last executing test programs: 8m28.774683599s ago: executing program 3 (id=288): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20) 8m27.689211372s ago: executing program 3 (id=293): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid_for_children\x00') (fail_nth: 1) 8m25.140104217s ago: executing program 3 (id=299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x7fd, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xffff60fe}]}}}]}, 0x3c}}, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = fsmount(r1, 0x0, 0xa) (rerun: 32) fchdir(r2) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) (async) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r5, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1840020, &(0x7f0000000240)={[{@gid}], [{@uid_eq}]}) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x114, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x114}, 0x1, 0x0, 0x0, 0x44090}, 0x40040d0) 8m24.306808311s ago: executing program 3 (id=301): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x84, 0x6}], 0x10}}], 0x1, 0x40804) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002300)={[0x35, 0x7, 0x0, 0x180, 0x5fffffffffffffff, 0x10, 0xf4, 0x3ff, 0x80, 0x2, 0x6, 0x7fff, 0x0, 0x9, 0x0, 0xbdb], 0x51001, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m23.247271954s ago: executing program 3 (id=303): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20) 8m21.572595528s ago: executing program 3 (id=305): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x140001) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x6}]}, {0x0, [0x61, 0x30, 0x61, 0x2e, 0x6f, 0x2e, 0x30]}}, 0x0, 0x2d, 0x0, 0x1, 0xa}, 0x28) 8m15.769662529s ago: executing program 0 (id=315): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20) 8m14.738975974s ago: executing program 0 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m11.045447696s ago: executing program 0 (id=323): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f"], 0x54}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8m10.516715229s ago: executing program 0 (id=327): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$sndseq(r0, &(0x7f0000000080)=[{0x8, 0x80, 0x3, 0x0, @time={0xc630}, {0x76}, {0xd6, 0x6}, @ext={0x0, 0x0}}], 0x1c) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="7cf5131c", 0x4}], 0x1}, 0x51) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100)=0xff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000003060101000000000000000002000002080006400000009105000100070000000900020073797a31", @ANYRES16=r1, @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x7bdba2844c764f72) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x800c0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, &(0x7f0000000340), 0x0}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000540)={0x1, 0x6, 0x7, 0xfffb, 0xffffffffffffffff, 0x200000000000008, 0x2, 0x1000000000001fc, 0x8, 0x9, 0x80000005, 0x2}) 8m10.149436299s ago: executing program 0 (id=329): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x20) 8m8.531742735s ago: executing program 0 (id=330): r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x468001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xf, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000003c0), &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x1015, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) syz_emit_ethernet(0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaa0fffffffffffff0800451e0041006700000b069078e0000001ac14143d0000000000000000000000000000000000004e2400007e20313b00000000000100000004000000070000000200"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="150a00000000000061118c0000000000950000000000000038786722d5cf0e8757420874eca84ca2e13c6ccc222cceb4beb8b6d505045aeccf945779a0477beba67daa3c523d006786bce22b4abef52dc61dcba5d83fc1f3a52a5b7bc5d46085d89bc4b42414fb9920cbb61eb81e09269db25f3dc8a6cd762ed301768b2e68c8f96d3a3cc1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000080)={0x72, 0xa0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) semop(0x0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x7e74, 0x2900) ioctl$VIDIOC_S_STD(r7, 0xc0405627, &(0x7f00000002c0)=0x2) 8m6.3395219s ago: executing program 32 (id=305): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x140001) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x6}]}, {0x0, [0x61, 0x30, 0x61, 0x2e, 0x6f, 0x2e, 0x30]}}, 0x0, 0x2d, 0x0, 0x1, 0xa}, 0x28) 7m53.170798516s ago: executing program 33 (id=330): r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x468001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xf, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000003c0), &(0x7f00000018c0)=ANY=[@ANYBLOB="00fb15010f17fd4c6c3254053d98e3dcca3a2e22940104a47e803227dacf214927433b809321c47b857e80c0c739d0a24917394d3a72b83e0bd6fb4c48d95e6a3430f9080ee56c756adbdd244395bc032a754f50bfea41a188e1b67407f61232a3cc4ee012f4d12df3fc2d1515491dca49e5723cc8fc2d0a47dac09fa1e02a66a44f24a5fdaeb033eca81cc251f8206ececab66178859993a3de34c9f79f322d27efa457937a1e3e0f18c48a5e79b4fe893f5a8d0b25e3691c58f1c08b104fc6175e0b4528070cd1d5c5783fa19d7b3b0f9b3f06cd9bb0c97ca379496c71c34428d3f4db48a841c91ada3cf82a381a29499f32a49aaa0fb5b518e50d03cb1cbd8682b02ff1404534ba103f6a8deb90b93bd9a70f493a4c6671e88c256f585a5ba719d419870edc9d9f79abea3cde34a374bbae375ca9f001de15667793ee9aeae1b3684419c5041447c4765c536151d0e7fdb97129c1f10328fb471900eeab1801003b9da72cca663a93557bc88ea7f3fc56a798a27d1a808ce1c91e824846f397e7de73be37729a59c38fdac572735ff7d2f9115c67fdebef223480cdfc4f9a41f0b95bc52cf008cb1c46579ec7aeb98569f819433bc6c01f4b8591ac8a4869bc41f53093107fd038b1af6a61d38c3a6d940848976607745892a7a3895f92a8012c67e5de0d5da46ea6fef50f41d1491dc998a9ff5da3dae9e5915bb0494240c6fbfe706d407785e388195b983133e4b6f4bdecf10c929867cdbd683a704e0dc051dd88b70081ab6c94b3f0ca7908e3b065ab0316046b3cf5c26089bc88c89f9173dde7be5809d914a15284190af6fdd8edd860cb2f55b3edf863ab1333102d76ba14b6bd95f4460865932af6ca29da3a954a979eacd141e76cbb2f4ae9d7ce3737d63bb967f99fff0da1915852eb8f0ad03418e676767d715410d7b423dca78ff1da08f6c9dc68c7cd4778158aff7a0f9041784507ce78ea81904e4db1f95185d34a0a0d1569babc4d619adbca55914f2f7dbe2cc01ac7aaf950514b8c3a308a913a06f7489af31c7455f89baace6173b88edf6b78a10182a36ff695416ff839c1202b231e9bb2f3ae70efd46547cb7f21890a9551a994ddd549a56ce7f84a43c239e6f3fedd685ddf0d5f05b6ab5ea80057ab2468c9fd4fe6dd20618ebd30b6a440f3ab57cd851732ba8bc1d6b2123fc3187892cd0ebff2f9ae554f35c77c80891ccaa1106310c42c63f196a4ec4b071ec95ef10afb662e948b03825126d1f30eaed2a57b4970ba9256f80e7f8d4b89e66f33e4a968d8b46584357ff33dcc4372144edeeb8bbe42e7b1633906f4c3a4486203cae7cc04630ee64766c1a2017b4a2de8a50f6d080c40fd59dcf4a5f6a82d6bec882896f69b866be3e321beed792da33cf69f5b748b39d316c3beeb320383a2966df433891650f523f4eb440f522d13540c5b816c1dc8fa0ebd43fbf46131da6466e9debbfe78401d7a1dcf040d75521c1b1421e2458d40ab78f82265df4c0bd14cfb7235fb058397bf985fac8b10e536b9810c38a44edbed6132d7dbfa4e4e40504e32b76ba88d6bd40416790e3e3386b80952f1480c554787831a7e713e760ed633a8cbde81949d61e5b1ac9ce5a6805e73b668fae284567c8a34d6369e11c5d710b73f331a1c1280d61f1ebf67cd2d8cee837c7906ea9d3f75f115b91bd3df7e339f79b7a693c5964a336b7eb9ff2099be2dd46af739dc128f9bdc96c6e1cc9477505475c7704743b4c2dc2d7f68245481c795033d17c436ceb1c9bdae4689b26c1dcdc99b11883aa0667b23dd8b9860495cfa565dc90aadf466539f93a6585bdad46beeae1648bfb69581c7ab3be879cfa39b085f131be7cfaf1e338a337fdd36dcccdb96de8b37b229acf61a520219e6ef8eaa50fe1f418dfad26519ef51ae5a838fdc1344702fd02a109c1b7a715eec012565db9862d11ccf959b9748c8d8629e30c791b1c12f7fce5d40ab25690db39c06abebe09a540c435aadf490cbe92870054ed802e5e43abbeb7b7692bc1da495cf71eea5dde833e85ee2d8df60fb9aad7576285c3ad306f2729ed6e674f0e24463a51a972a6982963a894717f02a95245c69f6fabc2d38608feb45988647dee70be7ccbf7ec7d0004cc39db24dcebd597cfb887296b7739bf43cd2fd24753e2a5fb57afe4b8e2e640bc385e055802c4ec0093da52fcb4ff5e29dcc7c4c68c9e3e0abeb08f33d64ad3daf3398c4100fc63f217443f63da6bc284bd6c7291e38aa6706afaca24a23e42c3099b1bff64d7005df9f73f20b869c4dff786efcad2fc7a057d72201b42ac48c42777fe15b3da8ff9ea5f9127fa020dc0bedb363ddf945e4bd073c2ab951e4aeaa4c7c72657fe9970b2f82a033b3b9ce6a932b494df56114532ac56418bc15b63ac9b7e30b4f5b0177fe597ae2ffacf69c155f98694e8cf581cb70e3bded8463b014e4bca898ad22e53ab8f8101a2f331f2fc87663e1fe1f3fee4d7747620e972dfc0b6f97ff1e1a2503de4054e6efc0b391cb3f3b513ad383e626b10ba98955100fb27b5814b7e106483f9596c29ae2c4c3a67a14ae01b9b74319b7bf672c8ca87f9811c3b91559a71b334ba8ff41dabc1757ed45d8a5c97c38397ac4ef6f7ad7926079963b0573021838e742b09e0709bb3211095348c763a9aa21e771d93be0a6d1cad7819bb64f6e1fe2b849ac8c387e60f9b1ffd8b15fb1c1e1e22ebe53673e6c9099b9c6217a9c9374dde3fedbc8fc4e9659540e93e7094ec42d2e851ee85ae4d9a4d0843d28979af43443cdb2d1b43a15d00c75c1dc10612a96b295488de5de37fb087e5387338c9f628b4bc50ed67ef170459f590ec6d50c055375dc27b0fab19ed4e64df742d431b2024d8a0ebfb928142dce8f08cbe1c7733d45d19993f1c6d9e9c7b0fcdf20f9b8fd1b282bf684a25e9c775dfc9d73a9182cfd2329dcb4d10f390b6aafb2ff47f020f617d24105e0efaac40425669afa1ba94c04786f6525aa9f55a151efcff1ee5fe3ab4dd4b6d5b8c19bbaee0064c716a6bc618dea11b33e5814520408d87570dd5477085df23993bb6147a157625c4665875bbfd1427109773efa26a3a7ff879f570a2a2e678bc84420ccd1273fdd97c10f2e7579bc45e4c95aee335bfc594ac97b8596565691096b70dc154b994f1ff9cf0f2a50959552780c1466d622e0cab68ea0354148bb3140ec3b5ac45d46f14739f5118b48e4715adcaa88906609bfbf22df7053fa47a7ffe93a77bda6eceec8b88753c5a2c578702e468e6245c3c72034e1e6f82b5b1466de487b6cc3dde63d61cc3d10b32d3b0bbe5d97b49683c4475f1d53f25217b20e584a59fc2a46a9ffb72314ddb19ddf0dc5ea0804a6eee10b69009643aea077e473d88878a0da9a77b4f4bbff500eea6fa3a1032e95fa8ab0898024346525613f11cb951ec098dd9d6afcf6a06eb5f2b1140863d5a30b5c883f447317bf8749ae40bb335f1d6ceef6192e9c8ba8fdc7ceb722e4090e818e35c919eaa78bc6982c91bd97dd7ce4cb24045c2b67212d13a421c04b352d5198cc86088d8a4a47952b296cc528b7050f890af6dea2d1e275f76267d8ee383a29f02202f25f21a23880edc4b4d755933845dd0a39542c9e182b3d11d212b1db2fbb7b8a3c8eda73d1ed310b56ef8ddc755c68c2c7c42f276392b9657c080b256931026fa2bb022372da65cd236dc19cd7392487ce4ea3f0ec995b508d2d2edc49f789c6e3ce06c5caad9dceb5e9cc192c26dc02938709888a3e956fb8a87159d8b59fe0eb3fa1aeab62cc9f3f77d7ad2687d3b25cd805755e6daac17e9465b0b8d3b43d3dfc805d60b7b63a6ffdd0beb4a98db7b3d83d69279e5092aa02500bccd2a26703526061be6289a62348d124284a975703fb5ac91eac7e95c67053edc11f9c0cb91ea1b4e874ecc318ad9274b6202846d9cffb53bed3254f0f6d273ea466933525462d9a2696c3338e17cbd0fc391e987bafa5066c926e211fb031a05cb3ca74618fe6360a8808525d6b61d1d5ffcaa5dbd2242debde0298e179d0589304fc9d030f80616850ce142ad94ffc6da22714faeba0747d4f85ee5e8977805bf91894dac8964bf0d5d3d20d33191ca5027edc8b86937e36f9f32c30fbac93396008c2fbbfe21eef688711db7c8658963981ddf09e6dddba6abf6454d6fb9bf586a526a5aff0b883b7b803bea8da0fb070f7c91bef9a606b25a1be3e15ebb1ca1ea923fb6279b44e9a77d80b4bdceb8381c65d6653614ad061048dd4b9425bd5b1cbbc8c6920bc08307814b38608308a2c1c92ad27d39465fd7d4f99bbb8eefcf6649b5e98574502ff8e58af2dda1535be952fc0ce43f569deb9a83d9d995a06c652083f06753e33fd5006fe9c94fcc46110f6dc82bdf9db2c4953878abcf99d5c07572f2519b958154ac7c1997edfe19efbda40d5f2f658cab7a602621478ec90a419741c8dd8f46b1339c5b31dafc5390451e90767ae762de7a5e4be0f49d8208cba6b66f9656c68044a1bbdd721efa222cf872be646b0a9ce0319e6a1ef8a98a92499f3c2e0b71f37e2d21572d2d51a0e7475499fdd51de074531ec8524063936db9821b4640e08f357a70b2f17d7a6213daa04eb03f3e40a30817ca4b5a02361b19d07010cac9d014404ab6769e3a864289492de7f2ab3f1f6a81937c1043f695a8f2e85334b1b38ec4c697a6d9889ae18749b027ee35392385aff38a6e8d8259882212f0257f284dcf00ec2c1a59d1e56049ad094ebb29216765289561c606dc9147d37a66ec7f0610019fe721ac5a2e1272b79d78c7e645935e8d8234574d320206e6f188c1cfd46bdce3310b20b2820c81923f96b638d33eaf653796390ad65e1d03e72377f8044104590e548a2c5678c8f93e5446e00e6c3ec156b26eb3f26df088c4f977fbdf8dd69e30f92b1ada40f39673f2f3c0d956c4996ceccedafe83c0b9490b324b014794b092a268516c2622ca0eb5d01342452539e6978df691cfd8d22da6c7af5e5ac07d43aef220052500ae4bb766c02551a00475cf089cf09d7854a6136e2b7af9f8329e832fc098449298ef059ecd97602371a448b42ada97aed5051195b2c9d8437eabb27af358cebe36c00645c805896336a97737059aabf2557d9c463c6469d7f82138238f31bf1e8129da4eb16891cb908fb697e61007a7e707cd61bd613870ffe0de2daa494ef6463d9f745c43be4562939d7051468273e5756f6bc698bcf7ef317da738789e89ec9199e80d208cfcd3f2d4150faf58da648ecfa8e36c17f41cbf70921c680fbd1fee5194e25c05bf2e2d09f36cb22c19d125cab4276d34889f85c07d03f98f0a4b90bbe9aca95d38894e14ab24081285c920d53624b50e22a758e0c9baef148e4d4d3843b7e0fcc4ef65fd39947994612eb9cdbad4fd46b8dd31d77fefd445377639b3f3e27e89c24a8302169d8a1a6fe8e9cf94c448182324ff1eaad8058ae66f14435238bad1a28ed8bdf8960d394edf0199e66a08404fd9d4e40d898ee3c9da4818cb55a6f60d5408753ec928249771c5db8dcd862f29627a1851796d59c7dfd54cf69543113bfb6e6e5087326b51f67bbcb7b21b54aa718ced7f55b1802f7d2420889d3dfde59d50f78483d9c071f4537e18ee1d322ce4059f2e3312220067dd56a5fe86caa5765116bdd42e7ee6bea8a021795e38f8f0294dcc757933be4967ebf387660ca9c035becb43621682e17f08a3fdfdbdb636ddd84101acd11bc41d67c54480f3cf8969c7a4bc18ef9d4336b5242345c78b05d8810803d56d2ad521ad9b34c4bcf15e3ee6d58909128a6f774f8730fa61ceeede32f6d2b61a86e6971180796cb5dc32613903326e9f6aab2d01829e17140b812ef3043725c0f6333373a42a7cca1f461c05eee7455"], 0x1015, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) syz_emit_ethernet(0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaa0fffffffffffff0800451e0041006700000b069078e0000001ac14143d0000000000000000000000000000000000004e2400007e20313b00000000000100000004000000070000000200"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="150a00000000000061118c0000000000950000000000000038786722d5cf0e8757420874eca84ca2e13c6ccc222cceb4beb8b6d505045aeccf945779a0477beba67daa3c523d006786bce22b4abef52dc61dcba5d83fc1f3a52a5b7bc5d46085d89bc4b42414fb9920cbb61eb81e09269db25f3dc8a6cd762ed301768b2e68c8f96d3a3cc1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000080)={0x72, 0xa0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) semop(0x0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x7e74, 0x2900) ioctl$VIDIOC_S_STD(r7, 0xc0405627, &(0x7f00000002c0)=0x2) 6m29.195752049s ago: executing program 4 (id=482): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000100)='autofs\x00', 0x2020428, &(0x7f00000001c0)='\xc6\xb3\xd0\x05)\xb4= \x04z\xc0m9\x02\x0e\xecS\x8e\x9e;\xd9\xaa\xa8\xe8\xd3\xe7$\x99\x8a\xbf]W1\x1bTM\xcb\x10\xca\x01m`\xeet\xef\xdc$3\x1eM\xbfG\x04\x89\xbf0\xe8\x1b\xf1\xdc\x1fA\x87\x196\xa3H\x828i\xbc\xf3\xba\xf7s#\xf4\x1dL\x9d\xc5\x96\xef\x96\xe4\x06\xb4\xc2\x8b\x96\xcc\xdb\x8a\xa60\xb7\xc0d\x1e\t(\xf4\xc2\t\xd0\xa5\xaf\xba\xcb\xf1U\xd1\x9f\xbc\xe4\na#\xc9') r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0x7, &(0x7f0000000440)={0x6, 0x47}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f000001aa40)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000019400)=""/202, 0xca}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000019500)=""/162, 0xa2}, {&(0x7f00000195c0)=""/80, 0x50}], 0x4}}, {{&(0x7f0000019640)=@abs, 0x6e, &(0x7f00000196c0)=[{&(0x7f0000000180)=""/28, 0x1c}], 0x1, &(0x7f0000019700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{0x0, 0x0, &(0x7f0000019c80)=[{&(0x7f0000019880)=""/134, 0x86}, {&(0x7f0000019940)=""/91, 0x5b}, {&(0x7f00000199c0)=""/9, 0x9}, {&(0x7f0000019a00)=""/80, 0x50}, {&(0x7f0000019a80)=""/128, 0x80}, {&(0x7f0000019b00)=""/63, 0x3f}, {&(0x7f0000019b40)=""/53, 0x35}, {&(0x7f0000019b80)=""/240, 0xf0}], 0x8, &(0x7f0000019d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000019e40)=@abs, 0x6e, &(0x7f000001a2c0)=[{&(0x7f0000019ec0)=""/20, 0x14}, {&(0x7f0000019f00)=""/108, 0x6c}, {&(0x7f0000019f80)=""/177, 0xb1}, {&(0x7f000001a040)=""/211, 0xd3}, {&(0x7f000001a140)=""/170, 0xaa}, {&(0x7f000001a200)=""/151, 0x97}], 0x6, &(0x7f000001a340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f000001a380), 0x6e, &(0x7f000001a540)=[{&(0x7f000001a400)=""/115, 0x73}, {&(0x7f000001a480)=""/158, 0x9e}], 0x2, &(0x7f000001a580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f000001a640), 0x6e, &(0x7f000001a8c0)=[{&(0x7f000001a6c0)=""/65, 0x41}, {&(0x7f000001a740)=""/199, 0xc7}, {&(0x7f000001a840)=""/23, 0x17}, {&(0x7f000001a880)=""/56, 0x38}], 0x4, &(0x7f000001a900)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}], 0x6, 0x20000000, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102400, 0x19000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000080)={r0, 0x0, 0x9}) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r6, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(r6, 0x1000000, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 6m27.189531983s ago: executing program 4 (id=483): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x3, 0xfffffffffffffffe, 0x3, 0x8000040000000000, 0xbb, 0x6, 0x4b1d, 0x4000000000000008, 0x200000000000ffff, 0x2081, 0x20000007, 0xffffffffffffffff, 0xe5, 0x1], 0x1000, 0x383fc2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f00000001c0)='\x00', &(0x7f0000000280)='syzkaller\x00']}, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r3, @ANYBLOB="000000006f0018000500100002000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40040041) timer_gettime(r1, &(0x7f0000000180)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000080), 0x4) open(&(0x7f00000002c0)='./file0\x00', 0xc0c0, 0x142) open(&(0x7f0000000040)='./file0\x00', 0x480800, 0x10) syz_open_pts(0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x40000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180)={0x0, 0x2710}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x67) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="c929ad514e77a86e4e1f49a4a56fd6022c71c0c753b9431ad4b87126a72547851d1b35fc61c4284357be9c7937cdd7a139c6d1bcb6c569911766168b5cfba5db260e1234e521f306183e85b894b987245139d6b84723db5f15d64403402b4e990236c746b9983002294f86e76acf2692d9eaa81581ed556ed63ea2c6466b706cbfb211a6d4ca0f75dd66e55bca", 