402663 [ 86.409645][ T4532] fido_id[4532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 86.478653][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.755306][ T1110] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.114724][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 87.176645][ T4550] udc-core: couldn't find an available UDC or it's busy [ 87.183676][ T4550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.525989][ T4273] Bluetooth: hci5: command 0x1003 tx timeout [ 88.572459][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 88.699099][ T4566] input: syz0 as /devices/virtual/input/input5 [ 88.716510][ T4568] raw_sendmsg: syz.0.73 forgot to set AF_INET. Fix it! [ 88.733968][ T4566] input: failed to attach handler leds to device input5, error: -6 [ 88.791999][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 88.792015][ T26] audit: type=1326 audit(1766379220.371:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe8f69749 code=0x7ffc0000 [ 88.872906][ T26] audit: type=1326 audit(1766379220.401:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f5fe8f69749 code=0x7ffc0000 [ 88.972296][ T26] audit: type=1326 audit(1766379220.411:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe8f69749 code=0x7ffc0000 [ 89.052170][ T4575] device wlan0 entered promiscuous mode [ 89.053579][ T26] audit: type=1326 audit(1766379220.411:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5fe8f69749 code=0x7ffc0000 [ 89.114735][ T4273] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.154715][ T26] audit: type=1326 audit(1766379220.411:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe8f69749 code=0x7ffc0000 [ 89.228301][ T26] audit: type=1326 audit(1766379220.411:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5fe8f69749 code=0x7ffc0000 [ 89.343855][ T26] audit: type=1326 audit(1766379220.411:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe8f69749 code=0x7ffc0000 [ 89.414797][ T26] audit: type=1326 audit(1766379220.411:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe8f69749 code=0x7ffc0000 [ 89.504885][ T4273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.528855][ T4273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.644856][ T4273] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 89.667511][ T4273] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 89.724955][ T4273] usb 5-1: Manufacturer: syz [ 89.739503][ T4273] usb 5-1: config 0 descriptor?? [ 89.765248][ T1110] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.834838][ T1110] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 89.842561][ T1110] usb 2-1: can't read configurations, error -71 [ 90.046176][ T4593] netlink: 'syz.3.83': attribute type 4 has an invalid length. [ 90.631141][ T4599] lo speed is unknown, defaulting to 1000 [ 90.632062][ T1107] Bluetooth: hci5: command 0x1001 tx timeout [ 90.638033][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 90.689882][ T4599] lo speed is unknown, defaulting to 1000 [ 90.708154][ T4599] lo speed is unknown, defaulting to 1000 [ 90.998205][ T4295] lo speed is unknown, defaulting to 1000 [ 91.011165][ T4599] infiniband syz0: set down [ 91.102000][ T4599] infiniband syz0: added lo [ 91.125426][ T4599] infiniband syz0: Couldn't open port 1 [ 91.695058][ T4612] atomic_op ffff88805cbae198 conn xmit_atomic 0000000000000000 [ 91.725540][ T4273] uclogic 0003:256C:006D.0002: v1 buttonpad probing failed: -71 [ 91.738684][ T4273] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 91.746801][ T4273] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 91.775022][ T4273] usb 5-1: USB disconnect, device number 3 [ 92.373790][ T4599] RDS/IB: syz0: added [ 92.459947][ T4617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.175190][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 93.181884][ T4599] smc: adding ib device syz0 with port count 1 [ 93.243790][ T4599] smc: ib device syz0 port 1 has pnetid [ 93.270925][ T4619] comedi comedi3: comedi_config --init_data is deprecated [ 93.279513][ T4273] lo speed is unknown, defaulting to 1000 [ 93.294075][ T4599] lo speed is unknown, defaulting to 1000 [ 93.372405][ T4599] lo speed is unknown, defaulting to 1000 [ 93.512096][ T4599] lo speed is unknown, defaulting to 1000 [ 93.654884][ T4231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.682833][ T4599] lo speed is unknown, defaulting to 1000 [ 93.709096][ T4629] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 93.778177][ T4629] pit: kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 93.795569][ T4629] pit: kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 93.982159][ T4599] lo speed is unknown, defaulting to 1000 [ 94.005543][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 94.022040][ T4629] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 94.034062][ T4629] pit: kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 94.049571][ T4629] pit: kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 94.063134][ T4629] pit: kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 94.082854][ T4629] pit: kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 94.096269][ T4629] pit: kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 94.115967][ T4629] pit: kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 94.345420][ T4231] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 94.443467][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.493864][ T4231] usb 5-1: Product: syz [ 94.508211][ T4231] usb 5-1: Manufacturer: syz [ 94.518429][ T4231] usb 5-1: SerialNumber: syz [ 94.642595][ T4231] usb 5-1: config 0 descriptor?? [ 94.811227][ T4231] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 95.484837][ T4231] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 95.495122][ T4231] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 95.542334][ T4231] usb 5-1: USB disconnect, device number 4 [ 95.649894][ T4655] comedi comedi3: fl512: I/O port conflict (0xa,16) [ 95.718090][ T4658] netlink: 13 bytes leftover after parsing attributes in process `syz.4.103'. [ 97.169638][ T4677] siw: device registration error -23 [ 97.496090][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.503589][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.538786][ T4675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.583718][ T4673] ceph: No mds server is up or the cluster is laggy [ 97.595025][ T4273] libceph: connect (1)[c::]:6789 error -22 [ 97.610562][ T4273] libceph: mon0 (1)[c::]:6789 connect error [ 98.243297][ T1110] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.725078][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 99.484977][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 99.654898][ T1110] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 99.691582][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.722740][ T1110] usb 2-1: Product: syz [ 99.755029][ T1110] usb 2-1: Manufacturer: syz [ 99.759994][ T1110] usb 2-1: SerialNumber: syz [ 100.195305][ T1110] usb 2-1: config 0 descriptor?? [ 100.246125][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.253779][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.275004][ T4703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.308134][ T4702] ceph: No mds server is up or the cluster is laggy [ 100.403836][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 100.454765][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 100.599741][ T4696] ODEBUG: Out of memory. ODEBUG disabled [ 101.948660][ T4295] usb 2-1: USB disconnect, device number 5 [ 102.236641][ T4749] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 103.608049][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 103.625046][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 104.444678][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.684648][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 104.754700][ T4273] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 104.904750][ T13] usb 2-1: config 0 has no interfaces? [ 105.094837][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 105.094871][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.094885][ T13] usb 2-1: Product: syz [ 105.094894][ T13] usb 2-1: Manufacturer: syz [ 105.094903][ T13] usb 2-1: SerialNumber: syz [ 105.096044][ T13] usb 2-1: config 0 descriptor?? [ 105.294983][ T4273] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.348893][ T4273] usb 1-1: not running at top speed; connect to a high speed hub [ 105.434885][ T4273] usb 1-1: config 0 has an invalid interface number: 149 but max is 0 [ 105.435024][ T4273] usb 1-1: config 0 has no interface number 0 [ 105.435192][ T4273] usb 1-1: config 0 interface 149 has no altsetting 0 [ 105.883840][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.885073][ T4273] usb 1-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=f8.57 [ 105.885103][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.885125][ T4273] usb 1-1: Product: syz [ 105.885140][ T4273] usb 1-1: Manufacturer: syz [ 