last executing test programs: 7m31.596112059s ago: executing program 1 (id=108): socket$can_raw(0x1d, 0x3, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendto$isdn(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000006000000188c08f45719227391075040b5cab497db02000000eb026f5d92260e0e2a5a58a223a665f889b8cade7fdfcd090c856a73d3703f4f32c1d4ad57aebaadb8bb6383fcbc0fc47772a502a2b9dbe28dfe3b6fff38aad8472c2743051ce1081a0435246598413dd0c0b395cb"], 0x72, 0xc0, &(0x7f0000000340)={0x22, 0x80, 0x5, 0x3, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0xfffc, @loopback}, 0x10, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x10, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) 7m30.777967968s ago: executing program 1 (id=110): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$inet6(0xa, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00000000"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r8) sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x10, 0x70bd2a, 0x1}, 0x14}}, 0x4000000) 7m27.904278467s ago: executing program 1 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000020000000000000000000000000000000000002000000000010000000000000000000000000000000000000000000007000000000000000000000009000000000000000000000009000000000000000000"], 0x0, 0x96}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000950000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x158, 0x194, 0x194, 0x158, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x9], [0x4e21, 0x4e24], 0x5, 0x4, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r9], 0x44}}, 0x20000010) 7m26.704626161s ago: executing program 1 (id=115): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f00000002c0)=0xfffff057, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080045000030c7070365410f42fae69947000000000102887800000000ffffffff0b01907800a30000450d001000640003841d800164010100e0000001b9eda69ec44754b8206d4a5d994a11b8c758ea9cd40baec7e41a365dc7a7a14d61dfe76673a1352d66a84c53b56428a349da20244b1080a5c925e7dea6fd83294185843c98191e5b9dc4aa52268ec68a8aa6cf1a1cd7a19f79d3750c3a602ef665ecb9bd29a21eaadae9b64c2dfdf5f07fb992f22e49a1dba37b95"], 0x0) 7m24.738592289s ago: executing program 1 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0xf1c) 7m22.219049442s ago: executing program 1 (id=123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) 7m6.920417181s ago: executing program 32 (id=123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) 3m53.201924069s ago: executing program 5 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_setup(0x36df, &(0x7f0000000180)={0x0, 0x472f, 0x10000, 0x3, 0xdf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000314230c2abd7000fbdbdf250900020073797a3100000000080041007369770014003300766972745f776966"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x0, &(0x7f0000000040)}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa}) utimes(&(0x7f0000000100)='./file0\x00', 0x0) 3m52.015261271s ago: executing program 5 (id=455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000480)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x200000000000000, 0x0, 0x0) syz_usb_connect(0x6, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m47.112434587s ago: executing program 5 (id=462): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0xc482, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180600000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r9}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 3m40.191039436s ago: executing program 5 (id=472): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x80000000, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd29, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x9, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 3m38.323352049s ago: executing program 5 (id=474): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m36.44940906s ago: executing program 5 (id=475): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}}}, 0x84) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc", 0x24}], 0x1) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7ea}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 3m20.96963833s ago: executing program 33 (id=475): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}}}, 0x84) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc", 0x24}], 0x1) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7ea}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 2m17.15142584s ago: executing program 4 (id=602): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffff6cc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 2m13.760074755s ago: executing program 4 (id=608): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, 0x0, 0x313002, 0x49) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 2m8.714555059s ago: executing program 4 (id=614): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a38000000140a01010000000000000000050000090c00064000000000000000010900020073797a32000000000900010073797a31001100010000000000000000000100000a6c3ff6526df9f97eb90503e5644c66bc300b119c5e642050ccc819a1733c954771c96ce2f0b326d3d2ce121e382edca40b6c9c170f4bf23c6c13f580109f6632715904d5d03fd6163960e5925fd40cc41b36161403ed61b3413868500b16ff752b336ea47dfba923e995b5293ae7bf8bb731c7a85b67880f6284dc060b2fbe973a4e4e5b4df54eeb21459040"], 0x60}, 0x1, 0x0, 0x0, 0x44050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2m7.493515695s ago: executing program 4 (id=618): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffff6cc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 2m1.691925562s ago: executing program 4 (id=626): r0 = getpgrp(0x0) mmap(&(0x7f000070a000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x54b20000) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xca, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x810) 1m58.111255093s ago: executing program 6 (id=629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) connect$ax25(r4, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) 1m56.34533199s ago: executing program 4 (id=631): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010000f0ffffffffffff00000000", @ANYBLOB="7e53afc97bf88b9dbed608605c82ca996de2f6f2ae91f94addfede78d61ecdb7c1eb8890e6a57c", @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000810) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m52.455032839s ago: executing program 6 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x5, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) syz_open_dev$dri(0x0, 0x1, 0x48240) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1m49.016885439s ago: executing program 6 (id=641): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x80000000, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd29, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x9, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m41.725057811s ago: executing program 6 (id=651): syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) close(0x3) openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) file_setattr(r4, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000300)=@ethernet={0x6, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r5, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 1m40.776337862s ago: executing program 34 (id=631): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010000f0ffffffffffff00000000", @ANYBLOB="7e53afc97bf88b9dbed608605c82ca996de2f6f2ae91f94addfede78d61ecdb7c1eb8890e6a57c", @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000810) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m38.996789869s ago: executing program 6 (id=655): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1m34.374617101s ago: executing program 6 (id=661): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000880000008"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) unshare(0x2000600) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x5, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 1m18.620383972s ago: executing program 35 (id=661): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000880000008"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) unshare(0x2000600) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x5, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 27.183328725s ago: executing program 0 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_robust_list(r0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) timerfd_create(0x9, 0x80800) timer_create(0x9, 0x0, &(0x7f0000000500)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23.40646758s ago: executing program 2 (id=744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0xc482, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180600000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r9}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 19.054320536s ago: executing program 0 (id=750): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffff6cc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 16.239783976s ago: executing program 2 (id=753): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x224247d4, &(0x7f0000006680)) r0 = socket(0x9, 0x80000, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001400000018"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 16.155514325s ago: executing program 0 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, 0x0, 0x804) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9f0000000000000030000000300000000400000002000000000000110300000000000000000800000500000d000000000000000000000000020000000000000c020000000000610000000000"], 0x0, 0x4c, 0x0, 0x0, 0xffffffff}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x37, 0x1, {0x1, 0x1, 0x400, 0x0, 0x1, '-'}}, 0x1f) 14.710173893s ago: executing program 0 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\"'], 0x33) close(r1) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) 13.093636232s ago: executing program 3 (id=757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000080)={0x18, r3}) socket$nl_route(0x10, 0x3, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x0) 12.905745466s ago: executing program 2 (id=758): socket(0x10, 0x803, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) gettid() prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'pimreg0\x00', @multicast}) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) 11.645168206s ago: executing program 7 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) setreuid(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='[[-\\\x8d%\xbc+\x00') r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1}, 0x0, {0x2, 0x4e22, @empty}, 'lo\x00'}) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) 10.542090406s ago: executing program 7 (id=761): socket$can_raw(0x1d, 0x3, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendto$isdn(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000006000000188c08f45719227391075040b5cab497db02000000eb026f5d92260e0e2a5a58a223a665f889b8cade7fdfcd090c856a73d3703f4f32c1d4ad57aebaadb8bb6383fcbc0fc47772a502a2b9dbe28dfe3b6fff38aad8472c2743051ce1081a0435246598413dd0c0b395cb"], 0x72, 0xc0, &(0x7f0000000340)={0x22, 0x80, 0x5, 0x3, 0x2}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0xfffc, @loopback}, 0x10, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x10, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) 9.96673227s ago: executing program 9 (id=762): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) 9.568442116s ago: executing program 9 (id=763): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 9.122649711s ago: executing program 7 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x80000000, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd29, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x9, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8.330515434s ago: executing program 9 (id=765): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x69deddea}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 7.020747617s ago: executing program 7 (id=766): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ac2000/0x2000)=nil, 0x4000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r4 = open(0x0, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x8b, 0x100000500) 6.574783872s ago: executing program 3 (id=767): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 6.530139735s ago: executing program 2 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\"'], 0x33) close(r1) r2 = socket(0x2b, 0x1, 0x1) listen(r2, 0x0) listen(r2, 0x4) socket$phonet(0x23, 0x2, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) 5.180679443s ago: executing program 3 (id=769): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x224247d4, &(0x7f0000006680)) r0 = socket(0x9, 0x80000, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001400000018"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 3.844270875s ago: executing program 2 (id=770): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) 2.717651331s ago: executing program 2 (id=771): socket(0x10, 0x803, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) gettid() prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'pimreg0\x00', @multicast}) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) 2.605332734s ago: executing program 9 (id=772): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.022510976s ago: executing program 7 (id=773): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) open(0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) 2.020883087s ago: executing program 3 (id=774): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) 2.018080067s ago: executing program 0 (id=775): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1.978881924s ago: executing program 8 (id=652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmmsg$inet6(r1, &(0x7f0000001ec0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.890999004s ago: executing program 9 (id=776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.160471242s ago: executing program 3 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 798.854757ms ago: executing program 9 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 156.185803ms ago: executing program 7 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 134.420715ms ago: executing program 8 (id=780): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000880000008"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) unshare(0x2000600) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 115.754353ms ago: executing program 0 (id=781): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffff6cc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 0s ago: executing program 3 