0x8d) r7 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) fcntl$setlease(r7, 0x400, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m22.4870882s ago: executing program 4 (id=490): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa000000000000000000000000000000000000000000000000000000004e23000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) open_by_handle_at(r5, &(0x7f0000002580)=ANY=[@ANYBLOB="0c000000fe"], 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) 6m21.920082736s ago: executing program 4 (id=491): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x679e558841ea4857, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x64042, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x6a0}]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b6a, &(0x7f00000000c0)={0x200d, 0x200e, 0x12, 0x1a, 0x200c, 0x0}) 6m20.018823901s ago: executing program 4 (id=493): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf943", 0x44, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m19.838852639s ago: executing program 4 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ncm(0x5, 0x16b, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x159, 0x2, 0x1, 0x1, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "95d46c57"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1cf, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x24}, [@mdlm_detail={0xcc, 0x24, 0x13, 0x4, "e36ba9619e8529b3db46e35f0cc8f58e3f7e2cd480f8bd2e2808423fa3225cadecb8b42ad327176823e02a754c09e3c5785b8f56bec63cee0d1dbc7e6c36f42ab6a7feaa691ca5d7cfbb0a42611031fa9d8145709d08d23383401f35e49d64f72fd7649fc595b350c5d07caed0c5106b1c6ff4775e4a6fa141a3461c0028e52e4fb9d5dff147f1573ed43ffc63cfcabd5b39443b3869ea94e9c63ed51c883a56a4d8741f58e9fc51ba252091cad8ec2f2933a8e9fb806991613e33da0afb5b0970b83ab69d0252eb"}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xd, 0xff, 0x6, 0x4, 0x83}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xff, 0x29}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x1f, 0xe}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0xf7, 0x1, 0x16, 0x40, 0x5}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "3d39888fa71d733c2f8e6b798a873113"}]}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x445}}, {0x12, &(0x7f0000000580)=@string={0x12, 0x3, "286d06edd80b3f971c47b46c2da0bf16"}}, {0x66, &(0x7f0000000640)=@string={0x66, 0x3, "0d2426908eeb4b0a8ec60570e7902017b0fb22604699d8864a68dea1238113c868af95ee426dcdd6c30205e8e651adda0a1a1f7a2f67fa2e3990fde4adc687d8842fd1bfc700e83f667975c0aa765a2166355bd7b609cf2be117b7410bf2efb5056675d4"}}, {0x6d, &(0x7f00000006c0)=@string={0x6d, 0x3, "66fcb8a303ce551260fd3021f1f47804f8e47c91a0e4771165c02aeaa502601d30157bfdf2bebad760e50eff735d3f8502f7dc728ca3549a0f7e1bec37537cf86af9e743769a8bb5626998db5cc1992984410628a3c3604afb56faa364c4a13db73b39282f57ca4e968405"}}]}) syz_usb_control_io(r1, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)={0x0, 0x31, 0xef, {0xef, 0x5, "484d6d0201b17561bfe2f4e10ee40ab603bc530a790a992b8a7e38e8768c8408b94f87a0b0e0df4bd94039203cfb8a305381fe5b5397811fb7553082cd6a17d7a5e448288c0b25bd24a9f8f6b8686acd34b4be2e01d745e54a217898665363b668d1e4c222563cbac94fc12e290746de20eae490219f9552754f4750906804c0b18a38bd4355ea1c15ee4abf751faf8a4bf81f427c9fad471b1f1d6fd469cac4c455c0535801623637438fe777685d3dcf8a21092135a6e05babe129db9c9b62d4222256ebf776de1e6997b7cfd6ad8516333e21fbd09af4455adec4d92b5bbe8d4d266b0445770ff8ef1280a5"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f00000008c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x2, 0x9, 0x9, "e243525c", "aa1d2438"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0xd, 0x7, 0xb, 0x9, 0x100}}}, &(0x7f0000000dc0)={0x84, &(0x7f00000009c0)={0x20, 0x0, 0x11, "92f485beed46f59e08b9d8dce16e5ed0bd"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0xb, 0x2, '0^'}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000c00)={0x40, 0x13, 0x6}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "a531"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x3}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@typed={0x4, 0xd, 0x0, 0x0, @binary}, @generic=')']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x39}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x8000, 0x0, 0x1, r3}]) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x1, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xd8, 0x47, 0xae, 0x20, 0xf11, 0x1200, 0x7f41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xd, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0xe2, 0x1, 0x1, 0x84, 0x90, 0xe1, 0x6, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x89, 0x7, 0x7}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2f, &(0x7f00000001c0)=@string={0x2f, 0x3, "a1c46c6a7e005c1a92bab5aa2417a0af64e4b53058ddbce0cacd40625d37ab542d0a890840813ce3027834c3b5"}}, {0xf2, &(0x7f0000000040)=@string={0xf2, 0x3, "14da1e7d2425292072c0fba1e68235749c9239107e90518ba757157fc17872371b663cdb6c96c2408c7476b0259f8cfb04fdc845094c81fea2d7e63095e2a1479d1e7490696591eb34221ad3c079f7a32eb37af3c5aa93f9ea8718da993d11bf639ab51fb3d4de82b65d939ae4a6cfd551df654722d7bdfbdceb77ec40c299e2e79dbd58cb7314749789c42cdf5639ceee0819cd272a03f420e9401bfa5f0c12dfaf68cbe37eadd9ddf0cabdfb3188ef8df1035cd1d9d17ef15c6827c1fec83673266cb90e5506ebac4f3907447b165568491a6d74fa8c120b064a7cf1c26310ec0b5eb26c7388bc04f9e7e7bf0db3fe"}}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x4c201, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r4, 0x3b88, &(0x7f0000000280)={0xc}) 6m3.227177203s ago: executing program 34 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ncm(0x5, 0x16b, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x159, 0x2, 0x1, 0x1, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "95d46c57"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1cf, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x24}, [@mdlm_detail={0xcc, 0x24, 0x13, 0x4, "e36ba9619e8529b3db46e35f0cc8f58e3f7e2cd480f8bd2e2808423fa3225cadecb8b42ad327176823e02a754c09e3c5785b8f56bec63cee0d1dbc7e6c36f42ab6a7feaa691ca5d7cfbb0a42611031fa9d8145709d08d23383401f35e49d64f72fd7649fc595b350c5d07caed0c5106b1c6ff4775e4a6fa141a3461c0028e52e4fb9d5dff147f1573ed43ffc63cfcabd5b39443b3869ea94e9c63ed51c883a56a4d8741f58e9fc51ba252091cad8ec2f2933a8e9fb806991613e33da0afb5b0970b83ab69d0252eb"}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xd, 0xff, 0x6, 0x4, 0x83}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xff, 0x29}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x1f, 0xe}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0xf7, 0x1, 0x16, 0x40, 0x5}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "3d39888fa71d733c2f8e6b798a873113"}]}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x445}}, {0x12, &(0x7f0000000580)=@string={0x12, 0x3, "286d06edd80b3f971c47b46c2da0bf16"}}, {0x66, &(0x7f0000000640)=@string={0x66, 0x3, "0d2426908eeb4b0a8ec60570e7902017b0fb22604699d8864a68dea1238113c868af95ee426dcdd6c30205e8e651adda0a1a1f7a2f67fa2e3990fde4adc687d8842fd1bfc700e83f667975c0aa765a2166355bd7b609cf2be117b7410bf2efb5056675d4"}}, {0x6d, &(0x7f00000006c0)=@string={0x6d, 0x3, "66fcb8a303ce551260fd3021f1f47804f8e47c91a0e4771165c02aeaa502601d30157bfdf2bebad760e50eff735d3f8502f7dc728ca3549a0f7e1bec37537cf86af9e743769a8bb5626998db5cc1992984410628a3c3604afb56faa364c4a13db73b39282f57ca4e968405"}}]}) syz_usb_control_io(r1, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)={0x0, 0x31, 0xef, {0xef, 0x5, "484d6d0201b17561bfe2f4e10ee40ab603bc530a790a992b8a7e38e8768c8408b94f87a0b0e0df4bd94039203cfb8a305381fe5b5397811fb7553082cd6a17d7a5e448288c0b25bd24a9f8f6b8686acd34b4be2e01d745e54a217898665363b668d1e4c222563cbac94fc12e290746de20eae490219f9552754f4750906804c0b18a38bd4355ea1c15ee4abf751faf8a4bf81f427c9fad471b1f1d6fd469cac4c455c0535801623637438fe777685d3dcf8a21092135a6e05babe129db9c9b62d4222256ebf776de1e6997b7cfd6ad8516333e21fbd09af4455adec4d92b5bbe8d4d266b0445770ff8ef1280a5"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f00000008c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x2, 0x9, 0x9, "e243525c", "aa1d2438"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0xd, 0x7, 0xb, 0x9, 0x100}}}, &(0x7f0000000dc0)={0x84, &(0x7f00000009c0)={0x20, 0x0, 0x11, "92f485beed46f59e08b9d8dce16e5ed0bd"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0xb, 0x2, '0^'}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000c00)={0x40, 0x13, 0x6}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "a531"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x3}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@typed={0x4, 0xd, 0x0, 0x0, @binary}, @generic=')']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x39}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x8000, 0x0, 0x1, r3}]) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x1, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xd8, 0x47, 0xae, 0x20, 0xf11, 0x1200, 0x7f41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xd, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0xe2, 0x1, 0x1, 0x84, 0x90, 0xe1, 0x6, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x89, 0x7, 0x7}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2f, &(0x7f00000001c0)=@string={0x2f, 0x3, "a1c46c6a7e005c1a92bab5aa2417a0af64e4b53058ddbce0cacd40625d37ab542d0a890840813ce3027834c3b5"}}, {0xf2, &(0x7f0000000040)=@string={0xf2, 0x3, "14da1e7d2425292072c0fba1e68235749c9239107e90518ba757157fc17872371b663cdb6c96c2408c7476b0259f8cfb04fdc845094c81fea2d7e63095e2a1479d1e7490696591eb34221ad3c079f7a32eb37af3c5aa93f9ea8718da993d11bf639ab51fb3d4de82b65d939ae4a6cfd551df654722d7bdfbdceb77ec40c299e2e79dbd58cb7314749789c42cdf5639ceee0819cd272a03f420e9401bfa5f0c12dfaf68cbe37eadd9ddf0cabdfb3188ef8df1035cd1d9d17ef15c6827c1fec83673266cb90e5506ebac4f3907447b165568491a6d74fa8c120b064a7cf1c26310ec0b5eb26c7388bc04f9e7e7bf0db3fe"}}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x4c201, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r4, 0x3b88, &(0x7f0000000280)={0xc}) 5m9.780736677s ago: executing program 2 (id=562): syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0000904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f24060205040200020001000100040c2402020302f6ff8000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f0904020000010200000904020101010220000905820920000d02040725012608030058f3bc63"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xb9, &(0x7f0000000280)=@string={0xb9, 0x3, "d4c31bb976070059a02786de25a44a1ff48a4b6d44c6422f6d337a1268e9d3ccfa43384b47562e4bc6d6412e6e57144d7bc2ebf6cd3da5760907458f343b8fc858b8c007d29afd7f60907b195dafe69b3bf37e8d356e68371f705a63d1a0e841883b546072bf5bc19d602e4abd667913090826599008cb453f702d64360ec300e19b3fda51823b19317f38505b5c3b7e77a546d11752a6594384f4fdeb1a1a27a991fa6f937bafe66b810987b59f7e47776a191d6c61b5"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x436}}]}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000003c0)={@mcast1, 0x3c}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r4, 0x48212b8952c3aff5, 0x70bd25, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x84a84030f8bb3172}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062012c000000000895"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x90, 0x2, 0x7, 0x2060, r0, 0x8ec, '\x00', r3, r5, 0x1, 0x2, 0x5}, 0x50) 5m4.5613442s ago: executing program 2 (id=565): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x8de, 0x9, 0x36314752, 0x6, 0x3, [{0x1ff, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x9}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x4, 0x80000017}], 0x7b, 0x3, 0x8, 0x1, 0x4}}) open$dir(&(0x7f0000000640)='./file0\x00', 0x149800, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x6c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x802}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x4, @win={{0xca, 0xa, 0x0, 0x5}, 0x9, 0x9, 0x0, 0xb, 0x0, 0x72}}) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x1f, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) 5m2.546226783s ago: executing program 2 (id=566): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d0000000000000000"], 0x0, 0x56}, 0x28) 4m58.093103902s ago: executing program 2 (id=569): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) 4m53.462266715s ago: executing program 2 (id=573): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x0, 0x0, 0xb928}]}, 0x10) syz_emit_ethernet(0xb8, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa2faaaaaaaa08004d1d00aa00650000c6219078ac1e0001e000000244204b3000000f300000002f8000000100000004ffffffff00000002000000024e204e200421907812427c9509c15cf7ea2091cf6546e6bff8c135a56e30b5cbb347d5891e40e99201b0288ae2127102e974845b026bedcd4b527c85c4264dbe42c37e0cfb7fba6346b553a951d8f0fb27810bc0daae1986ac67d0589eeb66bd8cd4917b813c85c79547e9e9add49718a154a6ad8df0"], 0x0) 4m53.182604947s ago: executing program 2 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000340)={0x18, 0x2, {0x80, @loopback}}, 0x1e) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmmsg(r5, 0x0, 0x0, 0x40840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd7000fdffffff0018c100", @ANYRES32=r7, @ANYBLOB="08000100ac1e000108000200ffffffff08000200e000000208000400e000000108000a000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f045}) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f00000001c0)={@mcast1, 0x75, r8}) 4m37.905094738s ago: executing program 35 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000340)={0x18, 0x2, {0x80, @loopback}}, 0x1e) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmmsg(r5, 0x0, 0x0, 0x40840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd7000fdffffff0018c100", @ANYRES32=r7, @ANYBLOB="08000100ac1e000108000200ffffffff08000200e000000208000400e000000108000a000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f045}) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f00000001c0)={@mcast1, 0x75, r8}) 8.534225443s ago: executing program 7 (id=1527): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000008004500fde1030000000011907800"/32], 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7.572825878s ago: executing program 7 (id=1539): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 5.208344419s ago: executing program 7 (id=1564): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=0x0], 0x58}}, 0x0) 5.032153266s ago: executing program 7 (id=1568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) acct(&(0x7f00000005c0)='./cgroup\x00') 4.548675484s ago: executing program 8 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c00028005000200a900000008000340000000d50800044000000001080006400000000208000140000000010900010073797a30000000000900020073797a32"], 0x94}}, 0x8000) 4.396542419s ago: executing program 1 (id=1575): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 4.280630477s ago: executing program 8 (id=1576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.49431237s ago: executing program 7 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88"], 0x0) 3.337557413s ago: executing program 7 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.434359049s ago: executing program 1 (id=1593): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=0x0], 0x58}}, 0x0) 2.242052697s ago: executing program 1 (id=1595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) fchdir(0xffffffffffffffff) acct(&(0x7f00000005c0)='./cgroup\x00') 1.532128555s ago: executing program 5 (id=1602): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.464956886s ago: executing program 6 (id=1603): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) 1.428697956s ago: executing program 6 (id=1604): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.395253705s ago: executing program 5 (id=1605): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xffff0000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) 1.260516945s ago: executing program 5 (id=1606): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) 1.260230786s ago: executing program 6 (id=1607): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xfc}}, 0x0) 1.195655884s ago: executing program 5 (id=1608): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, 0x0, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2b, &(0x7f0000000d40), 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0xffffeffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r7}, 0x18) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xa00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_migrate_pages\x00', r7}, 0x18) 1.120258687s ago: executing program 8 (id=1609): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r2}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 1.078626209s ago: executing program 6 (id=1610): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) syz_emit_ethernet(0x10b2, &(0x7f0000003d80)=ANY=[], 0x0) 1.072079721s ago: executing program 1 (id=1611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}}, 0x4050) 987.427314ms ago: executing program 8 (id=1612): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r3, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0xa, 0xa, 0x1, 0x30, 0x1}]}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, &(0x7f0000000740), 0x41000, 0x30, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9, 0x4ff76205}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000007c0), &(0x7f0000000800)=[{0x3, 0x4, 0xf, 0x9}, {0x0, 0x5, 0xe, 0x3}, {0x1, 0x1, 0x10, 0x9}, {0x4, 0x4, 0x5, 0xa}, {0x5, 0x5, 0x3, 0x4}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x101000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r8, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0, 0x200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x3, 0x49, 