last executing test programs: 22.334328058s ago: executing program 4 (id=153): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r4, 0x2, &(0x7f0000000000)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x7ff, r3, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000, r3, 0xffffffffffffffff, 0x0, 0x200000001, 0x0, 0x2}]) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000002480)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x40, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x5, @mcast2, 0x2}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000380)="15f3ddd04fef926ba360b3be5d233ac7b34f18332e9a5eb1b8609a31ed325e52faaf88c560a52578262a44111984cf2898df220e92c455ea5e151d7fa2f7872aea117f8648dfeefeec9f5796cc0fa8b9db48cc04a3c73b77b2c1f9ce5e3464703da8540732e27627446155b7dacfc0585d73453c44d275dc987beb6f2ff4d9a69d782fcade22bf73432a4d49bcc486c10f674c7ac4cd144ac2a75fb8a4e8354d1f6d0e6ea951bfcffa89a2143ff558efa6b9510fe6011269e2fbad7a311a8d76add307208621d802944c4f9cf5619299b59a0511227c0ce90a8f95234000538446dbe4e8b3", 0xe5}, {&(0x7f00000005c0)="ef90c8adfec7e74271018c9248064b38bc6f56e192258995a4fd2a950a80e4893940852752ef0827ecaf6a49e4aa4aec552307e9b6a506dd32118519c6d9bd31db38302185e1efa75410bb1b95b76c60cb2729aa63cb581b4dd34219e5c09332b8a0ee559b532d10c01557d2ecdfc35524e662eb40cbda95d403825020f1c65ccf1aff71833176f62e090828aa1d630d0a6b5724ee4bb71e309396a1b4bf5814c5e8c373e00e2f8084dc405fe70c6e1ee725df4cc7209e5713fd0cd9c1af6c45", 0xc0}, {&(0x7f0000000780)="9a0788789c0cd1c61fce4014b56d60785dc7845e32e7b27612a17044ca94761a7ad846030c299d81bd5f34b85d0b44032e93bcf14f965afdd2f4eb898a9755a1bb6a4ecc68c057907b622d3c44a59d709d2ae72edf2b4f0ffbba832a75aaf95ee28bde382e67783037058360a99be968dff3c6ce4e342d8af8215fe13e2cec0a52431d50fa2cf103698f102c96584d1d996339c645703db96615a6a15e26d070aa50db3e1203b8800b865a54fd6b8846657bc43942049de6a6c17f4b67b6d7a4c0", 0xc1}, {&(0x7f0000000940)="8de5ed36b1eb7ea37fbd694ceca4e18471a5b7cf69ced0958a384e7c70a8be744ffe53a129660aaab629e367656b68381a910463883ed50b5abe3ebcab5c6fda799fdf02b0a1fc261f0675c61fce6cf9b64560d9f80244685816c317522c88dcbba52cefbae4174ddd467fe5496eb2eca08459675fdf1ea7fc87598dbff2197d01b6e2d5c2a009354b31f60d46a39f9becd6ce", 0x93}, {&(0x7f0000000a00)="22fd37ce48b2af9383d7d5997c5ef6fdcded0c71577490fc1954e5026f99b658de85f5f5ea865e41865f83e83a3eac742d49ebcdc2104a5396a196d511d9b76920d11b2720fb1b604a7c3746fdd0026c61df5ecd7db103d0d970e2102e4d8a8b6ae38d3df0af985583ec25f26ee7ca510b6ca08abdc15a651558c69f6a07fc8aa9af7fb8ed8bd1ce9489d88161d264203b3061b162f8e03b00d9c122416c87e9fa3d6356173802b99878f930e9d65068022a2f41212afc773705ae7c223022a26858f63906e64950456228bf", 0xcc}], 0x5, &(0x7f0000000b80)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0x58, 0x29, 0x37, {0x88, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6a}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000c40)="cf1c3ba8bd9ced947ae1d76b9846a57934f1b5be88", 0x15}, {&(0x7f0000000c80)="66419881828bd14cd6ff257e82832cf8eb103b9139f919191a33d5f6dee60c3397fdb8e0416f7d7a981fff62ee658c3ce4a56576b897be25038f2aa78755f98b8696d689582c5f3de10808d75a4065530eeb137e77a6d0a35e24d220527c66082a3249998d94100478b60f84b7a2d4960db63f08ccd587ee0a95d9fa153bc7e80ac29a5731220c48bb7a13dd79a24cf3e13df7a8eb9d7db3c7f3db7c96168f98d0b469e006e6e239770bc4ea9bb3d31ca045e7155f86f38b2bd4b608df8eb75754abef8ac140de8fc41233a561f06534ae24f354f62d705d2e90b9c576e04ef62477a9fbcddd1202c4ba0a106f00735d92972c552609126082c8d281089795efd9e23aee2eb099d20110ad5beb77ca7317b41fde0068d440fec39faad7e9e30c16920cc3eac7b80b3298348bd9b3a8ad3ccd49e9d74fb52119340bd631b49f595ee2dd33bf6a4751a8da64c324e54bf65873a348e0ccbc5b5735ed0a47f3f6be3294e10969fd051129bea7bb5a9129db36741d175b9ddf639b194de59591593db7ded26729c7f0e83987cc1ff8e53e3449ea2067d5e325dc222c5c230cc72dd75dc4ca35999b35d237b318ceea7de1e0a43c54f39ec740484ed0d16355a2b05dc550c4a003ea57c21fb5ad3869b2f3d893850ca0ecba201a909ed356e6cd774f2feb874a6c2e302af6a689e9ae4c31b6f84ea6ea1cf8da8a39c9688732a02216c5eb8d665c0c5363a5e5f192cf911bab552b55fe5c15b637b6a81efc98ba1b45b043c7e6e9f32e2cde31351c6f90384f5b53212e2b901b999ca329334f954a1aba8b7e8cdc6964843d55dcc9731e48193a364d757964e47b425e98edd3b3e6b238f0f426d3b218935b7cb46f8e74ece2ce6d251a0282161f44feb485a167c5c0d9ee555f86d81777829b7c3b4a22ce3ee31c548afee7edf378632e5375f171c4cb20737894342007e52a04b763711a3bc3714342db693e94f709d46b4b51860c13edd5e188aeccb8fe5e5488062939bd14055991758bd96257f8afc274309afe9a2ddd3ec3f902dc95a37b4df932c1598c269473e7eae2f81dd22320003ee5016a622fadd0ff315295feb3043b05bcc35cad00edec4f987e385bedd02186e96f5644b6163f3aa57b49ea4d7fedfeefca6aa398bd1359515cbc97f6abfdbd875dc6044eef0b3d92df53a7b39933c2f2dcb2e6e1a495efc9e74d0fd6e560080e22fc75247b251337e58cf0ba84649d27fd6758cff58fa7f31656fb278c5972810275db3110e1bb8e48b8798a8e394a14028e22d72dae3bfa31ac8e71adefea7b2c20c04f14f5463995cddc265239c1e7c9386e6854445090773dd2354bab5a304ccfa47aad3fe07b67539ec42ffd742cbc803005307e671167d24b43ea1a6066f09be66c8259667312e92418a8a8b265e4e8bb95b221e8d62509f2c78814260a1f1d575b2e0e1dbd1aab35a00e9ee11e893dbf55cd7411478022666208a6eb638114214d04d84412b733e5935682155f7df463e5a3d1605535191d40334d644d1eb6f2ed04ec448347034681a5f72e7480ac6dee6be7e6c8cba9bc2fe63956d9b8c8404d3db1e8526ecc3ea2a5777cb3644d51738091dc4aed8daaec523f80e3d7412e3eb8e8bdd3d1488c18961c92c1dc5596095ca1fd542aece1acd9238364cf8d0caeb49613c037878958e4cc3803b6636d36c978d9c27cf466caf9061f7420ba2d943c065ce3ecf4f142c3bf973cfebaf5bf7d2f5500bf6608246596c23505aad5908b0996df94024e868e0ce89e490df0716b6a465aeb7617788d99197730055c3329e641efbb4f0da92bf92f62cd90619937974cb1b4237fa1eb6024ed317712a0de7b40ca45df77ef6832e0a878866db2c390b2a66aafe3a707871d13faaad1a1a89cd43cead9956a39660ebdda454a65d4eece3ca11a276681e3dd2fdfe2db1abf6a19385dca5cc06aecf51a3565c92d3a8d49678acab90fc32c61eb09a80468b3bb365894d7db2ad9512e4a4d7ad9eb5212391a90693f371554a3f088e0a486159a34dda8d2a07ae09c166016b56eb044a35ffa0e475d6fb9ecda5a002c87e95cdcafbf4e6caeeb2e972d1ddb78892223e3f9733ae71c7d9c35409ab1daec06a138be9eb939f1965eafabc4c32781033ec703c88c2373fb76788815bf0a5d0467b1a3dc28c89c6ab24f81e3af9e6eb0787a76b92d8e845955852a7c32720b0ed91712b40452e8af9e608ce06d627c431f468da89d90226209c898d1445ff3ef0b2903c48f8ec78b50baec01fcb54083c29173f946dca01d7f60702ddb32a07873f2ace8e8d7ba36046301666c9e38a98fd0b1995bc32c6567564f772f56b3cd067e9f009b6f5e1091d88bdee06d8da73913116c72b1180e773e9e4d003f68ded79695811ed7ebe42f44c9239cf5cf106dfb620086640186b33675ce285603ac612df6cdc64de903e635a03fa8519f087a39279d4df959012aaf7b055e09b6420be1b7cbbcc600b29a2ff71cef48e449a79f8de98a9ae5cbb9e1147a52cfd6369951873b4f167b57c8af7c3e782d40267d40731fd08f929671d1c3a19ddc33aab6d45e62ae1ed04819ecc228372831883e2e18d21b0c764e456195928a43f2074db62621aaec17b16ef267e2de35d05e595284ef3ba70755256a311c0758e8696a04812e485386cb17aec23dbe3dccd810c0a3600c6878a696295033dd7f3f1725d09bf778d3b2949748ffc8fe9c09765db8240ab07f176697afec8688b20e35440d50fb45071c517586fc79924ba43dcda6d3379b453e6cc70c73a80578108e7b8634c0cae3256c72a951aa34f2843d39aa948098805cac2f4721aae7adba53c3b091bb752823335259fac87f38f5085445fb4835fbfe15073d1f80fd94cef9e4db7c35bb2b14c567d0422a30c1801ad9f84b9682ad853444a3097d6a00169d032d00c28c7f7ac12e9fef9e1927ff578eb048994aca9c6d7e59867403232ed3c1fdccd10b0ca3d5fef12558b90c4631cf507eb3441ee88e2af70727ec3c3a3710fd2eacb8d812b9a4a64ee1ba750961e4e0bdaebccdaddb51412af5b0ca4ca5f02374a8b2f41717062209be9659c35e5db27838889b35bc5d30194327f18c14a0617db398780a682083b0e83bc836d0c6b80796d8e6259bb1e5b4d8ab33c4182f798ebb0e567b43d0c872e0473e219f5f2c208f83f6498dc2c2218001e8bf8abcd9ab30f0f690ee85bb2501177455f466d41c036d8d379b72f1a6fb07e816cc9fe9c61a1f20df2d59d061bb76cca43cf546db039abdb2c8fcdd9f6b80346de147d0c612e36cb06c69e4e2b2ce0a0890d62acb4dbbe580a571a9a44ea8d0690a39457c04604a7d369c757676bde76cd6724fe6576bf1d75db6126c78289042e082568ccec9bf75b03da73580542