105.885156][ T4273] usb 1-1: SerialNumber: syz [ 105.889657][ T4273] usb 1-1: config 0 descriptor?? [ 105.938718][ T4757] udc-core: couldn't find an available UDC or it's busy [ 105.938732][ T4757] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.963391][ T1110] usb 2-1: USB disconnect, device number 6 [ 106.114757][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 106.350940][ T4766] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.498375][ T4766] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.684858][ T13] usb 4-1: config 10 has an invalid interface number: 93 but max is 0 [ 106.717144][ T13] usb 4-1: config 10 has no interface number 0 [ 107.455199][ T13] usb 4-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08 [ 107.504251][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.569578][ T13] usb 4-1: Product: syz [ 108.300095][ T13] usb 4-1: Manufacturer: syz [ 108.306555][ T13] usb 4-1: SerialNumber: syz [ 108.645382][ T13] usb 4-1: can't set config #10, error -71 [ 108.720747][ T13] usb 4-1: USB disconnect, device number 5 [ 109.825474][ T4273] usb 1-1: bad CDC descriptors [ 109.849094][ T4273] usb 1-1: USB disconnect, device number 6 [ 111.656928][ T4273] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.654641][ T4273] usb 1-1: Using ep0 maxpacket: 32 [ 112.664704][ T4295] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.772490][ T4868] loop5: detected capacity change from 0 to 7 [ 112.784886][ T4273] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 112.896895][ T4273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.913334][ T4868] Dev loop5: unable to read RDB block 7 [ 112.919471][ T4295] usb 4-1: Using ep0 maxpacket: 8 [ 113.003811][ T4868] loop5: AHDI p1 p2 p3 [ 113.033020][ T4868] loop5: partition table partially beyond EOD, truncated [ 113.044899][ T4295] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.063321][ T4295] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.078328][ T4273] usb 1-1: config 0 descriptor?? [ 113.099445][ T4273] usb 1-1: can't set config #0, error -71 [ 113.108694][ T4868] loop5: p1 start 1601398130 is beyond EOD, truncated [ 113.121732][ T4295] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 113.146281][ T4273] usb 1-1: USB disconnect, device number 7 [ 113.187967][ T4868] loop5: p2 start 1702059890 is beyond EOD, truncated [ 113.204671][ T4295] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 113.369736][ T4295] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.464709][ T4295] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.519244][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.682842][ T4295] usbtmc: probe of 4-1:16.0 failed with error -22 [ 115.014890][ T4295] usb 4-1: USB disconnect, device number 6 [ 115.364889][ T1110] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.644692][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 115.924909][ T1110] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 116.916380][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.987395][ T1110] usb 5-1: Product: syz [ 116.991595][ T1110] usb 5-1: Manufacturer: syz [ 117.004673][ T1110] usb 5-1: SerialNumber: syz [ 117.024074][ T1110] usb 5-1: config 0 descriptor?? [ 117.067843][ T1110] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 117.705879][ T4913] process 'syz.0.169' launched './file0' with NULL argv: empty string added [ 117.995841][ T1110] gspca_ov534_9: reg_w failed -110 [ 119.994650][ T1110] gspca_ov534_9: Unknown sensor 0000 [ 119.994717][ T1110] ov534_9: probe of 5-1:0.0 failed with error -22 [ 120.087185][ T1110] usb 5-1: USB disconnect, device number 5 [ 120.128293][ T4935] capability: warning: `syz.2.175' uses deprecated v2 capabilities in a way that may be insecure [ 122.894698][ T4223] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 123.994979][ T4223] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 124.003721][ T4223] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.015325][ T4223] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.024471][ T4223] usb 1-1: config 1 has no interface number 1 [ 124.032084][ T4223] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 124.205262][ T4223] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.214504][ T4223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.287779][ T4223] usb 1-1: Product: syz [ 124.301045][ T4223] usb 1-1: Manufacturer: syz [ 124.312464][ T4223] usb 1-1: SerialNumber: syz [ 124.354911][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.895412][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 125.140385][ T13] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 125.164757][ T4978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.187908][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.208347][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.220134][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.230893][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.253547][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.587725][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.745064][ T4223] usb 1-1: MIDIStreaming interface descriptor not found [ 125.876240][ T4223] usb 1-1: USB disconnect, device number 8 [ 125.925476][ T13] usb 5-1: usb_control_msg returned -32 [ 125.931414][ T13] usbtmc 5-1:16.0: can't read capabilities [ 126.057709][ T4987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.190'. [ 126.149539][ T4987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.190'. [ 126.304926][ T4989] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 126.347417][ T13] usb 5-1: USB disconnect, device number 6 [ 128.143464][ T5000] sched: RT throttling activated [ 128.571188][ T4273] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 129.454677][ T1110] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 129.518120][ T4273] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.322751][ T4273] usb 4-1: config 0 has no interface number 0 [ 130.333896][ T4273] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.476501][ T4273] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 131.098007][ T4273] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.189310][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.229982][ T4273] usb 4-1: config 0 descriptor?? [ 131.234789][ T1110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.264921][ T4273] usb 4-1: can't set config #0, error -71 [ 131.352805][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 131.384464][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.414829][ T4273] usb 4-1: USB disconnect, device number 7 [ 132.774733][ T1110] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 132.783921][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 134.052340][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.096525][ T1110] usb 2-1: config 0 descriptor?? [ 134.115164][ T1110] usb 2-1: can't set config #0, error -71 [ 134.145536][ T1110] usb 2-1: USB disconnect, device number 7 [ 135.128467][ T5059] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.211' sets config #383 [ 135.295969][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 135.562519][ T5062] device bridge_slave_1 left promiscuous mode [ 135.670865][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.748944][ T5062] device bridge_slave_0 left promiscuous mode [ 135.818047][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.587591][ T5065] tipc: Enabled bearer , priority 0 [ 136.588104][ T5066] device syzkaller0 entered promiscuous mode [ 136.671631][ T5066] tipc: Resetting bearer [ 136.732714][ T5066] tipc: Disabling bearer [ 137.758819][ T5098] capability: warning: `syz.3.222' uses 32-bit capabilities (legacy support in use) [ 138.047834][ T5107] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.124739][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.374720][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 138.494900][ T13] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.509098][ T13] usb 2-1: config 0 has no interface number 0 [ 138.533262][ T13] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 138.580464][ T13] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 138.734144][ T13] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.808595][ T13] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.854975][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.887899][ T5111] netlink: 'syz.2.226': attribute type 10 has an invalid length. [ 138.901735][ T13] usb 2-1: config 0 descriptor?? [ 138.978705][ T13] ldusb 2-1:0.55: Interrupt in endpoint not found [ 138.993210][ T5111] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.207766][ T4231] usb 2-1: USB disconnect, device number 8 [ 139.236859][ T5112] bond0: (slave wlan1): Releasing backup interface [ 139.330442][ T5119] syz.0.228 uses obsolete (PF_INET,SOCK_PACKET) [ 140.465541][ T4295] kernel write not supported for file /ppp (pid: 4295 comm: kworker/0:5) [ 142.179010][ T5137] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 