0x8, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x8bf72fbac5b1ff81, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c0000000610000000000000da04e0ff10000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x36, '\x00', r1, @fallback=0x29, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r5, 0x0, &(0x7f0000000b00)=[r6, r7, r8, r9, r10, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @generic={0x5, 0xe, 0xa, 0x7, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x4, 0x4, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000600)=[{0x3, 0x3, 0x7, 0xc}, {0x0, 0x4, 0x0, 0x9}, {0x2, 0x4, 0x0, 0x5}, {0x3, 0x2, 0x7, 0xa}, {0x5, 0x1, 0xb, 0xc}, {0x3, 0x1, 0xb, 0x3}], 0x10, 0xfffffffb}, 0x94) r12 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0xff, 0x33, &(0x7f0000000200)=""/51, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0xff, 0x4}, 0x10, r4, r11, 0x3, &(0x7f0000000740)=[r12, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x5, 0xa, 0x5}, {0x3, 0x5, 0x7, 0x6}, {0x0, 0x4, 0xa, 0x9}], 0x10, 0x7fff}, 0x94) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000001300)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x18, 0x1, 0x0) getsockname$packet(r13, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r15 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRESOCT=r15, @ANYBLOB="0198000000000000200012432fcefee1ce198f412c7517800800010073697400140002800600", @ANYRES64=r14], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r16 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r16, &(0x7f0000001380)=[{0x6, 0x6, 0x0, 0x0, @tick=0x38e2, {0x4, 0xfe}, {0x7}, @queue={0x5, {0x2d5, 0x5}}}, {0x80, 0x0, 0x5, 0x0, @time={0xffff, 0xa8}, {0x0, 0x2}, {0x2}, @ext={0x0, 0x0}}, {0x8, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x2}, {}, @note={0x7, 0xe5, 0xa3, 0x8, 0xdefc}}, {0x0, 0x3c, 0x1, 0x0, @tick=0x100, {}, {}, @result={0x8, 0xfffffff9}}], 0x70) unshare(0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000100)=0x10000, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) 931.278633ms ago: executing program 8 (id=1613): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 442.41067ms ago: executing program 1 (id=1614): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 371.274594ms ago: executing program 6 (id=1615): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x2, @remote, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) 324.661594ms ago: executing program 5 (id=1616): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d", 0x12) 324.285497ms ago: executing program 1 (id=1617): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) 232.279643ms ago: executing program 6 (id=1618): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000001000000000001000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500140000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000100)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a0004002800000006000002", @ANYRES32=r4], 0x20, 0x2400e044}, 0x0) 202.676047ms ago: executing program 5 (id=1619): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 0s ago: executing program 8 (id=1620): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000780)={0xa5c, 0xf, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) kernel console output (not intermixed with test programs): lave_1: entered promiscuous mode [ 568.510202][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.510277][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.897781][ T8493] team0: Port device team_slave_0 added [ 568.922812][ T8283] syz-executor (8283) used greatest stack depth: 16472 bytes left [ 569.193759][ T5809] Bluetooth: hci0: command tx timeout [ 569.310589][ T8493] team0: Port device team_slave_1 added [ 569.335069][ T8637] openvswitch: netlink: Flow actions attr not present in new flow. [ 569.753460][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.857247][ T8644] FAULT_INJECTION: forcing a failure. [ 569.857247][ T8644] name failslab, interval 1, probability 0, space 0, times 0 [ 569.857277][ T8644] CPU: 0 UID: 0 PID: 8644 Comm: syz.1.639 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 569.857300][ T8644] Tainted: [L]=SOFTLOCKUP [ 569.857306][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.857317][ T8644] Call Trace: [ 569.857323][ T8644] [ 569.857330][ T8644] dump_stack_lvl+0x189/0x250 [ 569.857357][ T8644] ? __pfx____ratelimit+0x10/0x10 [ 569.857384][ T8644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.857407][ T8644] ? __pfx__printk+0x10/0x10 [ 569.857428][ T8644] ? __pfx___might_resched+0x10/0x10 [ 569.857445][ T8644] ? fs_reclaim_acquire+0x7d/0x100 [ 569.857464][ T8644] should_fail_ex+0x46c/0x600 [ 569.857490][ T8644] should_failslab+0xa8/0x100 [ 569.857508][ T8644] __kvmalloc_node_noprof+0x181/0x940 [ 569.857534][ T8644] ? __v4l2_ctrl_modify_dimensions+0x440/0xb40 [ 569.857559][ T8644] __v4l2_ctrl_modify_dimensions+0x440/0xb40 [ 569.857580][ T8644] ? vivid_update_format_cap+0x1332/0x20c0 [ 569.857600][ T8644] vivid_update_format_cap+0x1342/0x20c0 [ 569.857627][ T8644] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 569.857645][ T8644] ? vivid_get_format+0x2ad/0x2e0 [ 569.857674][ T8644] vivid_s_fmt_vid_cap+0x28a5/0x5990 [ 569.857705][ T8644] ? __asan_memset+0x22/0x50 [ 569.857732][ T8644] fmt_sp2mp_func+0xcc/0x400 [ 569.857756][ T8644] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 569.857773][ T8644] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 569.857816][ T8644] ? v4l_sanitize_format+0x5d6/0x9f0 [ 569.857845][ T8644] ? vidioc_s_fmt_vid_cap+0x8c/0xc0 [ 569.857864][ T8644] v4l_s_fmt+0x631/0xbd0 [ 569.857886][ T8644] __video_do_ioctl+0xa5c/0xc10 [ 569.857911][ T8644] ? __pfx___video_do_ioctl+0x10/0x10 [ 569.857941][ T8644] video_usercopy+0x82a/0x13f0 [ 569.857967][ T8644] ? __pfx___video_do_ioctl+0x10/0x10 [ 569.857984][ T8644] ? __pfx_video_usercopy+0x10/0x10 [ 569.858000][ T8644] ? smack_file_ioctl+0x2ac/0x340 [ 569.858034][ T8644] ? __fget_files+0x3a6/0x420 [ 569.858055][ T8644] v4l2_ioctl+0x190/0x1e0 [ 569.858072][ T8644] ? __pfx_v4l2_ioctl+0x10/0x10 [ 569.858088][ T8644] __se_sys_ioctl+0xff/0x170 [ 569.858113][ T8644] do_syscall_64+0xfa/0xf80 [ 569.858131][ T8644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.858147][ T8644] ? clear_bhb_loop+0x60/0xb0 [ 569.858167][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.858191][ T8644] RIP: 0033:0x7f557a03f749 [ 569.858206][ T8644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.858220][ T8644] RSP: 002b:00007f55782a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.858238][ T8644] RAX: ffffffffffffffda RBX: 00007f557a295fa0 RCX: 00007f557a03f749 [ 569.858250][ T8644] RDX: 0000200000000040 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 569.858261][ T8644] RBP: 00007f55782a6090 R08: 0000000000000000 R09: 0000000000000000 [ 569.858271][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.858280][ T8644] R13: 00007f557a296038 R14: 00007f557a295fa0 R15: 00007ffcbe481ac8 [ 569.858306][ T8644] [ 570.139408][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.233005][ T5118] Bluetooth: hci0: command tx timeout [ 571.418729][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.418744][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.418766][ T8493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.586767][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.586788][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.586820][ T8493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.631431][ T8502] team0: Port device team_slave_0 added [ 571.672791][ T8551] chnl_net:caif_netlink_parms(): no params data found [ 571.721974][ T8502] team0: Port device team_slave_1 added [ 572.185605][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.185620][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.185643][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.341330][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.341349][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.341375][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.447437][ T8493] hsr_slave_0: entered promiscuous mode [ 572.452393][ T8493] hsr_slave_1: entered promiscuous mode [ 573.703752][ T5118] Bluetooth: hci0: command tx timeout [ 574.286047][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.301385][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.301633][ T8551] bridge_slave_0: entered allmulticast mode [ 574.317741][ T8551] bridge_slave_0: entered promiscuous mode [ 574.349409][ T8502] hsr_slave_0: entered promiscuous mode [ 574.351964][ T8502] hsr_slave_1: entered promiscuous mode [ 574.353443][ T8502] debugfs: 'hsr0' already exists in 'hsr' [ 574.353463][ T8502] Cannot create hsr debugfs directory [ 574.478184][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.478280][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.478461][ T8551] bridge_slave_1: entered allmulticast mode [ 574.480444][ T8551] bridge_slave_1: entered promiscuous mode [ 575.284370][ T8551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.688233][ T8551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.653627][ T5118] Bluetooth: hci0: command tx timeout [ 577.113980][ T8681] hpfs: Bad magic ... probably not HPFS [ 577.134128][ T8681] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 577.134148][ T8681] qnx6: wrong signature (magic) in superblock #1. [ 577.134154][ T8681] qnx6: unable to read the first superblock [ 580.154935][ T8551] team0: Port device team_slave_0 added [ 580.301326][ T8551] team0: Port device team_slave_1 added [ 581.034711][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.034733][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.034765][ T8551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.240943][ T8623] chnl_net:caif_netlink_parms(): no params data found [ 581.269700][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.269721][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.269754][ T8551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.042296][ T8705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.385512][ T6662] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 582.539850][ T6662] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 582.539885][ T6662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.539910][ T6662] usb 2-1: Product: syz [ 582.539921][ T6662] usb 2-1: Manufacturer: syz [ 582.539932][ T6662] usb 2-1: SerialNumber: syz [ 582.578259][ T6662] usb 2-1: config 0 descriptor?? [ 582.595657][ T6662] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 582.889067][ T8551] hsr_slave_0: entered promiscuous mode [ 582.890604][ T8551] hsr_slave_1: entered promiscuous mode [ 582.891631][ T8551] debugfs: 'hsr0' already exists in 'hsr' [ 582.891657][ T8551] Cannot create hsr debugfs directory [ 583.744265][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.746637][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.746809][ T8623] bridge_slave_0: entered allmulticast mode [ 583.748716][ T8623] bridge_slave_0: entered promiscuous mode [ 583.895533][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.895666][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.895884][ T8623] bridge_slave_1: entered allmulticast mode [ 583.897857][ T8623] bridge_slave_1: entered promiscuous mode [ 584.406875][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.580480][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.038963][ T8623] team0: Port device team_slave_0 added [ 585.083391][ T8623] team0: Port device team_slave_1 added [ 585.152854][ T5986] usb 2-1: USB disconnect, device number 26 [ 586.686585][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.686605][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.686635][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.831773][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.831794][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.831827][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.399647][ T8623] hsr_slave_0: entered promiscuous mode [ 587.400727][ T8623] hsr_slave_1: entered promiscuous mode [ 587.401446][ T8623] debugfs: 'hsr0' already exists in 'hsr' [ 587.401466][ T8623] Cannot create hsr debugfs directory [ 587.957974][ T8493] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 588.012665][ T8493] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 588.078275][ T8493] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 588.132991][ T8493] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 588.399362][ T153] bridge_slave_1: left allmulticast mode [ 588.399396][ T153] bridge_slave_1: left promiscuous mode [ 588.399702][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.455015][ T153] bridge_slave_0: left allmulticast mode [ 588.455040][ T153] bridge_slave_0: left promiscuous mode [ 588.455261][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.526921][ T153] bridge_slave_1: left allmulticast mode [ 588.526954][ T153] bridge_slave_1: left promiscuous mode [ 588.527152][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.755443][ T8743] 9p: Bad value for 'rfdno' [ 588.784563][ T153] bridge_slave_0: left allmulticast mode [ 588.784596][ T153] bridge_slave_0: left promiscuous mode [ 588.784970][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.266902][ T153] bridge_slave_1: left allmulticast mode [ 589.266927][ T153] bridge_slave_1: left promiscuous mode [ 589.267104][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.354951][ T153] bridge_slave_0: left allmulticast mode [ 589.354977][ T153] bridge_slave_0: left promiscuous mode [ 589.355178][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.427056][ T153] bridge_slave_1: left allmulticast mode [ 589.427083][ T153] bridge_slave_1: left promiscuous mode [ 589.427269][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.506347][ T153] bridge_slave_0: left allmulticast mode [ 589.506373][ T153] bridge_slave_0: left promiscuous mode [ 589.506569][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.094659][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.174713][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.237535][ T153] bond0 (unregistering): Released all slaves [ 590.474421][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.556054][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.616171][ T153] bond0 (unregistering): Released all slaves [ 590.834398][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.914425][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.975909][ T153] bond0 (unregistering): Released all slaves [ 591.325376][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.444567][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.517353][ T153] bond0 (unregistering): Released all slaves [ 592.146957][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.216888][ T8493] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.243890][ T5986] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 592.410501][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.410671][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.413819][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 592.428865][ T5986] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 592.428899][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.428922][ T5986] usb 2-1: Product: syz [ 592.428943][ T5986] usb 2-1: Manufacturer: syz [ 592.428954][ T5986] usb 2-1: SerialNumber: syz [ 592.470434][ T5986] usb 2-1: config 0 descriptor?? [ 592.623910][ T153] hsr_slave_0: left promiscuous mode [ 592.670339][ T153] hsr_slave_1: left promiscuous mode [ 592.671387][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.688054][ T5986] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 592.704688][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.844034][ T153] hsr_slave_0: left promiscuous mode [ 592.863798][ T153] hsr_slave_1: left promiscuous mode [ 592.865071][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.888361][ T5986] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 592.915560][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.075358][ T153] hsr_slave_0: left promiscuous mode [ 593.103848][ T153] hsr_slave_1: left promiscuous mode [ 593.104681][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.144656][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.283933][ T153] hsr_slave_0: left promiscuous mode [ 593.304354][ T153] hsr_slave_1: left promiscuous mode [ 593.305369][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.354560][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.075173][ T153] team0 (unregistering): Port device team_slave_1 removed [ 594.254401][ T153] team0 (unregistering): Port device team_slave_0 removed [ 594.972811][ T5986] usb 2-1: USB disconnect, device number 27 [ 597.854484][ T153] team0 (unregistering): Port device team_slave_1 removed [ 598.024567][ T153] team0 (unregistering): Port device team_slave_0 removed [ 599.225239][ T153] team0 (unregistering): Port device team_slave_1 removed [ 599.361973][ T8768] tmpfs: Unsupported parameter 'huge' [ 599.397495][ T153] team0 (unregistering): Port device team_slave_0 removed [ 601.183799][ T5986] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 601.353814][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 601.359581][ T5986] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 601.359606][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.359621][ T5986] usb 2-1: Product: syz [ 601.359632][ T5986] usb 2-1: Manufacturer: syz [ 601.359643][ T5986] usb 2-1: SerialNumber: syz [ 601.365840][ T5986] usb 2-1: config 0 descriptor?? [ 601.586121][ T5986] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 601.908235][ T153] team0 (unregistering): Port