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000020000000000000000000000000000000000002000000000010000000000000000000000000000000000000000000007000000000000000000000009000000000000000000000009000000000000000000"], 0x0, 0x96}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r9], 0x44}}, 0x20000010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 71.793701][ T5802] cgroup: Unknown subsys name 'net' [ 71.924017][ T5802] cgroup: Unknown subsys name 'cpuset' [ 71.933419][ T5802] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.420205][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.501836][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.510972][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.519238][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.526708][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.527445][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.536416][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.542890][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.551060][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.555621][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.570163][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.570214][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.577760][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.584764][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.592109][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.599775][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.605875][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.612845][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.619225][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.629273][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.634125][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.641035][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.647192][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.654647][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.661307][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.680158][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.680179][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.695540][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.703905][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.711596][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.726551][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.529336][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 78.572973][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 78.645515][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 78.697426][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 78.725968][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 78.907875][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 78.965753][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.973254][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.980517][ T5817] bridge_slave_0: entered allmulticast mode [ 78.987869][ T5817] bridge_slave_0: entered promiscuous mode [ 79.035893][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.043180][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.050933][ T5817] bridge_slave_1: entered allmulticast mode [ 79.058267][ T5817] bridge_slave_1: entered promiscuous mode [ 79.099811][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.106922][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.114314][ T5816] bridge_slave_0: entered allmulticast mode [ 79.121813][ T5816] bridge_slave_0: entered promiscuous mode [ 79.195711][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.202897][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.210074][ T5816] bridge_slave_1: entered allmulticast mode [ 79.217416][ T5816] bridge_slave_1: entered promiscuous mode [ 79.255078][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.262224][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.269522][ T5820] bridge_slave_0: entered allmulticast mode [ 79.277334][ T5820] bridge_slave_0: entered promiscuous mode [ 79.285017][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.292233][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.299355][ T5818] bridge_slave_0: entered allmulticast mode [ 79.307014][ T5818] bridge_slave_0: entered promiscuous mode [ 79.332064][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.341904][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.349062][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.356395][ T5815] bridge_slave_0: entered allmulticast mode [ 79.363872][ T5815] bridge_slave_0: entered promiscuous mode [ 79.378063][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.385238][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.392411][ T5820] bridge_slave_1: entered allmulticast mode [ 79.399847][ T5820] bridge_slave_1: entered promiscuous mode [ 79.407338][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.414464][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.421754][ T5818] bridge_slave_1: entered allmulticast mode [ 79.429115][ T5818] bridge_slave_1: entered promiscuous mode [ 79.461256][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.470757][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.477865][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.485484][ T5815] bridge_slave_1: entered allmulticast mode [ 79.493116][ T5815] bridge_slave_1: entered promiscuous mode [ 79.547553][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.610542][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.622990][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.634600][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.660018][ T5817] team0: Port device team_slave_0 added [ 79.691566][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.703219][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.720927][ T5828] Bluetooth: hci3: command tx timeout [ 79.726535][ T51] Bluetooth: hci0: command tx timeout [ 79.731063][ T5817] team0: Port device team_slave_1 added [ 79.751769][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.761825][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.768990][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.776310][ T5819] bridge_slave_0: entered allmulticast mode [ 79.783836][ T5819] bridge_slave_0: entered promiscuous mode [ 79.800183][ T51] Bluetooth: hci1: command tx timeout [ 79.809838][ T5828] Bluetooth: hci4: command tx timeout [ 79.809853][ T5840] Bluetooth: hci2: command tx timeout [ 79.820906][ T51] Bluetooth: hci5: command tx timeout [ 79.826886][ T5816] team0: Port device team_slave_0 added [ 79.846899][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.867730][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.875063][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.882597][ T5819] bridge_slave_1: entered allmulticast mode [ 79.890143][ T5819] bridge_slave_1: entered promiscuous mode [ 79.923262][ T5816] team0: Port device team_slave_1 added [ 79.929821][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.936764][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.962895][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.001780][ T5820] team0: Port device team_slave_0 added [ 80.020803][ T5818] team0: Port device team_slave_0 added [ 80.039104][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.046240][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.072383][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.086159][ T5815] team0: Port device team_slave_0 added [ 80.094170][ T5820] team0: Port device team_slave_1 added [ 80.115681][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.132507][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.143892][ T5818] team0: Port device team_slave_1 added [ 80.174731][ T5815] team0: Port device team_slave_1 added [ 80.216664][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.223815][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.249768][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.262417][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.269355][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.295540][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.319552][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.326802][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.353018][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.427676][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.434805][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.460999][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.473926][ T5819] team0: Port device team_slave_0 added [ 80.487680][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.496248][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.522616][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.549050][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.556129][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.582446][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.596488][ T5819] team0: Port device team_slave_1 added [ 80.614843][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.621959][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.647968][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.666368][ T5817] hsr_slave_0: entered promiscuous mode [ 80.673054][ T5817] hsr_slave_1: entered promiscuous mode [ 80.683418][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.690433][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.716715][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.791185][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.798125][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.824347][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.836949][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.844104][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.899859][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.013632][ T5816] hsr_slave_0: entered promiscuous mode [ 81.020871][ T5816] hsr_slave_1: entered promiscuous mode [ 81.027434][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 81.033696][ T5816] Cannot create hsr debugfs directory [ 81.047074][ T5820] hsr_slave_0: entered promiscuous mode [ 81.054450][ T5820] hsr_slave_1: entered promiscuous mode [ 81.061256][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 81.066986][ T5820] Cannot create hsr debugfs directory [ 81.172920][ T5815] hsr_slave_0: entered promiscuous mode [ 81.180739][ T5815] hsr_slave_1: entered promiscuous mode [ 81.187089][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 81.193151][ T5815] Cannot create hsr debugfs directory [ 81.250980][ T5818] hsr_slave_0: entered promiscuous mode [ 81.258203][ T5818] hsr_slave_1: entered promiscuous mode [ 81.267584][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 81.274117][ T5818] Cannot create hsr debugfs directory [ 81.357485][ T5819] hsr_slave_0: entered promiscuous mode [ 81.364245][ T5819] hsr_slave_1: entered promiscuous mode [ 81.370566][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 81.376282][ T5819] Cannot create hsr debugfs directory [ 81.799910][ T51] Bluetooth: hci3: command tx timeout [ 81.805413][ T5828] Bluetooth: hci0: command tx timeout [ 81.880459][ T5828] Bluetooth: hci2: command tx timeout [ 81.885938][ T5828] Bluetooth: hci4: command tx timeout [ 81.891649][ T51] Bluetooth: hci5: command tx timeout [ 81.891840][ T5840] Bluetooth: hci1: command tx timeout [ 82.024338][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.036637][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.072042][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.082727][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.138116][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.148647][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.164539][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.184828][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.276418][ T5820] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.293908][ T5820] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.305255][ T5820] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.334324][ T5820] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.419182][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.430535][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.445816][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.458138][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.502726][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.584369][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.603631][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.615809][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.642367][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.654238][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.707915][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.715235][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.748050][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.755198][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.795424][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.808255][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.847755][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.877064][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.902090][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.974925][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.036977][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.047496][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.054611][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.093169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.100308][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.134699][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.163456][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.176540][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.202525][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.209881][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.255548][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.262737][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.339555][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.366226][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.385029][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.392200][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.425761][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.445014][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.452187][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.463994][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.471140][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.516559][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.523782][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.551714][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.607427][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.623148][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.630301][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.662969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.670106][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.774016][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.880263][ T5840] Bluetooth: hci0: command tx timeout [ 83.881107][ T5828] Bluetooth: hci3: command tx timeout [ 83.897005][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.909380][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.960537][ T5828] Bluetooth: hci4: command tx timeout [ 83.960759][ T5840] Bluetooth: hci1: command tx timeout [ 83.965965][ T5828] Bluetooth: hci5: command tx timeout [ 83.972007][ T5840] Bluetooth: hci2: command tx timeout [ 84.020268][ T5816] veth0_vlan: entered promiscuous mode [ 84.118625][ T5816] veth1_vlan: entered promiscuous mode [ 84.139519][ T5817] veth0_vlan: entered promiscuous mode [ 84.185295][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.206593][ T5817] veth1_vlan: entered promiscuous mode [ 84.307415][ T5816] veth0_macvtap: entered promiscuous mode [ 84.336931][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.368180][ T5817] veth0_macvtap: entered promiscuous mode [ 84.397218][ T5816] veth1_macvtap: entered promiscuous mode [ 84.433320][ T5817] veth1_macvtap: entered promiscuous mode [ 84.538118][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.598448][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.619449][ T5819] veth0_vlan: entered promiscuous mode [ 84.644987][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.667141][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.692735][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.713779][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.743153][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.757040][ T5819] veth1_vlan: entered promiscuous mode [ 84.767035][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.779687][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.823392][ T1040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.843332][ T1040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.869583][ T1040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.917130][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.934183][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.964670][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.988419][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.071660][ T5819] veth0_macvtap: entered promiscuous mode [ 85.098051][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.100432][ T5819] veth1_macvtap: entered promiscuous mode [ 85.115324][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.206630][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.214782][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.229400][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.240360][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.265697][ T5815] veth0_vlan: entered promiscuous mode [ 85.283279][ T5820] veth0_vlan: entered promiscuous mode [ 85.312226][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.374152][ T5815] veth1_vlan: entered promiscuous mode [ 85.398046][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.407330][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.415263][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.444629][ T5820] veth1_vlan: entered promiscuous mode [ 85.461394][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.503525][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.535476][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.574036][ T5818] veth0_vlan: entered promiscuous mode [ 85.580084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.653153][ T5818] veth1_vlan: entered promiscuous mode [ 85.732587][ T5815] veth0_macvtap: entered promiscuous mode [ 85.777363][ T5815] veth1_macvtap: entered promiscuous mode [ 85.885790][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.901998][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.933557][ T5820] veth0_macvtap: entered promiscuous mode [ 85.949520][ T5971] xt_connbytes: Forcing CT accounting to be enabled [ 85.956254][ T5971] Cannot find set identified by id 0 to match [ 85.972128][ T5840] Bluetooth: hci3: command tx timeout [ 85.972143][ T5834] Bluetooth: hci0: command tx timeout [ 86.141971][ T1202] cfg80211: failed to load regulatory.db [ 86.159180][ T5840] Bluetooth: hci2: command tx timeout [ 86.159381][ T5834] Bluetooth: hci5: command tx timeout [ 86.170320][ T5828] Bluetooth: hci1: command tx timeout [ 86.170372][ T51] Bluetooth: hci4: command tx timeout [ 86.200059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.210009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.262492][ T5820] veth1_macvtap: entered promiscuous mode [ 86.359355][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.383938][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.397565][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.418752][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.482490][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.527871][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.657583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.702686][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.748044][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.760043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 86.780751][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.815234][ T5818] veth0_macvtap: entered promiscuous mode [ 86.856897][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.934975][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.060765][ T5818] veth1_macvtap: entered promiscuous mode [ 87.287829][ T5975] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.375438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.413518][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.425618][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.447484][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.479774][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.508785][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.587694][ T3474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.625345][ T3474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.682617][ T3474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.721390][ T5974] bridge0: port 3(syz_tun) entered blocking state [ 87.727934][ T5974] bridge0: port 3(syz_tun) entered disabled state [ 87.734591][ T5974] syz_tun: entered allmulticast mode [ 87.741487][ T5974] syz_tun: entered promiscuous mode [ 87.747217][ T5974] bridge0: port 3(syz_tun) entered blocking state [ 87.753778][ T5974] bridge0: port 3(syz_tun) entered forwarding state [ 87.766938][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.886389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.019987][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.027839][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.120166][ T5978] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7'. [ 88.291950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.348975][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.390015][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.440898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.554910][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.594425][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.673967][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.704751][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.890033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.894624][ T5987] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 88.917192][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.949289][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.991731][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.027678][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.418122][ T5993] netlink: 34 bytes leftover after parsing attributes in process `syz.2.10'. [ 90.242307][ T6000] input: syz1 as /devices/virtual/input/input5 [ 90.950212][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 92.579830][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 94.362040][ T6035] trusted_key: encrypted_key: insufficient parameters specified [ 95.887590][ T6041] infiniband syz2: set active [ 95.892403][ T6041] infiniband syz2: added veth1_to_team [ 95.901604][ T6041] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 95.904847][ T6041] infiniband syz2: Couldn't open port 1 [ 95.967154][ T6041] RDS/IB: syz2: added [ 95.971955][ T6041] smc: adding ib device syz2 with port count 1 [ 95.980207][ T6041] smc: ib device syz2 port 1 has no pnetid [ 97.634887][ T6051] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.22'. [ 97.894840][ T6052] bridge0: port 3(syz_tun) entered blocking state [ 98.171297][ T6052] bridge0: port 3(syz_tun) entered disabled state [ 98.244159][ T6052] syz_tun: entered allmulticast mode [ 98.379950][ T6052] syz_tun: entered promiscuous mode [ 98.385710][ T6052] bridge0: port 3(syz_tun) entered blocking state [ 98.392222][ T6052] bridge0: port 3(syz_tun) entered forwarding state [ 102.584570][ T6078] netlink: 34 bytes leftover after parsing attributes in process `syz.0.27'. [ 105.732838][ T6100] can0: slcan on pty22. [ 106.030186][ T5904] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.053219][ T6098] can0 (unregistered): slcan off pty22. [ 106.322961][ T5822] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.243995][ T5904] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.256382][ T5904] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.281974][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.335172][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.338309][ T5822] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.386670][ T5822] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.601921][ T6106] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.618954][ T5904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.636333][ T5822] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.681701][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.775242][ T6109] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.790177][ T5904] usb 4-1: USB disconnect, device number 2 [ 109.292150][ T5822] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.359031][ T5822] usb 1-1: USB disconnect, device number 2 [ 111.985147][ T5912] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.250380][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 112.299167][ T5912] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 112.349821][ T5920] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.387023][ T5912] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.496563][ T5912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.219793][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 113.228506][ T5912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.258805][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.339890][ T5912] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.353067][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.364055][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.374002][ T5912] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.385013][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.408213][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.542971][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.772002][ T5920] usb 6-1: string descriptor 0 read error: -71 [ 113.778302][ T5920] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.878304][ T5920] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.918611][ T5912] usb 2-1: can't set config #16, error -71 [ 114.069762][ T5912] usb 2-1: USB disconnect, device number 2 [ 114.097537][ T5920] usb 6-1: config 0 descriptor?? [ 114.349985][ T5920] usb 6-1: can't set config #0, error -71 [ 115.383933][ T5920] usb 6-1: USB disconnect, device number 2 [ 116.061761][ T6189] xt_connbytes: Forcing CT accounting to be enabled [ 116.069634][ T6189] Cannot find set identified by id 0 to match [ 122.470874][ T1202] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.671638][ T1202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.734956][ T1202] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 122.829734][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.140582][ T1202] usb 4-1: config 0 descriptor?? [ 124.365102][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.63'. [ 124.680599][ T1202] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 124.785591][ T1202] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 124.844283][ T1202] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 124.909935][ T1202] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 124.958773][ T1202] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 125.038083][ T1202] usb 4-1: USB disconnect, device number 3 [ 125.453412][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.682701][ T5920] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.713512][ T5920] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 125.735253][ T5920] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 125.786367][ T5920] usb 3-1: Product: syz [ 125.800394][ T5920] usb 3-1: Manufacturer: syz [ 125.816912][ T5920] usb 3-1: SerialNumber: syz [ 125.841855][ T6263] sd 0:0:1:0: device reset [ 125.886713][ T5920] usb 3-1: config 0 descriptor?? [ 126.192978][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 126.289624][ T6270] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.68'. [ 128.166907][ T5904] usb 3-1: USB disconnect, device number 2 [ 130.588555][ T6293] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.73'. [ 132.212452][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.218895][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.743908][ T6316] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.81'. [ 135.419769][ T5904] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.583271][ T5904] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 135.607022][ T5904] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 135.639910][ T5904] usb 4-1: Product: syz [ 135.644097][ T5904] usb 4-1: Manufacturer: syz [ 135.679132][ T5904] usb 4-1: SerialNumber: syz [ 135.742930][ T5904] usb 4-1: config 0 descriptor?? [ 135.771990][ T5904] ch341 4-1:0.0: ch341-uart converter detected [ 135.982208][ T5904] usb 4-1: failed to receive control message: -32 [ 135.988683][ T5904] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 136.419734][ T5904] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.589764][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 136.620556][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.663459][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.825052][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.853521][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.896438][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.934834][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.020955][ T5904] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.096482][ T5904] usb 2-1: Manufacturer: syz [ 137.777555][ T5904] usb 2-1: config 0 descriptor?? [ 138.845384][ T5950] usb 4-1: USB disconnect, device number 4 [ 139.848552][ T5950] ch341 4-1:0.0: device disconnected [ 141.302057][ T5904] usb 2-1: can't set config #0, error -71 [ 141.353612][ T5904] usb 2-1: USB disconnect, device number 3 [ 141.984578][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 142.014504][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 144.470158][ T6387] xt_TCPMSS: Only works on TCP SYN packets [ 144.514481][ T6387] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 145.679756][ T5920] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.961625][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.986216][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.116815][ T5920] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 146.174061][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.229800][ T5920] usb 6-1: config 0 descriptor?? [ 146.679690][ T6397] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.102'. [ 147.020547][ T5920] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 147.264357][ T5920] usb 6-1: USB disconnect, device number 3 [ 147.392311][ T6399] fido_id[6399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 149.302117][ T58] Bluetooth: hci6: Frame reassembly failed (-84) [ 149.308720][ T58] Bluetooth: hci6: Frame reassembly failed (-84) [ 149.353396][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 149.832553][ T1202] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.896737][ T6413] netlink: 34 bytes leftover after parsing attributes in process `syz.1.108'. [ 150.151593][ T1202] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 150.165498][ T1202] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 150.212235][ T1202] usb 4-1: Product: syz [ 150.216425][ T1202] usb 4-1: Manufacturer: syz [ 150.245429][ T1202] usb 4-1: SerialNumber: syz [ 150.320635][ T1202] usb 4-1: config 0 descriptor?? [ 150.353046][ T1202] ch341 4-1:0.0: ch341-uart converter detected [ 152.039959][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 152.086659][ T1202] usb 4-1: failed to receive control message: -32 [ 152.166100][ T1202] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 152.742284][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.110'. [ 153.334524][ T6357] usb 4-1: USB disconnect, device number 5 [ 153.389453][ T6357] ch341 4-1:0.0: device disconnected [ 153.696744][ T6428] xt_TCPMSS: Only works on TCP SYN packets [ 153.730850][ T6428] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 155.824399][ T6437] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.115'. [ 156.480286][ T6444] netlink: 34 bytes leftover after parsing attributes in process `syz.4.118'. [ 157.020719][ T6443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.693240][ T1040] Bluetooth: hci6: Frame reassembly failed (-84) [ 161.721675][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 162.312929][ T6481] xt_TCPMSS: Only works on TCP SYN packets [ 162.345579][ T6481] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 167.784616][ T6508] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.125'. [ 167.834897][ T6508] bridge0: port 3(syz_tun) entered blocking state [ 167.842455][ T6508] bridge0: port 3(syz_tun) entered disabled state [ 167.849797][ T6508] syz_tun: entered allmulticast mode [ 167.882950][ T6508] syz_tun: entered promiscuous mode [ 167.897864][ T6508] bridge0: port 3(syz_tun) entered blocking state [ 167.904565][ T6508] bridge0: port 3(syz_tun) entered forwarding state [ 172.566844][ T6529] ALSA: mixer_oss: invalid OSS volume '' [ 173.699281][ T3474] Bluetooth: hci6: Frame reassembly failed (-84) [ 175.134255][ T6546] input: syz1 as /devices/virtual/input/input6 [ 175.293170][ T5828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.307183][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.315107][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.323392][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.331651][ T5828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.719803][ T5834] Bluetooth: hci6: command 0x1003 tx timeout [ 175.726061][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 177.410325][ T51] Bluetooth: hci7: command tx timeout [ 177.804721][ T6451] bridge0: port 3(syz_tun) entered disabled state [ 178.254523][ T6451] syz_tun (unregistering): left allmulticast mode [ 178.289963][ T6451] syz_tun (unregistering): left promiscuous mode [ 178.296497][ T6451] bridge0: port 3(syz_tun) entered disabled state [ 178.383972][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 178.877914][ T6568] ALSA: mixer_oss: invalid OSS volume '' [ 179.513711][ T51] Bluetooth: hci7: command tx timeout [ 180.615445][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 181.084549][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.091866][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.098984][ T6548] bridge_slave_0: entered allmulticast mode [ 181.157020][ T6548] bridge_slave_0: entered promiscuous mode [ 181.199971][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.207103][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.254973][ T6548] bridge_slave_1: entered allmulticast mode [ 181.311663][ T6593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.999796][ T51] Bluetooth: hci7: command tx timeout [ 183.080129][ T6548] bridge_slave_1: entered promiscuous mode [ 183.243902][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.340417][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.856557][ T6548] team0: Port device team_slave_0 added [ 185.458273][ T51] Bluetooth: hci7: command tx timeout [ 185.554785][ T6548] team0: Port device team_slave_1 added [ 187.770322][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.792841][ T6620] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 187.884419][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.162404][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.387662][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.467155][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.680081][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.737089][ T6548] hsr_slave_0: entered promiscuous mode [ 188.743824][ T6548] hsr_slave_1: entered promiscuous mode [ 188.753044][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 188.758783][ T6548] Cannot create hsr debugfs directory [ 188.969558][ T6548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.211405][ T6548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.229390][ T6637] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 191.131804][ T6629] netlink: 'syz.0.158': attribute type 4 has an invalid length. [ 191.749838][ T6548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.829845][ T6548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.308610][ T6653] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 193.512126][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.575316][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.581806][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.594430][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.613127][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.620247][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.688588][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.695764][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.349867][ T6675] xt_TCPMSS: Only works on TCP SYN packets [ 195.383599][ T6675] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 195.971177][ T6676] fuse: Bad value for 'fd' [ 196.057011][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.068344][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.140059][ T30] audit: type=1326 audit(1771334447.599:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6bf9bf79 code=0x0 [ 199.630297][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.752753][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.783122][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.929748][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 200.938134][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 200.938148][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 200.938178][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 200.944240][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 201.378630][ T6548] veth0_vlan: entered promiscuous mode [ 201.588062][ T6548] veth1_vlan: entered promiscuous mode [ 201.683039][ T6548] veth0_macvtap: entered promiscuous mode [ 201.743306][ T6548] veth1_macvtap: entered promiscuous mode [ 201.814432][ T5832] Bluetooth: hci0: command 0x1003 tx timeout [ 201.849141][ T5135] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 202.593956][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.605569][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.877308][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.919052][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.024273][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.292154][ T6727] input: syz1 as /devices/virtual/input/input7 [ 203.402329][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.142922][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.142945][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.344130][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.344156][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.716092][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.2.182'. [ 211.207428][ T6749] ALSA: mixer_oss: invalid OSS volume '' [ 211.658429][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.186'. [ 214.109719][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 214.200195][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 214.292189][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 214.337684][ T29] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 214.831297][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.967854][ T29] usb 6-1: config 0 has no interface number 0 [ 215.064967][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 215.064999][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.065019][ T29] usb 6-1: Product: syz [ 215.065033][ T29] usb 6-1: Manufacturer: syz [ 215.065048][ T29] usb 6-1: SerialNumber: syz [ 215.552044][ T29] usb 6-1: config 0 descriptor?? [ 215.592497][ T29] iowarrior 6-1:0.186: no interrupt-in endpoint found [ 215.843014][ T29] usb 6-1: USB disconnect, device number 4 [ 215.930126][ T5948] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 216.148770][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.299775][ T6795] input: syz1 as /devices/virtual/input/input8 [ 216.378668][ T5948] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 216.646043][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.708926][ T5948] usb 5-1: config 0 descriptor?? [ 217.582965][ T5948] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 217.745927][ T6809] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.199'. [ 218.021112][ T5135] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 218.327495][ T5948] lenovo 0003:17EF:6047.0003: Failed to switch F7/9/11 mode: -71 [ 218.365914][ T5948] lenovo 0003:17EF:6047.0003: Failed to switch middle button: -71 [ 218.377009][ T5948] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71 [ 218.384770][ T5948] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 218.458257][ T5948] usb 5-1: USB disconnect, device number 2 [ 218.661523][ T6807] bridge0: port 3(syz_tun) entered blocking state [ 218.668049][ T6807] bridge0: port 3(syz_tun) entered disabled state [ 218.674682][ T6807] syz_tun: entered allmulticast mode [ 218.681849][ T6807] syz_tun: entered promiscuous mode [ 218.687467][ T6807] bridge0: port 3(syz_tun) entered blocking state [ 218.693963][ T6807] bridge0: port 3(syz_tun) entered forwarding state [ 219.180885][ T6357] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 219.371794][ T6357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.408903][ T6357] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 219.466043][ T6357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.561148][ T6357] usb 1-1: config 0 descriptor?? [ 220.381735][ T6357] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 220.644256][ T6357] lenovo 0003:17EF:6047.0004: Failed to switch F7/9/11 mode: -71 [ 220.707627][ T6357] lenovo 0003:17EF:6047.0004: Failed to switch middle button: -71 [ 221.059848][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 221.068565][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 221.200870][ T6357] lenovo 0003:17EF:6047.0004: Fn-lock setting failed: -71 [ 221.316660][ T6357] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71 [ 221.405654][ T6357] usb 1-1: USB disconnect, device number 3 [ 221.411679][ T29] usb 7-1: device descriptor read/64, error -32 [ 221.658199][ T6833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.690017][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 222.730555][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.775504][ T29] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 222.812687][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.907202][ T29] usb 7-1: config 0 descriptor?? [ 223.101740][ T5950] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 223.444187][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 223.452337][ T5950] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 223.462085][ T29] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 223.476516][ T5950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.488041][ T5950] usb 1-1: config 0 has no interface number 0 [ 223.502021][ T5950] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 