last executing test programs: 29m21.370516989s ago: executing program 1 (id=23): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x5, 0x1160000, 0x8, 0x80000001, 0x10001, "8b"}}, 0x119) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 29m14.447670629s ago: executing program 1 (id=33): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000013c0)=""/49, 0x94}, {0x0}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) 29m13.077163308s ago: executing program 1 (id=34): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 29m9.527445293s ago: executing program 1 (id=39): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffff4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 29m3.060927638s ago: executing program 1 (id=48): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 29m1.480570599s ago: executing program 1 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}}) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffe, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, 0x0, &(0x7f00000001c0)={0x9, 0x0, 0x7, 0x6, 0x5, 0x5, 0x4, 0xfffffffffffffff7}, 0x0, 0x0) 28m44.614148856s ago: executing program 32 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}}) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffe, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, 0x0, &(0x7f00000001c0)={0x9, 0x0, 0x7, 0x6, 0x5, 0x5, 0x4, 0xfffffffffffffff7}, 0x0, 0x0) 28m14.068618731s ago: executing program 4 (id=112): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) accept(r3, 0x0, &(0x7f0000000100)) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) syz_emit_ethernet(0x0, 0x0, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000140)=[0x4, 0xa, 0x1], &(0x7f0000000180)=[0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x4b, 0xf8f, 0x3, 0xbde, 0x8000000000000001, 0x8, 0x1, 0xd8}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 28m11.936742435s ago: executing program 4 (id=116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) munlockall() 28m10.865615776s ago: executing program 3 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x1000, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x0, @dev, 0x0, "9da175724148b4"}]}}}}}}}}, 0x0) 28m10.552526709s ago: executing program 3 (id=119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x0, 0x20000000}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 28m10.127757305s ago: executing program 3 (id=121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e0709090800c90002993d861bf242f5461be3dd9fd84b60945463297bc10325ee57e7c795788bf8a9a70086de60013ba3e370e9e5b23fe73b089ac64c315225400afde4ae3a67fd584e7b3db1ea78b7fcb0fc531d09c29cad8695faaa4200fb38d0915c19e9311ff9ae8ad262625973b000dfb431bd097b52365f4ad5b5d1308edd88cd4335f34fd8de44cb7d287863e4a854cb1b17368525ed03aac3af31b1cb49c793b2109e1045e7bf22"], 0xa) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x82, 0x0, 0x419}}}, 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 28m7.281052472s ago: executing program 4 (id=123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 28m6.092661096s ago: executing program 4 (id=126): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) sendmsg$inet(r2, 0x0, 0x20040084) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x20a0832, 0x0) 28m6.038916786s ago: executing program 3 (id=127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 28m2.358714858s ago: executing program 4 (id=129): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) sendmsg$inet(r2, 0x0, 0x20040084) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x20a0832, 0x0) 28m2.208487494s ago: executing program 3 (id=131): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) sendmsg$inet(r2, 0x0, 0x20040084) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x20a0832, 0x0) 28m0.892315878s ago: executing program 3 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 27m58.918110755s ago: executing program 4 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 27m44.77287718s ago: executing program 33 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 27m43.706195644s ago: executing program 34 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 27m38.994246857s ago: executing program 0 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) setfsgid(0xee00) r7 = syz_open_procfs(0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(r7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, r3, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17}) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd27c9770fed6526230000080102dc0200000008000100000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) 27m36.887031801s ago: executing program 0 (id=159): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) sendmsg$inet(r2, 0x0, 0x20040084) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x20a0832, 0x0) 27m35.052313263s ago: executing program 0 (id=161): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7", 0x33, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 27m33.919408035s ago: executing program 0 (id=163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 27m32.706331564s ago: executing program 0 (id=164): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x5b}, &(0x7f00000001c0)=0x9c) 27m31.12454216s ago: executing program 0 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 27m15.830199649s ago: executing program 35 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 12m28.220054088s ago: executing program 8 (id=3212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m26.75575916s ago: executing program 8 (id=3222): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r1, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r1, r0) 12m25.648503171s ago: executing program 8 (id=3236): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {0x7, 0xffea}, {0x10, 0xd}}}, 0x24}}, 0x10004040) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m25.439890793s ago: executing program 8 (id=3239): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 12m25.252397683s ago: executing program 8 (id=3241): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x240881) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 12m24.144476089s ago: executing program 8 (id=3248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5, 0x5}, @timestamp={0x8, 0xa, 0x76e6, 0x76b}, @nop, @mptcp=@ack={0x1e, 0xa, 0x8, 0x4, "cee011feb9a0"}, @generic={0x2, 0x9, "126a0697ae02df"}, @md5sig={0x13, 0x12, "ac32cd25c116c1ed01869462df57baff"}, @exp_fastopen={0xfe, 0xa, 0xf989, "3b70bd575c51"}]}}}}}}}, 0x0) 12m23.954935406s ago: executing program 36 (id=3248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5, 0x5}, @timestamp={0x8, 0xa, 0x76e6, 0x76b}, @nop, @mptcp=@ack={0x1e, 0xa, 0x8, 0x4, "cee011feb9a0"}, @generic={0x2, 0x9, "126a0697ae02df"}, @md5sig={0x13, 0x12, "ac32cd25c116c1ed01869462df57baff"}, @exp_fastopen={0xfe, 0xa, 0xf989, "3b70bd575c51"}]}}}}}}}, 0x0) 5m40.628346127s ago: executing program 9 (id=7685): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) fsopen(&(0x7f0000000280)='nfs\x00', 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) 5m4.177910632s ago: executing program 5 (id=8170): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mount(0x0, &(0x7f0000000800)='.\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) r3 = socket(0x28, 0x5, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 5m4.048515496s ago: executing program 5 (id=8172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={0x0, r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x24008080) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r1, 0x0) unshare(0x20000400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 5m3.95633503s ago: executing program 5 (id=8173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 5m3.667756702s ago: executing program 5 (id=8176): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3, 0x2, 0x4, 0x0, 0x12}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) 5m3.545777777s ago: executing program 5 (id=8178): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) fsopen(&(0x7f0000000280)='nfs\x00', 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) 5m3.176410589s ago: executing program 5 (id=8181): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0xffffff4f}, 0x1c) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m3.038362467s ago: executing program 9 (id=7686): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x40044) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x3ffffffe, @remote, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 5m0.358456745s ago: executing program 9 (id=8192): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m59.141976752s ago: executing program 9 (id=8194): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)={0xff}, 0x8) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r0, &(0x7f0000000180), 0x0) 4m59.016277463s ago: executing program 9 (id=8196): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mount(0x0, &(0x7f0000000800)='.\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) r3 = socket(0x28, 0x5, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 4m56.997201374s ago: executing program 9 (id=8199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 4m41.629328312s ago: executing program 37 (id=8199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 8.335667639s ago: executing program 2 (id=8910): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5.787913811s ago: executing program 2 (id=8916): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x24044845) 5.731779832s ago: executing program 6 (id=8917): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r2, 0x400, 0x0) mmap$snddsp(&(0x7f0000a72000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x1000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5d}}, 0x44) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, {0x0}}) socket$inet6_sctp(0xa, 0x1, 0x84) 5.33816854s ago: executing program 2 (id=8919): r0 = socket(0x22, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket(0x1d, 0x2, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r1], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getpeername$l2tp(r3, &(0x7f0000000a40)={0x2, 0x0, @remote}, &(0x7f0000000a80)=0x53) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={&(0x7f0000000680)="f4e596315e723b8bf1c29b170d27aa2f416d231f6c2229dfd27aab9fcc99b1a9a0e3", &(0x7f0000000780)=""/145, &(0x7f0000000840)="42d2", &(0x7f0000000880)="9b11d18352e5c3114079891c8edef2e7642894d0f520aec3323716b356d47a13c63c2db1add979ce9e89f3e3f418521b888529cb94a59776610413ee9e75486603a738c8d69ab2f061aa93a81e8129", 0xfff, r4}, 0x38) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) splice(r6, 0x0, r10, 0x0, 0x80, 0x8) write(r8, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000a00)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r11}, 0x10) 4.593690873s ago: executing program 6 (id=8921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) 4.316562415s ago: executing program 7 (id=8923): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) 4.301974168s ago: executing program 2 (id=8924): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f78d9ca38fff48f3be52163448412ba8b209f31083af15550f7e45143e156eec0cd410d07361db487eae2e4d35a91c1cfbefe804cb59", 0x36}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000001280)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653", 0x5d}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 3.28368464s ago: executing program 6 (id=8925): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 3.275726813s ago: executing program 7 (id=8926): socket$inet_tcp(0x2, 0x1, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xfff2, 0x60, 0xf, 0x9}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.041146819s ago: executing program 2 (id=8927): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r3}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) mount(0x0, &(0x7f0000000800)='.\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) r5 = socket(0x28, 0x5, 0x0) r6 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3, 0x19ef, 0xfffffff7, 0x5, 0x2800, 0x6, 0x9, 0x4, 0xc, 0x11, {0x4, 0xffffffff}, 0xd0, 0x1}}) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 2.167993738s ago: executing program 6 (id=8928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x24044845) 2.137664603s ago: executing program 7 (id=8929): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r2, 0x400, 0x0) mmap$snddsp(&(0x7f0000a72000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x1000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5d}}, 0x44) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, {0x0}}) socket$inet6_sctp(0xa, 0x1, 0x84) 1.828588768s ago: executing program 7 (id=8930): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 906.106744ms ago: executing program 6 (id=8931): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 802.997585ms ago: executing program 7 (id=8932): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000002500), 0xc, r3}, 0x38) 330.02568ms ago: executing program 2 (id=8933): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 32.424793ms ago: executing program 7 (id=8934): openat$mice(0xffffffffffffff9c, 0x0, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x40) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r1, 0x0, 0x9f) dup3(r2, r1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040), 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000400007012bbd700000000000047c00000400c2800c00028008000400", @ANYRES32=0x0, @ANYBLOB="31ec8b3c6209442c835acf6fe8f5398736ccd5e136442e23"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_CREATE(0x0, 0x0, 0x0) 0s ago: executing program 6 (id=8935): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f78d9ca38fff48f3be52163448412ba8b209f31083af15550f7e45143e156eec0cd410d07361db487eae2e4d35a91c1cfbefe804cb59", 0x36}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000001280)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653", 0x5d}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0, SerialNumber=0 [ 1343.710172][T10488] usb 8-1: config 0 descriptor?? [ 1343.738278][T10488] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1343.738330][T10488] dvb-usb: bulk message failed: -22 (3/0) [ 1343.767521][T10488] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1343.775392][T10488] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1343.775448][T10488] usb 8-1: media controller created [ 1343.788278][T10488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1343.816786][T10488] dvb-usb: bulk message failed: -22 (6/0) [ 1343.816873][T10488] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1343.844347][T10488] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input37 [ 1343.872492][T10488] dvb-usb: schedule remote query interval to 150 msecs. [ 1343.872515][T10488] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1344.002082][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.002101][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.067193][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 1344.067222][ T5812] dvb-usb: error while querying for an remote control event. [ 1344.111848][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.111868][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.221081][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 1344.221113][ T5812] dvb-usb: error while querying for an remote control event. [ 1344.380791][T10488] dvb-usb: bulk message failed: -22 (1/0) [ 1344.380824][T10488] dvb-usb: error while querying for an remote control event. [ 1344.445809][T23368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5867'. [ 1344.540837][T10488] dvb-usb: bulk message failed: -22 (1/0) [ 1344.540874][T10488] dvb-usb: error while querying for an remote control event. [ 1344.710823][ T986] dvb-usb: bulk message failed: -22 (1/0) [ 1344.710858][ T986] dvb-usb: error while querying for an remote control event. [ 1344.756810][ T986] usb 8-1: USB disconnect, device number 19 [ 1344.909442][ T986] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1345.398281][T23393] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6019'. [ 1345.492272][T23395] batadv1: entered promiscuous mode [ 1345.608844][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6022'. [ 1346.478557][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6026'. [ 1346.632707][T23418] team1: entered promiscuous mode [ 1346.632736][T23418] team1: entered allmulticast mode [ 1346.633303][T23418] 8021q: adding VLAN 0 to HW filter on device team1 [ 1346.868935][T23426] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 1347.199990][T23431] netlink: 'syz.5.6034': attribute type 4 has an invalid length. [ 1347.239475][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6033'. [ 1348.201193][T23467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6049'. [ 1348.454048][T23462] batadv1: entered promiscuous mode [ 1348.687074][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6057'. [ 1348.758299][T23484] team2: entered promiscuous mode [ 1348.758327][T23484] team2: entered allmulticast mode [ 1348.758963][T23484] 8021q: adding VLAN 0 to HW filter on device team2 [ 1348.921208][T23490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1349.068605][T23496] tipc: Started in network mode [ 1349.068624][T23496] tipc: Node identity 4, cluster identity 4711 [ 1349.068637][T23496] tipc: Node number set to 4 [ 1349.206616][T23496] tipc: Failed to remove unknown binding: 66,1,1/4:1813158693/1813158695 [ 1349.215978][T23496] tipc: Failed to remove unknown binding: 66,1,1/4:1813158693/1813158695 [ 1349.290138][T23506] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6065'. [ 1349.326722][T23506] vlan2: entered promiscuous mode [ 1349.582259][T23511] batman_adv: batadv0: Adding interface: dummy0 [ 1349.582372][T23511] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.582409][T23511] batman_adv: batadv0: Interface activated: dummy0 [ 1349.597920][T23511] batadv0: mtu less than device minimum [ 1349.609116][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1349.618745][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1349.628219][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1349.637777][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1349.675999][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1349.693510][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1349.711939][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1349.717043][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1349.738982][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1350.269821][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6073'. [ 1350.355835][T23518] batadv1: entered promiscuous mode [ 1350.656390][T23526] team1: entered promiscuous mode [ 1350.656420][T23526] team1: entered allmulticast mode [ 1350.658515][T23526] 8021q: adding VLAN 0 to HW filter on device team1 [ 1351.097568][T23543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1351.770056][T23559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6086'. [ 1351.889326][T23563] netlink: 'syz.7.6088': attribute type 4 has an invalid length. [ 1352.300865][T23581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6095'. [ 1352.462345][T23581] vlan2: entered promiscuous mode [ 1352.462367][T23581] gretap0: entered promiscuous mode [ 1353.324227][T23618] netlink: 'syz.7.6112': attribute type 1 has an invalid length. [ 1353.388240][T23618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1353.400738][T12017] Bluetooth: hci5: command 0x0406 tx timeout [ 1353.468041][T23623] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6113'. [ 1353.491330][T23623] vlan3: entered promiscuous mode [ 1353.491353][T23623] gretap0: entered promiscuous mode [ 1354.244958][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6125'. [ 1354.278535][T23650] netlink: 'syz.7.6125': attribute type 9 has an invalid length. [ 1354.549739][T23655] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6127'. [ 1355.004240][T23674] batadv1: entered promiscuous mode [ 1355.434170][T23685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6138'. [ 1356.239919][T23707] syz_tun: entered allmulticast mode [ 1356.247218][T23707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6146'. [ 1356.423820][T23707] syz_tun (unregistering): left allmulticast mode [ 1356.724448][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6151'. [ 1357.497731][T23742] netlink: 'syz.5.6160': attribute type 4 has an invalid length. [ 1357.809844][T23755] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6163'. [ 1358.327829][T23767] batman_adv: batadv0: Adding interface: dummy0 [ 1358.327848][T23767] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.327877][T23767] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1358.332191][T23767] net_ratelimit: 10 callbacks suppressed [ 1358.332208][T23767] macvtap1: mtu less than device minimum [ 1358.560543][T23774] netlink: 'syz.2.6171': attribute type 13 has an invalid length. [ 1358.561670][T23774] netlink: 'syz.2.6171': attribute type 17 has an invalid length. [ 1358.773698][T23782] netlink: 'syz.6.6172': attribute type 4 has an invalid length. [ 1358.931725][T23774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1359.718457][T23813] netlink: 'syz.7.6185': attribute type 4 has an invalid length. [ 1360.633718][T23838] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6193'. [ 1360.644735][T23838] vlan2: entered promiscuous mode [ 1360.901235][T23846] netlink: 'syz.7.6196': attribute type 4 has an invalid length. [ 1361.557394][T23866] batman_adv: batadv0: Adding interface: dummy0 [ 1361.557413][T23866] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.557450][T23866] batman_adv: batadv0: Interface activated: dummy0 [ 1361.572121][T23866] batadv0: mtu less than device minimum [ 1361.593839][T23866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1361.612261][T23866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1361.626874][T23866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1361.671639][T23866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1361.701316][T23866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1361.723589][T23866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1361.757244][T23866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1362.502911][T23898] netlink: 'syz.7.6218': attribute type 4 has an invalid length. [ 1363.489219][T23928] netlink: 'syz.5.6231': attribute type 4 has an invalid length. [ 1364.126852][T23956] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6244'. [ 1364.175521][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6243'. [ 1364.175552][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6243'. [ 1364.321858][T23960] netlink: 'syz.2.6245': attribute type 4 has an invalid length. [ 1364.704672][T23976] batadv2: entered promiscuous mode [ 1364.785246][T23979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6252'. [ 1364.785928][T23979] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6252'. [ 1364.804592][T23978] net_ratelimit: 12 callbacks suppressed [ 1364.804610][T23978] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1364.931940][T23991] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6257'. [ 1365.768447][T23979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.821398][T23979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.884119][T23979] bond0 (unregistering): Released all slaves [ 1366.357246][T24014] Bluetooth: MGMT ver 1.23 [ 1366.368688][T24014] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6267'. [ 1366.501442][T24021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6270'. [ 1366.642285][T24029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6274'. [ 1366.687194][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.687258][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.841920][T24079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6298'. [ 1369.406037][T24142] __nla_validate_parse: 2 callbacks suppressed [ 1369.406058][T24142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6325'. [ 1369.452728][T24142] dummy0: entered promiscuous mode [ 1371.246939][T24200] netlink: 'syz.5.6352': attribute type 13 has an invalid length. [ 1371.246962][T24200] netlink: 'syz.5.6352': attribute type 17 has an invalid length. [ 1371.918328][T24200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1372.210125][T24216] batadv1: entered promiscuous mode [ 1372.452124][T24223] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6361'. [ 1372.453669][T24225] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6362'. [ 1372.936374][T24240] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6367'. [ 1373.474259][T24247] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1374.031953][T24263] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6374'. [ 1374.298680][T24271] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6378'. [ 1374.555463][T24281] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1374.722988][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6383'. [ 1374.835946][T24288] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6385'. [ 1375.599449][T24301] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1375.711970][T24301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6390'. [ 1376.056286][T24313] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6395'. [ 1376.295666][T24319] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6396'. [ 1376.695630][T24332] batadv1: entered promiscuous mode [ 1377.354281][T24347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6408'. [ 1377.405008][T24347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6408'. [ 1377.414175][T24350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.426725][T24351] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6409'. [ 1377.626794][T24355] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1378.198251][T24370] batadv1: entered promiscuous mode [ 1378.395567][T24377] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6420'. [ 1378.613260][T24380] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6421'. [ 1380.009116][T24417] __nla_validate_parse: 3 callbacks suppressed [ 1380.009135][T24417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6435'. [ 1380.559322][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6443'. [ 1380.559341][T24440] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6443'. [ 1380.994936][T24448] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6447'. [ 1381.182623][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cf97000: rx timeout, send abort [ 1381.186636][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf97000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1381.777091][T24479] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1383.081188][T24513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6474'. [ 1384.037905][T24546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.125727][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 1384.230544][T24554] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1384.897604][T24588] netlink: 'syz.7.6504': attribute type 12 has an invalid length. [ 1384.897627][T24588] netlink: 'syz.7.6504': attribute type 29 has an invalid length. [ 1384.897642][T24588] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6504'. [ 1384.981199][T24590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6505'. [ 1384.981223][T24590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6505'. [ 1385.787837][T24612] batadv1: entered promiscuous mode [ 1385.794847][T24614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6513'. [ 1386.073753][T24622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6517'. [ 1386.073776][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6517'. [ 1386.507573][T24640] netlink: 'syz.9.6522': attribute type 1 has an invalid length. [ 1386.507594][T24640] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6522'. [ 1387.108315][T24658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.150206][T24657] syz_tun: entered allmulticast mode [ 1387.153033][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6528'. [ 1387.372475][T24654] syz_tun (unregistering): left allmulticast mode [ 1387.753719][T24676] netlink: 'syz.6.6537': attribute type 1 has an invalid length. [ 1387.753741][T24676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6537'. [ 1387.770914][T24674] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1387.902695][T24683] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1388.604951][T24698] syz_tun: entered allmulticast mode [ 1388.607678][T24698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6545'. [ 1388.902487][T24698] syz_tun (unregistering): left allmulticast mode [ 1389.210231][T24719] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1389.490141][T24728] netlink: 'syz.6.6555': attribute type 13 has an invalid length. [ 1389.490164][T24728] netlink: 'syz.6.6555': attribute type 17 has an invalid length. [ 1390.345075][T24728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.351669][T24728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.414218][T24728] dummy0: entered promiscuous mode [ 1390.414993][T24728] batman_adv: batadv0: Interface activated: dummy0 [ 1390.415014][T24728] batadv0: mtu less than device minimum [ 1390.439392][T24728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.460208][T24728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.483030][T24728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.489411][T24728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.500027][T24728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.516713][T24728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.537942][T24728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.704587][T24754] batadv1: entered promiscuous mode [ 1392.016334][T24804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6581'. [ 1392.293393][T24819] batadv1: entered promiscuous mode [ 1392.610354][T24827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.865284][T24842] net_ratelimit: 13 callbacks suppressed [ 1392.865303][T24842] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1392.938282][T24848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6600'. [ 1393.719858][T24883] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1394.582028][T24914] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1394.644776][T24917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6625'. [ 1395.084770][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6634'. [ 1395.125128][T24947] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6637'. [ 1395.756093][T24978] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6649'. [ 1395.824165][T24984] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6650'. [ 1395.825908][T24983] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6652'. [ 