device team_slave_1 removed [ 602.104663][ T153] team0 (unregistering): Port device team_slave_0 removed [ 602.778445][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 602.805458][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 602.807377][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 602.874240][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 602.879103][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.091168][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.091315][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.365141][ T5986] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 603.415169][ T5986] usb 2-1: USB disconnect, device number 28 [ 603.847145][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 603.850432][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 603.851871][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 603.853255][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 603.915515][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 604.074290][ T8790] netlink: 112 bytes leftover after parsing attributes in process `syz.1.672'. [ 604.994442][ T5118] Bluetooth: hci5: command tx timeout [ 606.413691][ T5118] Bluetooth: hci6: command tx timeout [ 607.404002][ T5118] Bluetooth: hci5: command tx timeout [ 608.064375][ T8780] chnl_net:caif_netlink_parms(): no params data found [ 608.455482][ T5118] Bluetooth: hci6: command tx timeout [ 608.647898][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.648136][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.648364][ T8780] bridge_slave_0: entered allmulticast mode [ 608.651954][ T8780] bridge_slave_0: entered promiscuous mode [ 608.761959][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.762114][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.762296][ T8780] bridge_slave_1: entered allmulticast mode [ 608.775820][ T8780] bridge_slave_1: entered promiscuous mode [ 609.133336][ T8780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.215285][ T8780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.478687][ T5118] Bluetooth: hci5: command tx timeout [ 610.474426][ T8780] team0: Port device team_slave_0 added [ 610.479295][ T8551] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 611.426108][ T5118] Bluetooth: hci6: command tx timeout [ 611.499032][ T8787] chnl_net:caif_netlink_parms(): no params data found [ 611.547448][ T5118] Bluetooth: hci5: command tx timeout [ 611.570344][ T8780] team0: Port device team_slave_1 added [ 611.573211][ T8551] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 611.774807][ T8551] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 611.952883][ T8551] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 612.152233][ T8780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.152248][ T8780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.152270][ T8780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.246588][ T8780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.246603][ T8780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.246626][ T8780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.363733][ T6231] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 612.517731][ T6231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.517761][ T6231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.517786][ T6231] usb 2-1: config 1 has no interface number 0 [ 612.517835][ T6231] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.517856][ T6231] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 612.520239][ T6231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.520261][ T6231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.520276][ T6231] usb 2-1: Product: syz [ 612.520287][ T6231] usb 2-1: Manufacturer: syz [ 612.520307][ T6231] usb 2-1: SerialNumber: syz [ 612.758134][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.758350][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.758616][ T8787] bridge_slave_0: entered allmulticast mode [ 612.761129][ T8787] bridge_slave_0: entered promiscuous mode [ 612.765194][ T8623] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 612.946515][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.946651][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.946877][ T8787] bridge_slave_1: entered allmulticast mode [ 612.949772][ T8787] bridge_slave_1: entered promiscuous mode [ 612.959601][ T8623] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 613.038589][ T8780] hsr_slave_0: entered promiscuous mode [ 613.040141][ T8780] hsr_slave_1: entered promiscuous mode [ 613.041194][ T8780] debugfs: 'hsr0' already exists in 'hsr' [ 613.041221][ T8780] Cannot create hsr debugfs directory [ 613.153610][ T8623] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 613.464023][ T5118] Bluetooth: hci6: command tx timeout [ 613.565983][ T8623] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 614.485206][ T6231] cdc_ncm 2-1:1.1: bind() failure [ 614.521900][ T8787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.702595][ T8787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.236656][ T8787] team0: Port device team_slave_0 added [ 615.330291][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 615.351795][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 615.355403][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 615.369988][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 615.382924][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 615.725773][ T6662] usb 2-1: USB disconnect, device number 29 [ 615.828549][ T8787] team0: Port device team_slave_1 added [ 616.198505][ T8787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.198520][ T8787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.198541][ T8787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.317807][ T8787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.317823][ T8787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.317846][ T8787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.002603][ T8787] hsr_slave_0: entered promiscuous mode [ 617.007494][ T8787] hsr_slave_1: entered promiscuous mode [ 617.010268][ T8787] debugfs: 'hsr0' already exists in 'hsr' [ 617.010343][ T8787] Cannot create hsr debugfs directory [ 617.477076][ T5118] Bluetooth: hci2: command tx timeout [ 617.622070][ T8871] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 618.523849][ T5986] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 618.684190][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 618.686685][ T5986] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 618.686716][ T5986] usb 2-1: config 179 has no interface number 0 [ 618.686785][ T5986] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 618.686816][ T5986] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 618.686847][ T5986] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 618.686877][ T5986] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 618.686908][ T5986] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 618.686938][ T5986] usb 2-1: config 179 interface 65 has no altsetting 0 [ 618.686975][ T5986] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 618.687001][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.874492][ T153] bridge_slave_1: left allmulticast mode [ 618.874523][ T153] bridge_slave_1: left promiscuous mode [ 618.874750][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.932965][ T5986] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 618.970768][ T153] bridge_slave_0: left allmulticast mode [ 618.970799][ T153] bridge_slave_0: left promiscuous mode [ 618.971039][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.060148][ T5154] input input17: unable to receive magic message: -110 [ 619.060643][ T153] bridge_slave_1: left allmulticast mode [ 619.060742][ T153] bridge_slave_1: left promiscuous mode [ 619.063080][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.167906][ T153] bridge_slave_0: left allmulticast mode [ 619.167932][ T153] bridge_slave_0: left promiscuous mode [ 619.168192][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.170019][ T8782] input input17: unable to receive magic message: -32 [ 619.272471][ T6662] usb 2-1: USB disconnect, device number 30 [ 619.272485][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 619.554136][ T5118] Bluetooth: hci2: command tx timeout [ 619.656813][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.754620][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.816945][ T153] bond0 (unregistering): Released all slaves [ 621.249610][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'. [ 621.249678][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'. [ 621.624083][ T5118] Bluetooth: hci2: command tx timeout [ 621.739050][ T8905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 624.294116][ T5809] Bluetooth: hci2: command tx timeout [ 624.355703][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.614654][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.681058][ T153] bond0 (unregistering): Released all slaves [ 624.993039][ T8853] chnl_net:caif_netlink_parms(): no params data found [ 625.057644][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.824017][ T153] hsr_slave_0: left promiscuous mode [ 625.863904][ T153] hsr_slave_1: left promiscuous mode [ 625.864791][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.899155][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.063918][ T153] hsr_slave_0: left promiscuous mode [ 626.083886][ T153] hsr_slave_1: left promiscuous mode [ 626.084803][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.135369][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.025716][ T153] team0 (unregistering): Port device team_slave_1 removed [ 627.234567][ T153] team0 (unregistering): Port device team_slave_0 removed [ 627.258351][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 627.276573][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 627.277998][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 627.311015][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 627.331601][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 628.425078][ T153] team0 (unregistering): Port device team_slave_1 removed [ 628.586128][ T153] team0 (unregistering): Port device team_slave_0 removed [ 629.383838][ T5118] Bluetooth: hci3: command tx timeout [ 629.964442][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.964521][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.093303][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.101624][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.101856][ T8853] bridge_slave_0: entered allmulticast mode [ 631.126254][ T8853] bridge_slave_0: entered promiscuous mode [ 631.143191][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.160491][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.160748][ T8853] bridge_slave_1: entered allmulticast mode [ 631.184139][ T8853] bridge_slave_1: entered promiscuous mode [ 631.463900][ T5118] Bluetooth: hci3: command tx timeout [ 631.503796][ T5894] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 631.633705][ T5894] usb 2-1: device descriptor read/64, error -71 [ 631.768704][ T8853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.873654][ T5894] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 631.894934][ T8853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.003865][ T5894] usb 2-1: device descriptor read/64, error -71 [ 632.114074][ T5894] usb usb2-port1: attempt power cycle [ 632.169301][ T8853] team0: Port device team_slave_0 added [ 632.220314][ T8853] team0: Port device team_slave_1 added [ 632.459368][ T5894] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 632.474337][ T5894] usb 2-1: device descriptor read/8, error -71 [ 632.492508][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.492528][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.492559][ T8853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.540912][ T8780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 632.570951][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.570969][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.570995][ T8853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.573481][ T8780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 632.679567][ T8780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 632.733739][ T5894] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 632.741121][ T8780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 632.769513][ T5894] usb 2-1: device descriptor read/8, error -71 [ 632.889034][ T5894] usb usb2-port1: unable to enumerate USB device [ 633.208008][ T8853] hsr_slave_0: entered promiscuous mode [ 633.209256][ T8853] hsr_slave_1: entered promiscuous mode [ 633.496506][ T8787] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 633.541540][ T8787] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 633.543780][ T5118] Bluetooth: hci3: command tx timeout [ 633.588286][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 633.603289][ T8787] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 633.653167][ T8787] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 634.291472][ T8959] sctp: [Deprecated]: syz.1.707 (pid 8959) Use of int in max_burst socket option. [ 634.291472][ T8959] Use struct sctp_assoc_value instead [ 634.703762][ T5986] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 634.867951][ T5986] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 634.867975][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.867990][ T5986] usb 2-1: Product: syz [ 634.868001][ T5986] usb 2-1: Manufacturer: syz [ 634.868012][ T5986] usb 2-1: SerialNumber: syz [ 634.910597][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.910815][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.911411][ T8924] bridge_slave_0: entered allmulticast mode [ 634.913473][ T5986] usb 2-1: config 0 descriptor?? [ 634.928018][ T8924] bridge_slave_0: entered promiscuous mode [ 634.955809][ T5986] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 635.010704][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.011129][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.011481][ T8924] bridge_slave_1: entered allmulticast mode [ 635.058970][ T8924] bridge_slave_1: entered promiscuous mode [ 635.624860][ T5118] Bluetooth: hci3: command tx timeout [ 636.038024][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.572961][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.704021][ T5986] gspca_sunplus: reg_r err -110 [ 636.704127][ T5986] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 637.035072][ T8924] team0: Port device team_slave_0 added [ 637.208766][ T8924] team0: Port device team_slave_1 added [ 637.431491][ T5911] usb 2-1: USB disconnect, device number 35 [ 637.541831][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.541852][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.541884][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.629830][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.629853][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.629884][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.113829][ T5911] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 638.160101][ T8924] hsr_slave_0: entered promiscuous mode [ 638.161707][ T8924] hsr_slave_1: entered promiscuous mode [ 638.162416][ T8924] debugfs: 'hsr0' already exists in 'hsr' [ 638.162435][ T8924] Cannot create hsr debugfs directory [ 638.218930][ T153] bridge_slave_1: left allmulticast mode [ 638.218962][ T153] bridge_slave_1: left promiscuous mode [ 638.219211][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.265821][ T5911] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 638.265852][ T5911] usb 2-1: config 0 has no interface number 0 [ 638.268319][ T5911] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 638.268349][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.268364][ T5911] usb 2-1: Product: syz [ 638.268375][ T5911] usb 2-1: Manufacturer: syz [ 638.268386][ T5911] usb 2-1: SerialNumber: syz [ 638.322458][ T5911] usb 2-1: config 0 descriptor?? [ 638.333270][ T5911] yurex 2-1:0.50: Could not find endpoints [ 638.345967][ T153] bridge_slave_0: left allmulticast mode [ 638.346000][ T153] bridge_slave_0: left promiscuous mode [ 638.346267][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.437653][ T153] bridge_slave_1: left allmulticast mode [ 638.437680][ T153] bridge_slave_1: left promiscuous mode [ 638.437872][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.505140][ T153] bridge_slave_0: left allmulticast mode [ 638.505165][ T153] bridge_slave_0: left promiscuous mode [ 638.505352][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.354615][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.434583][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.496545][ T153] bond0 (unregistering): Released all slaves [ 640.786833][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.875653][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.959440][ T153] bond0 (unregistering): Released all slaves [ 641.044525][ T5911] usb 2-1: USB disconnect, device number 36 [ 641.508524][ T8780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.653002][ T8853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 641.729816][ T8853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 641.864073][ T153] hsr_slave_0: left promiscuous mode [ 641.904151][ T153] hsr_slave_1: left promiscuous mode [ 641.905222][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.934749][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.013917][ T153] hsr_slave_0: left