d62b778841dff3c4b6e838b6847ebbeee20c03642436ccc8d15c6c8146a611de1528bd308f690b529425d789cb493028961101584d322249f4da3aec512f879f850e6672551b85ba0ce2fd2529fb8412432a0d547e650e95fb23d4973237215770bd5d8d3d99b2386fc116c20fc50608755466ffa249962368ae0d5c18b1f1d0a5f1d43e0e35caf075c279d7141aeb425aa9902b6d0620b89deac226e6a3846ac26e3727220625f5e8da63acd796733865b1fc32907a5e7c02925724d88d45d0472a68cdc505f923f19dfb48a8ec95f895dcc4167e64075df19d2ff6b7224869dd8bd4f358eb2ff5e608574bbf5730b8ce050b2ee85a28380b63f2df93c9d39a8aa1cd9ceed0f7b4ff4ba534724a0806bca66e57846a97eb70d9d227a076113bd45ae707edb8d3769fa93204f886d854cb41488a0da029c58fe404e9ef46ea049ba3061933717400c2e779ab5edfe34b33060e395d10a906d5972d621335a2e4a85178193f6a31d973a037e7469d33c621cfbf84d7b8c8f3a9e033475df92aa23e6b2f8e733ac3498f2e811ef05b211a91f007fc0947cd4b9707caa4e5a7d77ebf67152094ca94930259092d647166c0bc4555c012d2fb8dba15d6facaec1a55526ba4ce3b98a9c304eece793ce89bc1d8f2e7f380c4155222d9e9bda8ca53eb47dc4a15e6b53ceac7b8bc4a566790c9c6a78a7164faed2de8bba55d5766c40b0c8d5978df2205f3549b21ccc65bdd1a68af2eca0e0d07b2bbb5d9e35faf3ab89fba190b0c6028ffe5c7f47c6c9af317cc77ff4ed833bd7b59f960996c54555f12227636ef846f374b5b553bb161cfee3293d87ed6101d7b6bc6b1ed036412c976ba9e400940d56fff0e5db1e0df2484f0abb59c5ffc331335d0217e9d586b58fedf004eedd31b5d298169fe909e11b0b33fb37cc0a584c813ba1ae23e77eab61908625d079ef1ca2e943ce4a069ca1aa8ccbb938593608fb6d6e03b5485d8e77e09d28359c51b6b5ed0d7e6bfc0e48fa9b95b5717c1cc1271123ad73b2eb941b3ad20f6394bb49b149ca0fdd8941cbe84e7f7a71c076ddad599dfa2edead26327fddeac878ae0c6085c587cf3daaf29bd08cff9e33dae0895abb00a4a0c3c2434d17ce3dff7210950b6fe82dfe597c09553c0877f03be1a8d15bebb9ea4f4d0a3917b4839f8299383a1451ff0ad1d23642d416e8117cc6a9b3e2af905850c5a900020b74fddd50cb7110b34371b6acf6fd50222baa13c4649d1360e27f20af8efe7b3a3452372c2bc67d52a0575ad26aa37691def17a89b413e7b59458a92bd63c958e6ee44b657af9d6569b221b32dbc2731cf7db0a5d7615c06402a435e727c10e5eafdc76cd43feece36d8985bfab73d9eaa4c22c8c54b821825dfea7322ead947de81db1b4b40f2212b325c495b31bb993a3df6975b92df419695a002dc25aa089c71b09a6023deb7341454ab9ea88dcdf18f73189adbef4723590e2ff18551c6fb829d00a2f75424fcf2e5de05271cd4fdb7e54943e33a74a75d33c0efacdf69b73cabee85c3395015233f7ebb882e12d0331726125f290e9c86b4a819b0cda62080870b1105cd0af144d29f74f9beca3ec4578080c291045ad361c40a8978e00e82d391221e3e4d92992b19c770df369bd702aecccc2d01417e6ac4cf59107e58a24e4ee3e6a66a2ccb1568d5413c382f06fbb0221e617a78ddd4eb39e84a774b10431094d5bf0de71f4ed84f1e21ad35e720da92a4616d6b8f33e14ad9b77c8c7d577ff246b580b8c3f1ab26529e46088416933f055be46fa31d125253a418a0c93fb0b5ffcfc3e1f06fcabb98e13d9e2fd2305147141a0bc9ed3c29987b0127c69ade777bb3c5f6f44d8dd9bae0b8decd4ebf71c5223b502bac2791b248030e496c705de084384d3b69e255d7a48685be9a86b41fa2dc4e0ff59296b966da9a5b13ed2e7eb795f26735ee651270b7996e2e9fa0ccc5d7450d7106c4467692aa25f550e147c123d4407b32695e5a005f1230fe1e37dce9dc478e0bcd68ec17608400a6226e014cf1ee8b8e38fcaa7f0f606eb8ea22119f6fa1c76ff8d571f387fcdc08773329a5a19448a45b1efa6d21ec4c995a660bcd25e91a47c826d1c4f26959e3970a898b62d13c6a9b8232d55b9425f2c120b20ec63356af0effbb85344d3a6e42cc6ac59681664ace89956386517f172211f60ffe254ed236cc7edc3b659ca66030154ae2a415d7e35727255d4a8f5019f993d9a5e1676068a302bf4ab9e889f063f65d6dbc6507594d5b8240f4d0c8133d222addfd4e36180fe030f836590aaa92c6d6e0a2bb843b1487585a0d73beb91db5eaff00972773c6e97c4a266ed186f4e1b2ca3adb862", 0x1000}], 0x2, &(0x7f0000001dc0)=[@hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, @loopback]}}}, @hopopts={{0x150, 0x29, 0x36, {0xff, 0x26, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x48, {0x3, 0x10, 0x5, 0x3, [0x10, 0x2, 0x1, 0x1, 0x5, 0x8, 0x2, 0x0]}}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @generic={0x9, 0xc7, "9f8ae35c64994b5b4c22d7c1e1d5fd749d45d1052167120f2d4702f37c8a78ba268ee408004468b8d7e8c3d587dbfafd3fa01eee756c59d40f070ec5dca97d7a8cde30f396a0feeb65dc578f3ed70e6ea67098f86b6a5c23c53db82f9ae4505e4ce46799e469cf713e513ba721212d6449d069dfe337dbbba83f8352e8e8f230a4be331f6d231027732b4c78428e23c57ad3b2488bd96d9618a4310238b2d2df64797e06fac2108b2912bf852a80fad112e3748acebeb76f69e3494e935f6649a60e4cd23c66f2"}]}}}], 0x200}}], 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000103c0)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x3, 0xfff2}, {0xfff3, 0xffff}, {0x10, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r8, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e21, 0x40, @private1, 0x7}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000040007f712268010000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r9, &(0x7f00000003c0), 0xfffffffffffff0e, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 14.977889499s ago: executing program 3 (id=165): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x449) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000480)="07003d8cfa7dbecb9093317efc4e550fe40f9d55dfe5b573b9861c207b358592cca77412039e58ef41cb725dc463f283798900589cc275a3f91190a5ea9235ae83bfac8ecc05032000246ad645e09c87c5a817ef4b935f4509ccfb39e1106269dcd6a2a0b9abd30f947e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) execve(0x0, 0x0, 0x0) 14.976630589s ago: executing program 4 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x6, 0x2, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0xe5c, 0x80000) 14.709064293s ago: executing program 3 (id=168): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}], 0x3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 14.208079726s ago: executing program 0 (id=169): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r0, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000007c0)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40045304, &(0x7f0000000280)={{0x6, 0x81}, 'port1\x00', 0x19, 0x21000, 0x8, 0x9, 0x100, 0x0, 0x40, 0x0, 0x6, 0x1f}) tkill(0x0, 0x7) 12.23091717s ago: executing program 3 (id=170): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 12.067909434s ago: executing program 4 (id=171): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 11.72960715s ago: executing program 2 (id=173): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x48000) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 11.728932484s ago: executing program 3 (id=174): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000240)={0xe1, 0x6}, 0x1) 11.397716416s ago: executing program 0 (id=176): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 7.579415822s ago: executing program 3 (id=177): socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) 7.57915778s ago: executing program 1 (id=178): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x449) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000480)="07003d8cfa7dbecb9093317efc4e550fe40f9d55dfe5b573b9861c207b358592cca77412039e58ef41cb725dc463f283798900589cc275a3f91190a5ea9235ae83bfac8ecc05032000246ad645e09c87c5a817ef4b935f4509ccfb39e1106269dcd6a2a0b9abd30f947e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) execve(0x0, 0x0, 0x0) 7.266190405s ago: executing program 2 (id=179): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x4, 0x11, r0, 0x100000000) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000001180)=[{0x200, 0x4000, 0x0, 0x0}, {0x2, 0x800, 0x0, 0x0}, {0xec63, 0x0, 0x0, 0x0}], 0x3}) 7.075906987s ago: executing program 4 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20044052) 6.990198952s ago: executing program 1 (id=181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x6, 0x2, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 6.903137878s ago: executing program 4 (id=182): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fc, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x800000006}, 0x0, 0x0) 6.822998318s ago: executing program 4 (id=183): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 6.10068528s ago: executing program 0 (id=184): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 6.099446478s ago: executing program 1 (id=185): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.734908166s ago: executing program 1 (id=186): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r0, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000007c0)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40045304, &(0x7f0000000280)={{0x6, 0x81}, 'port1\x00', 0x19, 0x21000, 0x8, 0x9, 0x100, 0x0, 0x40, 0x0, 0x6, 0x1f}) tkill(0x0, 0x7) 5.699641708s ago: executing program 3 (id=187): socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) unshare(0x64000d00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000140), 0x0}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/cpuinfo\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0xffffffffffffffff, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x64, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x1, 0x71bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x95800000, 0xe61e}}]}]}]}, 0x54}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000000020121000000000000000d0a000000"], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000206050000000000000000bc735e06f6e9ed84d1c90c8d7f3a000000000005000100070000000900020073797a31000000000c000300686173683a697000050005000a0000000500040001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 5.585997915s ago: executing program 2 (id=188): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a80648c251b0908b5e9d1", 0x14}], 0x1}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5.232020514s ago: executing program 0 (id=189): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x48000) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 5.107912267s ago: executing program 2 (id=190): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.668795645s ago: executing program 1 (id=191): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x449) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000480)="07003d8cfa7dbecb9093317efc4e550fe40f9d55dfe5b573b9861c207b358592cca77412039e58ef41cb725dc463f283798900589cc275a3f91190a5ea9235ae83bfac8ecc05032000246ad645e09c87c5a817ef4b935f4509ccfb39e1106269dcd6a2a0b9abd30f947e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) execve(0x0, 0x0, 0x0) 354.11504ms ago: executing program 0 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20044052) 299.346538ms ago: executing program 2 (id=193): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fc, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x800000006}, 0x0, 0x0) 130.920918ms ago: executing program 1 (id=194): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 85.194ms ago: executing program 0 (id=195): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 0s ago: executing program 2 (id=196): socket$nl_generic(0x10, 0x3, 0x10) semop(0x0, &(0x7f0000000000)=[{0x0, 0x400, 0x1000}, {0x1, 0xbbdd, 0x1000}, {0x0, 0x7fff, 0x800}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x7fff]) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891ab2"], 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 82.325898][ T5781] cgroup: Unknown subsys name 'net' [ 82.566735][ T5781] cgroup: Unknown subsys name 'cpuset' [ 82.621687][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.496906][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.915183][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.920999][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.935538][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.936322][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.937269][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.939446][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.940057][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.940735][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.941948][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.943598][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.946720][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.947579][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.948448][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.952269][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.952512][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.957463][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.980448][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.988309][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.998005][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.999775][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.009795][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.021568][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.025626][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.045384][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.052465][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.109694][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 88.203789][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 88.286100][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 88.298743][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 88.311217][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 88.534832][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.535810][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.535947][ T5795] bridge_slave_0: entered allmulticast mode [ 88.538057][ T5795] bridge_slave_0: entered promiscuous mode [ 88.604049][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.604179][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.604343][ T5795] bridge_slave_1: entered allmulticast mode [ 88.606163][ T5795] bridge_slave_1: entered promiscuous mode [ 88.681301][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.681502][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.681624][ T5793] bridge_slave_0: entered allmulticast mode [ 88.683476][ T5793] bridge_slave_0: entered promiscuous mode [ 88.766981][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.767188][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.767419][ T5793] bridge_slave_1: entered allmulticast mode [ 88.769449][ T5793] bridge_slave_1: entered promiscuous mode [ 88.840222][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.864090][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.864262][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.864385][ T5797] bridge_slave_0: entered allmulticast mode [ 88.866225][ T5797] bridge_slave_0: entered promiscuous mode [ 88.868107][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.868229][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.868391][ T5796] bridge_slave_0: entered allmulticast mode [ 88.870459][ T5796] bridge_slave_0: entered promiscuous mode [ 88.880965][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.881653][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.882161][ T5794] bridge_slave_0: entered allmulticast mode [ 88.889169][ T5794] bridge_slave_0: entered promiscuous mode [ 88.922302][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.964610][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.964748][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.964919][ T5797] bridge_slave_1: entered allmulticast mode [ 88.967150][ T5797] bridge_slave_1: entered promiscuous mode [ 88.968571][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.968703][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.969053][ T5796] bridge_slave_1: entered allmulticast mode [ 88.970807][ T5796] bridge_slave_1: entered promiscuous mode [ 89.025227][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.025337][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.025470][ T5794] bridge_slave_1: entered allmulticast mode [ 89.027314][ T5794] bridge_slave_1: entered promiscuous mode [ 89.072966][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.153012][ T5803] Bluetooth: hci3: command tx timeout [ 89.153009][ T5806] Bluetooth: hci2: command tx timeout [ 89.214030][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.231181][ T5803] Bluetooth: hci0: command tx timeout [ 89.231227][ T5806] Bluetooth: hci1: command tx timeout [ 89.231387][ T5803] Bluetooth: hci4: command tx timeout [ 89.286371][ T5795] team0: Port device team_slave_0 added [ 89.308281][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.317044][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.330133][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.340978][ T5795] team0: Port device team_slave_1 added [ 89.373564][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.375985][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.378406][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.425076][ T5793] team0: Port device team_slave_0 added [ 89.488252][ T5793] team0: Port device team_slave_1 added [ 89.534156][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.534173][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.534200][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.596223][ T5797] team0: Port device team_slave_0 added [ 89.598484][ T5796] team0: Port device team_slave_0 added [ 89.600744][ T5794] team0: Port device team_slave_0 added [ 89.618395][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.618408][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.618426][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.668595][ T5797] team0: Port device team_slave_1 added [ 89.670526][ T5796] team0: Port device team_slave_1 added [ 89.679701][ T5794] team0: Port device team_slave_1 added [ 89.697418][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.697431][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.697449][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.776307][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.776329][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.776348][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.870466][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.870481][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.870500][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.876291][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.876336][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.876413][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.892111][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.892171][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.892269][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.975270][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.975323][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.975391][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.979240][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.979281][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.979349][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.109203][ T5795] hsr_slave_0: entered promiscuous mode [ 90.117349][ T5795] hsr_slave_1: entered promiscuous mode [ 90.138201][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.138215][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.138234][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.572276][ T5793] hsr_slave_0: entered promiscuous mode [ 90.573267][ T5793] hsr_slave_1: entered promiscuous mode [ 90.573996][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 90.574076][ T5793] Cannot create hsr debugfs directory [ 90.691753][ T5796] hsr_slave_0: entered promiscuous mode [ 90.692724][ T5796] hsr_slave_1: entered promiscuous mode [ 90.693414][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 90.693433][ T5796] Cannot create hsr debugfs directory [ 90.730345][ T5794] hsr_slave_0: entered promiscuous mode [ 90.732934][ T5794] hsr_slave_1: entered promiscuous mode [ 90.735351][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 90.735431][ T5794] Cannot create hsr debugfs directory [ 90.803880][ T5797] hsr_slave_0: entered promiscuous mode [ 90.804852][ T5797] hsr_slave_1: entered promiscuous mode [ 90.805517][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 90.805534][ T5797] Cannot create hsr debugfs directory [ 91.231392][ T5115] Bluetooth: hci2: command tx timeout [ 91.231560][ T5803] Bluetooth: hci3: command tx timeout [ 91.311443][ T5803] Bluetooth: hci1: command tx timeout [ 91.311477][ T5115] Bluetooth: hci4: command tx timeout [ 91.311505][ T5115] Bluetooth: hci0: command tx timeout [ 91.699688][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.739976][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.776642][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.829815][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.937673][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.956684][ T808] cfg80211: failed to load regulatory.db [ 91.981218][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.024496][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.073346][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.197611][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.244160][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.279685][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.313095][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.455955][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.501918][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.535252][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.585665][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.712730][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.720866][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.773004][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.815509][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.853246][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.939155][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.976196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.977256][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.010633][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.043227][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.043386][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.112342][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.162653][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.162812][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.166583][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.209831][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.209980][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.283166][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.305543][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.312222][ T5806] Bluetooth: hci2: command tx timeout [ 93.312565][ T5803] Bluetooth: hci3: command tx timeout [ 93.338402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.347218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.401343][ T5806] Bluetooth: hci1: command tx timeout [ 93.401377][ T5806] Bluetooth: hci4: command tx timeout [ 93.401498][ T5803] Bluetooth: hci0: command tx timeout [ 93.444374][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.444733][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.533729][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.579986][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.605386][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.605522][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.678041][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.678186][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.749371][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.799176][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.801623][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.850401][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.850660][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.876082][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.199458][ T5795] veth0_vlan: entered promiscuous mode [ 94.264833][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.278553][ T5795] veth1_vlan: entered promiscuous mode [ 94.344021][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.532328][ T5795] veth0_macvtap: entered promiscuous mode [ 94.554985][ T5793] veth0_vlan: entered promiscuous mode [ 94.579973][ T5795] veth1_macvtap: entered promiscuous mode [ 94.630344][ T5793] veth1_vlan: entered promiscuous mode [ 94.713843][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.737401][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.777935][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.799785][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.830493][ T4883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.846702][ T4883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.850120][ T4883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.877794][ T4883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.898950][ T5793] veth0_macvtap: entered promiscuous mode [ 94.949857][ T5793] veth1_macvtap: entered promiscuous mode [ 95.118533][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.138282][ T5797] veth0_vlan: entered promiscuous mode [ 95.187368][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.202736][ T5796] veth0_vlan: entered promiscuous mode [ 95.204348][ T5794] veth0_vlan: entered promiscuous mode [ 95.210261][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.210285][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.260882][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.271709][ T5797] veth1_vlan: entered promiscuous mode [ 95.279309][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.299087][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.328056][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.347682][ T5796] veth1_vlan: entered promiscuous mode [ 95.360149][ T5794] veth1_vlan: entered promiscuous mode [ 95.374237][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.374256][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.391216][ T5803] Bluetooth: hci3: command tx timeout [ 95.391248][ T5803] Bluetooth: hci2: command tx timeout [ 95.471310][ T5806] Bluetooth: hci1: command tx timeout [ 95.471357][ T5803] Bluetooth: hci4: command tx timeout [ 95.471673][ T5115] Bluetooth: hci0: command tx timeout [ 95.663899][ T5797] veth0_macvtap: entered promiscuous mode [ 95.729197][ T5797] veth1_macvtap: entered promiscuous mode [ 95.729460][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.729477][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.750413][ T5796] veth0_macvtap: entered promiscuous mode [ 95.774342][ T5794] veth0_macvtap: entered promiscuous mode [ 95.777138][ T5917] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 95.974288][ T5796] veth1_macvtap: entered promiscuous mode [ 95.996045][ T5794] veth1_macvtap: entered promiscuous mode [ 96.056563][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.056585][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.093843][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.137870][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.164137][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.185560][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.213872][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.213950][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.240672][ T1551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.278864][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.280146][ T1551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.308572][ T1551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.333186][ T1551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.337958][ T1551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.378340][ T1551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.455863][ T1551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.460059][ T1551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.488396][ T1551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.676454][ T1551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.884510][ T1551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.511375][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.536559][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.536574][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.565239][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.565260][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.681173][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 97.683331][ T811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.683350][ T811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.708705][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.708796][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.708922][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 97.708981][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.787365][ T31] usb 4-1: config 0 descriptor?? [ 97.859469][ T31] hub 4-1:0.0: USB hub found [ 97.924780][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.924812][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.027134][ T31] hub 4-1:0.0: 26 ports detected [ 98.031212][ T31] hub 4-1:0.0: insufficient power available to use all downstream ports [ 98.199986][ T811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.200008][ T811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.344815][ T4883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.344837][ T4883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.726434][ T31] usb 4-1: USB disconnect, device number 2 [ 99.178104][ T5945] overlayfs: missing 'lowerdir' [ 99.428783][ T5949] fuse: Bad value for 'fd' [ 99.496691][ T5939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.847629][ T5959] process 'syz.1.13' launched './file0' with NULL argv: empty string added [ 100.339465][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.350295][ T5954] team0: Port device batadv1 added [ 100.571071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.732011][ T5970] syz.4.14 uses obsolete (PF_INET,SOCK_PACKET) [ 100.951196][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.101183][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 101.103732][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.103756][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.103772][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 101.103802][ T10] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 101.103819][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.110583][ T10] usb 3-1: config 0 descriptor?? [ 101.600126][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 101.600218][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 101.661982][ T10] usb 3-1: USB disconnect, device number 2 [ 102.537432][ T5975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.303767][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 103.352326][ T5979] bridge0: entered promiscuous mode [ 103.352511][ T5979] macsec1: entered promiscuous mode [ 103.354366][ T5979] bridge0: port 3(macsec1) entered blocking state [ 103.376916][ T5979] bridge0: port 3(macsec1) entered disabled state [ 103.377898][ T5979] macsec1: entered allmulticast mode [ 