145.643118][ T5163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.239'. [ 152.205088][ T4252] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.304844][ T4223] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.367928][ T5269] tc_dump_action: action bad kind [ 152.584739][ T4223] usb 2-1: Using ep0 maxpacket: 32 [ 152.761650][ T4252] usb 1-1: Using ep0 maxpacket: 8 [ 152.764791][ T4223] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.864913][ T4223] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 152.873364][ T4223] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 152.903656][ T4223] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 152.920362][ T4252] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 152.940720][ T4223] usb 2-1: config 128 has no interface number 0 [ 152.940729][ T4252] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.940754][ T4252] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.972267][ T4223] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 153.004834][ T4223] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.035560][ T4223] usb 2-1: config 128 interface 127 has no altsetting 0 [ 153.045409][ T4252] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.081144][ T4252] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.124155][ T4252] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.142434][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.204858][ T4223] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 153.230398][ T4223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.242545][ T4223] usb 2-1: Product: syz [ 153.252697][ T4223] usb 2-1: Manufacturer: syz [ 153.262838][ T4223] usb 2-1: SerialNumber: syz [ 153.505053][ T4252] usb 1-1: GET_CAPABILITIES returned 0 [ 153.510781][ T4252] usbtmc 1-1:16.0: can't read capabilities [ 154.536417][ T4223] usb 2-1: USB disconnect, device number 9 [ 154.547492][ T4172] udevd[4172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.694671][ T4252] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 155.838625][ T4197] usb 1-1: USB disconnect, device number 9 [ 156.004905][ T4252] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.018113][ T4252] usb 3-1: config 0 has no interface number 0 [ 156.034499][ T4252] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 156.055984][ T4252] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 156.069679][ T5308] UBIFS error (pid: 5308): cannot open "", error -22 [ 156.074868][ T5303] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 156.077570][ T4252] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.082193][ T5303] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.094598][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.139102][ T5303] vhci_hcd vhci_hcd.0: Device attached [ 156.219789][ T4252] usb 3-1: config 0 descriptor?? [ 156.234274][ T5305] vhci_hcd: connection closed [ 156.240840][ T4320] vhci_hcd: stop threads [ 156.265620][ T5289] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 156.385170][ T4197] vhci_hcd: vhci_device speed not set [ 157.034705][ T4320] vhci_hcd: release socket [ 157.040705][ T4320] vhci_hcd: disconnect device [ 157.049772][ T4252] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 157.074653][ T4197] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 157.315960][ T4252] usb 3-1: USB disconnect, device number 4 [ 158.125107][ T5327] tipc: Started in network mode [ 158.146421][ T5327] tipc: Node identity fe54304a20a3, cluster identity 4711 [ 158.192164][ T5327] tipc: Enabled bearer , priority 0 [ 158.213556][ T5330] device syzkaller0 entered promiscuous mode [ 159.548007][ T4259] tipc: Node number set to 3740741706 [ 159.653777][ T5327] tipc: Resetting bearer [ 159.771086][ T5326] tipc: Resetting bearer [ 159.939352][ T5326] tipc: Disabling bearer [ 162.894798][ T4197] vhci_hcd: vhci_device speed not set [ 163.132906][ T5368] netlink: 44 bytes leftover after parsing attributes in process `syz.3.280'. [ 163.825234][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.832584][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.894651][ T4295] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.395612][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 165.436987][ T5383] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 165.464643][ T5383] CIFS: Unable to determine destination address [ 165.604894][ T4295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.886333][ T5383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 165.994789][ T4295] usb 3-1: string descriptor 0 read error: -71 [ 166.001475][ T4295] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 166.019767][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.048708][ T4295] usb 3-1: config 0 descriptor?? [ 166.064821][ T4295] usb 3-1: can't set config #0, error -71 [ 166.219140][ T4295] usb 3-1: USB disconnect, device number 5 [ 173.971947][ T5475] lo speed is unknown, defaulting to 1000 [ 175.234800][ T5223] Bluetooth: hci5: command 0x0409 tx timeout [ 175.514704][ T4223] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.450540][ T4223] usb 3-1: Using ep0 maxpacket: 8 [ 177.005963][ T5504] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 177.014039][ T5504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.304'. [ 177.024620][ T5504] batman_adv: batadv0: Adding interface: virt_wifi0 [ 177.031419][ T5504] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.057963][ T5504] batman_adv: batadv0: Interface activated: virt_wifi0 [ 177.268942][ T5475] chnl_net:caif_netlink_parms(): no params data found [ 177.314628][ T4223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.345172][ T4223] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 177.410803][ T4223] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.428600][ T4259] Bluetooth: hci5: command 0x041b tx timeout [ 177.759599][ T5520] binder: 5513:5520 ioctl c0306201 0 returned -14 [ 179.405059][ T4223] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 179.432227][ T4223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 179.465289][ T4223] usb 3-1: Product: syz [ 179.498444][ T4223] usb 3-1: config 0 descriptor?? [ 179.535265][ T4223] usb 3-1: can't set config #0, error -71 [ 179.574448][ T4223] usb 3-1: USB disconnect, device number 6 [ 179.657762][ T5460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.858160][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 180.785192][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.792816][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.864786][ T5475] device bridge_slave_0 entered promiscuous mode [ 180.926320][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.933716][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.994190][ T5475] device bridge_slave_1 entered promiscuous mode [ 181.123735][ T5460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.155029][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 181.284067][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.358544][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.926820][ T4223] Bluetooth: hci5: command 0x0419 tx timeout [ 181.936111][ T5475] team0: Port device team_slave_0 added [ 181.957039][ T4295] Bluetooth: hci3: command 0x0406 tx timeout [ 181.957931][ T5475] team0: Port device team_slave_1 added [ 181.974506][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 181.984891][ T4295] Bluetooth: hci1: command 0x0406 tx timeout [ 182.034663][ T5223] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 182.518667][ T5460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.734725][ T5223] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 182.749388][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.797452][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.834529][ T5223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 182.842851][ T5223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 182.852178][ T5223] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 182.863131][ T5223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 182.873221][ T5223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 182.884057][ T5223] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 182.898961][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.924337][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.990758][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.059083][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.082579][ T5460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.223583][ T5475] device hsr_slave_0 entered promiscuous mode [ 183.317275][ T5475] device hsr_slave_1 entered promiscuous mode [ 183.329920][ T5475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.338183][ T5475] Cannot create hsr debugfs directory [ 183.615455][ T5223] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 183.665376][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.732050][ T5223] usb 3-1: Product: ␊ [ 183.765208][ T5223] usb 3-1: Manufacturer: ⭉㿻묅囻﨓꡶륣缿ﰬ쉆৚榒玘싐ᚽ淸칁㛛ꚜ﷞땶蚃咤죍뢜汫㭪㼏謻쵯ࡴ⯮짠᝻ᝰ歷拗ぬ䞼宲癬웹餹菾짂梑䠜ꃅ쎰䃀 [ 183.934494][ T5223] usb 3-1: config 0 descriptor?? [ 183.980667][ T5223] usb 3-1: can't set config #0, error -71 [ 183.989517][ T5223] usb 3-1: USB disconnect, device number 7 [ 184.002004][ T5576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 184.027457][ T5576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 184.065681][ T5576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.322'. [ 185.345361][ T5593] Invalid ELF header magic: != ELF [ 189.242006][ T4182] syz-executor (4182) used greatest stack depth: 21152 bytes left [ 189.528469][ T5475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.557328][ T5475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.670651][ T5475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.725030][ T4259] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.793321][ T5475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.025363][ T1107] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.095186][ T4259] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.140607][ T4259] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 190.214686][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.284795][ T1107] usb 1-1: Using ep0 maxpacket: 8 [ 190.353135][ T4259] usb 2-1: config 0 descriptor?? [ 190.405739][ T1107] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 190.451850][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.495556][ T4259] pwc: Askey VC010 type 2 USB webcam detected. [ 190.546154][ T1107] usb 1-1: config 0 descriptor?? [ 190.630175][ T5645] lo speed is unknown, defaulting to 1000 [ 190.853087][ T5660] lo speed is unknown, defaulting to 1000 [ 190.868379][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.918540][ T4259] pwc: recv_control_msg error -32 req 02 val 2b00 [ 190.928316][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.946405][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.968805][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.976326][ T4259] pwc: recv_control_msg error -32 req 02 val 2700 [ 191.014797][ T4259] pwc: recv_control_msg error -32 req 02 val 2c00 [ 191.038209][ T1107] wacom 0003:056A:0094.0003: unknown main item tag 0x4 [ 191.057639][ T1107] wacom 0003:056A:0094.0003: Using device in hidraw-only mode [ 191.059902][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.066281][ T4259] pwc: recv_control_msg error -32 req 04 val 1000 [ 191.086575][ T1107] wacom 0003:056A:0094.0003: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 191.093186][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.124753][ T4259] pwc: recv_control_msg error -32 req 04 val 1300 [ 191.125174][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.138437][ T5453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.172377][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.174919][ T4259] pwc: recv_control_msg error -32 req 04 val 1400 [ 191.188009][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.206157][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.213381][ T5453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.225404][ T5627] udc-core: couldn't find an available UDC or it's busy [ 191.239007][ T23] usb 1-1: USB disconnect, device number 10 [ 191.244951][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.245151][ T4259] pwc: recv_control_msg error -32 req 02 val 2000 [ 191.254067][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.274540][ T5627] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.305148][ T4259] pwc: recv_control_msg error -32 req 02 val 2100 [ 191.316753][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.343253][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.354697][ T4259] pwc: recv_control_msg error -32 req 04 val 1500 [ 191.371386][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.454774][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.467595][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.481519][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.493267][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.511063][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.575498][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.585391][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.603422][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.612746][ T4259] pwc: recv_control_msg error -71 req 02 val 2400 [ 191.635304][ T4259] pwc: recv_control_msg error -71 req 02 val 2600 [ 191.663737][ T4259] pwc: recv_control_msg error -71 req 02 val 2900 [ 191.694756][ T4259] pwc: recv_control_msg error -71 req 02 val 2800 [ 191.738304][ T4259] pwc: recv_control_msg error -71 req 04 val 1100 [ 191.752619][ T5645] chnl_net:caif_netlink_parms(): no params data found [ 191.781126][ T4259] pwc: recv_control_msg error -71 req 04 val 1200 [ 191.853611][ T4259] pwc: Registered as video103. [ 191.904426][ T4259] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 192.173544][ T4259] usb 2-1: USB disconnect, device number 10 [ 192.434887][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 192.504284][ T5460] device hsr_slave_0 left promiscuous mode [ 192.530689][ T5460] device hsr_slave_1 left promiscuous mode [ 192.555709][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.563240][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.663733][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.671940][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.691774][ T5460] device bridge_slave_1 left promiscuous mode [ 192.946519][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.005878][ T5460] device bridge_slave_0 left promiscuous mode [ 193.030224][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.105231][ T5460] device veth1_macvtap left promiscuous mode [ 193.125216][ T5460] device veth0_macvtap left promiscuous mode [ 193.173006][ T5460] device veth1_vlan left promiscuous mode [ 193.180766][ T5460] device veth0_vlan left promiscuous mode [ 194.163822][ T5460] team0 (unregistering): Port device team_slave_1 removed [ 194.192571][ T5460] team0 (unregistering): Port device team_slave_0 removed [ 194.266885][ T5460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.278259][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.437973][ T5460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.514717][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 195.017734][ T5460] bond0 (unregistering): Released all slaves [ 195.310660][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.409760][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.448053][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.585775][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.621762][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.653427][ T5645] device bridge_slave_0 entered promiscuous mode [ 195.675727][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.682833][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.709923][ T5645] device bridge_slave_1 entered promiscuous mode [ 195.831400][ T5733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.358'. [ 195.855893][ T5733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.904433][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.937070][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.083921][ T5645] team0: Port device team_slave_0 added [ 196.104458][ T5645] team0: Port device team_slave_1 added [ 196.232968][ T5475] device veth0_vlan entered promiscuous mode [ 196.247358][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.262400][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.271492][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.280764][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.446125][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.473832][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.543359][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.594378][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.614125][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.700926][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.801733][ T5223] Bluetooth: hci1: command 0x040f tx timeout [ 196.830985][ T5475] device veth1_vlan entered promiscuous mode [ 196.859118][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.878753][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.887094][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.902855][ T5645] device hsr_slave_0 entered promiscuous mode [ 196.924250][ T5645] device hsr_slave_1 entered promiscuous mode [ 196.932068][ T5645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.954204][ T5645] Cannot create hsr debugfs directory [ 197.034011][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.061989][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.100420][ T5475] device veth0_macvtap entered promiscuous mode [ 197.187921][ T5475] device veth1_macvtap entered promiscuous mode [ 197.286862][ T5767] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.323163][ T5767] netlink: 'syz.0.363': attribute type 27 has an invalid length. [ 198.179956][ T5761] [U] [ 198.381561][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.430034][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.440505][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.453521][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.464596][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.476266][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.487570][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.498543][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.518081][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.537183][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.567495][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.590860][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.638154][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.692432][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.729740][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.742567][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.769353][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.792254][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.803511][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.833933][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.845853][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 198.894921][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.958080][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.013231][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.032388][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.069987][ T5475] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.125394][ T5475] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.134225][ T5475] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.216030][ T5475] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.641744][ T5465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.686497][ T5465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.789190][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.816109][ T5645] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.876282][ T5645] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.892668][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.909441][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.933132][ T5645] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.016607][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.032487][ T5645] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.381838][ T5790] netlink: 96 bytes leftover after parsing attributes in process `syz.5.293'. [ 202.004882][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.694702][ T5802] ======================================================= [ 202.694702][ T5802] WARNING: The mand mount option has been deprecated and [ 202.694702][ T5802] and is ignored by this kernel. Remove the mand [ 202.694702][ T5802] option from the mount to silence this warning. [ 202.694702][ T5802] ======================================================= [ 202.729849][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.025440][ T5802] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.180231][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.204620][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.249795][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.305615][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.332200][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.368552][ T5802] overlayfs: failed to look up (tracing) for ino (-66) [ 203.393795][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.400966][ T5246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.513383][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.550834][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.607317][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.665070][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.672207][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.760996][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.811630][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.919828][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.969650][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.025459][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.071665][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.156887][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.207818][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.285858][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.348698][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.396993][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.593216][ T5817] netlink: 'syz.5.370': attribute type 27 has an invalid length. [ 205.707096][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.722010][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.747584][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.722599][ T5841] could not allocate digest TFM handle sha1_mb [ 208.113463][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.161371][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.204302][ T5645] device veth0_vlan entered promiscuous mode [ 208.237699][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.266609][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.306926][ T5873] lo speed is unknown, defaulting to 1000 [ 208.320291][ T5645] device veth1_vlan entered promiscuous mode [ 208.355922][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.365284][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.414408][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.509252][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.524494][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.573907][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.632168][ T5645] device veth0_macvtap entered promiscuous mode [ 208.675399][ T5645] device veth1_macvtap entered promiscuous mode [ 208.860745][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.683936][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.714368][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.734590][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.764606][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.800607][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.820949][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.842785][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.860968][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.875911][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.922707][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.003914][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.064572][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.114621][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 210.164668][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.209937][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.223388][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.242376][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.252832][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.271027][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.281897][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.331979][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.350629][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.365257][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.377370][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.389018][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.401831][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.493815][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.715289][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.048387][ T5645] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.106013][ T5645] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.146924][ T5645] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.181071][ T5645] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.585674][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.593988][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.668191][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.783877][ T5453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.831026][ T5453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.867237][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.884019][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.388'. [ 211.941555][ T5460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.988965][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 212.057673][ T5460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.204664][ T4295] Bluetooth: hci4: command 0x041b tx timeout [ 212.215918][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 212.239473][ T5460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.504910][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 212.635137][ T23] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 212.654734][ T23] usb 6-1: config 0 has no interface number 0 [ 212.661296][ T23] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.677861][ T23] usb 6-1: config 0 interface 85 has no altsetting 0 [ 212.965089][ T23] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 213.309973][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.322054][ T23] usb 6-1: Product: syz [ 213.329273][ T23] usb 6-1: Manufacturer: syz [ 213.334754][ T23] usb 6-1: SerialNumber: syz [ 213.368954][ T23] usb 6-1: config 0 descriptor?? [ 214.097594][ T5460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.134752][ T4252] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 214.282634][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 214.344135][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.366252][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.379245][ T5873] device bridge_slave_0 entered promiscuous mode [ 214.425440][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.449423][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.470341][ T5873] device bridge_slave_1 entered promiscuous mode [ 214.646688][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.655008][ T4252] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 214.693582][ T4252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.717119][ T4252] usb 2-1: Product: syz [ 214.721307][ T4252] usb 2-1: Manufacturer: syz [ 214.754911][ T4252] usb 2-1: SerialNumber: syz [ 214.785175][ T4252] usb 2-1: config 0 descriptor?? [ 214.796831][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.836102][ T4252] hso 2-1:0.0: Not our interface [ 214.841476][ T4252] usb-storage 2-1:0.0: USB Mass Storage device detected [ 215.102576][ T5873] team0: Port device team_slave_0 added [ 215.214060][ T5873] team0: Port device team_slave_1 added [ 216.012830][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.040467][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.104777][ T23] usb 6-1: can't set config #0, error -71 [ 216.144287][ T23] usb 6-1: USB disconnect, device number 2 [ 216.165073][ T4252] usb 2-1: USB disconnect, device number 11 [ 216.215999][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.318400][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.354658][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 216.365021][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.418951][ T5993] netlink: 35 bytes leftover after parsing attributes in process `syz.6.403'. [ 216.654610][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.025700][ T5873] device hsr_slave_0 entered promiscuous mode [ 219.165396][ T5873] device hsr_slave_1 entered promiscuous mode [ 219.589574][ T5873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.602851][ T5873] Cannot create hsr debugfs directory [ 222.387446][ T5873] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.475979][ T5873] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.525864][ T5460] device hsr_slave_0 left promiscuous mode [ 222.571304][ T5460] device hsr_slave_1 left promiscuous mode [ 222.579533][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.701313][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.768322][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.776382][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.867999][ T5460] device bridge_slave_1 left promiscuous mode [ 222.875759][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.898636][ T5460] device bridge_slave_0 left promiscuous mode [ 222.906071][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.924740][ T1107] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 223.014631][ T5460] device veth1_macvtap left promiscuous mode [ 223.021640][ T5460] device veth0_macvtap left promiscuous mode [ 223.030395][ T5460] device veth1_vlan left promiscuous mode [ 223.037363][ T5460] device veth0_vlan left promiscuous mode [ 223.627294][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 223.641631][ T1107] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 223.655690][ T1107] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 223.665087][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.677068][ T1107] usb 7-1: config 0 descriptor?? [ 223.694883][ T6065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 223.796053][ T6074] comedi comedi0: pcl812: I/O port conflict (0x4f25,16) [ 224.022517][ T1107] usbhid 7-1:0.0: can't add hid device: -71 [ 224.037941][ T1107] usbhid: probe of 7-1:0.0 failed with error -71 [ 224.067945][ T1107] usb 7-1: USB disconnect, device number 2 [ 224.925671][ T1107] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 224.984057][ T5460] team0 (unregistering): Port device team_slave_1 removed [ 224.993705][ T6096] sctp: failed to load transform for md5: -2 [ 225.144434][ T5460] team0 (unregistering): Port device team_slave_0 removed [ 225.204658][ T1107] usb 7-1: Using ep0 maxpacket: 32 [ 225.225520][ T6110] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.948410][ T5460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.984832][ T1107] usb 7-1: device descriptor read/all, error -71 [ 225.993376][ T5460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.208516][ T5460] bond0 (unregistering): Released all slaves [ 226.244866][ T4295] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 226.335235][ T5873] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 226.380709][ T5873] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 226.625488][ T4295] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.660138][ T4295] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 226.718892][ T4295] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 226.790246][ T4295] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.828588][ T4295] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 226.871376][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.902050][ T4295] usb 2-1: config 0 descriptor?? [ 226.937411][ T6112] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.356401][ T6135] fuse: blksize only supported for fuseblk [ 227.397059][ T4295] hid-generic 0003:05AC:0324.0004: hidraw0: USB HID vff.ff Device [HID 05ac:0324] on usb-dummy_hcd.1-1/input0 [ 227.618238][ T1110] usb 2-1: USB disconnect, device number 12 [ 227.729398][ T6143] Device name cannot be null; rc = [-22] [ 227.742308][ T6143] netlink: 48 bytes leftover after parsing attributes in process `syz.6.435'. [ 228.458636][ T6141] fido_id[6141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 228.579492][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.718425][ T6152] block nbd6: NBD_DISCONNECT [ 228.811966][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.835840][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.327298][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.414077][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.452381][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.531264][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.538414][ T5451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.570824][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.592750][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.855915][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.365186][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.372311][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.473587][ T6172] misc userio: No port type given on /dev/userio [ 230.491484][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.521258][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.108649][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.378401][ T6186] Device name cannot be null; rc = [-22] [ 231.397375][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.444'. [ 232.025363][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.034460][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.073608][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.274288][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.057827][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.118454][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.865940][ T6216] input: syz1 as /devices/virtual/input/input8 [ 237.617565][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.686938][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.813290][ T6194] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.823116][ T6194] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.837965][ T6194] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.849268][ T6194] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.516918][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.592982][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.608682][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.638833][ T6290] overlayfs: missing 'lowerdir' [ 