223.512045][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.594316][ T6853] xt_TCPMSS: Only works on TCP SYN packets [ 223.640592][ T6853] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 224.129863][ T29] lenovo 0003:17EF:6047.0005: Failed to switch F7/9/11 mode: -71 [ 224.143171][ T5950] usb 1-1: Product: syz [ 224.147328][ T5950] usb 1-1: Manufacturer: syz [ 224.169847][ T29] lenovo 0003:17EF:6047.0005: Failed to switch middle button: -71 [ 224.183497][ T5950] usb 1-1: SerialNumber: syz [ 224.199989][ T29] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71 [ 224.208379][ T29] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 224.221228][ T29] usb 7-1: USB disconnect, device number 3 [ 224.252421][ T5950] usb 1-1: config 0 descriptor?? [ 224.351896][ T5950] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 224.464643][ T6854] fido_id[6854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 224.556154][ T29] usb 1-1: USB disconnect, device number 4 [ 224.936045][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 226.278872][ T30] audit: type=1326 audit(1771334477.229:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024499bf79 code=0x7fc00000 [ 226.509394][ T30] audit: type=1326 audit(1771334477.749:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f024499bf79 code=0x7fc00000 [ 226.978565][ T30] audit: type=1326 audit(1771334477.749:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024499bf79 code=0x7fc00000 [ 228.813345][ T6903] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 228.918909][ T6905] xt_TCPMSS: Only works on TCP SYN packets [ 228.954302][ T6905] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 232.128249][ T6921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.230'. [ 234.326673][ T6937] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.235'. [ 234.498582][ T5135] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 236.417022][ T6951] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 237.883997][ T6955] xt_TCPMSS: Only works on TCP SYN packets [ 237.923477][ T6955] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 239.845077][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 245.900229][ T5948] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 246.056331][ T7018] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 247.950679][ T5948] usb 5-1: unable to read config index 0 descriptor/all [ 247.968626][ T5948] usb 5-1: can't read configurations, error -71 [ 248.817362][ T7028] orangefs_mount: mount request failed with -4 [ 248.960178][ T7029] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 249.868759][ T7041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.260'. [ 250.451148][ T7033] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 252.975714][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 253.581976][ T5135] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 255.586250][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.685095][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.800717][ T7075] netlink: 44 bytes leftover after parsing attributes in process `syz.0.271'. [ 257.632454][ T7079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.418959][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 260.854797][ T7097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.276'. [ 268.486469][ T7139] Zero length message leads to an empty skb [ 269.360470][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.923228][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.475790][ T7163] orangefs_mount: mount request failed with -4 [ 271.554393][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.948834][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.120472][ T7188] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 274.439916][ T7191] xt_TCPMSS: Only works on TCP SYN packets [ 274.463973][ T7191] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 275.269950][ T58] bridge_slave_1: left allmulticast mode [ 275.275805][ T58] bridge_slave_1: left promiscuous mode [ 275.435902][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.685941][ T58] bridge_slave_0: left allmulticast mode [ 275.778781][ T58] bridge_slave_0: left promiscuous mode [ 275.809940][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.672155][ T7202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.154673][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.010852][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.281400][ T58] bond0 (unregistering): Released all slaves [ 284.368345][ T7240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.166260][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 290.000792][ T58] hsr_slave_0: left promiscuous mode [ 290.007061][ T58] hsr_slave_1: left promiscuous mode [ 290.026148][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.043832][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.130669][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.149807][ T5912] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 290.152071][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.362873][ T5912] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.695656][ T5912] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 290.726644][ T58] veth1_macvtap: left promiscuous mode [ 290.742948][ T5912] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.901454][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.210821][ T58] veth0_macvtap: left promiscuous mode [ 291.224798][ T58] veth1_vlan: left promiscuous mode [ 291.240079][ T7291] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 291.268368][ T58] veth0_vlan: left promiscuous mode [ 291.314290][ T5912] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.864864][ T7301] netlink: 44 bytes leftover after parsing attributes in process `syz.3.322'. [ 293.610970][ T5912] usb 5-1: USB disconnect, device number 5 [ 295.525538][ T58] team0 (unregistering): Port device team_slave_1 removed [ 295.560904][ T12] smc: removing ib device syz2 [ 295.618295][ T58] team0 (unregistering): Port device team_slave_0 removed [ 296.849428][ T7343] orangefs_mount: mount request failed with -4 [ 297.938157][ T1202] syz2: Port: 1 Link DOWN [ 298.064712][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 301.140719][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'. [ 302.482576][ T5135] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 303.764867][ T7404] orangefs_mount: mount request failed with -4 [ 304.180299][ T7395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.144168][ T7445] delete_channel: no stack [ 314.311630][ T7488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.670139][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.676499][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.219752][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 325.061739][ T7556] syzkaller0: entered promiscuous mode [ 325.101911][ T7556] syzkaller0: entered allmulticast mode [ 326.506746][ T7572] ALSA: mixer_oss: invalid OSS volume '' [ 327.350571][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 328.755145][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.386'. [ 334.004839][ T7619] netlink: 44 bytes leftover after parsing attributes in process `syz.3.392'. [ 337.329648][ T5948] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 337.409643][ T7657] netlink: 40 bytes leftover after parsing attributes in process `syz.5.399'. [ 338.606765][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.666248][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.696372][ T5948] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.738138][ T5948] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 338.759656][ T5948] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 338.808873][ T5948] usb 3-1: Product: syz [ 338.825737][ T5948] usb 3-1: Manufacturer: syz [ 338.845931][ T5948] usb 3-1: SerialNumber: syz [ 338.867534][ T5948] usb 3-1: config 0 descriptor?? [ 340.105369][ T5948] usb 3-1: can't set config #0, error -71 [ 340.129734][ T5948] usb 3-1: USB disconnect, device number 3 [ 340.520750][ T5832] Bluetooth: hci0: command 0x1003 tx timeout [ 340.520774][ T5135] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 340.919669][ T7676] ALSA: mixer_oss: invalid OSS volume '' [ 348.040012][ T7720] xt_TCPMSS: Only works on TCP SYN packets [ 348.077153][ T7720] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 352.476773][ T7752] delete_channel: no stack [ 352.722311][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 356.624519][ T7783] xt_TCPMSS: Only works on TCP SYN packets [ 356.661147][ T7783] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 357.857867][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.430'. [ 359.249727][ T5822] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 359.401956][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.639836][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.671345][ T5822] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 359.691557][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.736183][ T5822] usb 6-1: Product: syz [ 359.748855][ T5822] usb 6-1: Manufacturer: syz [ 359.826323][ T5822] usb 6-1: SerialNumber: syz [ 359.884164][ T5822] usb 6-1: config 0 descriptor?? [ 359.970403][ T5822] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 360.104760][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 360.150318][ T5822] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 360.580139][ T5822] usb 6-1: media controller created [ 360.666913][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.089858][ T5822] DVB: Unable to find symbol tda10046_attach() [ 363.178158][ T5822] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 363.252326][ T5822] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 363.301692][ T5822] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 363.530976][ T7843] delete_channel: no stack [ 363.811827][ T5822] usb 6-1: USB disconnect, device number 5 [ 364.909643][ T30] audit: type=1326 audit(1771334616.359:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f79bf79 code=0x7fc00000 [ 364.956478][ T6357] IPVS: starting estimator thread 0... [ 365.160380][ T7852] IPVS: using max 33 ests per chain, 79200 per kthread [ 368.039856][ T6015] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 368.375701][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz.5.452'. [ 368.939400][ T6015] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.949670][ T6015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 369.069799][ T6015] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 369.088740][ T6015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.097085][ T6015] usb 7-1: Product: syz [ 369.101470][ T6015] usb 7-1: Manufacturer: syz [ 369.106089][ T6015] usb 7-1: SerialNumber: syz [ 369.121504][ T6015] usb 7-1: config 0 descriptor?? [ 369.138173][ T6015] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 369.157404][ T6015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.190794][ T6015] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 369.219277][ T6015] usb 7-1: media controller created [ 369.236377][ T7887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.461012][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.778064][ T6015] DVB: Unable to find symbol tda10046_attach() [ 370.797870][ T6015] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 371.003333][ T7898] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 371.552304][ T6015] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 371.618355][ T6015] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 372.118680][ T6015] usb 7-1: USB disconnect, device number 4 [ 377.895375][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.909724][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.075947][ T5948] IPVS: starting estimator thread 0... [ 378.189651][ T7939] IPVS: using max 33 ests per chain, 79200 per kthread [ 380.889773][ T5822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 381.709655][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.755974][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 381.798571][ T5822] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 381.834462][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.962849][ T5822] usb 1-1: Product: syz [ 381.967055][ T5822] usb 1-1: Manufacturer: syz [ 382.701446][ T5822] usb 1-1: SerialNumber: syz [ 382.833780][ T5822] usb 1-1: config 0 descriptor?? [ 382.861145][ T5822] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 382.920811][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 382.970237][ T5822] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 384.484160][ T5822] usb 1-1: media controller created [ 384.509471][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.853679][ T5822] DVB: Unable to find symbol tda10046_attach() [ 384.866835][ T5822] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 385.410932][ T5822] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 385.430404][ T5822] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 385.600024][ T5822] usb 1-1: USB disconnect, device number 5 [ 385.907400][ T7973] virtio-fs: tag not found [ 391.237410][ T7997] xt_TCPMSS: Only works on TCP SYN packets [ 391.279142][ T7997] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 397.765692][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.475'. [ 399.297699][ T5822] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 399.822030][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.889754][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.951477][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 399.989847][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.029601][ T5822] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.109598][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.171442][ T5822] usb 3-1: config 0 descriptor?? [ 401.203149][ T5822] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 401.739505][ T8053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.093771][ T8054] trusted_key: syz.3.496 sent an empty control message without MSG_MORE. [ 402.416602][ T5822] usb 3-1: USB disconnect, device number 4 [ 402.492203][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.501296][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.510386][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.520198][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.529196][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.939320][ T8063] xt_TCPMSS: Only works on TCP SYN packets [ 402.971900][ T8063] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 