103.377943][ T5979] bridge0: entered allmulticast mode [ 103.487827][ T5979] macsec1: left allmulticast mode [ 103.487846][ T5979] bridge0: left allmulticast mode [ 103.582571][ T5979] bridge0: left promiscuous mode [ 104.305045][ T5990] input: syz0 as /devices/virtual/input/input5 [ 104.523976][ T5993] faux_driver vgem: [drm] Unknown color mode 262325; guessing buffer size. [ 105.401687][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.645593][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 105.668850][ T6007] team0: entered promiscuous mode [ 105.668867][ T6007] team_slave_0: entered promiscuous mode [ 105.669026][ T6007] team_slave_1: entered promiscuous mode [ 105.717435][ T6007] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.719927][ T6007] team0: left promiscuous mode [ 105.719941][ T6007] team_slave_0: left promiscuous mode [ 105.720099][ T6007] team_slave_1: left promiscuous mode [ 106.714839][ T6020] netlink: 56 bytes leftover after parsing attributes in process `syz.1.29'. [ 108.735694][ T6039] fuse: Bad value for 'fd' [ 109.673591][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.37'. [ 111.119347][ T31] IPVS: starting estimator thread 0... [ 111.361476][ T6072] IPVS: using max 8 ests per chain, 19200 per kthread [ 111.554095][ T6077] fuse: Bad value for 'fd' [ 114.073443][ T36] audit: type=1326 audit(1775816069.267:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a24c819 code=0x7ffc0000 [ 114.073501][ T36] audit: type=1326 audit(1775816069.267:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a24c819 code=0x7ffc0000 [ 114.267158][ T36] audit: type=1326 audit(1775816069.457:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d0a24c819 code=0x7ffc0000 [ 114.267210][ T36] audit: type=1326 audit(1775816069.457:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a24c819 code=0x7ffc0000 [ 114.267241][ T36] audit: type=1326 audit(1775816069.457:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a24c819 code=0x7ffc0000 [ 114.429778][ T36] audit: type=1326 audit(1775816069.577:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4d0a24c819 code=0x7ffc0000 [ 114.614768][ T36] audit: type=1326 audit(1775816069.807:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a24c819 code=0x7ffc0000 [ 114.614824][ T36] audit: type=1326 audit(1775816069.807:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a24c819 code=0x7ffc0000 [ 115.249597][ T6118] fuse: Bad value for 'fd' [ 116.441263][ T5815] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.630070][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.630095][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.630128][ T5815] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 116.630144][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.681559][ T5868] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.755109][ T5815] usb 1-1: config 0 descriptor?? [ 116.851280][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 116.853845][ T5868] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 116.853903][ T5868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.853927][ T5868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.853952][ T5868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.853976][ T5868] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.854018][ T5868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.854063][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.259082][ T5815] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 117.973219][ T5815] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 118.381051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.457417][ T5815] cp2112 0003:10C4:EA90.0001: Part Number: 0x63 Device Version: 0xD4 [ 118.543562][ T5815] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 118.563225][ T5815] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 118.841058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.901044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.021045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.201049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.271054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.401046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.810341][ T31] usb 5-1: USB disconnect, device number 2 [ 120.184808][ T6156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.204166][ T6156] overlayfs: missing 'lowerdir' [ 120.544960][ T5885] usb 1-1: USB disconnect, device number 2 [ 120.773858][ T6161] fuse: Invalid rootmode [ 121.260827][ T6171] netlink: 'syz.4.77': attribute type 4 has an invalid length. [ 124.265313][ T6192] ptrace attach of "./syz-executor exec"[5797] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ./file0 °ÿ Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ cgroup.controllers [ 126.265653][ T6206] fuse: Invalid rootmode [ 129.641182][ T5885] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.816443][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 129.855688][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.855725][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.855742][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.855771][ T5885] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 129.855788][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.109380][ T5885] usb 4-1: config 0 descriptor?? [ 130.455098][ T6245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.529271][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 130.529363][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.565839][ T5885] usb 4-1: USB disconnect, device number 3 [ 130.631811][ T6247] fuse: Invalid rootmode [ 130.733051][ T6251] overlayfs: missing 'lowerdir' [ 131.084186][ T6255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.084206][ T6255] IPv6: NLM_F_CREATE should be set when creating new route [ 131.086008][ T6255] lo: entered allmulticast mode [ 131.210891][ T6255] tunl0: entered allmulticast mode [ 131.268842][ T6255] gre0: entered allmulticast mode [ 131.431712][ T6255] gretap0: entered allmulticast mode [ 131.620066][ T6255] erspan0: entered allmulticast mode [ 131.892053][ T6255] ip_vti0: entered allmulticast mode [ 133.242105][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.242201][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.910195][ T6255] ip6_vti0: entered allmulticast mode [ 133.929940][ T6255] sit0: entered allmulticast mode [ 133.993408][ T6255] ip6tnl0: entered allmulticast mode [ 133.998024][ T6255] ip6gre0: entered allmulticast mode [ 134.099979][ T6255] syz_tun: entered allmulticast mode [ 134.163202][ T6255] ip6gretap0: entered allmulticast mode [ 134.167325][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.168435][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.170979][ T6255] bridge0: entered allmulticast mode [ 134.255186][ T6255] vcan0: entered allmulticast mode [ 134.302121][ T6255] bond0: entered allmulticast mode [ 134.302139][ T6255] bond_slave_0: entered allmulticast mode [ 134.302153][ T6255] bond_slave_1: entered allmulticast mode [ 134.305640][ T6255] team0: entered allmulticast mode [ 134.305654][ T6255] team_slave_0: entered allmulticast mode [ 134.305667][ T6255] team_slave_1: entered allmulticast mode [ 134.310660][ T6255] dummy0: entered allmulticast mode [ 134.652184][ T6255] nlmon0: entered allmulticast mode [ 134.706838][ T6255] caif0: entered allmulticast mode [ 134.707436][ T6255] batadv0: entered allmulticast mode [ 134.726140][ T6255] vxcan0: entered allmulticast mode [ 134.773563][ T6255] vxcan1: entered allmulticast mode [ 134.775917][ T6255] veth0: entered allmulticast mode [ 134.852605][ T6255] veth1: entered allmulticast mode [ 134.924974][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 