242.178959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.197186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.244047][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.508718][ T5460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.789395][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 243.199284][ T5460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.618105][ T5460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.718881][ T5460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.821664][ T5223] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 244.839561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.859148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.191342][ T6348] device bridge1 entered promiscuous mode [ 245.209578][ T5873] device veth0_vlan entered promiscuous mode [ 245.217376][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.403042][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.418789][ T5873] device veth1_vlan entered promiscuous mode [ 245.428727][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.691449][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.784033][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.845724][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.944875][ T5223] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 245.944931][ T5223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.009320][ T5873] device veth0_macvtap entered promiscuous mode [ 246.024917][ T5223] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.024952][ T5223] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.024975][ T5223] usb 6-1: Manufacturer: syz [ 246.041174][ T5223] usb 6-1: config 0 descriptor?? [ 246.046961][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.047652][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.049494][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.053084][ T5873] device veth1_macvtap entered promiscuous mode [ 246.153824][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.153850][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.153862][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.153875][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.153889][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.153902][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.153914][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.153928][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.157164][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.157290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.157945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.158632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.201347][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.201373][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.201385][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.201398][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.201411][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.201425][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.201437][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.201452][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.202867][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.202980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.203593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.215536][ T5873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.215628][ T5873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.215656][ T5873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.215684][ T5873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.323405][ T5460] tipc: Left network mode [ 246.411133][ T5223] rc_core: IR keymap rc-hauppauge not found [ 246.411158][ T5223] Registered IR keymap rc-empty [ 246.412701][ T5223] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 246.413908][ T5223] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 246.481937][ T5223] usb 6-1: USB disconnect, device number 3 [ 246.620905][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.620977][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.623778][ T6258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.797213][ T5232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.797280][ T5232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.849487][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.564706][ T4299] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 249.576307][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.478'. [ 249.804784][ T4299] usb 6-1: Using ep0 maxpacket: 32 [ 249.924996][ T4299] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 249.925140][ T4299] usb 6-1: config 0 has no interface number 0 [ 250.084696][ T4299] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=b3.be [ 250.084733][ T4299] usb 6-1: New USB device strings: Mfr=164, Product=196, SerialNumber=3 [ 250.084756][ T4299] usb 6-1: Product: syz [ 250.084772][ T4299] usb 6-1: Manufacturer: syz [ 250.084788][ T4299] usb 6-1: SerialNumber: syz [ 250.087051][ T4299] usb 6-1: config 0 descriptor?? [ 250.127168][ T4299] smsc95xx v2.0.0 [ 250.164738][ T5460] device hsr_slave_0 left promiscuous mode [ 250.165492][ T5460] device hsr_slave_1 left promiscuous mode [ 250.166144][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.166201][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.166934][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.166960][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.167552][ T5460] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 250.167577][ T5460] batman_adv: batadv0: Removing interface: virt_wifi0 [ 250.169903][ T5460] device bridge_slave_1 left promiscuous mode [ 250.170035][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.174435][ T5460] device bridge_slave_0 left promiscuous mode [ 250.175741][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.205158][ T5460] device veth1_macvtap left promiscuous mode [ 250.205268][ T5460] device veth0_macvtap left promiscuous mode [ 250.205435][ T5460] device veth1_vlan left promiscuous mode [ 250.205507][ T5460] device veth0_vlan left promiscuous mode [ 250.575634][ T23] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 251.541234][ T23] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.541266][ T23] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.541285][ T23] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.541318][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.541344][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.554971][ T4299] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 251.555008][ T4299] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 251.574862][ T4299] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 251.575034][ T4299] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 251.582316][ T4299] usb 6-1: USB disconnect, device number 4 [ 251.684908][ T23] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.684943][ T23] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.684965][ T23] usb 8-1: Product: syz [ 251.684982][ T23] usb 8-1: Manufacturer: syz [ 251.697308][ T5460] team0 (unregistering): Port device team_slave_1 removed [ 251.734826][ T5460] team0 (unregistering): Port device team_slave_0 removed [ 251.735671][ T23] cdc_wdm 8-1:1.0: skipping garbage [ 251.735690][ T23] cdc_wdm 8-1:1.0: skipping garbage [ 251.760423][ T23] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 251.760447][ T23] cdc_wdm 8-1:1.0: Unknown control protocol [ 251.789458][ T5460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.854039][ T5460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.942762][ T6402] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 251.943330][ T4273] usb 8-1: USB disconnect, device number 2 [ 251.968234][ T6414] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 252.072032][ T5460] bond0 (unregistering): Released all slaves [ 252.088886][ T6414] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 252.198422][ T6258] smc: removing ib device syz0 [ 255.726664][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.975210][ T6448] netlink: 224 bytes leftover after parsing attributes in process `syz.5.491'. [ 256.947403][ T26] audit: type=1326 audit(1766379388.531:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df981d749 code=0x7fc00000 [ 257.040616][ T6458] input: syz1 as /devices/virtual/input/input10 [ 257.040656][ T6458] input: failed to attach handler leds to device input10, error: -6 [ 257.395759][ T6483] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 258.192290][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.171730][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 264.611853][ T6549] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 264.621833][ T6549] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 6549, name: syz.1.515 [ 264.630895][ T6549] 1 lock held by syz.1.515/6549: [ 264.635856][ T6549] #0: ffffffff8c142038 