1396.384774][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6663'. [ 1396.422392][T25012] netlink: 'syz.7.6662': attribute type 13 has an invalid length. [ 1396.422417][T25012] netlink: 'syz.7.6662': attribute type 17 has an invalid length. [ 1396.465241][T25012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1397.185861][T25049] __nla_validate_parse: 1 callbacks suppressed [ 1397.185882][T25049] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6676'. [ 1397.235263][T25051] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1397.263401][T25055] syz_tun: entered allmulticast mode [ 1397.265962][T25055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6678'. [ 1397.326003][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6680'. [ 1397.326033][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6680'. [ 1397.448676][T25055] syz_tun (unregistering): left allmulticast mode [ 1397.894803][T25087] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1398.187499][T25103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6695'. [ 1398.235448][T25106] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6696'. [ 1398.331708][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6697'. [ 1398.402600][T25111] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1398.823653][T25131] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6708'. [ 1398.916303][T25135] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1399.148981][T25148] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6714'. [ 1400.157601][T25183] batadv1: entered promiscuous mode [ 1401.320897][T25213] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1402.043939][T25243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.043893][T25277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.183913][T25278] __nla_validate_parse: 4 callbacks suppressed [ 1403.183932][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6763'. [ 1403.782479][T25299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6768'. [ 1403.935453][T25307] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6774'. [ 1403.991677][T25309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6772'. [ 1404.126537][T25312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.328156][T25324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6777'. [ 1404.740273][T25335] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1405.024587][T25341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6784'. [ 1405.213450][T25349] netlink: 'syz.9.6786': attribute type 13 has an invalid length. [ 1405.213474][T25349] netlink: 'syz.9.6786': attribute type 17 has an invalid length. [ 1405.240529][T25341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1405.838718][T25359] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6788'. [ 1406.425440][T25345] bond1 (unregistering): Released all slaves [ 1406.530844][T25349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1406.906495][T25373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.260877][T25388] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6800'. [ 1407.352146][T25390] netlink: 'syz.7.6801': attribute type 13 has an invalid length. [ 1407.352169][T25390] netlink: 'syz.7.6801': attribute type 17 has an invalid length. [ 1407.421448][T25390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1408.246061][T25407] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1408.553914][T25414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6811'. [ 1408.806941][T25416] netlink: 'syz.2.6812': attribute type 13 has an invalid length. [ 1408.806962][T25416] netlink: 'syz.2.6812': attribute type 17 has an invalid length. [ 1408.871912][T25416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1408.926113][T25420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1409.525688][T25441] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6822'. [ 1409.759435][T25447] netlink: 'syz.6.6825': attribute type 13 has an invalid length. [ 1409.759458][T25447] netlink: 'syz.6.6825': attribute type 17 has an invalid length. [ 1409.776239][T25445] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6824'. [ 1410.001161][T25447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1410.003326][T25445] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1410.494573][T25462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.618603][T25469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6834'. [ 1410.691277][T25470] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1410.724942][T25472] netlink: 'syz.2.6837': attribute type 13 has an invalid length. [ 1410.724967][T25472] netlink: 'syz.2.6837': attribute type 17 has an invalid length. [ 1410.771957][T25472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1411.474831][T25496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6846'. [ 1411.813450][T25504] batadv1: entered promiscuous mode [ 1411.924644][T25515] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1411.949263][T25510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.544795][T25536] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6861'. [ 1412.913479][T25549] batadv1: entered promiscuous mode [ 1413.735011][T25572] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6873'. [ 1413.867062][T25576] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6876'. [ 1413.958775][T25576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1414.794483][T25622] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6896'. [ 1414.841869][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 1414.918445][T25628] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6900'. [ 1415.158930][T25639] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6904'. [ 1415.158961][T25639] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6904'. [ 1416.415482][T25689] netlink: 124 bytes leftover after parsing attributes in process `syz.5.6923'. [ 1416.648278][T25698] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6927'. [ 1417.214729][T25715] netlink: 'syz.9.6935': attribute type 13 has an invalid length. [ 1417.214753][T25715] netlink: 'syz.9.6935': attribute type 17 has an invalid length. [ 1417.314453][T25715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1417.519754][T25725] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6940'. [ 1417.865013][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6945'. [ 1418.102697][T25747] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1418.909494][T25780] __nla_validate_parse: 2 callbacks suppressed [ 1418.909515][T25780] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6966'. [ 1418.909539][T25780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6966'. [ 1419.027178][T25787] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6971'. [ 1419.459077][T25804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.676785][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1419.676816][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1420.395935][T25823] netlink: 'syz.5.6986': attribute type 13 has an invalid length. [ 1420.395958][T25823] netlink: 'syz.5.6986': attribute type 17 has an invalid length. [ 1420.752687][T25823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1420.945538][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6991'. [ 1420.992470][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6992'. [ 1421.072733][T25836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1421.321356][T25849] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6996'. [ 1421.451935][T25855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.064695][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7000'. [ 1422.297153][T25841] bond1 (unregistering): Released all slaves [ 1422.413769][T25862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7001'. [ 1422.529209][T25864] netlink: 'syz.7.7002': attribute type 13 has an invalid length. [ 1422.529238][T25864] netlink: 'syz.7.7002': attribute type 17 has an invalid length. [ 1422.694538][T25864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1422.818199][T25878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.296245][T25901] netlink: 'syz.9.7018': attribute type 13 has an invalid length. [ 1423.296269][T25901] netlink: 'syz.9.7018': attribute type 17 has an invalid length. [ 1423.341524][T25901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1423.903870][T25936] netlink: 'syz.7.7032': attribute type 13 has an invalid length. [ 1423.903885][T25936] netlink: 'syz.7.7032': attribute type 17 has an invalid length. [ 1424.012096][T25936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1424.603434][T25963] netlink: 'syz.7.7045': attribute type 13 has an invalid length. [ 1424.603458][T25963] netlink: 'syz.7.7045': attribute type 17 has an invalid length. [ 1424.683366][T25963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1425.617368][T25999] netlink: 'syz.5.7059': attribute type 13 has an invalid length. [ 1425.617391][T25999] netlink: 'syz.5.7059': attribute type 17 has an invalid length. [ 1425.660899][T25999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1425.833023][T26010] __nla_validate_parse: 4 callbacks suppressed [ 1425.833043][T26010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7064'. [ 1425.876743][T26010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.023994][T26010] bond0 (unregistering): Released all slaves [ 1427.151963][T26037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1427.513939][T26058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7083'. [ 1427.580197][T26066] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7087'. [ 1428.005988][T26082] validate_nla: 2 callbacks suppressed [ 1428.006008][T26082] netlink: 'syz.9.7092': attribute type 13 has an invalid length. [ 1428.006025][T26082] netlink: 'syz.9.7092': attribute type 17 has an invalid length. [ 1428.074356][T26082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1428.128636][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.128709][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.328644][T26132] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7112'. [ 1429.392498][T26133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.791505][T26157] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1430.475073][T26191] netlink: 'syz.9.7137': attribute type 13 has an invalid length. [ 1430.475095][T26191] netlink: 'syz.9.7137': attribute type 17 has an invalid length. [ 1430.562238][T26191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1430.611044][T26199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.767969][T26205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7143'. [ 1431.437160][T26223] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7151'. [ 1431.488516][T26225] netlink: 'syz.2.7152': attribute type 13 has an invalid length. [ 1431.488532][T26225] netlink: 'syz.2.7152': attribute type 17 has an invalid length. [ 1431.544630][T26225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1432.030257][T26239] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1432.386984][T26250] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1433.274032][T26277] batman_adv: batadv0: Interface deactivated: dummy0 [ 1433.274062][T26277] batman_adv: batadv0: Removing interface: dummy0 [ 1433.641556][T26286] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7177'. [ 1434.033226][T26293] batadv1: entered promiscuous mode [ 1434.034818][T26293] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1435.410301][T26328] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7193'. [ 1435.965157][T26351] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1435.992804][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7202'. [ 1436.726202][T26383] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1436.764456][T26387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7217'. [ 1437.419410][T26412] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7229'. [ 1437.622498][T26419] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1438.676226][T26443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7242'. [ 1439.290548][T26456] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7248'. [ 1439.374869][T26462] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7251'. [ 1440.990938][T26528] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7279'. [ 1441.336085][T26539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7283'. [ 1441.588810][T26545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7285'. [ 1441.638532][T26545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1442.917139][T26566] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7292'. [ 1443.037863][T26545] bond3 (unregistering): Released all slaves [ 1443.122978][T26568] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1443.255210][T26573] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7294'. [ 1445.565674][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 1446.094190][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7326'. [ 1446.192344][T26659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1446.464752][T26679] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7332'. [ 1446.637631][T26686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.935270][T26705] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7344'. [ 1447.084971][T26711] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7346'. [ 1447.388077][T26720] batman_adv: batadv0: Interface deactivated: dummy0 [ 1447.388106][T26720] batman_adv: batadv0: Removing interface: dummy0 [ 1447.640470][T26730] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7356'. [ 1447.808883][T26737] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7358'. [ 1449.680765][ T7662] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1450.034001][ T7662] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.034029][ T7662] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1450.034081][ T7662] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1450.034105][ T7662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.039662][ T7662] usb 6-1: config 0 descriptor?? [ 1450.090283][ T7662] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1450.090334][ T7662] dvb-usb: bulk message failed: -22 (3/0) [ 1450.115344][ T7662] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1450.117106][ T7662] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1450.117160][ T7662] usb 6-1: media controller created [ 1450.119827][ T7662] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1450.165882][ T7662] dvb-usb: bulk message failed: -22 (6/0) [ 1450.165967][ T7662] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1450.170338][ T7662] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 1450.204774][ T7662] dvb-usb: schedule remote query interval to 150 msecs. [ 1450.204798][ T7662] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1450.361496][ T7662] dvb-usb: bulk message failed: -22 (1/0) [ 1450.361527][ T7662] dvb-usb: error while querying for an remote control event. [ 1450.712611][T10519] dvb-usb: bulk message failed: -22 (1/0) [ 1450.712640][T10519] dvb-usb: error while querying for an remote control event. [ 1450.765537][ T986] usb 6-1: USB disconnect, device number 30 [ 1451.799108][ T986] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1452.861294][T26812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.063493][T26818] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7389'. [ 1453.206516][T26823] netlink: 