134.983424][ T6255] wg0: entered allmulticast mode [ 135.121329][ T6255] wg1: entered allmulticast mode [ 135.221268][ T6255] wg2: entered allmulticast mode [ 135.224176][ T6255] veth0_to_bridge: entered allmulticast mode [ 135.281961][ T6285] fuse: Bad value for 'rootmode' [ 135.302651][ T6255] veth1_to_bridge: entered allmulticast mode [ 135.310164][ T6255] veth0_to_bond: entered allmulticast mode [ 135.386612][ T6255] veth1_to_bond: entered allmulticast mode [ 135.423281][ T6255] veth0_to_team: entered allmulticast mode [ 135.428470][ T6255] veth1_to_team: entered allmulticast mode [ 135.503695][ T6255] veth0_to_batadv: entered allmulticast mode [ 135.537519][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.537605][ T6255] batadv_slave_0: entered allmulticast mode [ 135.573651][ T6255] veth1_to_batadv: entered allmulticast mode [ 135.594022][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.594110][ T6255] batadv_slave_1: entered allmulticast mode [ 135.651596][ T6255] xfrm0: entered allmulticast mode [ 135.683793][ T6255] veth0_to_hsr: entered allmulticast mode [ 135.686827][ T6255] hsr_slave_0: entered allmulticast mode [ 135.688910][ T6255] veth1_to_hsr: entered allmulticast mode [ 135.729999][ T6255] hsr_slave_1: entered allmulticast mode [ 135.747662][ T6255] hsr0: entered allmulticast mode [ 135.778205][ T6255] veth1_virt_wifi: entered allmulticast mode [ 135.803737][ T6255] veth0_virt_wifi: entered allmulticast mode [ 135.823620][ T6255] virt_wifi0: entered allmulticast mode [ 135.824071][ T6255] veth1_vlan: entered allmulticast mode [ 135.851196][ T6255] veth0_vlan: entered allmulticast mode [ 135.892004][ T6255] vlan0: entered allmulticast mode [ 135.892205][ T6255] vlan1: entered allmulticast mode [ 135.951955][ T6255] macvlan0: entered allmulticast mode [ 136.011783][ T6255] macvlan1: entered allmulticast mode [ 136.016267][ T6255] ipvlan0: entered allmulticast mode [ 136.016480][ T6255] ipvlan1: entered allmulticast mode [ 136.016891][ T6255] veth1_macvtap: entered allmulticast mode [ 136.062109][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.073623][ T6255] veth0_macvtap: entered allmulticast mode [ 136.164116][ T6255] macvtap0: entered allmulticast mode [ 136.178214][ T6255] macsec0: entered allmulticast mode [ 136.211336][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 136.213950][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.213981][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.214005][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 136.214046][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 136.214071][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.287479][ T10] usb 5-1: config 0 descriptor?? [ 136.311695][ T6255] geneve0: entered allmulticast mode [ 136.581375][ T6255] geneve1: entered allmulticast mode [ 137.477957][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 137.478090][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 137.498038][ T10] usb 5-1: USB disconnect, device number 3 [ 137.581897][ T6255] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 137.681241][ T6255] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 137.721635][ T6255] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 137.801287][ T6255] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 139.050163][ T6255] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 139.086205][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.116'. [ 139.440626][ T6255] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 143.355738][ T67] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.441605][ T6320] fuse: Bad value for 'rootmode' [ 143.484445][ T67] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.510655][ T67] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.510705][ T67] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.206268][ T6336] netlink: 'syz.2.124': attribute type 4 has an invalid length. [ 144.841242][ T5934] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.121066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.171151][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 145.431061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.901854][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.901891][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.901915][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 146.901958][ T5934] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 146.901983][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.483847][ T5934] usb 5-1: config 0 descriptor?? [ 147.913829][ T5934] usbhid 5-1:0.0: can't add hid device: -71 [ 147.913957][ T5934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 147.981203][ T5934] usb 5-1: USB disconnect, device number 4 [ 148.846253][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 153.544567][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 153.640336][ T6407] fuse: Bad value for 'rootmode' [ 153.783345][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.135'. [ 156.405552][ T6424] process '/newroot/31/file0' started with executable stack [ 156.548039][ T6429] fuse: Invalid rootmode [ 156.883959][ T6431] loop2: detected capacity change from 0 to 7 [ 156.985502][ T6431] Dev loop2: unable to read RDB block 7 [ 156.986006][ T6431] loop2: unable to read partition table [ 157.048901][ T6431] loop2: partition table beyond EOD, truncated [ 157.049035][ T6431] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 160.282385][ T6444] fuse: Unknown parameter 'use00000000000000000000' [ 160.862920][ T6461] fuse: Invalid rootmode [ 162.234370][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.153'. [ 162.968727][ T6473] loop2: detected capacity change from 0 to 7 [ 162.984594][ T6473] Dev loop2: unable to read RDB block 7 [ 162.984642][ T6473] loop2: unable to read partition table [ 162.984866][ T6473] loop2: partition table beyond EOD, truncated [ 162.986808][ T6473] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 163.300681][ T6480] netlink: 'syz.1.158': attribute type 4 has an invalid length. [ 166.476465][ T6484] fuse: Unknown parameter 'use00000000000000000000' [ 168.081528][ T5784] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 168.251087][ T5784] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 168.251119][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.251139][ T5784] usb 2-1: Product: syz [ 168.251155][ T5784] usb 2-1: Manufacturer: syz [ 168.251170][ T5784] usb 2-1: SerialNumber: syz [ 168.405802][ T6499] fuse: Bad value for 'rootmode' [ 169.877539][ T5784] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 169.877604][ T5784] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 169.877627][ T5784] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 170.793224][ T5784] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 170.841797][ T5784] usb 2-1: USB disconnect, device number 2 [ 171.293884][ T6514] fuse: Unknown parameter 'use00000000000000000000' [ 173.897619][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 176.111136][ T5884] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.201162][ T5942] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 176.261122][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 176.267823][ T5884] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 176.267855][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.309234][ T5884] usb 4-1: config 0 descriptor?? [ 176.351470][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 176.374058][ T5942] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 176.374091][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.374113][ T5942] usb 3-1: Product: syz [ 176.374128][ T5942] usb 3-1: Manufacturer: syz [ 176.374143][ T5942] usb 3-1: SerialNumber: syz [ 176.387916][ T5884] as10x_usb: device has been detected [ 176.390806][ T5884] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 176.433008][ T5942] usb 3-1: config 0 descriptor?? [ 176.485073][ T5942] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 176.485486][ T5942] dvb-usb: bulk message failed: -22 (4/0) [ 176.485504][ T5942] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 176.485634][ T5942] dvb-usb: bulk message failed: -22 (5/0) [ 176.485648][ T5942] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 176.512233][ T5884] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 176.543379][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.558342][ T5942] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 176.558460][ T5942] usb 3-1: media controller created [ 176.706463][ T5884] as10x_usb: error during firmware upload part1 [ 176.706956][ T5884] Registered device nBox DVB-T Dongle [ 176.818337][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.846701][ T5884] usb 4-1: USB disconnect, device number 4 [ 176.983985][ T5942] usb 3-1: selecting invalid altsetting 3 [ 176.984008][ T5942] ttusb2: set interface to alts=3 failed [ 177.144388][ T5884] Unregistered device nBox DVB-T Dongle [ 177.156984][ T6551] warning: `syz.1.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.200886][ T5942] DVB: Unable to find symbol tda10086_attach() [ 177.200902][ T5942] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 177.210000][ T5942] dvb-usb: bulk message failed: -22 (4/0) [ 177.210064][ T5942] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 177.210431][ T5942] dvb-usb: bulk message failed: -22 (5/0) [ 177.210474][ T5942] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 177.210651][ T5942] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 177.276470][ T5884] as10x_usb: device has been disconnected [ 177.327124][ T5942] usb 3-1: USB disconnect, device number 3 [ 177.612236][ T5942] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 177.672085][ T6561] netlink: 48 bytes leftover after parsing attributes in process `syz.3.187'. [ 178.394230][ T6566] loop2: detected capacity change from 0 to 7 [ 178.404408][ T6566] Dev loop2: unable to read RDB block 7 [ 178.404783][ T6566] loop2: unable to read partition table [ 178.407714][ T6566] loop2: partition table beyond EOD, truncated [ 178.407790][ T6566] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 183.231244][ T5934] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 183.371218][ T5868] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 183.407317][ T5934] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 183.407348][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.429861][ T5934] usb 2-1: config 0 descriptor?? [ 183.442697][ T5884] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 183.468221][ T5934] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 183.541267][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 183.543302][ T5868] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 183.543322][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.600353][ T5868] usb 1-1: config 0 descriptor?? [ 183.611421][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 183.614629][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.614662][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.614701][ T5884] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.614724][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.733909][ T5884] usb 3-1: config 0 descriptor?? [ 183.758963][ T5884] hub 3-1:0.0: USB hub found [ 183.768625][ T5868] as10x_usb: device has been detected [ 183.788021][ T5868] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 183.900016][ T5934] gspca_cpia1: usb_control_msg 03, error -71 [ 183.900448][ T5934] gspca_cpia1: usb_control_msg 01, error -71 [ 183.900464][ T5934] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 183.928451][ T5868] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 183.953173][ T5934] usb 2-1: USB disconnect, device number 3 [ 183.990299][ T6580] INFO: trying to register non-static key. [ 183.990308][ T6580] The code is fine but needs lockdep annotation, or maybe [ 183.990314][ T6580] you didn't initialize this object before use? [ 183.990319][ T6580] turning off the locking correctness validator. [ 183.990343][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.990365][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.990386][ T6580] Call Trace: [ 183.990392][ T6580] [ 183.990398][ T6580] dump_stack_lvl+0xe8/0x150 [ 183.990434][ T6580] assign_lock_key+0x133/0x150 [ 183.990452][ T6580] register_lock_class+0xcc/0x2e0 [ 183.990468][ T6580] __lock_acquire+0xad/0x2cf0 [ 183.990483][ T6580] ? __lock_acquire+0x6b5/0x2cf0 [ 183.990500][ T6580] ? do_raw_spin_lock+0x12b/0x2f0 [ 183.990525][ T6580] lock_acquire+0xf0/0x2e0 [ 183.990538][ T6580] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 183.990560][ T6580] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 183.990581][ T6580] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 183.990600][ T6580] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 183.990625][ T6580] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 183.990644][ T6580] ? lockdep_hardirqs_on+0x7a/0x110 [ 183.990663][ T6580] as102_dvb_dmx_start_feed+0x70/0x290 [ 183.990684][ T6580] dmx_section_feed_start_filtering+0x518/0x6c0 [ 183.990704][ T6580] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 183.990730][ T6580] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 183.990754][ T6580] dvb_demux_do_ioctl+0x473/0x540 [ 183.990777][ T6580] dvb_usercopy+0x199/0x2e0 [ 183.990797][ T6580] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 183.990819][ T6580] ? __pfx_dvb_usercopy+0x10/0x10 [ 183.990843][ T6580] ? __fget_files+0x3a6/0x420 [ 183.990863][ T6580] ? __fget_files+0x2a/0x420 [ 183.990884][ T6580] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 183.990906][ T6580] dvb_demux_ioctl+0x29/0x40 [ 183.990928][ T6580] __se_sys_ioctl+0xff/0x170 [ 183.990943][ T6580] do_syscall_64+0x14d/0xf80 [ 183.990962][ T6580] ? trace_irq_disable+0x3b/0x150 [ 183.991011][ T6580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.991036][ T6580] ? clear_bhb_loop+0x40/0x90 [ 183.991055][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.991070][ T6580] RIP: 0033:0x7f3e53e6c819 [ 183.991087][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.991104][ T6580] RSP: 002b:00007f3e520be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.991121][ T6580] RAX: ffffffffffffffda RBX: 00007f3e540e5fa0 RCX: 00007f3e53e6c819 [ 183.991133][ T6580] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 183.991143][ T6580] RBP: 00007f3e53f02c91 R08: 0000000000000000 R09: 0000000000000000 [ 183.991153][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.991162][ T6580] R13: 00007f3e540e6038 R14: 00007f3e540e5fa0 R15: 00007ffd73f99028 [ 183.991180][ T6580] [ 183.999141][ T5884] hub 3-1:0.0: 26 ports detected [ 184.000454][ T5884] hub 3-1:0.0: insufficient power available to use all downstream ports [ 184.304962][ T5884] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 184.304992][ T5884] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 184.334353][ T5868] as10x_usb: error during firmware upload part1 [ 184.335914][ T5868] Registered device nBox DVB-T Dongle [ 184.339949][ T5868] usb 1-1: USB disconnect, device number 3 [ 184.363082][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 184.363337][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.400541][ T5868] Unregistered device nBox DVB-T Dongle [ 184.401628][ T5884] usb 3-1: USB disconnect, device number 4 [ 184.435976][ T5868] as10x_usb: device has been disconnected