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 264.645743][ T6549] irq event stamp: 594 [ 264.649838][ T6549] hardirqs last enabled at (593): [] asm_sysvec_reschedule_ipi+0x16/0x20 [ 264.659935][ T6549] hardirqs last disabled at (594): [] _raw_spin_lock_irq+0x7a/0xe0 [ 264.669501][ T6549] softirqs last enabled at (410): [] ip_setsockopt+0x4c0/0x3070 [ 264.678992][ T6549] softirqs last disabled at (406): [] release_sock+0x2b/0x1b0 [ 264.688123][ T6549] Preemption disabled at: [ 264.688135][ T6549] [<0000000000000000>] 0x0 [ 264.696901][ T6549] CPU: 0 PID: 6549 Comm: syz.1.515 Not tainted syzkaller #0 [ 264.704329][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.714395][ T6549] Call Trace: [ 264.717811][ T6549] [ 264.720758][ T6549] dump_stack_lvl+0x168/0x230 [ 264.725461][ T6549] ? ip_setsockopt+0x4c0/0x3070 [ 264.730437][ T6549] ? show_regs_print_info+0x20/0x20 [ 264.735764][ T6549] ? load_image+0x3b0/0x3b0 [ 264.740290][ T6549] ? finish_lock_switch+0x134/0x280 [ 264.745525][ T6549] ___might_sleep+0x47c/0x600 [ 264.750218][ T6549] ? __switch_to_asm+0x34/0x60 [ 264.755003][ T6549] ? __might_sleep+0xf0/0xf0 [ 264.759630][ T6549] down_read+0x20/0x2e0 [ 264.763808][ T6549] kernfs_walk_and_get_ns+0x81/0x2b0 [ 264.769115][ T6549] ? kernfs_find_ns+0x510/0x510 [ 264.773998][ T6549] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 264.780181][ T6549] cgroup_get_from_path+0x5f/0x2f0 [ 264.785312][ T6549] cgroup_mt_check_v1+0x1ae/0x2c0 [ 264.790351][ T6549] xt_check_match+0x3c6/0xaa0 [ 264.795108][ T6549] ? xt_check_proc_name+0x240/0x240 [ 264.800328][ T6549] ? xt_find_match+0xcf/0x210 [ 264.805032][ T6549] ? xt_find_match+0x1e1/0x210 [ 264.810351][ T6549] translate_table+0x14f8/0x1fe0 [ 264.815372][ T6549] ? ipt_register_table+0x7e0/0x7e0 [ 264.820621][ T6549] ? __might_fault+0xb7/0x110 [ 264.825338][ T6549] ? __lock_acquire+0x7c60/0x7c60 [ 264.830409][ T6549] ? _copy_from_user+0x111/0x170 [ 264.835375][ T6549] do_ipt_set_ctl+0x96c/0xcf0 [ 264.840086][ T6549] ? nf_setsockopt+0x218/0x280 [ 264.844997][ T6549] ? ipt_unregister_table_exit+0x220/0x220 [ 264.850820][ T6549] ? __lock_acquire+0x7c60/0x7c60 [ 264.855868][ T6549] ? __mutex_lock_common+0x431/0x2390 [ 264.861277][ T6549] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 264.866929][ T6549] ? mutex_unlock+0x10/0x10 [ 264.871467][ T6549] ? __local_bh_enable_ip+0x13b/0x1b0 [ 264.876861][ T6549] nf_setsockopt+0x25f/0x280 [ 264.881476][ T6549] ip_setsockopt+0x2127/0x3070 [ 264.886271][ T6549] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 264.891666][ T6549] ? lock_chain_count+0x20/0x20 [ 264.896632][ T6549] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 264.902282][ T6549] ? lockdep_hardirqs_on+0x94/0x140 [ 264.907502][ T6549] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 264.913166][ T6549] tcp_setsockopt+0x21a/0x1d70 [ 264.917955][ T6549] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 264.923352][ T6549] ? aa_af_perm+0x2b0/0x2b0 [ 264.927872][ T6549] ? __fget_files+0x40f/0x480 [ 264.932576][ T6549] ? aa_sock_opt_perm+0x74/0x100 [ 264.937636][ T6549] ? sock_common_setsockopt+0x32/0xb0 [ 264.943182][ T6549] ? sock_common_recvmsg+0x1b0/0x1b0 [ 264.948646][ T6549] __sys_setsockopt+0x2bf/0x3d0 [ 264.953489][ T6549] __x64_sys_setsockopt+0xb1/0xc0 [ 264.958636][ T6549] do_syscall_64+0x4c/0xa0 [ 264.963120][ T6549] ? clear_bhb_loop+0x30/0x80 [ 264.967795][ T6549] ? clear_bhb_loop+0x30/0x80 [ 264.972467][ T6549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.978352][ T6549] RIP: 0033:0x7f7df981d749 [ 264.982780][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.002670][ T6549] RSP: 002b:00007f7df7a42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.011094][ T6549] RAX: ffffffffffffffda RBX: 00007f7df9a74180 RCX: 00007f7df981d749 [ 265.019062][ T6549] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 265.027089][ T6549] RBP: 00007f7df98a1f91 R08: 00000000000022f8 R09: 0000000000000000 [ 265.035230][ T6549] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 265.043364][ T6549] R13: 00007f7df9a74218 R14: 00007f7df9a74180 R15: 00007fffb9720528 [ 265.051608][ T6549] [ 265.055060][ T6549] [ 265.057367][ T6549] ============================= [ 265.062279][ T6549] [ BUG: Invalid wait context ] [ 265.067220][ T6549] syzkaller #0 Tainted: G W [ 265.073127][ T6549] ----------------------------- [ 265.077964][ T6549] syz.1.515/6549 is trying to lock: [ 265.083243][ T6549] ffffffff8c24d570 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x81/0x2b0 [ 265.092835][ T6549] other info that might help us debug this: [ 265.098823][ T6549] context-{4:4} [ 265.102281][ T6549] 1 lock held by syz.1.515/6549: [ 265.107227][ T6549] #0: ffffffff8c142038 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 265.116963][ T6549] stack backtrace: [ 265.120669][ T6549] CPU: 0 PID: 6549 Comm: syz.1.515 Tainted: G W syzkaller #0 [ 265.129335][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.139649][ T6549] Call Trace: [ 265.142925][ T6549] [ 265.145863][ T6549] dump_stack_lvl+0x168/0x230 [ 265.150619][ T6549] ? show_regs_print_info+0x20/0x20 [ 265.155893][ T6549] ? load_image+0x3b0/0x3b0 [ 265.160387][ T6549] __lock_acquire+0x1be9/0x7c60 [ 265.165234][ T6549] ? 0xffffffffa0002990 [ 265.169377][ T6549] ? verify_lock_unused+0x140/0x140 [ 265.174586][ T6549] ? __printk_cpu_unlock+0x5f/0x70 [ 265.179682][ T6549] ? dump_stack_lvl+0x1bf/0x230 [ 265.184518][ T6549] ? ip_setsockopt+0x4c0/0x3070 [ 265.189369][ T6549] ? show_regs_print_info+0x20/0x20 [ 265.194551][ T6549] ? load_image+0x3b0/0x3b0 [ 265.199054][ T6549] ? finish_lock_switch+0x134/0x280 [ 265.204384][ T6549] lock_acquire+0x197/0x3f0 [ 265.208897][ T6549] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 265.214350][ T6549] ? __switch_to_asm+0x34/0x60 [ 265.219106][ T6549] ? __might_sleep+0xf0/0xf0 [ 265.223679][ T6549] ? read_lock_is_recursive+0x10/0x10 [ 265.229041][ T6549] down_read+0x44/0x2e0 [ 265.233233][ T6549] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 265.238877][ T6549] kernfs_walk_and_get_ns+0x81/0x2b0 [ 265.244152][ T6549] ? kernfs_find_ns+0x510/0x510 [ 265.249000][ T6549] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 265.255259][ T6549] cgroup_get_from_path+0x5f/0x2f0 [ 265.260373][ T6549] cgroup_mt_check_v1+0x1ae/0x2c0 [ 265.265500][ T6549] xt_check_match+0x3c6/0xaa0 [ 265.270171][ T6549] ? xt_check_proc_name+0x240/0x240 [ 265.275358][ T6549] ? xt_find_match+0xcf/0x210 [ 265.280111][ T6549] ? xt_find_match+0x1e1/0x210 [ 265.284876][ T6549] translate_table+0x14f8/0x1fe0 [ 265.289806][ T6549] ? ipt_register_table+0x7e0/0x7e0 [ 265.295036][ T6549] ? __might_fault+0xb7/0x110 [ 265.299705][ T6549] ? __lock_acquire+0x7c60/0x7c60 [ 265.304721][ T6549] ? _copy_from_user+0x111/0x170 [ 265.309645][ T6549] do_ipt_set_ctl+0x96c/0xcf0 [ 265.314306][ T6549] ? nf_setsockopt+0x218/0x280 [ 265.319091][ T6549] ? ipt_unregister_table_exit+0x220/0x220 [ 265.324885][ T6549] ? __lock_acquire+0x7c60/0x7c60 [ 265.329908][ T6549] ? __mutex_lock_common+0x431/0x2390 [ 265.335270][ T6549] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 265.341183][ T6549] ? mutex_unlock+0x10/0x10 [ 265.345693][ T6549] ? __local_bh_enable_ip+0x13b/0x1b0 [ 265.351093][ T6549] nf_setsockopt+0x25f/0x280 [ 265.355721][ T6549] ip_setsockopt+0x2127/0x3070 [ 265.360760][ T6549] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 265.366140][ T6549] ? lock_chain_count+0x20/0x20 [ 265.370988][ T6549] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 265.376835][ T6549] ? lockdep_hardirqs_on+0x94/0x140 [ 265.382222][ T6549] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 265.387870][ T6549] tcp_setsockopt+0x21a/0x1d70 [ 265.392635][ T6549] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 265.398012][ T6549] ? aa_af_perm+0x2b0/0x2b0 [ 265.402614][ T6549] ? __fget_files+0x40f/0x480 [ 265.407286][ T6549] ? aa_sock_opt_perm+0x74/0x100 [ 265.412212][ T6549] ? sock_common_setsockopt+0x32/0xb0 [ 265.417600][ T6549] ? sock_common_recvmsg+0x1b0/0x1b0 [ 265.422996][ T6549] __sys_setsockopt+0x2bf/0x3d0 [ 265.428295][ T6549] __x64_sys_setsockopt+0xb1/0xc0 [ 265.433309][ T6549] do_syscall_64+0x4c/0xa0 [ 265.437910][ T6549] ? clear_bhb_loop+0x30/0x80 [ 265.442590][ T6549] ? clear_bhb_loop+0x30/0x80 [ 265.447272][ T6549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.453248][ T6549] RIP: 0033:0x7f7df981d749 [ 265.457779][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.477676][ T6549] RSP: 002b:00007f7df7a42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.486270][ T6549] RAX: ffffffffffffffda RBX: 00007f7df9a74180 RCX: 00007f7df981d749 [ 265.494327][ T6549] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 265.502299][ T6549] RBP: 00007f7df98a1f91 R08: 00000000000022f8 R09: 0000000000000000 [ 265.510277][ T6549] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 265.518247][ T6549] R13: 00007f7df9a74218 R14: 00007f7df9a74180 R15: 00007fffb9720528 [ 265.526213][ T6549] [ 265.533683][ T6549] xt_cgroup: invalid path, errno=-2