promiscuous mode [ 643.190891][ T153] hsr_slave_1: left promiscuous mode [ 643.191653][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.227219][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.744728][ T153] team0 (unregistering): Port device team_slave_1 removed [ 644.906956][ T153] team0 (unregistering): Port device team_slave_0 removed [ 646.643723][ T5911] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 646.664517][ T153] team0 (unregistering): Port device team_slave_1 removed [ 646.796105][ T5911] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 646.796131][ T5911] usb 2-1: config 0 has no interface number 0 [ 646.798737][ T5911] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 646.798774][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.798790][ T5911] usb 2-1: Product: syz [ 646.798801][ T5911] usb 2-1: Manufacturer: syz [ 646.798812][ T5911] usb 2-1: SerialNumber: syz [ 646.802940][ T5911] usb 2-1: config 0 descriptor?? [ 646.876356][ T5911] yurex 2-1:0.50: Could not find endpoints [ 646.894259][ T153] team0 (unregistering): Port device team_slave_0 removed [ 647.595082][ T8853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 647.639235][ T5911] usb 2-1: USB disconnect, device number 37 [ 647.662103][ T8853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 647.855893][ T8780] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.075554][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.075798][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.089788][ T8787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.131816][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.132055][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.382406][ T9032] netlink: 'syz.1.717': attribute type 10 has an invalid length. [ 648.593986][ T9032] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 648.828708][ T8787] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.862019][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.862237][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.920747][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.921695][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.033730][ T6231] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 649.194524][ T6231] usb 2-1: too many configurations: 131, using maximum allowed: 8 [ 649.233663][ T6231] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 649.233698][ T6231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.233721][ T6231] usb 2-1: Product: syz [ 649.233737][ T6231] usb 2-1: Manufacturer: syz [ 649.233754][ T6231] usb 2-1: SerialNumber: syz [ 649.299586][ T6231] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 649.401226][ T5986] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 649.841193][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.856333][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.939063][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.130391][ T8853] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.216326][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.225729][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.304301][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.304553][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.434740][ T5986] usb 2-1: Service connection timeout for: 259 [ 651.434767][ T5986] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 651.442559][ T6139] usb 2-1: USB disconnect, device number 38 [ 651.475300][ T5986] ath9k_htc: Failed to initialize the device [ 651.477646][ T6139] usb 2-1: ath9k_htc: USB layer deinitialized [ 651.536175][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 651.907099][ T8780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.036500][ T8787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.036840][ T8924] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 652.142938][ T8924] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 652.263727][ T8924] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 652.308462][ T8924] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 654.440241][ T8853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.516180][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.582940][ T8787] veth0_vlan: entered promiscuous mode [ 654.652968][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.711080][ T8787] veth1_vlan: entered promiscuous mode [ 654.765688][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.765916][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.769358][ T8780] veth0_vlan: entered promiscuous mode [ 654.826374][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.828636][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.906654][ T8780] veth1_vlan: entered promiscuous mode [ 655.039168][ T8787] veth0_macvtap: entered promiscuous mode [ 655.070321][ T8787] veth1_macvtap: entered promiscuous mode [ 655.218662][ T8787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.219909][ T8780] veth0_macvtap: entered promiscuous mode [ 655.279766][ T8780] veth1_macvtap: entered promiscuous mode [ 655.293375][ T8787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.354937][ T6024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.379433][ T6024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.382538][ T6024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.414270][ T6024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.439871][ T8780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.567310][ T8780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.676882][ T6024] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.700851][ T6024] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.734124][ T6024] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.801869][ T6024] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.928426][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.928450][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.063192][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.241942][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.241968][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.272540][ T8853] veth0_vlan: entered promiscuous mode [ 658.395221][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.395245][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.455205][ T8853] veth1_vlan: entered promiscuous mode [ 658.575902][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.575927][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.711794][ T8853] veth0_macvtap: entered promiscuous mode [ 658.765985][ T8853] veth1_macvtap: entered promiscuous mode [ 658.948080][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.001400][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.378544][ T45] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.378601][ T45] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.378641][ T45] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.378680][ T45] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.565346][ T8924] veth0_vlan: entered promiscuous mode [ 660.837508][ T9169] program syz.5.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.726347][ T8924] veth1_vlan: entered promiscuous mode [ 667.230730][ T8924] veth0_macvtap: entered promiscuous mode [ 667.239070][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.239094][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.652665][ T8924] veth1_macvtap: entered promiscuous mode [ 667.828927][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.828953][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.939764][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.967757][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.367359][ T6264] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.369090][ T6264] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.369837][ T6264] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.370393][ T6264] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.473179][ T9230] program syz.5.731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.627332][ T6539] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 669.053698][ T6539] usb 8-1: device descriptor read/64, error -71 [ 669.357348][ T5784] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 669.383824][ T6539] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 669.705389][ T6539] usb 8-1: device descriptor read/64, error -71 [ 669.861625][ T6539] usb usb8-port1: attempt power cycle [ 670.403788][ T6539] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 670.424485][ T6539] usb 8-1: device descriptor read/8, error -71 [ 670.743669][ T6539] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 670.773175][ T6539] usb 8-1: device descriptor read/8, error -71 [ 670.874277][ T6539] usb usb8-port1: unable to enumerate USB device [ 671.090015][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.090040][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.215686][ T6139] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 671.364953][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.364979][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.384241][ T6139] usb 6-1: Using ep0 maxpacket: 8 [ 671.401108][ T6139] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 671.401133][ T6139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.430134][ T6139] usb 6-1: config 0 descriptor?? [ 672.315325][ T9264] overlayfs: missing 'lowerdir' [ 674.012396][ T6139] usbhid 6-1:0.0: can't add hid device: -71 [ 674.012530][ T6139] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 674.078137][ T6139] usb 6-1: USB disconnect, device number 2 [ 674.244433][ T9274] netlink: 'syz.6.740': attribute type 11 has an invalid length. [ 674.244456][ T9274] netlink: 116 bytes leftover after parsing attributes in process `syz.6.740'. [ 676.562391][ T9295] FAULT_INJECTION: forcing a failure. [ 676.562391][ T9295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.562434][ T9295] CPU: 1 UID: 0 PID: 9295 Comm: syz.8.743 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 676.562465][ T9295] Tainted: [L]=SOFTLOCKUP [ 676.562474][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.562487][ T9295] Call Trace: [ 676.562496][ T9295] [ 676.562505][ T9295] dump_stack_lvl+0x189/0x250 [ 676.562541][ T9295] ? __pfx____ratelimit+0x10/0x10 [ 676.562576][ T9295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.562606][ T9295] ? __pfx__printk+0x10/0x10 [ 676.562646][ T9295] should_fail_ex+0x46c/0x600 [ 676.562682][ T9295] _copy_to_user+0x31/0xb0 [ 676.562707][ T9295] simple_read_from_buffer+0xe1/0x170 [ 676.562739][ T9295] proc_fail_nth_read+0x1b6/0x220 [ 676.562776][ T9295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 676.562826][ T9295] ? rw_verify_area+0x2ac/0x4e0 [ 676.562858][ T9295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 676.562894][ T9295] vfs_read+0x206/0xa30 [ 676.562936][ T9295] ? __pfx_vfs_read+0x10/0x10 [ 676.562965][ T9295] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 676.563007][ T9295] ? mutex_lock_nested+0x154/0x1d0 [ 676.563037][ T9295] ? fdget_pos+0x253/0x320 [ 676.563071][ T9295] ksys_read+0x14b/0x260 [ 676.563107][ T9295] ? __pfx_ksys_read+0x10/0x10 [ 676.563144][ T9295] ? do_syscall_64+0xbe/0xf80 [ 676.563172][ T9295] do_syscall_64+0xfa/0xf80 [ 676.563196][ T9295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.563218][ T9295] ? clear_bhb_loop+0x60/0xb0 [ 676.563246][ T9295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.563268][ T9295] RIP: 0033:0x7f7c2fc1e15c [ 676.563288][ T9295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 676.563308][ T9295] RSP: 002b:00007f7c2de65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 676.563333][ T9295] RAX: ffffffffffffffda RBX: 00007f7c2fe76090 RCX: 00007f7c2fc1e15c [ 676.563350][ T9295] RDX: 000000000000000f RSI: 00007f7c2de650a0 RDI: 0000000000000007 [ 676.563364][ T9295] RBP: 00007f7c2de65090 R08: 0000000000000000 R09: 0000000000000000 [ 676.563379][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.563393][ T9295] R13: 00007f7c2fe76128 R14: 00007f7c2fe76090 R15: 00007ffe098a4ac8 [ 676.563429][ T9295] [ 678.127107][ T9304] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 680.299899][ T6116] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 681.366474][ T6116] usb 9-1: device descriptor read/64, error -71 [ 681.613020][ T6116] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 681.909366][ T6116] usb 9-1: device descriptor read/64, error -71 [ 682.154783][ T5784] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 682.753676][ T5784] usb 6-1: Using ep0 maxpacket: 8 [ 682.759451][ T5784] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 682.759486][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.759510][ T5784] usb 6-1: Product: syz [ 682.759527][ T5784] usb 6-1: Manufacturer: syz [ 682.759544][ T5784] usb 6-1: SerialNumber: syz [ 682.833804][ T5784] usb 6-1: config 0 descriptor?? [ 682.904176][ T6116] usb usb9-port1: attempt power cycle [ 683.088958][ T5784] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 685.858486][ T5784] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 685.884097][ T5784] usb 6-1: USB disconnect, device number 3 [ 686.404306][ T6209] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 687.073687][ T6209] usb 8-1: Using ep0 maxpacket: 16 [ 687.262452][ T6209] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.262479][ T6209] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.262497][ T6209] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.262530][ T6209] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 687.262547][ T6209] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.368700][ T6209] usb 8-1: config 0 descriptor?? [ 687.974081][ T6209] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 687.974120][ T6209] microsoft 0003:045E:07DA.0009: no inputs found [ 687.974136][ T6209] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 688.101715][ T6209] usb 8-1: USB disconnect, device number 6 [ 688.191798][ T9173] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 688.395089][ T9173] usb 7-1: Using ep0 maxpacket: 16 [ 688.397470][ T9173] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 688.397523][ T9173] usb 7-1: too many endpoints for config 0 interface 0 altsetting 231: 229, using maximum allowed: 30 [ 688.397569][ T9173] usb 7-1: config 0 interface 0 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 688.397600][ T9173] usb 7-1: config 0 interface 0 has no altsetting 1 [ 688.402355][ T9173] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=97.0d [ 688.402389][ T9173] usb 7-1: New USB device strings: Mfr=99, Product=242, SerialNumber=132 [ 688.402412][ T9173] usb 7-1: Product: syz [ 688.402428][ T9173] usb 7-1: Manufacturer: syz [ 688.402445][ T9173] usb 7-1: SerialNumber: syz [ 690.273027][ T9421] fido_id[9421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 690.301915][ T9173] usb 7-1: config 0 descriptor?? [ 690.349729][ T9173] usb-storage 7-1:0.0: USB Mass Storage device detected [ 691.395395][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.395473][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.648087][ T9173] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 691.648189][ T9173] gspca_stv06xx: st6422 sensor detected [ 691.910185][ T9173] STV06xx 7-1:0.0: probe with driver STV06xx failed with error -71 [ 691.945082][ T9173] usb 7-1: USB disconnect, device number 2 [ 692.323697][ T9173] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 692.523677][ T9173] usb 7-1: device descriptor read/64, error -71 [ 692.829451][ T9173] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 692.953693][ T9173] usb 7-1: device descriptor read/64, error -71 [ 693.064395][ T9173] usb usb7-port1: attempt power cycle [ 694.150244][ T9173] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 694.150412][ T6116] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 694.174202][ T9173] usb 7-1: device descriptor read/8, error -71 [ 694.303740][ T6116] usb 2-1: Using ep0 maxpacket: 8 [ 694.311693][ T6116] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 694.311737][ T6116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.311759][ T6116] usb 2-1: Product: syz [ 694.311776][ T6116] usb 2-1: Manufacturer: syz [ 694.311791][ T6116] usb 2-1: SerialNumber: syz [ 694.354566][ T6116] usb 2-1: config 0 descriptor?? [ 694.414034][ T9173] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 694.434457][ T9173] usb 7-1: device descriptor read/8, error -71 [ 694.544261][ T9173] usb usb7-port1: unable to enumerate USB device [ 694.562839][ T6116] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 695.023693][ T9054] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 695.188435][ T9054] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 695.188475][ T9054] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.188496][ T9054] usb 8-1: Product: syz [ 695.188510][ T9054] usb 8-1: Manufacturer: syz [ 695.188524][ T9054] usb 8-1: SerialNumber: syz [ 695.676267][ T9054] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 695.676339][ T9054] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 696.284352][ T6116] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 696.288090][ T6116] usb 2-1: USB disconnect, device number 40 [ 696.332652][ T9054] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 696.332722][ T9054] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 696.377892][ T9054] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 696.465553][ T9054] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 696.521375][ T9054] usb 8-1: USB disconnect, device number 7 [ 697.990400][ T9518] netlink: 76 bytes leftover after parsing attributes in process `syz.1.795'. [ 698.031418][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.796'. [ 699.114473][ T9551] netlink: 44 bytes leftover after parsing attributes in process `syz.7.804'. [ 699.123403][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.168028][ T9550] TCP: TCP_TX_DELAY enabled [ 699.224458][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.514089][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.806'. [ 699.587355][ T66] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.587502][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.806'. [ 699.588188][ T66] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.588234][ T66] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.588283][ T66] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.874782][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 699.983766][ T9566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.547564][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.814'. [ 700.838038][ T9592] Bluetooth: MGMT ver 1.23 [ 700.915741][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.817'. [ 700.965570][ T9591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.545039][ T9612] syzkaller0: entered promiscuous mode [ 701.545070][ T9612] syzkaller0: entered allmulticast mode [ 701.572290][ T9615] netlink: 104 bytes leftover after parsing attributes in process `syz.5.827'. [ 701.893470][ T5118] Bluetooth: hci3: link tx timeout [ 701.895128][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.901314][ T5118] Bluetooth: hci3: link tx timeout [ 701.901335][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.901442][ T5118] Bluetooth: hci3: link tx timeout [ 701.901456][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.901533][ T5118] Bluetooth: hci3: link tx timeout [ 701.901546][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.913622][ T5118] Bluetooth: hci3: link tx timeout [ 701.913644][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.915688][ T5118] Bluetooth: hci3: link tx timeout [ 701.915703][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.915818][ T5118] Bluetooth: hci3: link tx timeout [ 701.915831][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.915963][ T5118] Bluetooth: hci3: link tx timeout [ 701.915976][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.916098][ T5118] Bluetooth: hci3: link tx timeout [ 701.916119][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.916209][ T5118] Bluetooth: hci3: link tx timeout [ 701.916223][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.916331][ T5118] Bluetooth: hci3: link tx timeout [ 701.916344][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.916454][ T5118] Bluetooth: hci3: link tx timeout [ 701.916468][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.916576][ T5118] Bluetooth: hci3: link tx timeout [ 701.916589][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.916676][ T5118] Bluetooth: hci3: link tx timeout [ 701.916690][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.916802][ T5118] Bluetooth: hci3: link tx timeout [ 701.916815][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.916911][ T5118] Bluetooth: hci3: link tx timeout [ 701.916925][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.917104][ T5118] Bluetooth: hci3: link tx timeout [ 701.917124][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.917221][ T5118] Bluetooth: hci3: link tx timeout [ 701.917235][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.917342][ T5118] Bluetooth: hci3: link tx timeout [ 701.917355][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.917474][ T5118] Bluetooth: hci3: link tx timeout [ 701.917487][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.917597][ T5118] Bluetooth: hci3: link tx timeout [ 701.917610][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.917721][ T5118] Bluetooth: hci3: link tx timeout [ 701.917734][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.917833][ T5118] Bluetooth: hci3: link tx timeout [ 701.917846][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.917993][ T5118] Bluetooth: hci3: link tx timeout [ 701.918006][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.918105][ T5118] Bluetooth: hci3: link tx timeout [ 701.918125][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.918239][ T5118] Bluetooth: hci3: link tx timeout [ 701.918253][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.918374][ T5118] Bluetooth: hci3: link tx timeout [ 701.918387][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.918556][ T5118] Bluetooth: hci3: link tx timeout [ 701.918570][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.918670][ T5118] Bluetooth: hci3: link tx timeout [ 701.918683][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.918782][ T5118] Bluetooth: hci3: link tx timeout [ 701.918796][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.918906][ T5118] Bluetooth: hci3: link tx timeout [ 701.918919][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.919041][ T5118] Bluetooth: hci3: link tx timeout [ 701.919054][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.919147][ T5118] Bluetooth: hci3: link tx timeout [ 701.919160][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.919278][ T5118] Bluetooth: hci3: link tx timeout [ 701.919292][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.919401][ T5118] Bluetooth: hci3: link tx timeout [ 701.919414][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.919524][ T5118] Bluetooth: hci3: link tx timeout [ 701.919538][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.919652][ T5118] Bluetooth: hci3: link tx timeout [ 701.919665][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.921964][ T5118] Bluetooth: hci3: link tx timeout [ 701.921980][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.935469][ T5118] Bluetooth: hci3: link tx timeout [ 701.935488][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.935825][ T5118] Bluetooth: hci3: link tx timeout [ 701.935839][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.935962][ T5118] Bluetooth: hci3: link tx timeout [ 701.935976][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.936084][ T5118] Bluetooth: hci3: link tx timeout [ 701.936098][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.936185][ T5118] Bluetooth: hci3: link tx timeout [ 701.936198][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.936305][ T5118] Bluetooth: hci3: link tx timeout [ 701.936318][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.936438][ T5118] Bluetooth: hci3: link tx timeout [ 701.936451][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.936560][ T5118] Bluetooth: hci3: link tx timeout [ 701.936574][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.936702][ T5118] Bluetooth: hci3: link tx timeout [ 701.936716][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.936845][ T5118] Bluetooth: hci3: link tx timeout [ 701.936858][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937042][ T5118] Bluetooth: hci3: link tx timeout [ 701.937056][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937149][ T5118] Bluetooth: hci3: link tx timeout [ 701.937162][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937273][ T5118] Bluetooth: hci3: link tx timeout [ 701.937286][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937384][ T5118] Bluetooth: hci3: link tx timeout [ 701.937398][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937517][ T5118] Bluetooth: hci3: link tx timeout [ 701.937530][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937627][ T5118] Bluetooth: hci3: link tx timeout [ 701.937640][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937715][ T5118] Bluetooth: hci3: link tx timeout [ 701.937728][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937817][ T5118] Bluetooth: hci3: link tx timeout [ 701.937831][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.937970][ T5118] Bluetooth: hci3: link tx timeout [ 701.937983][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.938105][ T5118] Bluetooth: hci3: link tx timeout [ 701.938125][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.938225][ T5118] Bluetooth: hci3: link tx timeout [ 701.938239][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.938362][ T5118] Bluetooth: hci3: link tx timeout [ 701.938375][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.938474][ T5118] Bluetooth: hci3: link tx timeout [ 701.938487][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.938594][ T5118] Bluetooth: hci3: link tx timeout [ 701.938607][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.938713][ T5118] Bluetooth: hci3: link tx timeout [ 701.938727][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 701.941320][ T5118] Bluetooth: hci3: link tx timeout [ 701.941336][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.010774][ T5118] Bluetooth: hci3: link tx timeout [ 702.010795][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.035493][ T5118] Bluetooth: hci3: link tx timeout [ 702.035515][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.035591][ T5118] Bluetooth: hci3: link tx timeout [ 702.035605][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.035717][ T5118] Bluetooth: hci3: link tx timeout [ 702.035731][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.100638][ T5118] Bluetooth: hci3: link tx timeout [ 702.100663][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.100701][ T5118] Bluetooth: hci3: link tx timeout [ 702.100714][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.100851][ T5118] Bluetooth: hci3: link tx timeout [ 702.100871][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.100956][ T5118] Bluetooth: hci3: link tx timeout [ 702.100969][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.101835][ T5118] Bluetooth: hci3: link tx timeout [ 702.101858][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.101939][ T5118] Bluetooth: hci3: link tx timeout [ 702.101952][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.102060][ T5118] Bluetooth: hci3: link tx timeout [ 702.102073][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.102202][ T5118] Bluetooth: hci3: link tx timeout [ 702.102216][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.102350][ T5118] Bluetooth: hci3: link tx timeout [ 702.102364][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.236243][ T5118] Bluetooth: hci3: link tx timeout [ 702.236266][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.236300][ T5118] Bluetooth: hci3: link tx timeout [ 702.236313][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.236429][ T5118] Bluetooth: hci3: link tx timeout [ 702.236442][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.236552][ T5118] Bluetooth: hci3: link tx timeout [ 702.236565][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.236691][ T5118] Bluetooth: hci3: link tx timeout [ 702.236705][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.236824][ T5118] Bluetooth: hci3: link tx timeout [ 702.236847][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.236949][ T5118] Bluetooth: hci3: link tx timeout [ 702.236962][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.238372][ T5118] Bluetooth: hci3: link tx timeout [ 702.238388][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.238457][ T5118] Bluetooth: hci3: link tx timeout [ 702.238471][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.238601][ T5118] Bluetooth: hci3: link tx timeout [ 702.238615][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.238733][ T5118] Bluetooth: hci3: link tx timeout [ 702.238746][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.238852][ T5118] Bluetooth: hci3: link tx timeout [ 702.238866][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.238995][ T5118] Bluetooth: hci3: link tx timeout [ 702.239008][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.239149][ T5118] Bluetooth: hci3: link tx timeout [ 702.239162][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.239272][ T5118] Bluetooth: hci3: link tx timeout [ 702.239285][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.239393][ T5118] Bluetooth: hci3: link tx timeout [ 702.239406][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.239517][ T5118] Bluetooth: hci3: link tx timeout [ 702.239530][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.239638][ T5118] Bluetooth: hci3: link tx timeout [ 702.239652][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.239754][ T5118] Bluetooth: hci3: link tx timeout [ 702.239767][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.243635][ T5118] Bluetooth: hci3: link tx timeout [ 702.243653][ T5118] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 703.628048][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.834'. [ 703.943798][ T5118] Bluetooth: hci3: command 0x0406 tx timeout [ 704.503649][ T37] audit: type=1326 audit(1766065654.431:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.504014][ T37] audit: type=1326 audit(1766065654.441:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.504472][ T37] audit: type=1326 audit(1766065654.441:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.509889][ T37] audit: type=1326 audit(1766065654.441:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.509954][ T37] audit: type=1326 audit(1766065654.441:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.510003][ T37] audit: type=1326 audit(1766065654.441:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.515095][ T37] audit: type=1326 audit(1766065654.451:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.515393][ T37] audit: type=1326 audit(1766065654.451:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.515931][ T37] audit: type=1326 audit(1766065654.451:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 704.515982][ T37] audit: type=1326 audit(1766065654.451:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 705.854028][ T9681] syz.5.850 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 709.544442][ T37] kauditd_printk_skb: 82 callbacks suppressed [ 709.544461][ T37] audit: type=1326 audit(1766065659.481:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.581550][ T37] audit: type=1326 audit(1766065659.491:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.581615][ T37] audit: type=1326 audit(1766065659.511:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.617712][ T37] audit: type=1326 audit(1766065659.551:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.619113][ T37] audit: type=1326 audit(1766065659.551:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.625128][ T37] audit: type=1326 audit(1766065659.561:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.625537][ T37] audit: type=1326 audit(1766065659.561:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.626256][ T37] audit: type=1326 audit(1766065659.561:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.632587][ T37] audit: type=1326 audit(1766065659.561:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.633123][ T37] audit: type=1326 audit(1766065659.561:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 709.832020][ T9705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.862256][ T9705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.139878][ T9705] syz.7.856 (9705) used greatest stack depth: 15704 bytes left [ 711.333783][ T9719] v: renamed from vlan0 [ 711.415831][ T1002] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.419063][ T1002] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.419113][ T1002] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.419162][ T1002] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.661216][ T9759] netlink: 24 bytes leftover after parsing attributes in process `syz.8.869'. [ 716.280202][ T9882] netlink: 160 bytes leftover after parsing attributes in process `syz.6.905'. [ 716.280231][ T9882] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 717.012887][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.8.911'. [ 717.296491][ T9896] ieee802154 phy0 wpan0: encryption failed: -22 [ 717.899822][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 717.899844][ T37] audit: type=1326 audit(1766065667.841:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9911 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 717.900234][ T37] audit: type=1326 audit(1766065667.841:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9911 comm="syz.5.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 718.072141][ T37] audit: type=1326 audit(1766065668.001:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.8.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2fc1f749 code=0x7ffc0000 [ 718.072887][ T37] audit: type=1326 audit(1766065668.001:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.8.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2fc1f749 code=0x7ffc0000 [ 718.120333][ T37] audit: type=1326 audit(1766065668.051:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.8.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2fc1f749 code=0x7ffc0000 [ 718.122282][ T37] audit: type=1326 audit(1766065668.051:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.8.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2fc1f749 code=0x7ffc0000 [ 718.122705][ T37] audit: type=1326 audit(1766065668.051:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.8.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2fc1f749 code=0x7ffc0000 [ 718.123082][ T37] audit: type=1326 audit(1766065668.051:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.8.