'syz.2.7388': attribute type 13 has an invalid length. [ 1453.206540][T26823] netlink: 'syz.2.7388': attribute type 17 has an invalid length. [ 1454.070767][T26823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1457.306669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1457.360994][ C1] vkms_vblank_simulate: vblank timer overrun [ 1457.370896][T26865] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7401'. [ 1457.452309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1457.532106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1457.792234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.119686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.281568][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.328084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.650597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.677230][T26887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.013723][T26902] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7417'. [ 1459.187159][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.351080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1462.051747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1462.532907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.438192][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.677862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.938274][ C1] vkms_vblank_simulate: vblank timer overrun [ 1466.313669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1466.731014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1466.932542][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.002560][T12017] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 1467.089342][T26968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.579439][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.884643][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.897433][T27028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.989232][T27040] CIFS mount error: No usable UNC path provided in device string! [ 1473.989232][T27040] [ 1473.989306][T27040] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1474.716564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.529691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.640804][T12017] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 1475.752559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.833566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.727906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.270237][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.597360][T27086] CIFS mount error: No usable UNC path provided in device string! [ 1478.597360][T27086] [ 1478.597415][T27086] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1480.071065][ T5894] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1480.232713][ T5894] usb 8-1: Using ep0 maxpacket: 8 [ 1480.253346][ T5894] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1480.253376][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.253398][ T5894] usb 8-1: Product: syz [ 1480.253413][ T5894] usb 8-1: Manufacturer: syz [ 1480.253429][ T5894] usb 8-1: SerialNumber: syz [ 1480.632982][T27112] Mount JFS Failure: -22 [ 1480.632999][T27112] jfs_mount failed w/return code = -22 [ 1481.252803][ T5894] usb 8-1: config 0 descriptor?? [ 1481.753001][ T5894] usb read operation failed. (-32) [ 1481.758345][ T5894] usb write operation failed. (-71) [ 1481.758761][ T5894] usb write operation failed. (-71) [ 1481.759150][ T5894] usb write operation failed. (-71) [ 1481.759168][ T5894] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1481.761909][ T5894] usb 8-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1481.761935][ T5894] usb 8-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1483.238405][T27136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1485.359367][T12017] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 1488.019302][T27199] Mount JFS Failure: -22 [ 1488.019349][T27199] jfs_mount failed w/return code = -22 [ 1489.571665][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.571739][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.993848][ T5812] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1491.169169][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.169199][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1491.169255][ T5812] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1491.169280][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.231400][ T5812] usb 3-1: config 0 descriptor?? [ 1491.236853][ T5812] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1491.236903][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 1491.267506][ T5812] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1491.268405][ T5812] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1491.268462][ T5812] usb 3-1: media controller created [ 1491.306636][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1491.993281][T27243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1492.208573][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 1492.208660][ T5812] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1492.212856][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 1492.215233][ T5812] dvb-usb: schedule remote query interval to 150 msecs. [ 1492.215252][ T5812] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1492.370743][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 1492.370779][ T5812] dvb-usb: error while querying for an remote control event. [ 1492.536554][ T986] dvb-usb: bulk message failed: -22 (1/0) [ 1492.536747][ T986] dvb-usb: error while querying for an remote control event. [ 1492.713781][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 1492.713936][ T5812] dvb-usb: error while querying for an remote control event. [ 1492.871638][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 1492.871798][ T5812] dvb-usb: error while querying for an remote control event. [ 1493.030767][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 1493.030798][ T5812] dvb-usb: error while querying for an remote control event. [ 1493.191149][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 1493.191183][ T5812] dvb-usb: error while querying for an remote control event. [ 1493.287440][ T986] usb 3-1: USB disconnect, device number 70 [ 1493.410321][T12017] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 1493.547567][ T986] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1493.668503][T27272] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1500.785015][T27326] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1501.090368][T12017] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 1501.095357][T12017] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 1502.564710][T27341] batadv1: entered promiscuous mode [ 1505.170329][T12017] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1505.173717][T12017] Bluetooth: hci4: Injecting HCI hardware error event [ 1505.176332][ T5818] Bluetooth: hci4: hardware error 0x00 [ 1507.256827][T27386] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1507.480922][ T5818] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1508.487467][T27395] batadv1: entered promiscuous mode [ 1510.659855][T27415] CIFS mount error: No usable UNC path provided in device string! [ 1510.659855][T27415] [ 1510.659880][T27415] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1512.818187][T27443] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1516.539092][T27496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.809074][T27502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7596'. [ 1516.809127][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7596'. [ 1517.359479][T27518] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1517.654980][T27528] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1518.225797][T27543] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7610'. [ 1518.225835][T27543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7610'. [ 1519.077937][T27564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7617'. [ 1519.196762][T27568] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1519.267363][T27570] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7621'. [ 1520.191931][T27583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7625'. [ 1520.343802][T27573] netlink: 'syz.5.7619': attribute type 30 has an invalid length. [ 1520.386505][T27573] bond0: option arp_missed_max: invalid value (0) [ 1520.386535][T27573] bond0: option arp_missed_max: allowed values 1 - 255 [ 1520.746253][T27573] bond0 (unregistering): Released all slaves [ 1526.839006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.001617][ T5818] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 1527.432093][T27697] Can't find ip_set type hash:net, [ 1527.879173][T27707] Can't find ip_set type hash:net,po [ 1528.069567][T27716] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1529.274539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.537136][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.652335][T27743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7673'. [ 1530.361246][T10519] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1530.537206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.596239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.731084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.868003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.092713][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.207694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.322000][T10519] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.322028][T10519] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1531.322067][T10519] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1531.322091][T10519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.371911][T10519] usb 6-1: config 0 descriptor?? [ 1531.673119][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.706388][ T986] usb 6-1: USB disconnect, device number 31 [ 1531.822119][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.971232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.163565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.578399][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.662871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1533.794297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1534.185947][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.250359][T27793] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1536.016903][T12017] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1536.029917][T12017] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1536.031596][T12017] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1536.033439][T12017] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1536.037265][T12017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1537.905878][T27805] chnl_net:caif_netlink_parms(): no params data found [ 1538.071944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1538.120863][T12017] Bluetooth: hci3: command tx timeout [ 1538.347014][T27834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1538.636762][ T5892] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1539.011625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.353049][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.353077][ T5892] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1539.353117][ T5892] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1539.353143][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.482432][ T5892] usb 6-1: config 0 descriptor?? [ 1539.695088][ T986] usb 6-1: USB disconnect, device number 32 [ 1539.714827][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.760708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.976823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1540.200791][T12017] Bluetooth: hci3: command tx timeout [ 1540.402755][T27805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.402919][T27805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.403142][T27805] bridge_slave_0: entered allmulticast mode [ 1540.405650][T27805] bridge_slave_0: entered promiscuous mode [ 1540.438327][ T986] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1540.556410][T27114] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.556445][T27114] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.595075][ T986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.595103][ T986] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1540.595139][ T986] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1540.595164][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.636954][ T986] usb 3-1: config 0 descriptor?? [ 1540.660797][T27805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.660945][T27805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.661197][T27805] bridge_slave_1: entered allmulticast mode [ 1540.663983][T27805] bridge_slave_1: entered promiscuous mode [ 1540.844494][ T986] usb 3-1: USB disconnect, device number 71 [ 1540.977007][T27114] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.977044][T27114] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.192419][T27805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.263985][T27114] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.264020][T27114] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.323654][T27805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.828915][T27114] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.828951][T27114] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.893827][T27805] team0: Port device team_slave_0 added [ 1541.938315][T27805] team0: Port device team_slave_1 added [ 1542.144036][T27805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.144055][T27805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.144081][T27805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.159178][T27805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.159350][T27805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.159379][T27805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.290839][T12017] Bluetooth: hci3: command tx timeout [ 1542.532811][T27805] hsr_slave_0: entered promiscuous mode [ 1542.534459][T27805] hsr_slave_1: entered promiscuous mode [ 1542.535560][T27805] debugfs: 'hsr0' already exists in 'hsr' [ 1542.535583][T27805] Cannot create hsr debugfs directory [ 1543.100734][ T986] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1543.235679][T27995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1543.253737][ T986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.253764][ T986] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1543.253812][ T986] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1543.253836][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.259318][ T986] usb 3-1: config 0 descriptor?? [ 1543.466123][ T7662] usb 3-1: USB disconnect, device number 72 [ 1543.739855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.897361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.979968][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.135060][T28030] netlink: 'syz.2.7786': attribute type 13 has an invalid length. [ 1544.135084][T28030] netlink: 'syz.2.7786': attribute type 17 has an invalid length. [ 1544.198768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.353879][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.361121][T12017] Bluetooth: hci3: command tx timeout [ 1544.771829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.848694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.928826][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.004296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.092830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.380477][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.885845][ T5894] usb 8-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1545.885926][ T5894] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1545.889529][ T5894] usb 8-1: USB disconnect, device number 20 [ 1546.413052][T27114] bond0 (unregistering): (slave team0): Releasing backup interface [ 1546.498433][T27114] bond0 (unregistering): Released all slaves [ 1546.691043][T28030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1546.924302][T27114] tipc: Left network mode [ 1547.428726][T28158] batadv1: entered promiscuous mode [ 1547.725889][T28180] netlink: 'syz.7.7859': attribute type 13 has an invalid length. [ 1547.725912][T28180] netlink: 'syz.7.7859': attribute type 17 has an invalid length. [ 1547.971792][T28180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1548.304990][T28199] batadv1: entered promiscuous mode [ 1550.400697][T28261] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7895'. [ 1550.402782][T28242] batadv1: entered promiscuous mode [ 1551.015904][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.016005][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.498157][T27114] hsr_slave_0: left promiscuous mode [ 1551.607093][T27114] veth1_macvtap: left promiscuous mode [ 1551.607203][T27114] veth0_macvtap: left promiscuous mode [ 1551.607389][T27114] veth1_vlan: left promiscuous mode [ 1551.607564][T27114] veth0_vlan: left promiscuous mode [ 1553.263139][T28334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1553.950754][T10488] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1554.113934][T10488] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1554.113966][T10488] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1554.117183][T10488] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1554.117213][T10488] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1554.117233][T10488] usb 8-1: Product: syz [ 1554.117249][T10488] usb 8-1: Manufacturer: syz [ 1554.117264][T10488] usb 8-1: SerialNumber: syz [ 1554.206754][T10488] usb 8-1: config 0 descriptor?? [ 1554.214619][T10488] usb 8-1: selecting invalid altsetting 0 [ 1554.663494][T10519] usb 8-1: USB disconnect, device number 21 [ 1561.981133][T27805] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1562.341928][T27805] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1562.460712][T27805] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1562.938146][T27805] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1564.234495][ T5894] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1564.437172][ T5894] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1564.437204][ T5894] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1564.440260][ T5894] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1564.440288][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1564.440311][ T5894] usb 8-1: Product: syz [ 1564.440326][ T5894] usb 8-1: Manufacturer: syz [ 1564.440342][ T5894] usb 8-1: SerialNumber: syz [ 1564.448228][ T5894] usb 8-1: config 0 descriptor?? [ 1564.554405][ T5894] usb 8-1: selecting invalid altsetting 0 [ 1564.955663][T27805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.984449][T27805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.999432][T27115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.000327][T27115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.046413][T10519] usb 8-1: USB disconnect, device number 22 [ 1565.074655][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.074817][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.803163][T27805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.254174][T10519] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1567.073400][T10519] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1567.073431][T10519] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1567.076396][T10519] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1567.076425][T10519] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1567.076446][T10519] usb 8-1: Product: syz [ 1567.076461][T10519] usb 8-1: Manufacturer: syz [ 1567.076476][T10519] usb 8-1: SerialNumber: syz [ 1567.081976][T10519] usb 8-1: config 0 descriptor?? [ 1567.089481][T10519] usb 8-1: selecting invalid altsetting 0 [ 1567.993202][T28835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.125814][T10519] usb 8-1: USB disconnect, device number 23 [ 1568.292047][T27805] veth0_vlan: entered promiscuous mode [ 1568.308359][T27805] veth1_vlan: entered promiscuous mode [ 1568.435401][T27805] veth0_macvtap: entered promiscuous mode [ 1568.450549][T27805] veth1_macvtap: entered promiscuous mode [ 1568.486428][T27805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.512117][T27805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1568.546472][T27115] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.548941][T27115] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.549151][T27115] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.549205][T27115] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.443876][ T7017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.443897][ T7017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.932233][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.932255][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.730694][T10519] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1570.965352][T10519] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.965379][T10519] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1570.965416][T10519] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1570.965450][T10519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.972143][T10519] usb 3-1: config 0 descriptor?? [ 1571.058118][T28908] CIFS mount error: No usable UNC path provided in device string! [ 1571.058118][T28908] [ 1571.058140][T28908] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1571.317128][T10519] usb 3-1: USB disconnect, device number 73 [ 1572.027430][T28901] netlink: 'syz.9.7686': attribute type 30 has an invalid length. [ 1572.095678][T28901] bond1: option arp_missed_max: invalid value (0) [ 1572.095704][T28901] bond1: option arp_missed_max: allowed values 1 - 255 [ 1572.183570][T28901] bond1 (unregistering): Released all slaves [ 1574.113634][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1574.140519][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1574.150002][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1574.163425][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1574.181472][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1574.437366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.467841][T28951] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8195'. [ 1574.621346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.733387][T28956] CIFS mount error: No usable UNC path provided in device string! [ 1574.733387][T28956] [ 1574.733409][T28956] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1574.935787][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.101123][ T31] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1576.472865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.482979][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.483007][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1576.483045][ T31] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1576.483070][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.527541][T12017] Bluetooth: hci1: command tx timeout [ 1576.538916][ T31] usb 3-1: config 0 descriptor?? [ 1576.895944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.925766][ T31] usb 3-1: USB disconnect, device number 74 [ 1577.145963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.551231][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.800410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.806735][T12017] Bluetooth: hci1: command tx timeout [ 1578.949491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.053640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.876723][ T1296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.180251][T12017] Bluetooth: hci1: command tx timeout [ 1583.353783][T29010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1583.836951][ T1296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.908700][ T1296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.240991][T12017] Bluetooth: hci1: command tx timeout [ 1585.278914][ T1296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.169740][T28936] chnl_net:caif_netlink_parms(): no params data found [ 1588.250934][T29055] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1588.253097][T29055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8223'. [ 1588.851670][T28936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.852164][T28936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.852788][T28936] bridge_slave_0: entered allmulticast mode [ 1588.876803][T28936] bridge_slave_0: entered promiscuous mode [ 1588.972671][T28936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.972848][T28936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.973789][T28936] bridge_slave_1: entered allmulticast mode [ 1589.075802][T28936] bridge_slave_1: entered promiscuous mode [ 1591.795667][ T1296] bridge_slave_1: left allmulticast mode [ 1591.795695][ T1296] bridge_slave_1: left promiscuous mode [ 1591.795945][ T1296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.022346][ T1296] bridge_slave_0: left allmulticast mode [ 1592.022374][ T1296] bridge_slave_0: left promiscuous mode [ 1592.022654][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.183588][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1594.199893][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1594.205607][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1594.218166][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1594.220502][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1596.300861][T12017] Bluetooth: hci2: command tx timeout [ 1598.359718][T28936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.361800][T12017] Bluetooth: hci2: command tx timeout [ 1600.443241][T12017] Bluetooth: hci2: command tx timeout [ 1600.837830][T28936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.874558][T29174] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1600.874882][T29174] exFAT-fs (nullb0): invalid boot record signature [ 1600.874889][T29174] exFAT-fs (nullb0): failed to read boot sector [ 1600.874895][T29174] exFAT-fs (nullb0): failed to recognize exfat type [ 1601.755570][T28936] team0: Port device team_slave_0 added [ 1602.754373][T12017] Bluetooth: hci2: command tx timeout [ 1603.578009][T28936] team0: Port device team_slave_1 added [ 1604.221143][ T1296] hsr_slave_0: left promiscuous mode [ 1604.260713][ T1296] hsr_slave_1: left promiscuous mode [ 1604.262985][ T1296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1604.263012][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.301910][ T1296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.301939][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.413095][ T1296] veth1_macvtap: left promiscuous mode [ 1604.413199][ T1296] veth0_macvtap: left promiscuous mode [ 1604.413650][ T1296] veth1_vlan: left promiscuous mode [ 1604.413836][ T1296] veth0_vlan: left promiscuous mode [ 1604.470698][T10519] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1604.625419][T10519] usb 8-1: config 0 has no interfaces? [ 1604.628850][T10519] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1604.628882][T10519] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1604.628905][T10519] usb 8-1: Product: syz [ 1604.628921][T10519] usb 8-1: Manufacturer: syz [ 1604.628937][T10519] usb 8-1: SerialNumber: syz [ 1604.671083][T10519] usb 8-1: config 0 descriptor?? [ 1605.207322][ T7662] usb 8-1: USB disconnect, device number 24 [ 1612.445188][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.445276][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.464087][ T1296] team0 (unregistering): Port device team_slave_1 removed [ 1612.691500][ T1296] team0 (unregistering): Port device team_slave_0 removed [ 1614.612073][T29275] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1614.916590][T29275] netlink: 'syz.6.8286': attribute type 30 has an invalid length. [ 1616.493371][T28936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.493388][T28936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.493415][T28936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.561937][T29275] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1616.571824][T28936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.571842][T28936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.571870][T28936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.159373][T29286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8289'. [ 1619.454567][T28936] hsr_slave_0: entered promiscuous mode [ 1619.456030][T28936] hsr_slave_1: entered promiscuous mode [ 1620.268399][T29103] chnl_net:caif_netlink_parms(): no params data found [ 1622.130079][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.997555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.122048][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.458402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.264905][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.484197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.634074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.494565][T29103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.494781][T29103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.495026][T29103] bridge_slave_0: entered allmulticast mode [ 1626.529354][T29103] bridge_slave_0: entered promiscuous mode [ 1626.690879][T12017] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 1626.693552][T12017] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 1627.187316][ T1296] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.221105][ T7662] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1627.247361][T29103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.247536][T29103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.247790][T29103] bridge_slave_1: entered allmulticast mode [ 1627.278972][T29103] bridge_slave_1: entered promiscuous mode [ 1627.321590][T29366] bridge_slave_0: left allmulticast mode [ 1627.321619][T29366] bridge_slave_0: left promiscuous mode [ 1627.321850][T29366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.432278][ T7662] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1627.432309][ T7662] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1627.435325][ T7662] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1627.435352][ T7662] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1627.435373][ T7662] usb 3-1: Product: syz [ 1627.435388][ T7662] usb 3-1: Manufacturer: syz [ 1627.435403][ T7662] usb 3-1: SerialNumber: syz [ 1627.444906][ T7662] usb 3-1: config 0 descriptor?? [ 1627.455241][ T7662] usb 3-1: selecting invalid altsetting 0 [ 1627.485098][T29366] bridge_slave_1: left allmulticast mode [ 1627.485127][T29366] bridge_slave_1: left promiscuous mode [ 1627.485364][T29366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.624731][T29366] bond0: (slave bond_slave_0): Releasing backup interface [ 1627.911651][T29366] bond0: (slave bond_slave_1): Releasing backup interface [ 1629.399710][T29366] team0: Port device team_slave_0 removed [ 1629.457091][T29366] team0: Port device team_slave_1 removed [ 1629.458167][T29366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.458194][T29366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.525076][T29366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.525105][T29366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.692510][T29366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1630.713709][ T5894] usb 3-1: USB disconnect, device number 75 [ 1630.832258][T12017] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1630.832451][T12017] Bluetooth: hci5: Injecting HCI hardware error event [ 1630.834986][ T5818] Bluetooth: hci5: hardware error 0x00 [ 1631.390368][T29390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1631.415955][T29390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1631.421853][T29390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1631.424497][T29390] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1631.425407][T29390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1632.050382][ T1296] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.099983][T29103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.123145][T29103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.361695][ T5818] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1633.611368][T29426] 9pnet_fd: Insufficient options for proto=fd [ 1637.638428][ T5818] Bluetooth: hci3: command tx timeout [ 1639.696520][T12017] Bluetooth: hci3: command tx timeout [ 1639.998849][ T1296] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.672890][T29103] team0: Port device team_slave_0 added [ 1641.643241][T29103] team0: Port device team_slave_1 added [ 1641.721001][T12017] Bluetooth: hci3: command tx timeout [ 1643.804768][ T5818] Bluetooth: hci3: command tx timeout [ 1644.481214][ T7662] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1644.691880][ T7662] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1644.691979][ T7662] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1644.809707][T29490] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1644.829187][T29490] exFAT-fs (nullb0): invalid boot record signature [ 1644.829603][T29490] exFAT-fs (nullb0): failed to read boot sector [ 1644.829757][T29490] exFAT-fs (nullb0): failed to recognize exfat type [ 1644.932303][ T7662] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1644.932401][ T7662] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1644.932495][ T7662] usb 8-1: Product: syz [ 1644.932585][ T7662] usb 8-1: Manufacturer: syz [ 1644.932670][ T7662] usb 8-1: SerialNumber: syz [ 1645.026613][ T7662] usb 8-1: config 0 descriptor?? [ 1645.038056][ T7662] usb 8-1: selecting invalid altsetting 0 [ 1645.770534][T29497] CIFS mount error: No usable UNC path provided in device string! [ 1645.770534][T29497] [ 1645.770604][T29497] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1645.982709][ T986] usb 8-1: USB disconnect, device number 25 [ 1646.366220][ T1296] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.210923][T29103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.210935][T29103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.210950][T29103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.218973][T29103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.218983][T29103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.218999][T29103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.459953][T29103] hsr_slave_0: entered promiscuous mode [ 1651.465316][T29103] hsr_slave_1: entered promiscuous mode [ 1651.466264][T29103] debugfs: 'hsr0' already exists in 'hsr' [ 1651.466288][T29103] Cannot create hsr debugfs directory [ 1653.950176][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1653.964591][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1653.966293][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1653.985563][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1653.986499][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1653.990229][ T1296] bridge_slave_1: left allmulticast mode [ 1653.990252][ T1296] bridge_slave_1: left promiscuous mode [ 1653.990474][ T1296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.383666][T29588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8371'. [ 1656.638426][ T1296] bridge_slave_0: left allmulticast mode [ 1656.638455][ T1296] bridge_slave_0: left promiscuous mode [ 1656.638699][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.360770][T12017] Bluetooth: hci1: command tx timeout [ 1660.708445][T12017] Bluetooth: hci1: command tx timeout [ 1662.761295][T12017] Bluetooth: hci1: command tx timeout [ 1663.111436][ T1296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.171343][ T1296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.194914][ T1296] bond0 (unregistering): Released all slaves [ 1663.238896][T29632] team0: Mode changed to "loadbalance" [ 1663.239595][T29387] chnl_net:caif_netlink_parms(): no params data found [ 1664.860956][T12017] Bluetooth: hci1: command tx timeout [ 1665.816235][T29676] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1665.816650][T29676] exFAT-fs (nullb0): invalid boot record signature [ 1665.816663][T29676] exFAT-fs (nullb0): failed to read boot sector [ 1665.816681][T29676] exFAT-fs (nullb0): failed to recognize exfat type [ 1666.854521][T29696] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8408'. [ 1666.869568][T29694] Mount JFS Failure: -22 [ 1666.869584][T29694] jfs_mount failed w/return code = -22 [ 1666.875765][T29387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.875892][T29387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.876114][T29387] bridge_slave_0: entered allmulticast mode [ 1666.878937][T29387] bridge_slave_0: entered promiscuous mode [ 1667.010765][ T1296] hsr_slave_0: left promiscuous mode [ 1667.040600][ T1296] hsr_slave_1: left promiscuous mode [ 1667.041726][ T1296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1667.041752][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1667.287146][ T1296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.287173][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1667.316945][T29700] 9pnet_fd: Insufficient options for proto=fd [ 1667.449470][ T1296] veth1_macvtap: left promiscuous mode [ 1667.449594][ T1296] veth0_macvtap: left promiscuous mode [ 1667.449869][ T1296] veth1_vlan: left promiscuous mode [ 1667.450050][ T1296] veth0_vlan: left promiscuous mode [ 1670.211765][T29724] netlink: 'syz.7.8417': attribute type 13 has an invalid length. [ 1670.211789][T29724] netlink: 'syz.7.8417': attribute type 17 has an invalid length. [ 1670.937815][T10488] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1671.252812][T10488] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.252840][T10488] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1671.252879][T10488] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1671.252902][T10488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.295094][T10488] usb 3-1: config 0 descriptor?? [ 1672.318722][T10488] usb 3-1: USB disconnect, device number 76 [ 1673.887894][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.887955][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.644771][ T1296] team0 (unregistering): Port device team_slave_1 removed [ 1674.872751][ T1296] team0 (unregistering): Port device team_slave_0 removed [ 1679.270917][T29387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.271058][T29387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.271301][T29387] bridge_slave_1: entered allmulticast mode [ 1679.275295][T29387] bridge_slave_1: entered promiscuous mode [ 1679.331254][T29724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1679.381990][T29730] bond0: (slave team0): Releasing backup interface [ 1679.658416][T29730] batman_adv: batadv0: Interface deactivated: dummy0 [ 1679.658445][T29730] batman_adv: batadv0: Removing interface: dummy0 [ 1679.693625][T29730] bridge_slave_0: left allmulticast mode [ 1679.693654][T29730] bridge_slave_0: left promiscuous mode [ 1679.693909][T29730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.010930][T29730] bridge_slave_1: left allmulticast mode [ 1680.010959][T29730] bridge_slave_1: left promiscuous mode [ 1680.011226][T29730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.291478][T29730] bond0: (slave bond_slave_0): Releasing backup interface [ 1680.611470][T29730] bond0: (slave bond_slave_1): Releasing backup interface [ 1680.698944][T29730] team0: Port device team_slave_0 removed [ 1680.734580][T29730] team0: Port device team_slave_1 removed [ 1680.735027][T29730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1680.781457][T29730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.823010][T29730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1680.829169][T29731] team0: Mode changed to "loadbalance" [ 1680.958987][T29771] netlink: 'syz.6.8431': attribute type 13 has an invalid length. [ 1680.959010][T29771] netlink: 'syz.6.8431': attribute type 17 has an invalid length. [ 1681.764726][T29771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.843255][T29771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1682.297836][T29387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.310186][T29387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.124733][T29387] team0: Port device team_slave_0 added [ 1685.155945][T29387] team0: Port device team_slave_1 added [ 1685.462645][T29808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8440'. [ 1685.944803][T29815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8443'. [ 1685.954797][T29387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.954808][T29387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.954824][T29387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.183704][T29815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1686.296558][T29387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.296574][T29387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.296600][T29387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.675853][T29840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8448'. [ 1688.739294][T29838] team0: No ports can be present during mode change [ 1690.148895][T29852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8454'. [ 1690.877774][T29840] team0 (unregistering): Port device team_slave_0 removed [ 1690.900970][T29840] team0 (unregistering): Port device team_slave_1 removed [ 1691.416003][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1691.428688][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1691.430455][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1691.432716][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1691.433706][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1691.468524][T29852] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1691.612244][T29569] chnl_net:caif_netlink_parms(): no params data found [ 1693.481420][T12017] Bluetooth: hci2: command tx timeout [ 1693.592100][ T1296] bridge_slave_1: left allmulticast mode [ 1693.592128][ T1296] bridge_slave_1: left promiscuous mode [ 1693.592370][ T1296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.631629][T29891] netlink: 'syz.6.8464': attribute type 10 has an invalid length. [ 1693.939338][ T1296] bridge_slave_0: left allmulticast mode [ 1693.939366][ T1296] bridge_slave_0: left promiscuous mode [ 1693.940190][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.042481][T29895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8466'. [ 1694.063453][ T1296] bridge_slave_1: left allmulticast mode [ 1694.063472][ T1296] bridge_slave_1: left promiscuous mode [ 1694.063620][ T1296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.188600][ T1296] bridge_slave_0: left allmulticast mode [ 1694.188631][ T1296] bridge_slave_0: left promiscuous mode [ 1694.202338][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.560785][T12017] Bluetooth: hci2: command tx timeout [ 1695.603973][ T1296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1696.495556][ T1296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1696.692717][ T1296] bond0 (unregistering): Released all slaves [ 1697.066171][T29911] Mount JFS Failure: -22 [ 1697.066187][T29911] jfs_mount failed w/return code = -22 [ 1697.750893][T12017] Bluetooth: hci2: command tx timeout [ 1698.002340][ T1296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.106331][ T1296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.162577][ T1296] bond0 (unregistering): Released all slaves [ 1698.188609][T29888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1698.188684][T29889] team0: Unable to change to the same mode the team is in [ 1698.263009][T29891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.265383][T29891] team0: Port device bond0 added [ 1699.800792][T12017] Bluetooth: hci2: command tx timeout [ 1700.042518][T29929] 9pnet_fd: Insufficient options for proto=fd [ 1700.982723][T29895] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1703.658044][ T1296] hsr_slave_0: left promiscuous mode [ 1703.937436][ T1296] hsr_slave_1: left promiscuous mode [ 1703.938425][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.035232][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.488477][ T1296] hsr_slave_0: left promiscuous mode [ 1704.520978][ T1296] hsr_slave_1: left promiscuous mode [ 1704.521992][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.571348][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.917693][T29989] CIFS mount error: No usable UNC path provided in device string! [ 1706.917693][T29989] [ 1706.917812][T29989] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1709.751400][ T1296] team0 (unregistering): Port device team_slave_1 removed [ 1710.618530][ T1296] team0 (unregistering): Port device team_slave_0 removed [ 1712.944559][ T1296] team0 (unregistering): Port device team_slave_1 removed [ 1713.101342][ T1296] team0 (unregistering): Port device team_slave_0 removed [ 1714.385975][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1714.406486][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1714.407682][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1714.427904][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1714.439062][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1714.606102][T29569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.606235][T29569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.606465][T29569] bridge_slave_0: entered allmulticast mode [ 1714.609315][T29569] bridge_slave_0: entered promiscuous mode [ 1716.104540][T29859] chnl_net:caif_netlink_parms(): no params data found [ 1716.353142][T30102] ALSA: mixer_oss: invalid OSS volume '' [ 1716.520855][T12017] Bluetooth: hci3: command tx timeout [ 1718.600763][T12017] Bluetooth: hci3: command tx timeout [ 1718.923140][T30063] chnl_net:caif_netlink_parms(): no params data found [ 1720.690698][T12017] Bluetooth: hci3: command tx timeout [ 1720.913161][T29859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.913236][T29859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.913378][T29859] bridge_slave_0: entered allmulticast mode [ 1720.914957][T29859] bridge_slave_0: entered promiscuous mode [ 1720.968446][T29859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.968630][T29859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.968829][T29859] bridge_slave_1: entered allmulticast mode [ 1720.991186][T29859] bridge_slave_1: entered promiscuous mode [ 1721.818869][T30163] autofs: Unknown parameter '0x0000000000000000' [ 1722.779850][T12017] Bluetooth: hci3: command tx timeout [ 1722.829719][T29859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.971826][T29859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.972609][T30063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.972816][T30063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.973005][T30063] bridge_slave_0: entered allmulticast mode [ 1723.980676][T30063] bridge_slave_0: entered promiscuous mode [ 1724.773579][T30063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.774396][T30063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.775218][T30063] bridge_slave_1: entered allmulticast mode [ 1724.778654][T30063] bridge_slave_1: entered promiscuous mode [ 1726.322058][T29859] team0: Port device team_slave_0 added [ 1727.502754][T29859] team0: Port device team_slave_1 added [ 1727.596592][T30063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.766212][T30063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.760176][T29859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.760193][T29859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.760220][T29859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1731.499763][T29859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.499780][T29859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.499807][T29859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.513699][T30063] team0: Port device team_slave_0 added [ 1731.591964][T30063] team0: Port device team_slave_1 added [ 1731.800911][T28865] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1731.940789][T28865] usb 8-1: device descriptor read/64, error -71 [ 1732.233932][T30239] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1732.313672][T28865] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 1732.350655][T30244] autofs: Unknown parameter '0x0000000000000000' [ 1733.300719][T28865] usb 8-1: device descriptor read/64, error -71 [ 1733.584162][T28865] usb usb8-port1: attempt power cycle [ 1734.710714][T28865] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1734.920867][T28865] usb 8-1: device not accepting address 28, error -71 [ 1735.045132][T29859] hsr_slave_0: entered promiscuous mode [ 1735.046469][T29859] hsr_slave_1: entered promiscuous mode [ 1735.072703][T30063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.072715][T30063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.072730][T30063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.073170][ T1296] bridge_slave_0: left allmulticast mode [ 1735.073185][ T1296] bridge_slave_0: left promiscuous mode [ 1735.073333][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.204934][ T1296] bridge_slave_1: left allmulticast mode [ 1735.204962][ T1296] bridge_slave_1: left promiscuous mode [ 1735.205213][ T1296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.326834][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.326875][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.602218][ T1296] bridge_slave_0: left allmulticast mode [ 1735.602248][ T1296] bridge_slave_0: left promiscuous mode [ 1735.602488][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.742308][T30275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8571'. [ 1737.100513][ T1296] bond0 (unregistering): Released all slaves [ 1737.240872][ T986] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1737.291974][ T1296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.370738][ T986] usb 3-1: device descriptor read/64, error -71 [ 1737.391509][ T1296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.453209][ T1296] bond0 (unregistering): Released all slaves [ 1737.472908][T30063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.472919][T30063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.472934][T30063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.700737][ T986] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1738.248279][ T986] usb 3-1: device descriptor read/64, error -71 [ 1738.826553][ T986] usb usb3-port1: attempt power cycle [ 1740.166531][ T986] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1740.318826][T30313] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8582'. [ 1740.487370][ T986] usb 3-1: device not accepting address 79, error -71 [ 1740.635607][T30063] hsr_slave_0: entered promiscuous mode [ 1740.651111][T30063] hsr_slave_1: entered promiscuous mode [ 1740.652101][T30063] debugfs: 'hsr0' already exists in 'hsr' [ 1740.652126][T30063] Cannot create hsr debugfs directory [ 1740.803975][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.851667][ T1296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.129469][ T1296] team0 (unregistering): Port device team_slave_1 removed [ 1742.321502][ T1296] team0 (unregistering): Port device team_slave_0 removed [ 1742.361003][T10488] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1742.450679][ T7662] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1742.533105][T10488] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1742.533140][T10488] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1742.535712][T10488] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1742.535734][T10488] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1742.535746][T10488] usb 3-1: Product: syz [ 1742.535753][T10488] usb 3-1: Manufacturer: syz [ 1742.535762][T10488] usb 3-1: SerialNumber: syz [ 1742.539012][T10488] usb 3-1: config 0 descriptor?? [ 1742.580737][ T7662] usb 8-1: device descriptor read/64, error -71 [ 1742.654971][T10488] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1742.980682][ T7662] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1743.809410][ T7662] usb 8-1: device descriptor read/64, error -71 [ 1743.931824][ T7662] usb usb8-port1: attempt power cycle [ 1744.320819][ T7662] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 1744.342219][ T7662] usb 8-1: device descriptor read/8, error -71 [ 1744.601790][ T7662] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1745.546857][T28865] usb 3-1: USB disconnect, device number 81 [ 1745.668632][ T7662] usb 8-1: device descriptor read/8, error -71 [ 1745.875009][ T7662] usb usb8-port1: unable to enumerate USB device [ 1746.374061][T29859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1746.405898][T29859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1749.594311][T29859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1749.917774][T30408] sd 0:0:1:0: device reset [ 1750.195862][T29859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1752.327803][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1752.341093][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1752.342500][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1752.344663][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1752.345439][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1754.080764][ T5892] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1754.327481][ T5892] usb 3-1: device descriptor read/64, error -71 [ 1754.444999][T12017] Bluetooth: hci1: command tx timeout [ 1754.652133][ T5892] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1755.119957][ T5892] usb 3-1: device descriptor read/64, error -71 [ 1755.221096][ T5892] usb usb3-port1: attempt power cycle [ 1755.560718][ T5892] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1755.581775][ T5892] usb 3-1: device descriptor read/8, error -71 [ 1755.820790][ T5892] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1755.851649][ T5892] usb 3-1: device descriptor read/8, error -71 [ 1755.961192][ T5892] usb usb3-port1: unable to enumerate USB device [ 1756.106085][T30063] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1756.544334][T12017] Bluetooth: hci1: command tx timeout [ 1758.645194][T12017] Bluetooth: hci1: command tx timeout [ 1758.790506][T30063] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1759.144168][T30543] CIFS mount error: No usable UNC path provided in device string! [ 1759.144168][T30543] [ 1759.144234][T30543] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1759.920804][T30063] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1760.704027][T12017] Bluetooth: hci1: command tx timeout [ 1763.454882][T30063] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1765.176768][T30448] chnl_net:caif_netlink_parms(): no params data found [ 1772.320028][T28865] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1773.379839][T28865] usb 8-1: config 0 has no interfaces? [ 1773.501348][T28865] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1773.501379][T28865] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1773.501399][T28865] usb 8-1: Product: syz [ 1773.501413][T28865] usb 8-1: Manufacturer: syz [ 1773.501428][T28865] usb 8-1: SerialNumber: syz [ 1773.506921][T28865] usb 8-1: config 0 descriptor?? [ 1774.796068][ T5892] usb 8-1: USB disconnect, device number 34 [ 1775.090992][T30448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.091125][T30448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.091378][T30448] bridge_slave_0: entered allmulticast mode [ 1775.341059][T30448] bridge_slave_0: entered promiscuous mode [ 1775.681536][T30448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.681705][T30448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.681950][T30448] bridge_slave_1: entered allmulticast mode [ 1775.684698][T30448] bridge_slave_1: entered promiscuous mode [ 1775.785079][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1775.791335][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1775.803162][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1775.804296][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1775.805526][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1776.863378][T30448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.980746][T30448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1777.910828][T12017] Bluetooth: hci2: command tx timeout [ 1778.000697][ T5894] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 1778.094950][T30448] team0: Port device team_slave_0 added [ 1778.148918][T30448] team0: Port device team_slave_1 added [ 1778.173388][ T5894] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1778.173424][ T5894] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1778.176455][ T5894] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1778.176483][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1778.176505][ T5894] usb 8-1: Product: syz [ 1778.176521][ T5894] usb 8-1: Manufacturer: syz [ 1778.176536][ T5894] usb 8-1: SerialNumber: syz [ 1778.240775][ T5894] usb 8-1: config 0 descriptor?? [ 1778.276044][ T5894] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1779.507417][T10488] usb 8-1: USB disconnect, device number 35 [ 1779.849934][ T58] bridge_slave_1: left allmulticast mode [ 1779.849962][ T58] bridge_slave_1: left promiscuous mode [ 1779.850243][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.217360][T12017] Bluetooth: hci2: command tx timeout [ 1781.310444][ T58] bridge_slave_0: left allmulticast mode [ 1781.310474][ T58] bridge_slave_0: left promiscuous mode [ 1781.320877][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.512025][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1782.771566][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.912214][ T58] bond0 (unregistering): Released all slaves [ 1783.270851][T12017] Bluetooth: hci2: command tx timeout [ 1783.627799][T30448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.627817][T30448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.627844][T30448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.741878][T30448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.741896][T30448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.741924][T30448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.510813][ T58] hsr_slave_0: left promiscuous mode [ 1784.540128][ T58] hsr_slave_1: left promiscuous mode [ 1784.542932][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1784.572033][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.437419][T12017] Bluetooth: hci2: command tx timeout [ 1786.856681][T30826] trusted_key: encrypted_key: hex blob is missing [ 1789.883320][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1790.401454][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1790.719291][T30864] netlink: 'syz.2.8691': attribute type 13 has an invalid length. [ 1790.719315][T30864] netlink: 'syz.2.8691': attribute type 17 has an invalid length. [ 1795.871559][T30864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1796.293549][T30448] hsr_slave_0: entered promiscuous mode [ 1796.295008][T30448] hsr_slave_1: entered promiscuous mode [ 1797.022193][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.022266][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.939224][T30933] Mount JFS Failure: -22 [ 1797.939265][T30933] jfs_mount failed w/return code = -22 [ 1799.558183][T30937] netlink: 'syz.2.8712': attribute type 13 has an invalid length. [ 1799.558197][T30937] netlink: 'syz.2.8712': attribute type 17 has an invalid length. [ 1799.815390][T30937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1799.881757][T30943] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1799.881821][T30943] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1800.048276][T30684] chnl_net:caif_netlink_parms(): no params data found [ 1800.115218][T30946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8716'. [ 1802.651718][T30981] netlink: 'syz.7.8724': attribute type 13 has an invalid length. [ 1802.651739][T30981] netlink: 'syz.7.8724': attribute type 17 has an invalid length. [ 1802.713283][T30684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.714038][T30684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.714300][T30684] bridge_slave_0: entered allmulticast mode [ 1802.752324][T30684] bridge_slave_0: entered promiscuous mode [ 1802.867499][T30981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1802.870406][T30684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.872295][T30684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.872537][T30684] bridge_slave_1: entered allmulticast mode [ 1802.892164][T30684] bridge_slave_1: entered promiscuous mode [ 1805.607009][T31018] netlink: 'syz.2.8735': attribute type 13 has an invalid length. [ 1805.607023][T31018] netlink: 'syz.2.8735': attribute type 17 has an invalid length. [ 1805.786957][T30684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1805.857721][T31018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1806.255358][T30684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.987725][T31059] netlink: 'syz.7.8747': attribute type 13 has an invalid length. [ 1808.987749][T31059] netlink: 'syz.7.8747': attribute type 17 has an invalid length. [ 1809.121863][T31059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1811.513252][T30684] team0: Port device team_slave_0 added [ 1811.535016][T30684] team0: Port device team_slave_1 added [ 1813.422787][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1813.429223][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1813.450953][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1813.460472][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1813.479202][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1813.564334][T31100] netlink: 'syz.7.8757': attribute type 13 has an invalid length. [ 1813.564358][T31100] netlink: 'syz.7.8757': attribute type 17 has an invalid length. [ 1813.614033][T30684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.614050][T30684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.614077][T30684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.692994][T31100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1813.694081][T30684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.694095][T30684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.694122][T30684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.509405][T30684] hsr_slave_0: entered promiscuous mode [ 1814.517947][T30684] hsr_slave_1: entered promiscuous mode [ 1814.518983][T30684] debugfs: 'hsr0' already exists in 'hsr' [ 1814.519005][T30684] Cannot create hsr debugfs directory [ 1814.743814][T31109] trusted_key: encrypted_key: insufficient parameters specified [ 1816.891332][T31127] netlink: 'syz.2.8766': attribute type 13 has an invalid length. [ 1816.891355][T31127] netlink: 'syz.2.8766': attribute type 17 has an invalid length. [ 1816.984600][ T5818] Bluetooth: hci3: command tx timeout [ 1817.022486][T31127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1818.697450][ T58] bridge_slave_1: left allmulticast mode [ 1818.697607][ T58] bridge_slave_1: left promiscuous mode [ 1818.700035][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.814081][ T58] bridge_slave_0: left allmulticast mode [ 1818.814109][ T58] bridge_slave_0: left promiscuous mode [ 1818.814491][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.010938][ T5818] Bluetooth: hci3: command tx timeout [ 1819.559618][T31160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8776'. [ 1819.596433][T31160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8776'. [ 1821.168174][ T5818] Bluetooth: hci3: command tx timeout [ 1821.299747][T31182] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:fb:00:00:ac:85 [ 1821.323040][T31182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8778'. [ 1821.450444][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1821.572004][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1821.654194][ T58] bond0 (unregistering): Released all slaves [ 1822.156772][T31202] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8786'. [ 1822.663907][ T58] hsr_slave_0: left promiscuous mode [ 1822.710783][ T58] hsr_slave_1: left promiscuous mode [ 1822.711530][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.753475][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.250988][ T5818] Bluetooth: hci3: command tx timeout [ 1824.492692][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1824.862175][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1827.880917][T31280] 9pnet_fd: Insufficient options for proto=fd [ 1828.698090][T31097] chnl_net:caif_netlink_parms(): no params data found [ 1829.688900][T31274] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1830.553399][T31302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1830.686179][T31313] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1830.686234][T31313] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1831.674373][T31097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.679543][T31097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.680099][T31097] bridge_slave_0: entered allmulticast mode [ 1831.731556][T31097] bridge_slave_0: entered promiscuous mode [ 1831.770377][T31097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.771021][T31097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.771226][T31097] bridge_slave_1: entered allmulticast mode [ 1831.774052][T31097] bridge_slave_1: entered promiscuous mode [ 1832.462799][T31097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1832.468771][T31097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.580980][T31097] team0: Port device team_slave_0 added [ 1833.601222][T31097] team0: Port device team_slave_1 added [ 1833.876325][T31097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1833.876340][T31097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1833.876361][T31097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1833.897489][T31097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1833.897504][T31097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1833.897530][T31097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1834.360482][T31360] trusted_key: encrypted_key: insufficient parameters specified [ 1834.514918][T12017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1834.540214][T12017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1834.542305][T12017] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1834.549228][T12017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1834.559547][T12017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1837.117344][T12017] Bluetooth: hci1: command tx timeout [ 1837.152678][ T58] bridge_slave_1: left allmulticast mode [ 1837.152782][ T58] bridge_slave_1: left promiscuous mode [ 1837.253464][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.759827][T31374] trusted_key: encrypted_key: hex blob is missing [ 1837.771068][ T58] bridge_slave_0: left allmulticast mode [ 1837.771086][ T58] bridge_slave_0: left promiscuous mode [ 1837.771245][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.301086][ T5818] Bluetooth: hci1: command tx timeout [ 1840.421185][T31402] trusted_key: encrypted_key: hex blob is missing [ 1841.322087][ T5818] Bluetooth: hci1: command tx timeout [ 1842.021375][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1843.582349][T31441] ALSA: mixer_oss: invalid OSS volume '' [ 1844.251493][ T5818] Bluetooth: hci1: command tx timeout [ 1844.593415][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.703057][ T58] bond0 (unregistering): Released all slaves [ 1844.751739][T31097] hsr_slave_0: entered promiscuous mode [ 1844.754894][T31097] hsr_slave_1: entered promiscuous mode [ 1844.755921][T31097] debugfs: 'hsr0' already exists in 'hsr' [ 1844.755937][T31097] Cannot create hsr debugfs directory [ 1844.818217][T31454] batman_adv: batadv0: Interface deactivated: dummy0 [ 1844.818247][T31454] batman_adv: batadv0: Removing interface: dummy0 [ 1844.909891][T31454] bridge_slave_0: left allmulticast mode [ 1844.909921][T31454] bridge_slave_0: left promiscuous mode [ 1844.910163][T31454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.942243][T31459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8854'. [ 1845.068136][T31454] bridge_slave_1: left allmulticast mode [ 1845.068165][T31454] bridge_slave_1: left promiscuous mode [ 1845.073187][T31454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.344593][T31454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1845.344623][T31454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1845.442705][T31454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1845.442734][T31454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.509143][T31454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1846.720718][ T58] hsr_slave_0: left promiscuous mode [ 1846.765683][ T58] hsr_slave_1: left promiscuous mode [ 1846.766672][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1846.951115][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.554354][T31505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8868'. [ 1849.901262][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1850.041355][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1857.222519][ T44] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1857.381278][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1857.394454][ T44] usb 3-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 1857.394484][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.394512][ T44] usb 3-1: Product: syz [ 1857.394528][ T44] usb 3-1: Manufacturer: syz [ 1857.394544][ T44] usb 3-1: SerialNumber: syz [ 1857.475877][ T44] usb 3-1: config 0 descriptor?? [ 1857.761854][ T44] usb 3-1: can't set first interface for hiFace device. [ 1857.761897][ T44] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1857.765392][ T44] usb 3-1: USB disconnect, device number 86 [ 1857.832540][T31589] trusted_key: encrypted_key: insufficient parameters specified [ 1857.881352][T31363] chnl_net:caif_netlink_parms(): no params data found [ 1857.974081][T31097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1858.317449][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.318015][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.501055][T31097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1863.439701][T31625] trusted_key: encrypted_key: insufficient parameters specified [ 1863.525291][T31097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1863.614646][T31097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1864.926356][T31637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1867.656291][T31363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.656497][T31363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.656736][T31363] bridge_slave_0: entered allmulticast mode [ 1867.659668][T31363] bridge_slave_0: entered promiscuous mode [ 1867.666284][T31673] trusted_key: encrypted_key: insufficient parameters specified [ 1867.709393][T31363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.709550][T31363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.709781][T31363] bridge_slave_1: entered allmulticast mode [ 1867.737669][T31363] bridge_slave_1: entered promiscuous mode [ 1868.906628][T31363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.104821][T31363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.264458][T31707] trusted_key: encrypted_key: insufficient parameters specified [ 1872.113501][T31721] CIFS mount error: No usable UNC path provided in device string! [ 1872.113501][T31721] [ 1872.113613][T31721] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1873.507473][T31363] team0: Port device team_slave_0 added [ 1873.564237][ T5789] ------------[ cut here ]------------ [ 1873.564258][ T5789] WARNING: CPU: 1 PID: 5789 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1873.564304][ T5789] Modules linked in: [ 1873.564349][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1873.564375][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1873.564392][ T5789] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1873.564423][ T5789] Code: c7 c7 90 3e c5 8e 48 c7 c6 38 22 da 8c 48 c7 c2 17 f8 d8 8c 4c 89 f9 e8 a2 3b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 c4 0e 04 09 0f 1f 40 00 90 90 [ 1873.564442][ T5789] RSP: 0018:ffffc90004bafbc0 EFLAGS: 00010287 [ 1873.564461][ T5789] RAX: 962fdf33a84f0a00 RBX: ffff88804ff4c100 RCX: 0000000000000000 [ 1873.564478][ T5789] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: 00000000ffffffff [ 1873.564493][ T5789] RBP: ffffc90004bafd38 R08: 0000000000000000 R09: ffffffff8ac2bb41 [ 1873.564509][ T5789] R10: dffffc0000000000 R11: fffffbfff1dac76f R12: dffffc0000000000 [ 1873.564526][ T5789] R13: 0000000000000000 R14: ffff88804ff4c108 R15: ffff888037b8da00 [ 1873.564542][ T5789] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 1873.564561][ T5789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1873.564576][ T5789] CR2: 0000001b2f421ff8 CR3: 0000000068d68000 CR4: 00000000003526f0 [ 1873.564595][ T5789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1873.564609][ T5789] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1873.564623][ T5789] Call Trace: [ 1873.564636][ T5789] [ 1873.564648][ T5789] do_exit+0x105/0x2300 [ 1873.564693][ T5789] ? worker_thread+0xcf7/0xda0 [ 1873.564721][ T5789] ? __pfx_do_exit+0x10/0x10 [ 1873.564772][ T5789] kthread_exit+0x22c/0x280 [ 1873.564804][ T5789] kthread+0x72f/0x8a0 [ 1873.564838][ T5789] ? __pfx_worker_thread+0x10/0x10 [ 1873.564864][ T5789] ? __pfx_kthread+0x10/0x10 [ 1873.564892][ T5789] ? rt_spin_unlock+0x150/0x200 [ 1873.565015][ T5789] ? rt_spin_unlock+0x161/0x200 [ 1873.565037][ T5789] ? __pfx_kthread+0x10/0x10 [ 1873.565069][ T5789] ret_from_fork+0x4bc/0x870 [ 1873.565097][ T5789] ? __pfx_ret_from_fork+0x10/0x10 [ 1873.565140][ T5789] ? __switch_to_asm+0x39/0x70 [ 1873.565162][ T5789] ? __switch_to_asm+0x33/0x70 [ 1873.565183][ T5789] ? __pfx_kthread+0x10/0x10 [ 1873.565217][ T5789] ret_from_fork_asm+0x1a/0x30 [ 1873.565258][ T5789] [ 1873.565274][ T5789] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1873.565290][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1873.565315][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1873.565329][ T5789] Call Trace: [ 1873.565338][ T5789] [ 1873.565347][ T5789] dump_stack_lvl+0x99/0x250 [ 1873.565380][ T5789] ? __asan_memcpy+0x40/0x70 [ 1873.565406][ T5789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1873.565438][ T5789] ? __pfx__printk+0x10/0x10 [ 1873.565478][ T5789] vpanic+0x237/0x6d0 [ 1873.565499][ T5789] ? __pfx_vpanic+0x10/0x10 [ 1873.565533][ T5789] panic+0xb9/0xc0 [ 1873.565553][ T5789] ? __pfx_panic+0x10/0x10 [ 1873.565591][ T5789] __warn+0x31b/0x4b0 [ 1873.565611][ T5789] ? kcov_task_exit+0x13c/0x150 [ 1873.565642][ T5789] ? kcov_task_exit+0x13c/0x150 [ 1873.565671][ T5789] report_bug+0x2be/0x4f0 [ 1873.565752][ T5789] ? kcov_task_exit+0x13c/0x150 [ 1873.565781][ T5789] ? kcov_task_exit+0x13c/0x150 [ 1873.565810][ T5789] ? kcov_task_exit+0x13e/0x150 [ 1873.565838][ T5789] handle_bug+0x84/0x160 [ 1873.565884][ T5789] exc_invalid_op+0x1a/0x50 [ 1873.565906][ T5789] asm_exc_invalid_op+0x1a/0x20 [ 1873.565927][ T5789] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1873.565956][ T5789] Code: c7 c7 90 3e c5 8e 48 c7 c6 38 22 da 8c 48 c7 c2 17 f8 d8 8c 4c 89 f9 e8 a2 3b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 c4 0e 04 09 0f 1f 40 00 90 90 [ 1873.565977][ T5789] RSP: 0018:ffffc90004bafbc0 EFLAGS: 00010287 [ 1873.565996][ T5789] RAX: 962fdf33a84f0a00 RBX: ffff88804ff4c100 RCX: 0000000000000000 [ 1873.566013][ T5789] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: 00000000ffffffff [ 1873.566029][ T5789] RBP: ffffc90004bafd38 R08: 0000000000000000 R09: ffffffff8ac2bb41 [ 1873.566045][ T5789] R10: dffffc0000000000 R11: fffffbfff1dac76f R12: dffffc0000000000 [ 1873.566062][ T5789] R13: 0000000000000000 R14: ffff88804ff4c108 R15: ffff888037b8da00 [ 1873.566085][ T5789] ? rt_spin_lock+0x1c1/0x3e0 [ 1873.566127][ T5789] do_exit+0x105/0x2300 [ 1873.566171][ T5789] ? worker_thread+0xcf7/0xda0 [ 1873.566198][ T5789] ? __pfx_do_exit+0x10/0x10 [ 1873.566249][ T5789] kthread_exit+0x22c/0x280 [ 1873.566281][ T5789] kthread+0x72f/0x8a0 [ 1873.566315][ T5789] ? __pfx_worker_thread+0x10/0x10 [ 1873.566342][ T5789] ? __pfx_kthread+0x10/0x10 [ 1873.566370][ T5789] ? rt_spin_unlock+0x150/0x200 [ 1873.566399][ T5789] ? rt_spin_unlock+0x161/0x200 [ 1873.566422][ T5789] ? __pfx_kthread+0x10/0x10 [ 1873.566455][ T5789] ret_from_fork+0x4bc/0x870 [ 1873.566484][ T5789] ? __pfx_ret_from_fork+0x10/0x10 [ 1873.566519][ T5789] ? __switch_to_asm+0x39/0x70 [ 1873.566540][ T5789] ? __switch_to_asm+0x33/0x70 [ 1873.566561][ T5789] ? __pfx_kthread+0x10/0x10 [ 1873.566593][ T5789] ret_from_fork_asm+0x1a/0x30 [ 1873.566635][ T5789] [ 1873.566887][ T5789] Kernel Offset: disabled