405.380039][ T5135] Bluetooth: hci0: command tx timeout [ 406.316417][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 407.340587][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.347857][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.355978][ T8056] bridge_slave_0: entered allmulticast mode [ 407.399715][ T5135] Bluetooth: hci0: command tx timeout [ 408.207597][ T8056] bridge_slave_0: entered promiscuous mode [ 408.217467][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.230687][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.238042][ T8056] bridge_slave_1: entered allmulticast mode [ 408.248762][ T8056] bridge_slave_1: entered promiscuous mode [ 408.462134][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.548952][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.723249][ T8056] team0: Port device team_slave_0 added [ 408.774526][ T8056] team0: Port device team_slave_1 added [ 408.943433][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.979739][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.119596][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.170903][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.209180][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.620163][ T5135] Bluetooth: hci0: command tx timeout [ 409.769787][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.484817][ T5822] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 410.710377][ T5822] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 410.725900][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.749612][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.753068][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.813115][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 410.834887][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.862470][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.892406][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 410.914433][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.943277][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.975774][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 410.996024][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.998982][ T8056] hsr_slave_0: entered promiscuous mode [ 411.016815][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.048162][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.057207][ T8056] hsr_slave_1: entered promiscuous mode [ 411.067818][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.081399][ T8056] debugfs: 'hsr0' already exists in 'hsr' [ 411.099579][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.107601][ T8056] Cannot create hsr debugfs directory [ 411.108593][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.160682][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.191344][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.210456][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.240150][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.259099][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.298364][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.299744][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.348987][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.643069][ T5135] Bluetooth: hci0: command tx timeout [ 411.691263][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.700531][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.842894][ T5822] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 411.870841][ T5822] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 411.890034][ T5822] usb 1-1: Product: syz [ 411.893707][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.914799][ T5822] usb 1-1: Manufacturer: syz [ 411.930512][ T5822] usb 1-1: SerialNumber: syz [ 411.962114][ T5822] usb 1-1: config 0 descriptor?? [ 411.991436][ T5822] yurex 1-1:0.0: Could not find endpoints [ 412.106605][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.657717][ T5135] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 412.877315][ T5912] usb 1-1: USB disconnect, device number 6 [ 412.895293][ T8126] bridge0: port 3(syz_tun) entered blocking state [ 412.901883][ T8126] bridge0: port 3(syz_tun) entered disabled state [ 412.910237][ T8126] syz_tun: entered allmulticast mode [ 412.916991][ T8126] syz_tun: entered promiscuous mode [ 412.922931][ T8126] bridge0: port 3(syz_tun) entered blocking state [ 412.929434][ T8126] bridge0: port 3(syz_tun) entered forwarding state [ 413.781274][ T13] bridge_slave_1: left allmulticast mode [ 413.787032][ T13] bridge_slave_1: left promiscuous mode [ 413.806600][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.014168][ T13] bridge_slave_0: left allmulticast mode [ 414.019926][ T13] bridge_slave_0: left promiscuous mode [ 414.793646][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.802669][ T8138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.877234][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.931905][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.966771][ T13] bond0 (unregistering): Released all slaves [ 419.291548][ T8056] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 419.514154][ T8056] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 419.786205][ T8056] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 419.920992][ T8056] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.756589][ T13] hsr_slave_0: left promiscuous mode [ 421.799189][ T13] hsr_slave_1: left promiscuous mode [ 421.823861][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.858662][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.907624][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.936344][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.967546][ T13] veth1_macvtap: left promiscuous mode [ 421.985694][ T13] veth0_macvtap: left promiscuous mode [ 422.022737][ T13] veth1_vlan: left promiscuous mode [ 422.038272][ T13] veth0_vlan: left promiscuous mode [ 422.843718][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 422.927821][ T8204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.861562][ T8212] delete_channel: no stack [ 424.220257][ T13] team0 (unregistering): Port device team_slave_1 removed [ 424.300914][ T13] team0 (unregistering): Port device team_slave_0 removed [ 424.887165][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.746836][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.844045][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.851228][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.936808][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.944050][ T6351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.506990][ T8231] delete_channel: no stack [ 428.325315][ T8248] ALSA: mixer_oss: invalid OSS volume '' [ 429.340894][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.669303][ T8056] veth0_vlan: entered promiscuous mode [ 432.789047][ T8056] veth1_vlan: entered promiscuous mode [ 432.906833][ T8056] veth0_macvtap: entered promiscuous mode [ 432.944465][ T8056] veth1_macvtap: entered promiscuous mode [ 433.086617][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.184721][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.292633][ T6351] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.320816][ T6351] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.360637][ T6351] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.391435][ T6351] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.627031][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.641204][ T1202] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 433.669070][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.790367][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.833804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.863429][ T1202] usb 5-1: Using ep0 maxpacket: 16 [ 433.886526][ T1202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.911591][ T1202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.629437][ T1202] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 434.638619][ T1202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.657165][ T1202] usb 5-1: config 0 descriptor?? [ 434.954839][ T8297] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 435.385490][ T1202] creative-sb0540 0003:041E:3100.0007: item fetching failed at offset 0/5 [ 435.417161][ T1202] creative-sb0540 0003:041E:3100.0007: parse failed [ 435.454004][ T1202] creative-sb0540 0003:041E:3100.0007: probe with driver creative-sb0540 failed with error -22 [ 435.562778][ T1202] usb 5-1: USB disconnect, device number 6 [ 439.434960][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.441463][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.726636][ T6015] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 440.981153][ T8333] delete_channel: no stack [ 441.179954][ T6015] usb 1-1: Using ep0 maxpacket: 16 [ 441.224194][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.247466][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.294299][ T6015] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 441.334247][ T6015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.395140][ T6015] usb 1-1: config 0 descriptor?? [ 442.110093][ T6015] creative-sb0540 0003:041E:3100.0008: item fetching failed at offset 0/5 [ 442.185069][ T6015] creative-sb0540 0003:041E:3100.0008: parse failed [ 442.225097][ T6015] creative-sb0540 0003:041E:3100.0008: probe with driver creative-sb0540 failed with error -22 [ 442.338725][ T6015] usb 1-1: USB disconnect, device number 7 [ 447.771325][ T8378] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 447.771325][ T8378] program syz.6.573 not setting count and/or reply_len properly [ 450.983587][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.577'. [ 457.575212][ T5950] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 459.419598][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 460.430162][ T5950] usb 5-1: device descriptor read/all, error -71 [ 464.106153][ T8495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.133961][ T8496] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 466.014143][ T5822] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 466.193679][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 466.200217][ T5822] usb 8-1: Using ep0 maxpacket: 16 [ 466.448827][ T5822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.223472][ T5822] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 467.239118][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.387095][ T5822] usb 8-1: config 0 descriptor?? [ 467.424921][ T5822] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 472.528737][ T5822] usb 8-1: USB disconnect, device number 2 [ 474.797525][ T8563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.966799][ T8590] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 482.529262][ T8612] delete_channel: no stack [ 490.260364][ T8643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.845436][ T8650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.642777][ T8673] delete_channel: no stack [ 500.766257][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.772740][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.668044][ T8731] delete_channel: no stack [ 502.263282][ T8737] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 502.336336][ T8740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.354617][ T8740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.379808][ T8740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 503.716733][ T8740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 503.734495][ T8740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.881966][ T8740] Bluetooth: hci2: command tx timeout [ 508.480245][ T8740] Bluetooth: hci2: command tx timeout [ 510.110812][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.662'. [ 510.519578][ T8740] Bluetooth: hci2: command tx timeout [ 511.060698][ T5912] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 511.111064][ T8504] bridge0: port 3(syz_tun) entered disabled state [ 511.291356][ T8504] syz_tun (unregistering): left allmulticast mode [ 511.299895][ T5912] usb 8-1: Using ep0 maxpacket: 16 [ 511.449636][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.460129][ T5912] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 511.490578][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.525602][ T5912] usb 8-1: config 0 descriptor?? [ 511.571925][ T5912] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 511.669399][ T8504] syz_tun (unregistering): left promiscuous mode [ 511.676715][ T8504] bridge0: port 3(syz_tun) entered disabled state [ 511.837073][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 513.141512][ T8740] Bluetooth: hci2: command tx timeout [ 514.152479][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.567844][ T8794] delete_channel: no stack [ 514.940020][ T5912] usb 8-1: USB disconnect, device number 3 [ 515.353589][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.494529][ T5822] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 515.752615][ T5822] usb 1-1: config 0 has no interfaces? [ 515.765017][ T5822] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 515.796526][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.847376][ T5822] usb 1-1: config 0 descriptor?? [ 516.105947][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.728889][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.764951][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.808168][ T8738] bridge_slave_0: entered allmulticast mode [ 516.864656][ T8738] bridge_slave_0: entered promiscuous mode [ 517.009955][ T6015] usb 1-1: USB disconnect, device number 8 [ 517.051110][ T8808] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 517.086829][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.488649][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.513379][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.153280][ T8738] bridge_slave_1: entered allmulticast mode [ 518.219004][ T8738] bridge_slave_1: entered promiscuous mode [ 518.421212][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.509650][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.113863][ T8738] team0: Port device team_slave_0 added [ 519.274758][ T8738] team0: Port device team_slave_1 added [ 519.322139][ T6015] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 520.190505][ T6015] usb 8-1: Using ep0 maxpacket: 8 [ 520.259672][ T6015] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 520.298964][ T6015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.348542][ T6015] usb 8-1: Product: syz [ 520.390055][ T6015] usb 8-1: Manufacturer: syz [ 520.394696][ T6015] usb 8-1: SerialNumber: syz [ 520.436444][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.456340][ T6015] usb 8-1: config 0 descriptor?? [ 520.463942][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.512838][ T6015] gspca_main: se401-2.14.0 probing 047d:5003 [ 520.554113][ T8738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.739594][ T8827] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 522.392322][ T13] bridge_slave_1: left allmulticast mode [ 522.444907][ T13] bridge_slave_1: left promiscuous mode [ 522.985968][ T6015] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 523.029766][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.169728][ T6015] usb 8-1: device descriptor read/64, error -32 [ 523.204568][ T13] bridge_slave_0: left allmulticast mode [ 523.241688][ T13] bridge_slave_0: left promiscuous mode [ 523.247541][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.082538][ T6015] gspca_se401: read req failed req 0x06 error -19 [ 524.135131][ T6015] usb 8-1: USB disconnect, device number 4 [ 524.381360][ T8838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.450520][ T5135] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.471837][ T5135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.480901][ T5135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.121973][ T5135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.135982][ T5135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 527.459221][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.514235][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.613367][ T13] bond0 (unregistering): Released all slaves [ 527.647439][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.662503][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.780204][ T8738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.200429][ T8740] Bluetooth: hci4: command tx timeout [ 528.439813][ T8740] Bluetooth: hci0: command 0x0406 tx timeout [ 528.819661][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 529.021247][ T8738] hsr_slave_0: entered promiscuous mode [ 529.022125][ T29] usb 8-1: config 0 has no interfaces? [ 529.040075][ T8738] hsr_slave_1: entered promiscuous mode [ 529.055871][ T29] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 529.070590][ T8738] debugfs: 'hsr0' already exists in 'hsr' [ 529.089561][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.097603][ T8738] Cannot create hsr debugfs directory [ 529.120773][ T29] usb 8-1: config 0 descriptor?? [ 530.333887][ T5135] Bluetooth: hci4: command tx timeout [ 531.062868][ T13] hsr_slave_0: left promiscuous mode [ 531.115363][ T13] hsr_slave_1: left promiscuous mode [ 531.152220][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.188563][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.240561][ T5822] usb 8-1: USB disconnect, device number 5 [ 531.249130][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.294965][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.362743][ T13] veth1_macvtap: left promiscuous mode [ 531.384517][ T13] veth0_macvtap: left promiscuous mode [ 531.406192][ T13] veth1_vlan: left promiscuous mode [ 531.409594][ T1202] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 531.430620][ T13] veth0_vlan: left promiscuous mode [ 531.590738][ T1202] usb 1-1: config 0 has no interfaces? [ 531.612045][ T1202] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 531.631833][ T1202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.702892][ T1202] usb 1-1: config 0 descriptor?? [ 532.519755][ T5135] Bluetooth: hci4: command tx timeout [ 532.658407][ T1202] usb 1-1: USB disconnect, device number 9 [ 532.842320][ T13] team0 (unregistering): Port device team_slave_1 removed [ 532.891606][ T13] team0 (unregistering): Port device team_slave_0 removed [ 534.499893][ T5948] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 534.619884][ T5135] Bluetooth: hci4: command tx timeout [ 534.782184][ T5948] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 534.823522][ T5948] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 534.859655][ T5948] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.894256][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.391965][ T5912] usb 4-1: USB disconnect, device number 6 [ 536.059219][ T8914] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 536.522297][ T8913] xt_TCPMSS: Only works on TCP SYN packets [ 536.953667][ T8920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.557048][ T8738] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 538.657811][ T8738] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 538.890863][ T8738] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 539.961805][ T8936] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 540.560287][ T8839] chnl_net:caif_netlink_parms(): no params data found [ 540.586127][ T8738] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 541.580557][ T13] IPVS: stop unused estimator thread 0... [ 541.763067][ T8839] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.775527][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.799172][ T8839] bridge_slave_0: entered allmulticast mode [ 541.830734][ T8839] bridge_slave_0: entered promiscuous mode [ 541.868481][ T8839] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.878529][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.166014][ T8839] bridge_slave_1: entered allmulticast mode [ 542.211853][ T8839] bridge_slave_1: entered promiscuous mode [ 542.412484][ T8839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.481594][ T8839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.805817][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.839955][ T5912] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 542.939236][ T8839] team0: Port device team_slave_0 added [ 542.980573][ T8839] team0: Port device team_slave_1 added [ 543.010375][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 543.026369][ T5912] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 543.049925][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.079665][ T5912] usb 1-1: Product: syz [ 543.083858][ T5912] usb 1-1: Manufacturer: syz [ 543.088438][ T5912] usb 1-1: SerialNumber: syz [ 543.115892][ T5912] usb 1-1: config 0 descriptor?? [ 543.133030][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 543.237633][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.255715][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.317294][ T8839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.360786][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.420088][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.443521][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.509864][ T8839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.600830][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.763666][ T5912] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 543.820467][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.831020][ T5912] usb 1-1: USB disconnect, device number 10 [ 543.860488][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 543.951349][ T8839] hsr_slave_0: entered promiscuous mode [ 543.968394][ T8839] hsr_slave_1: entered promiscuous mode [ 543.993740][ T8839] debugfs: 'hsr0' already exists in 'hsr' [ 544.010008][ T8839] Cannot create hsr debugfs directory [ 544.037141][ T29] usb 3-1: config 0 has no interfaces? [ 544.058306][ T29] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 544.116883][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.161451][ T29] usb 3-1: config 0 descriptor?? [ 544.227345][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.537596][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.011532][ T8982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.241418][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.248590][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.831668][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.838858][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.866321][ T5948] usb 3-1: USB disconnect, device number 5 [ 547.881121][ T8991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.049784][ T13] bridge_slave_1: left allmulticast mode [ 550.055476][ T13] bridge_slave_1: left promiscuous mode [ 550.082070][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.185693][ T13] bridge_slave_0: left allmulticast mode [ 550.214069][ T13] bridge_slave_0: left promiscuous mode [ 550.228504][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.428235][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.470391][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.526488][ T13] bond0 (unregistering): Released all slaves [ 555.148148][ T8839] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 556.475380][ T9035] xt_TCPMSS: Only works on TCP SYN packets [ 556.516933][ T9035] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 557.136252][ T8839] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 557.377488][ T8839] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 557.524327][ T8839] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 557.654645][ T13] hsr_slave_0: left promiscuous mode [ 557.677517][ T13] hsr_slave_1: left promiscuous mode [ 557.690445][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.703647][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.726466][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.734846][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.763296][ T13] veth1_macvtap: left promiscuous mode [ 557.779006][ T13] veth0_macvtap: left promiscuous mode [ 557.790375][ T13] veth1_vlan: left promiscuous mode [ 557.806565][ T13] veth0_vlan: left promiscuous mode [ 558.955357][ T13] team0 (unregistering): Port device team_slave_1 removed [ 559.610123][ T13] team0 (unregistering): Port device team_slave_0 removed [ 560.726497][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.792963][ T5135] Bluetooth: hci0: connection err: -111 [ 560.978182][ T8839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.046937][ T8839] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.095097][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.102299][ T6439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.210683][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.217831][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.281145][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.287490][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.410500][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.718'. [ 562.524789][ T9107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.719'. [ 563.864688][ T8740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 563.883588][ T8740] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 563.895482][ T8740] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 564.035506][ T8740] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 564.043626][ T8740] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 565.335463][ T8839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.537869][ T9120] chnl_net:caif_netlink_parms(): no params data found [ 566.119983][ T8740] Bluetooth: hci6: command tx timeout [ 566.209756][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.216905][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.275260][ T9120] bridge_slave_0: entered allmulticast mode [ 566.327639][ T9120] bridge_slave_0: entered promiscuous mode [ 566.379846][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.440564][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.468305][ T9120] bridge_slave_1: entered allmulticast mode [ 566.484188][ T9120] bridge_slave_1: entered promiscuous mode [ 566.540015][ T9153] netlink: 56 bytes leftover after parsing attributes in process `syz.2.725'. [ 566.788372][ T84] bridge_slave_1: left allmulticast mode [ 566.811843][ T84] bridge_slave_1: left promiscuous mode [ 566.830197][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.877432][ T84] bridge_slave_0: left allmulticast mode [ 566.944031][ T5950] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 566.953809][ T84] bridge_slave_0: left promiscuous mode [ 566.969775][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.189600][ T5950] usb 8-1: Using ep0 maxpacket: 8 [ 567.238459][ T5950] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 567.378997][ T5950] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.443605][ T5950] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.461337][ T5950] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.471809][ T5950] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.495207][ T5950] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.506702][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.620518][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.749059][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.782010][ T84] bond0 (unregistering): Released all slaves [ 567.843824][ T5950] usb 8-1: GET_CAPABILITIES returned 0 [ 567.882278][ T5950] usbtmc 8-1:16.0: can't read capabilities [ 567.963220][ T9120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.023202][ T9120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.120941][ T5950] usb 8-1: USB disconnect, device number 6 [ 568.200739][ T8740] Bluetooth: hci6: command tx timeout [ 568.237210][ T84] hsr_slave_0: left promiscuous mode [ 568.256025][ T84] hsr_slave_1: left promiscuous mode [ 568.268911][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.288509][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.349707][ T8740] Bluetooth: hci6: command tx timeout [ 572.210445][ T84] team0 (unregistering): Port device team_slave_1 removed [ 572.271941][ T84] team0 (unregistering): Port device team_slave_0 removed [ 572.359817][ T8740] Bluetooth: hci6: command tx timeout [ 572.580314][ T5948] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 572.688445][ T9120] team0: Port device team_slave_0 added [ 572.733056][ T9120] team0: Port device team_slave_1 added [ 572.881173][ T5948] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 572.918566][ T5948] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 572.945844][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 572.963215][ T8839] veth0_vlan: entered promiscuous mode [ 572.984425][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.998834][ T8839] veth1_vlan: entered promiscuous mode [ 573.193299][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.915749][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.942960][ T9120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.944948][ T5948] usb 3-1: USB disconnect, device number 6 [ 574.006802][ T8839] veth0_macvtap: entered promiscuous mode [ 574.111761][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.373892][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.450978][ T9120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.881058][ T8839] veth1_macvtap: entered promiscuous mode [ 575.189137][ T9120] hsr_slave_0: entered promiscuous mode [ 575.223002][ T9120] hsr_slave_1: entered promiscuous mode [ 575.250213][ T9120] debugfs: 'hsr0' already exists in 'hsr' [ 575.255995][ T9120] Cannot create hsr debugfs directory [ 576.137040][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.276196][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.392897][ T84] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.410563][ T84] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.051868][ T84] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.097453][ T7347] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.485149][ T7347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.521963][ T7347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.604893][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.639915][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.225288][ T9271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.460753][ T9120] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 584.339326][ T9120] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 584.394825][ T9120] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 584.457451][ T9120] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 585.088445][ T9120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.133872][ T9120] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.201547][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.208671][ T7347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.275685][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.282855][ T7347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.381815][ T9120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 586.397592][ T9120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.490429][ T9288] netlink: 'syz.7.752': attribute type 4 has an invalid length. [ 588.070230][ T9316] ALSA: mixer_oss: invalid OSS volume '' [ 588.972810][ T9120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.220096][ T9353] netlink: 34 bytes leftover after parsing attributes in process `syz.7.761'. [ 594.386118][ T9120] veth0_vlan: entered promiscuous mode [ 594.421943][ T9120] veth1_vlan: entered promiscuous mode [ 594.656909][ T9120] veth0_macvtap: entered promiscuous mode [ 594.724712][ T9120] veth1_macvtap: entered promiscuous mode [ 594.839298][ T9389] ALSA: mixer_oss: invalid OSS volume '' [ 594.938106][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.044547][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.132609][ T84] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.322306][ T84] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.633180][ T6352] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.750450][ T6352] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.159060][ T7347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.238390][ T7347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.408796][ T7347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.442384][ T7347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.888094][ T8740] Bluetooth: hci3: link tx timeout [ 597.894061][ T8740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 598.695138][ T9413] netlink: 'syz.9.772': attribute type 4 has an invalid length. [ 598.868253][ T9416] netlink: 'syz.9.772': attribute type 4 has an invalid length. [ 599.977806][ T5135] Bluetooth: hci3: command 0x0406 tx timeout [ 601.932031][ T9445] ================================================================== [ 601.940138][ T9445] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 601.947773][ T9445] Read of size 8 at addr ffff88802b3dee18 by task syz.8.780/9445 [ 601.955473][ T9445] [ 601.957785][ T9445] CPU: 0 UID: 0 PID: 9445 Comm: syz.8.780 Not tainted syzkaller #0 PREEMPT(full) [ 601.957805][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.957816][ T9445] Call Trace: [ 601.957825][ T9445] [ 601.957834][ T9445] dump_stack_lvl+0xe8/0x150 [ 601.957863][ T9445] print_report+0xba/0x230 [ 601.957885][ T9445] ? dvb_device_open+0xc4/0x350 [ 601.957909][ T9445] kasan_report+0x117/0x150 [ 601.957929][ T9445] ? lock_acquire+0x20b/0x2e0 [ 601.957953][ T9445] ? dvb_device_open+0xc4/0x350 [ 601.957981][ T9445] dvb_device_open+0xc4/0x350 [ 601.958005][ T9445] ? do_raw_spin_unlock+0xf5/0x210 [ 601.958025][ T9445] chrdev_open+0x4cd/0x5e0 [ 601.958047][ T9445] ? __pfx_chrdev_open+0x10/0x10 [ 601.958066][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.958088][ T9445] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 601.958118][ T9445] ? __pfx_chrdev_open+0x10/0x10 [ 601.958137][ T9445] do_dentry_open+0x785/0x14e0 [ 601.958166][ T9445] vfs_open+0x3b/0x340 [ 601.958187][ T9445] ? path_openat+0x2df0/0x3860 [ 601.958217][ T9445] path_openat+0x2e08/0x3860 [ 601.958251][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.958276][ T9445] ? stack_depot_save_flags+0x2ff/0x810 [ 601.958301][ T9445] ? __pfx_path_openat+0x10/0x10 [ 601.958328][ T9445] ? __x64_sys_openat+0x138/0x170 [ 601.958350][ T9445] ? do_syscall_64+0x14d/0xf80 [ 601.958373][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.958395][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.958416][ T9445] ? __lock_acquire+0x6b5/0x2cf0 [ 601.958442][ T9445] do_file_open+0x23e/0x4a0 [ 601.958473][ T9445] ? __pfx_do_file_open+0x10/0x10 [ 601.958511][ T9445] ? _raw_spin_unlock+0x28/0x50 [ 601.958529][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.958550][ T9445] ? alloc_fd+0x64b/0x6c0 [ 601.958584][ T9445] do_sys_openat2+0x113/0x200 [ 601.958607][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.958628][ T9445] ? irqentry_exit+0x59e/0x620 [ 601.958650][ T9445] ? __pfx_do_sys_openat2+0x10/0x10 [ 601.958680][ T9445] __x64_sys_openat+0x138/0x170 [ 601.958706][ T9445] do_syscall_64+0x14d/0xf80 [ 601.958728][ T9445] ? trace_irq_disable+0x3b/0x150 [ 601.958753][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.958774][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.958793][ T9445] RIP: 0033:0x7fe2a6d5c84e [ 601.958809][ T9445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.958824][ T9445] RSP: 002b:00007fe2a7cd1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 601.958842][ T9445] RAX: ffffffffffffffda RBX: 00007fe2a7cd26c0 RCX: 00007fe2a6d5c84e [ 601.958856][ T9445] RDX: 0000000000040002 RSI: 00007fe2a7cd1c00 RDI: ffffffffffffff9c [ 601.958868][ T9445] RBP: 00007fe2a7cd1c00 R08: 0000000000000000 R09: 0000000000000000 [ 601.958880][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 601.958892][ T9445] R13: 00007fe2a7016128 R14: 00007fe2a7016090 R15: 00007fff9dd0e7d8 [ 601.958913][ T9445] [ 601.958919][ T9445] [ 602.255727][ T9445] Allocated by task 9390: [ 602.260032][ T9445] kasan_save_track+0x3e/0x80 [ 602.264704][ T9445] __kasan_kmalloc+0x93/0xb0 [ 602.269272][ T9445] __kmalloc_noprof+0x35c/0x760 [ 602.274114][ T9445] io_cache_alloc_new+0x40/0x100 [ 602.279036][ T9445] __io_prep_rw+0x2bf/0xed0 [ 602.283526][ T9445] io_prep_rwv+0x8e/0x440 [ 602.287850][ T9445] io_submit_sqes+0xb37/0x2370 [ 602.292598][ T9445] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 602.298129][ T9445] do_syscall_64+0x14d/0xf80 [ 602.302703][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.308581][ T9445] [ 602.310885][ T9445] Freed by task 9390: [ 602.314840][ T9445] kasan_save_track+0x3e/0x80 [ 602.319511][ T9445] kasan_save_free_info+0x46/0x50 [ 602.324562][ T9445] __kasan_slab_free+0x5c/0x80 [ 602.329304][ T9445] kfree+0x1c1/0x630 [ 602.333187][ T9445] io_clean_op+0x298/0x330 [ 602.337592][ T9445] __io_submit_flush_completions+0xd9a/0xfc0 [ 602.343563][ T9445] io_submit_sqes+0x1db8/0x2370 [ 602.348446][ T9445] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 602.353982][ T9445] do_syscall_64+0x14d/0xf80 [ 602.358561][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.364431][ T9445] [ 602.366735][ T9445] The buggy address belongs to the object at ffff88802b3dee00 [ 602.366735][ T9445] which belongs to the cache kmalloc-256 of size 256 [ 602.380770][ T9445] The buggy address is located 24 bytes inside of [ 602.380770][ T9445] freed 256-byte region [ffff88802b3dee00, ffff88802b3def00) [ 602.394469][ T9445] [ 602.396782][ T9445] The buggy address belongs to the physical page: [ 602.403166][ T9445] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b3de [ 602.411905][ T9445] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 602.420382][ T9445] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 602.427905][ T9445] page_type: f5(slab) [ 602.431871][ T9445] raw: 00fff00000000040 ffff88813fea3b40 dead000000000100 dead000000000122 [ 602.440437][ T9445] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 602.449005][ T9445] head: 00fff00000000040 ffff88813fea3b40 dead000000000100 dead000000000122 [ 602.457662][ T9445] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 602.466319][ T9445] head: 00fff00000000001 ffffea0000acf781 00000000ffffffff 00000000ffffffff [ 602.474976][ T9445] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 602.483627][ T9445] page dumped because: kasan: bad access detected [ 602.490022][ T9445] page_owner tracks the page as allocated [ 602.495711][ T9445] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12180231706, free_ts 0 [ 602.515404][ T9445] post_alloc_hook+0x231/0x280 [ 602.520174][ T9445] get_page_from_freelist+0x24dc/0x2580 [ 602.525722][ T9445] __alloc_frozen_pages_noprof+0x18d/0x380 [ 602.531517][ T9445] allocate_slab+0x77/0x660 [ 602.536011][ T9445] refill_objects+0x331/0x3c0 [ 602.540673][ T9445] __pcs_replace_empty_main+0x2b9/0x620 [ 602.546205][ T9445] __kmalloc_cache_noprof+0x392/0x660 [ 602.551574][ T9445] bus_add_driver+0x162/0x670 [ 602.556239][ T9445] driver_register+0x23a/0x320 [ 602.560985][ T9445] usb_register_driver+0x1e4/0x390 [ 602.566087][ T9445] do_one_initcall+0x250/0x8d0 [ 602.570841][ T9445] do_initcall_level+0x104/0x190 [ 602.575770][ T9445] do_initcalls+0x59/0xa0 [ 602.580085][ T9445] kernel_init_freeable+0x2a6/0x3e0 [ 602.585274][ T9445] kernel_init+0x1d/0x1d0 [ 602.589593][ T9445] ret_from_fork+0x51e/0xb90 [ 602.594171][ T9445] page_owner free stack trace missing [ 602.599518][ T9445] [ 602.601824][ T9445] Memory state around the buggy address: [ 602.607428][ T9445] ffff88802b3ded00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 602.615464][ T9445] ffff88802b3ded80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 602.623505][ T9445] >ffff88802b3dee00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.631544][ T9445] ^ [ 602.636373][ T9445] ffff88802b3dee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.644413][ T9445] ffff88802b3def00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 602.652453][ T9445] ================================================================== [ 602.665639][ T9445] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 602.672860][ T9445] CPU: 0 UID: 0 PID: 9445 Comm: syz.8.780 Not tainted syzkaller #0 PREEMPT(full) [ 602.682060][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.692109][ T9445] Call Trace: [ 602.695377][ T9445] [ 602.698290][ T9445] vpanic+0x56c/0xa60 [ 602.702277][ T9445] ? __pfx_vpanic+0x10/0x10 [ 602.706780][ T9445] ? __pfx___schedule+0x10/0x10 [ 602.711630][ T9445] panic+0xc5/0xd0 [ 602.715350][ T9445] ? __pfx_panic+0x10/0x10 [ 602.719762][ T9445] ? preempt_schedule_thunk+0x16/0x30 [ 602.725127][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.730757][ T9445] ? dvb_device_open+0xc4/0x350 [ 602.735608][ T9445] check_panic_on_warn+0x89/0xb0 [ 602.740543][ T9445] ? dvb_device_open+0xc4/0x350 [ 602.745393][ T9445] end_report+0x73/0x180 [ 602.749629][ T9445] ? dvb_device_open+0xc4/0x350 [ 602.754477][ T9445] kasan_report+0x128/0x150 [ 602.758973][ T9445] ? lock_acquire+0x20b/0x2e0 [ 602.763647][ T9445] ? dvb_device_open+0xc4/0x350 [ 602.768505][ T9445] dvb_device_open+0xc4/0x350 [ 602.773179][ T9445] ? do_raw_spin_unlock+0xf5/0x210 [ 602.778284][ T9445] chrdev_open+0x4cd/0x5e0 [ 602.782695][ T9445] ? __pfx_chrdev_open+0x10/0x10 [ 602.787624][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.793248][ T9445] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 602.799577][ T9445] ? __pfx_chrdev_open+0x10/0x10 [ 602.804505][ T9445] do_dentry_open+0x785/0x14e0 [ 602.809271][ T9445] vfs_open+0x3b/0x340 [ 602.813333][ T9445] ? path_openat+0x2df0/0x3860 [ 602.818100][ T9445] path_openat+0x2e08/0x3860 [ 602.822700][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.828331][ T9445] ? stack_depot_save_flags+0x2ff/0x810 [ 602.833874][ T9445] ? __pfx_path_openat+0x10/0x10 [ 602.838812][ T9445] ? __x64_sys_openat+0x138/0x170 [ 602.843831][ T9445] ? do_syscall_64+0x14d/0xf80 [ 602.848588][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.854647][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.860279][ T9445] ? __lock_acquire+0x6b5/0x2cf0 [ 602.865220][ T9445] do_file_open+0x23e/0x4a0 [ 602.869732][ T9445] ? __pfx_do_file_open+0x10/0x10 [ 602.874773][ T9445] ? _raw_spin_unlock+0x28/0x50 [ 602.879612][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.885238][ T9445] ? alloc_fd+0x64b/0x6c0 [ 602.889578][ T9445] do_sys_openat2+0x113/0x200 [ 602.894251][ T9445] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.899876][ T9445] ? irqentry_exit+0x59e/0x620 [ 602.904635][ T9445] ? __pfx_do_sys_openat2+0x10/0x10 [ 602.909836][ T9445] __x64_sys_openat+0x138/0x170 [ 602.914688][ T9445] do_syscall_64+0x14d/0xf80 [ 602.919273][ T9445] ? trace_irq_disable+0x3b/0x150 [ 602.924294][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.930353][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.936234][ T9445] RIP: 0033:0x7fe2a6d5c84e [ 602.940635][ T9445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 602.960231][ T9445] RSP: 002b:00007fe2a7cd1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 602.968645][ T9445] RAX: ffffffffffffffda RBX: 00007fe2a7cd26c0 RCX: 00007fe2a6d5c84e [ 602.976606][ T9445] RDX: 0000000000040002 RSI: 00007fe2a7cd1c00 RDI: ffffffffffffff9c [ 602.984572][ T9445] RBP: 00007fe2a7cd1c00 R08: 0000000000000000 R09: 0000000000000000 [ 602.992534][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 603.000495][ T9445] R13: 00007fe2a7016128 R14: 00007fe2a7016090 R15: 00007fff9dd0e7d8 [ 603.008471][ T9445] [ 603.011778][ T9445] Kernel Offset: disabled [ 603.016094][ T9445] Rebooting in 86400 seconds..