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2fc1f749 code=0x7ffc0000 [ 718.123461][ T37] audit: type=1326 audit(1766065668.051:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.8.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2fc1f749 code=0x7ffc0000 [ 718.231627][ T37] audit: type=1326 audit(1766065668.061:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9917 comm="syz.8.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2fc1f749 code=0x7ffc0000 [ 718.523760][ T9923] geneve2: entered promiscuous mode [ 718.586545][ T9918] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 719.484146][ T9951] netlink: 'syz.8.934': attribute type 13 has an invalid length. [ 719.636521][ T9951] gretap0: refused to change device tx_queue_len [ 719.637132][ T9951] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 719.701351][ T9956] pimreg: entered allmulticast mode [ 719.809613][ T9958] pimreg: left allmulticast mode [ 722.376157][T10031] program syz.7.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 722.593209][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.963'. [ 723.212626][ T37] kauditd_printk_skb: 94 callbacks suppressed [ 723.212647][ T37] audit: type=1326 audit(1766065673.141:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.212773][ T37] audit: type=1326 audit(1766065673.141:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.317825][ T37] audit: type=1326 audit(1766065673.251:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.318184][ T37] audit: type=1326 audit(1766065673.251:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.318338][ T37] audit: type=1326 audit(1766065673.251:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.318901][ T37] audit: type=1326 audit(1766065673.251:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.321038][ T37] audit: type=1326 audit(1766065673.251:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.321193][ T37] audit: type=1326 audit(1766065673.251:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.350272][ T37] audit: type=1326 audit(1766065673.281:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.350779][ T37] audit: type=1326 audit(1766065673.281:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10056 comm="syz.6.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 723.961837][ T31] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 724.067478][ T31] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 724.306305][T10073] netlink: 'syz.1.977': attribute type 10 has an invalid length. [ 724.306329][T10073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.977'. [ 724.381652][T10078] bond0: (slave syz_tun): Releasing backup interface [ 724.729632][T10078] bond0: (slave bridge0): Releasing backup interface [ 724.775392][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.782527][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.876825][T10078] bridge_slave_0: left allmulticast mode [ 724.876864][T10078] bridge_slave_0: left promiscuous mode [ 724.877127][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.007143][T10078] bridge_slave_1: left allmulticast mode [ 725.007181][T10078] bridge_slave_1: left promiscuous mode [ 725.007433][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.174619][T10078] bond0: (slave bond_slave_0): Releasing backup interface [ 725.320667][T10078] bond0: (slave bond_slave_1): Releasing backup interface [ 725.416027][T10078] team0: Port device team_slave_0 removed [ 725.478598][T10078] team0: Port device team_slave_1 removed [ 725.480897][T10078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.480924][T10078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.516029][T10078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.516098][T10078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.555017][T10078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 725.603734][T10073] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 725.606630][T10073] batman_adv: batadv0: Adding interface: virt_wifi0 [ 725.606650][T10073] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.608218][T10073] batman_adv: batadv0: Interface activated: virt_wifi0 [ 725.954977][T10121] loop7: detected capacity change from 0 to 7 [ 725.965315][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.965740][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 725.977886][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.978009][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.002154][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.002267][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.063070][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.063118][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.069173][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.069290][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.070753][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.070831][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.073964][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.074061][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.074542][T10121] ldm_validate_partition_table(): Disk read failed. [ 726.083702][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.083811][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.084749][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.084832][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.085606][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.085922][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 726.089459][T10121] Dev loop7: unable to read RDB block 0 [ 726.103947][T10121] loop7: unable to read partition table [ 726.104630][T10121] loop7: partition table beyond EOD, truncated [ 726.104684][T10121] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 726.540687][T10135] ip6gretap0: entered promiscuous mode [ 726.600005][T10135] ip6gretap0: left promiscuous mode [ 726.866249][ T9298] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 726.869288][ T9298] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 727.021432][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1006'. [ 727.021465][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1006'. [ 727.021499][T10137] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1006'. [ 727.644657][T10174] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1021'. [ 728.891079][ T37] kauditd_printk_skb: 154 callbacks suppressed [ 728.891101][ T37] audit: type=1326 audit(1766065678.821:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 728.895481][ T37] audit: type=1326 audit(1766065678.821:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 728.916768][T10196] netlink: 'syz.8.1031': attribute type 30 has an invalid length. [ 728.971756][ T37] audit: type=1326 audit(1766065678.901:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 728.972151][ T37] audit: type=1326 audit(1766065678.901:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 728.984568][ T37] audit: type=1326 audit(1766065678.901:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 728.984717][ T37] audit: type=1326 audit(1766065678.911:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 728.987626][ T37] audit: type=1326 audit(1766065678.921:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 728.990666][ T37] audit: type=1326 audit(1766065678.921:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 729.016251][ T37] audit: type=1326 audit(1766065678.931:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 729.021762][ T37] audit: type=1326 audit(1766065678.951:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10193 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 729.303637][T10158] Bluetooth: hci6: command 0x0406 tx timeout [ 729.317474][T10159] Bluetooth: hci5: command 0x0406 tx timeout [ 729.408975][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1034'. [ 730.222279][T10226] ieee802154 phy0 wpan0: encryption failed: -22 [ 730.843298][ T6539] Process accounting resumed [ 731.865895][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'. [ 732.270428][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1054'. [ 734.166431][T10300] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 734.247663][T10300] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1075'. [ 734.754996][T10312] dvmrp0: entered allmulticast mode [ 735.008227][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'. [ 735.266438][T10323] macvtap1: entered promiscuous mode [ 735.266468][T10323] macvtap1: entered allmulticast mode [ 736.529526][T10371] tipc: Started in network mode [ 736.529562][T10371] tipc: Node identity ac14140f, cluster identity 4711 [ 736.567650][T10371] tipc: New replicast peer: 255.255.255.83 [ 736.568362][T10371] tipc: Enabled bearer , priority 10 [ 736.894490][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 736.898380][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 736.898885][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 736.902640][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 736.902854][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 736.996321][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1109'. [ 737.172891][ T1240] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 737.229797][ T1240] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 737.461856][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 737.461877][ T37] audit: type=1326 audit(1766065687.391:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 737.461928][ T37] audit: type=1326 audit(1766065687.391:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 737.462155][ T37] audit: type=1326 audit(1766065687.391:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 737.546649][ T37] audit: type=1326 audit(1766065687.481:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 737.546816][ T37] audit: type=1326 audit(1766065687.481:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 737.688948][ T6539] tipc: Node number set to 2886997007 [ 738.499990][ T9298] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 738.520792][ T9298] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 739.142641][T10440] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1137'. [ 739.371703][T10445] sg_write: data in/out 134244011/7 bytes for SCSI command 0x0-- guessing data in; [ 739.371703][T10445] program syz.7.1138 not setting count and/or reply_len properly [ 739.547691][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 739.736791][ T6539] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 739.765981][ T6539] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 740.112555][ T37] audit: type=1326 audit(1766065690.041:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 740.112898][ T37] audit: type=1326 audit(1766065690.041:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 740.113287][ T37] audit: type=1326 audit(1766065690.041:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 740.187198][ T37] audit: type=1326 audit(1766065690.081:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 740.187266][ T37] audit: type=1326 audit(1766065690.081:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 740.604970][T10472] loop7: detected capacity change from 0 to 7 [ 740.608715][T10470] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1151'. [ 740.630993][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.646468][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.690244][T10472] Dev loop7: unable to read RDB block 7 [ 740.690293][T10472] loop7: unable to read partition table [ 740.690582][T10472] loop7: partition table beyond EOD, truncated [ 740.690602][T10472] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 741.619391][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 742.571482][ T9298] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 742.636880][ T9298] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 743.023938][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1172'. [ 743.650030][T10537] sd 0:0:1:0: device reset [ 743.880919][ T6539] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 743.925241][T10544] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1181'. [ 743.926996][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.927858][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.965320][ T6539] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 744.553620][T10522] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 744.629725][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 745.502567][T10578] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1196'. [ 745.502606][T10578] ksmbd: Unknown IPC event: 4, ignore. [ 746.209012][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 746.209033][ T37] audit: type=1326 audit(1766065696.141:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 746.293826][ T37] audit: type=1326 audit(1766065696.231:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 746.334060][ T37] audit: type=1326 audit(1766065696.271:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 746.335342][ T37] audit: type=1326 audit(1766065696.271:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42d975f783 code=0x7ffc0000 [ 746.340505][ T37] audit: type=1326 audit(1766065696.271:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42d975f783 code=0x7ffc0000 [ 746.340568][ T37] audit: type=1326 audit(1766065696.271:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 746.505643][ T37] audit: type=1326 audit(1766065696.391:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 746.505708][ T37] audit: type=1326 audit(1766065696.391:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 746.505757][ T37] audit: type=1326 audit(1766065696.411:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 746.868035][ T37] audit: type=1326 audit(1766065696.801:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10598 comm="syz.5.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 748.893664][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1231'. [ 748.893700][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1231'. [ 751.181718][T10690] pimreg: entered allmulticast mode [ 751.242073][T10692] pimreg: left allmulticast mode [ 752.177667][T10693] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.618481][T10702] ip6gretap1: entered allmulticast mode [ 752.831012][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.831083][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.969440][T10701] Process accounting resumed [ 752.999891][T10693] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.322346][T10735] netlink: 133536 bytes leftover after parsing attributes in process `syz.1.1258'. [ 753.482110][T10693] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.874954][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 753.874975][ T37] audit: type=1326 audit(1766065703.811:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.875088][ T37] audit: type=1326 audit(1766065703.811:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.875568][ T37] audit: type=1326 audit(1766065703.811:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.875724][ T37] audit: type=1326 audit(1766065703.811:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.877783][ T37] audit: type=1326 audit(1766065703.811:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.878052][ T37] audit: type=1326 audit(1766065703.811:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.878290][ T37] audit: type=1326 audit(1766065703.811:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.878467][ T37] audit: type=1326 audit(1766065703.811:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.878704][ T37] audit: type=1326 audit(1766065703.811:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 753.879071][ T37] audit: type=1326 audit(1766065703.811:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 754.340228][T10693] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.058412][ T66] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.058465][ T66] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.058504][ T66] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.058541][ T66] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.898289][T10785] loop7: detected capacity change from 0 to 7 [ 756.010570][T10785] Dev loop7: unable to read RDB block 7 [ 756.010613][T10785] loop7: unable to read partition table [ 756.010776][T10785] loop7: partition table beyond EOD, truncated [ 756.010839][T10785] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 756.092734][T10790] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.186809][T10792] syz.7.1282 (10792): /proc/10791/oom_adj is deprecated, please use /proc/10791/oom_score_adj instead. [ 756.597612][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1285'. [ 756.883983][T10821] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.032882][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1297'. [ 757.336256][T10838] hub 6-0:1.0: USB hub found [ 757.337910][T10838] hub 6-0:1.0: 1 port detected [ 757.540845][ T1240] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 757.551431][ T1240] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 757.565125][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1305'. [ 757.600628][T10850] ieee802154 phy0 wpan0: encryption failed: -22 [ 759.122613][T10880] ieee802154 phy0 wpan0: encryption failed: -22 [ 759.277847][T10882] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1322'. [ 759.614033][T10897] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1330'. [ 759.781203][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1328'. [ 760.054664][T10913] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.139851][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1336'. [ 760.198993][T10916] team1: entered promiscuous mode [ 760.199025][T10916] team1: entered allmulticast mode [ 760.199677][T10916] 8021q: adding VLAN 0 to HW filter on device team1 [ 760.456848][T10925] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1341'. [ 760.810196][T10943] pimreg: entered allmulticast mode [ 760.899705][T10950] pimreg: left allmulticast mode [ 761.087855][T10954] netlink: 'syz.8.1353': attribute type 4 has an invalid length. [ 761.115484][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1351'. [ 761.344892][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 761.344914][ T37] audit: type=1326 audit(1766065711.281:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10966 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344406f749 code=0x7ffc0000 [ 761.346660][ T37] audit: type=1326 audit(1766065711.281:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10966 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344406f749 code=0x7ffc0000 [ 761.349264][ T37] audit: type=1326 audit(1766065711.281:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10966 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f344406f749 code=0x7ffc0000 [ 761.349382][ T37] audit: type=1326 audit(1766065711.281:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10966 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344406f749 code=0x7ffc0000 [ 761.349551][ T37] audit: type=1326 audit(1766065711.281:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10966 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344406f749 code=0x7ffc0000 [ 761.351052][ T37] audit: type=1326 audit(1766065711.281:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10966 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f344406f749 code=0x7ffc0000 [ 761.518983][ T37] audit: type=1326 audit(1766065711.451:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10966 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344406f749 code=0x7ffc0000 [ 761.519159][ T37] audit: type=1326 audit(1766065711.451:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10966 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344406f749 code=0x7ffc0000 [ 761.900544][T10982] pimreg: entered allmulticast mode [ 761.935371][T10982] pimreg: left allmulticast mode [ 762.253857][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1367'. [ 762.513873][ T31] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 762.550105][ T31] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 762.669053][T11006] lo speed is unknown, defaulting to 1000 [ 762.669141][T11006] lo speed is unknown, defaulting to 1000 [ 762.670132][T11006] lo speed is unknown, defaulting to 1000 [ 762.865729][T11018] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1378'. [ 762.865947][T11018] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1378'. [ 763.059555][T11006] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 763.140432][T11030] netlink: 'syz.6.1384': attribute type 4 has an invalid length. [ 763.310814][ T37] audit: type=1326 audit(1766065713.241:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.6.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 763.312681][ T37] audit: type=1326 audit(1766065713.241:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11037 comm="syz.6.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 763.396528][ T31] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 763.436045][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1388'. [ 763.464290][ T31] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 763.472460][T11006] lo speed is unknown, defaulting to 1000 [ 763.525421][T11006] lo speed is unknown, defaulting to 1000 [ 763.527457][T11006] lo speed is unknown, defaulting to 1000 [ 763.546093][T11006] lo speed is unknown, defaulting to 1000 [ 763.548398][T11006] lo speed is unknown, defaulting to 1000 [ 764.408814][T11063] bridge0: port 3(gretap0) entered blocking state [ 764.411372][T11063] bridge0: port 3(gretap0) entered disabled state [ 764.438846][T11063] gretap0: entered allmulticast mode [ 764.527480][T11063] gretap0: entered promiscuous mode [ 765.166227][T11069] netlink: 'syz.6.1398': attribute type 4 has an invalid length. [ 765.243382][ T9054] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 765.264845][ T9054] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 765.573976][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1409'. [ 765.574013][T11091] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1409'. [ 765.574303][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1409'. [ 765.578724][T11091] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1409'. [ 766.020456][T11105] netlink: 'syz.5.1416': attribute type 4 has an invalid length. [ 766.180402][T11110] pimreg: entered allmulticast mode [ 766.344683][T11119] 9p: Bad value for 'rfdno' [ 766.471579][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 766.471601][ T37] audit: type=1326 audit(1766065716.401:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.471731][ T37] audit: type=1326 audit(1766065716.401:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.524054][ T37] audit: type=1326 audit(1766065716.411:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.524118][ T37] audit: type=1326 audit(1766065716.411:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.524165][ T37] audit: type=1326 audit(1766065716.411:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.524222][ T37] audit: type=1326 audit(1766065716.411:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.524269][ T37] audit: type=1326 audit(1766065716.411:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.524315][ T37] audit: type=1326 audit(1766065716.431:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.524360][ T37] audit: type=1326 audit(1766065716.441:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 766.524408][ T37] audit: type=1326 audit(1766065716.441:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d975f749 code=0x7ffc0000 [ 767.319538][T11150] pimreg: entered allmulticast mode [ 767.544432][T11158] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 767.662471][T11162] 9p: Bad value for 'rfdno' [ 767.825804][T11167] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 767.843930][T11167] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 767.843963][T11167] batman_adv: batadv0: Removing interface: virt_wifi0 [ 768.967716][T11200] netlink: 'syz.5.1455': attribute type 4 has an invalid length. [ 769.162806][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 770.028247][T11237] syzkaller1: entered promiscuous mode [ 770.028277][T11237] syzkaller1: entered allmulticast mode [ 770.274419][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1473'. [ 771.120554][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1480'. [ 771.289044][T11264] netlink: 'syz.1.1482': attribute type 4 has an invalid length. [ 771.817188][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 772.313797][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1492'. [ 772.382119][ T37] kauditd_printk_skb: 67 callbacks suppressed [ 772.382140][ T37] audit: type=1326 audit(1766065722.311:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 772.382279][ T37] audit: type=1326 audit(1766065722.311:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 772.411378][ T37] audit: type=1326 audit(1766065722.341:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 772.443579][ T37] audit: type=1326 audit(1766065722.371:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 772.448898][ T37] audit: type=1326 audit(1766065722.381:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 772.450134][ T37] audit: type=1326 audit(1766065722.381:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 772.466159][ T37] audit: type=1326 audit(1766065722.401:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 772.466426][ T37] audit: type=1326 audit(1766065722.401:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11286 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 773.307356][ T1240] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 773.347102][ T1240] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 773.417054][ T37] audit: type=1326 audit(1766065723.351:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11304 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 773.417383][ T37] audit: type=1326 audit(1766065723.351:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11304 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a03f749 code=0x7ffc0000 [ 773.750294][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1505'. [ 774.352085][ T5784] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 774.383803][ T5784] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 775.121172][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 775.682904][T11358] netlink: 'syz.1.1522': attribute type 4 has an invalid length. [ 775.889653][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1525'. [ 776.574263][T11384] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1533'. [ 776.574293][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1533'. [ 777.011738][T11395] bond1: entered promiscuous mode [ 777.011764][T11395] bond1: entered allmulticast mode [ 777.012233][T11395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.599832][T11413] Process accounting resumed [ 779.002508][T11395] bond1 (unregistering): Released all slaves [ 779.350734][T11456] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1564'. [ 779.820575][T11474] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1571'. [ 780.144892][T11480] /dev/sg0: Can't lookup blockdev [ 780.562728][T11462] Process accounting resumed [ 780.563905][ T1240] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 780.666058][T11495] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1579'. [ 780.703621][ T1240] usb 9-1: device descriptor read/64, error -71 [ 780.943622][ T1240] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 780.978667][T11503] netlink: 'syz.6.1583': attribute type 1 has an invalid length. [ 781.071622][T11507] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1584'. [ 781.086773][ T1240] usb 9-1: device descriptor read/64, error -71 [ 781.101404][T11507] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.102522][T11507] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.194660][ T1240] usb usb9-port1: attempt power cycle [ 781.259011][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1587'. [ 781.545543][ T1240] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 781.566008][ T1240] usb 9-1: device descriptor read/8, error -71 [ 781.803656][ T1240] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 781.826643][ T1240] usb 9-1: device descriptor read/8, error -71 [ 781.934312][ T1240] usb usb9-port1: unable to enumerate USB device [ 782.171377][T11527] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1593'. [ 782.362697][T11522] Process accounting resumed [ 782.499075][ T37] kauditd_printk_skb: 80 callbacks suppressed [ 782.499096][ T37] audit: type=1326 audit(1766065732.431:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 782.500779][ T37] audit: type=1326 audit(1766065732.431:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 782.502666][ T37] audit: type=1326 audit(1766065732.431:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 782.502812][ T37] audit: type=1326 audit(1766065732.431:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 782.502978][ T37] audit: type=1326 audit(1766065732.431:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 782.503434][ T37] audit: type=1326 audit(1766065732.431:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 782.642579][ T37] audit: type=1326 audit(1766065732.571:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 782.643750][ T37] audit: type=1326 audit(1766065732.571:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.6.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5c15f749 code=0x7ffc0000 [ 782.794515][T11540] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1599'. [ 783.247449][T11556] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1606'. [ 784.088027][T11581] netlink: 'syz.1.1614': attribute type 7 has an invalid length. [ 784.364418][T11592] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1620'. [ 784.477980][T11586] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 784.478005][T11586] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11586, name: syz.1.1617 [ 784.478027][T11586] preempt_count: 2, expected: 0 [ 784.478039][T11586] RCU nest depth: 1, expected: 1 [ 784.478058][T11586] 3 locks held by syz.1.1617/11586: [ 784.478072][T11586] #0: ffff888038c98e18 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xd40 [ 784.478154][T11586] #1: ffffffff8d5ae8c0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 784.478218][T11586] #2: ffff8880b883fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1400 [ 784.478288][T11586] Preemption disabled at: [ 784.478295][T11586] [] __slab_alloc+0xea/0x1f0 [ 784.478334][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.1.1617 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 784.478367][T11586] Tainted: [L]=SOFTLOCKUP [ 784.478376][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.478392][T11586] Call Trace: [ 784.478402][T11586] [ 784.478412][T11586] dump_stack_lvl+0x189/0x250 [ 784.478450][T11586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.478482][T11586] ? __pfx__printk+0x10/0x10 [ 784.478508][T11586] ? print_lock_name+0xde/0x100 [ 784.478545][T11586] ? __slab_alloc+0xea/0x1f0 [ 784.478573][T11586] __might_resched+0x44b/0x5d0 [ 784.478615][T11586] ? __slab_alloc+0xea/0x1f0 [ 784.478640][T11586] ? __pfx___might_resched+0x10/0x10 [ 784.478668][T11586] ? ___slab_alloc+0x12f/0x1400 [ 784.478696][T11586] ? __lock_acquire+0x6b6/0x2cf0 [ 784.478739][T11586] rt_spin_lock+0xc7/0x3e0 [ 784.478776][T11586] ? __pfx_rt_spin_lock+0x10/0x10 [ 784.478807][T11586] ? __lock_acquire+0x6b6/0x2cf0 [ 784.478843][T11586] ? __lock_acquire+0x6b6/0x2cf0 [ 784.478877][T11586] ___slab_alloc+0x12f/0x1400 [ 784.478909][T11586] ? unwind_next_frame+0xa5/0x23d0 [ 784.478941][T11586] ? __bpf_stream_push_str+0xa8/0x2b0 [ 784.478972][T11586] __slab_alloc+0xc6/0x1f0 [ 784.478998][T11586] ? __bpf_stream_push_str+0xa8/0x2b0 [ 784.479025][T11586] kmalloc_nolock_noprof+0x1be/0x440 [ 784.479060][T11586] ? __bpf_stream_push_str+0xa8/0x2b0 [ 784.479088][T11586] __bpf_stream_push_str+0xa8/0x2b0 [ 784.479109][T11586] ? __asan_memcpy+0x40/0x70 [ 784.479141][T11586] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 784.479176][T11586] bpf_stream_stage_printk+0x14e/0x1c0 [ 784.479199][T11586] ? __pfx_find_from_stack_cb+0x10/0x10 [ 784.479230][T11586] ? arch_bpf_stack_walk+0x112/0x170 [ 784.479270][T11586] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 784.479301][T11586] ? stack_trace_save+0x9c/0xe0 [ 784.479340][T11586] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 784.479366][T11586] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 784.479390][T11586] ? irqentry_exit+0x5dd/0x660 [ 784.479412][T11586] ? trace_irq_disable+0x37/0x100 [ 784.479451][T11586] ? read_tsc+0x9/0x20 [ 784.479479][T11586] bpf_check_timed_may_goto+0xaa/0xb0 [ 784.479506][T11586] arch_bpf_timed_may_goto+0x21/0x40 [ 784.479537][T11586] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 784.479563][T11586] bpf_trace_run9+0x450/0x510 [ 784.479593][T11586] ? bpf_trace_run9+0x1ec/0x510 [ 784.479631][T11586] ? __pfx_bpf_trace_run9+0x10/0x10 [ 784.479685][T11586] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 784.479729][T11586] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 784.479764][T11586] ? __alloc_skb+0x2f1/0x430 [ 784.479813][T11586] ? __local_bh_enable+0x28c/0x410 [ 784.479849][T11586] virtio_transport_alloc_skb+0x10af/0x1110 [ 784.479904][T11586] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 784.479944][T11586] ? rt_spin_unlock+0x150/0x200 [ 784.479981][T11586] virtio_transport_send_pkt_info+0x694/0x10b0 [ 784.480036][T11586] virtio_transport_connect+0xa7/0x100 [ 784.480068][T11586] ? __pfx_virtio_transport_connect+0x10/0x10 [ 784.480104][T11586] ? __pfx_vsock_auto_bind+0x10/0x10 [ 784.480141][T11586] ? vsock_assign_transport+0x672/0x7f0 [ 784.480180][T11586] vsock_connect+0xaca/0xd40 [ 784.480228][T11586] ? __might_fault+0xb0/0x130 [ 784.480263][T11586] ? __pfx_vsock_connect+0x10/0x10 [ 784.480303][T11586] ? __pfx_autoremove_wake_function+0x10/0x10 [ 784.480344][T11586] ? bpf_lsm_socket_connect+0x9/0x20 [ 784.480379][T11586] __sys_connect+0x323/0x450 [ 784.480409][T11586] ? __pfx___sys_connect+0x10/0x10 [ 784.480448][T11586] ? rcu_is_watching+0x15/0xb0 [ 784.480481][T11586] __x64_sys_connect+0x7a/0x90 [ 784.480511][T11586] do_syscall_64+0xfa/0xf80 [ 784.480536][T11586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.480559][T11586] ? clear_bhb_loop+0x60/0xb0 [ 784.480589][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.480621][T11586] RIP: 0033:0x7f557a03f749 [ 784.480644][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.480667][T11586] RSP: 002b:00007f55782a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 784.480692][T11586] RAX: ffffffffffffffda RBX: 00007f557a295fa0 RCX: 00007f557a03f749 [ 784.480711][T11586] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 784.480726][T11586] RBP: 00007f557a0c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 784.480739][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.480753][T11586] R13: 00007f557a296038 R14: 00007f557a295fa0 R15: 00007ffcbe481ac8 [ 784.480791][T11586] [ 784.534842][T11594] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !