last executing test programs: 7m22.330111079s ago: executing program 3 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "71858435", 'N_3\t\x00\x00\x008'}, 0x38) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRESOCT, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000740)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x29, 0x23, 0xb3, 0x101, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x700, 0x5, 0x9}}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)='h#i', 0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048804}, 0x0) 7m21.150256018s ago: executing program 3 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 7m19.556415229s ago: executing program 3 (id=177): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe800000000000"], 0x190) syz_emit_ethernet(0x5e, &(0x7f0000000dc0)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @empty}}}}}}}, 0x0) 7m18.133420785s ago: executing program 3 (id=179): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 7m15.738803683s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 7m4.535222326s ago: executing program 3 (id=189): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x40f, 0x0) cachestat(r2, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000fc0)={0x5e, 0xffdd, 0x8, 0xf, 0x8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) write(r6, 0x0, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r1, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 6m49.266584022s ago: executing program 32 (id=189): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x40f, 0x0) cachestat(r2, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000fc0)={0x5e, 0xffdd, 0x8, 0xf, 0x8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) write(r6, 0x0, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r1, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 6m41.92242992s ago: executing program 0 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 6m37.848100382s ago: executing program 0 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close(r1) 6m36.850674214s ago: executing program 0 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 6m35.43210998s ago: executing program 0 (id=220): io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 6m34.20223236s ago: executing program 2 (id=222): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x51) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$media(0x0, 0xa, 0x41) unshare(0x62040200) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x40010, r0, 0xffffc000) r5 = socket(0x2b, 0x1, 0x1) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x1, 0x6, 0xd]}, &(0x7f0000000140)=0x54) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmmsg$alg(r4, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="48000000000000001701000002000000330000002aa52517cc6b2518a3e28acdd9d52b604a30fa4c64d7531a3c92f0f0568c83e4ea19e7667397e93988bed27e11a12078071091000147f51913a4b2495c67a2c845e925284932a7b7a81c2cfeb6ea1be360837fc5d162a2bf43920e06e58843e02eaf90b34bca9f3decf3b9"], 0x48, 0x8010}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x78, "a6ee7dec98be9583ca071020c09e4a2a714e97db73b44faf3e37a9adfeb5b3509855df3fbec291802d222b4e70d916a5dce8e008b4590425064dd9e945eb2b644a2f9fcb8d5838b59e4ff7f936aa74e36cbbbbd9b4076f0e8267aa2a561e3055a6bcd1064cd363d8f87e22c144f67752402017b237655891"}, &(0x7f0000000440)=0x80) 6m33.073492757s ago: executing program 0 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 6m32.926390971s ago: executing program 2 (id=224): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r2, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r3], 0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) poll(0x0, 0x0, 0x8) 6m30.735060603s ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 6m30.418398553s ago: executing program 2 (id=226): openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x26e1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r4, 0x0, r4, &(0x7f0000000200)='.\x02\x00', 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "2d54354af03386ecf456b884349f50149c95934eed5e01e14d78355bba6084e9", "54ea863df4026e444381dee636021d971e1b04842202ccb1ce3c9476d716876a", "983f15b402087334af987c60656422751b5193053cae6b9216b9c459844c0619", "a080b2a767fc2ce0063705d106e0bdabce678cae824f23f058fb63a34bdb01f9", "74b6c599c3dffa3d29d5c8462785711849aa5add0d1ad187a0ef5719788b2c50", "a3e430b0b2d79d3a89651800", 0x7f, 0x2, 0x101, 0x2, 0x7}}) userfaultfd(0x801) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 6m28.576761512s ago: executing program 2 (id=228): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40801) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000140)={0x7, 0x1, 0x5, 0x100001, 0x6a, 0x8, 0x4}) epoll_create1(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x8eaf6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x2, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) 6m25.686352936s ago: executing program 2 (id=230): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 6m24.288993652s ago: executing program 2 (id=231): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x51) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$media(0x0, 0xa, 0x41) unshare(0x62040200) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x40010, r0, 0xffffc000) r5 = socket(0x2b, 0x1, 0x1) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x1, 0x6, 0xd]}, &(0x7f0000000140)=0x54) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmmsg$alg(r4, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="48000000000000001701000002000000330000002aa52517cc6b2518a3e28acdd9d52b604a30fa4c64d7531a3c92f0f0568c83e4ea19e7667397e93988bed27e11a12078071091000147f51913a4b2495c67a2c845e925284932a7b7a81c2cfeb6ea1be360837fc5d162a2bf43920e06e58843e02eaf90b34bca9f3decf3b9"], 0x48, 0x8010}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x78, "a6ee7dec98be9583ca071020c09e4a2a714e97db73b44faf3e37a9adfeb5b3509855df3fbec291802d222b4e70d916a5dce8e008b4590425064dd9e945eb2b644a2f9fcb8d5838b59e4ff7f936aa74e36cbbbbd9b4076f0e8267aa2a561e3055a6bcd1064cd363d8f87e22c144f67752402017b237655891"}, &(0x7f0000000440)=0x80) 6m15.410143249s ago: executing program 33 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 6m8.90390528s ago: executing program 34 (id=231): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x51) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$media(0x0, 0xa, 0x41) unshare(0x62040200) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x40010, r0, 0xffffc000) r5 = socket(0x2b, 0x1, 0x1) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x1, 0x6, 0xd]}, &(0x7f0000000140)=0x54) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmmsg$alg(r4, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="48000000000000001701000002000000330000002aa52517cc6b2518a3e28acdd9d52b604a30fa4c64d7531a3c92f0f0568c83e4ea19e7667397e93988bed27e11a12078071091000147f51913a4b2495c67a2c845e925284932a7b7a81c2cfeb6ea1be360837fc5d162a2bf43920e06e58843e02eaf90b34bca9f3decf3b9"], 0x48, 0x8010}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x78, "a6ee7dec98be9583ca071020c09e4a2a714e97db73b44faf3e37a9adfeb5b3509855df3fbec291802d222b4e70d916a5dce8e008b4590425064dd9e945eb2b644a2f9fcb8d5838b59e4ff7f936aa74e36cbbbbd9b4076f0e8267aa2a561e3055a6bcd1064cd363d8f87e22c144f67752402017b237655891"}, &(0x7f0000000440)=0x80) 4m40.596178605s ago: executing program 1 (id=296): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x41, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={0x0}, 0x1) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000080) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26", 0x3c, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) 4m32.057366519s ago: executing program 1 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4m29.756185373s ago: executing program 1 (id=307): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m20.523923979s ago: executing program 1 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4m7.804474717s ago: executing program 1 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4m5.410236204s ago: executing program 1 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000045, 0x0, 0x0) mremap(&(0x7f0000401000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00003d5000/0x2000)=nil) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/comedi4\x00', 0x80040, 0x0) ioctl$COMEDI_CMDTEST(r4, 0x8050640a, &(0x7f0000001f40)={0x0, 0x8, 0x4, 0x3, 0x40, 0x6, 0x40, 0x7fff, 0x40, 0x6, 0x0, 0x5, &(0x7f0000001e80)=[0x2], 0x1, 0x0}) 3m49.302675301s ago: executing program 35 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000045, 0x0, 0x0) mremap(&(0x7f0000401000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00003d5000/0x2000)=nil) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/comedi4\x00', 0x80040, 0x0) ioctl$COMEDI_CMDTEST(r4, 0x8050640a, &(0x7f0000001f40)={0x0, 0x8, 0x4, 0x3, 0x40, 0x6, 0x40, 0x7fff, 0x40, 0x6, 0x0, 0x5, &(0x7f0000001e80)=[0x2], 0x1, 0x0}) 34.376530057s ago: executing program 6 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, 0x0, 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 32.194363286s ago: executing program 6 (id=489): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1a6}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f, 0x0]}}, 0x0, 0x5b}, 0x28) 23.716544339s ago: executing program 6 (id=494): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="c21a038be9adfd4d4cd3cf577c94291ed2f50b41a2b23eda38d27a30ae6f8ee336e9b87e328958a94e4df5a2b1cf40c9deb5629bd01283301da5081397ec5caf86f7a0b01f", 0x45}, {&(0x7f0000000140)="1a87631d5c40a362", 0x8}, {&(0x7f0000000180)="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", 0xded}, {&(0x7f0000001180)}, {&(0x7f0000003900)="29a362fdc407", 0x6}], 0x5, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@iv={0x18}, @op={0x18}], 0x30, 0x480c4}], 0x2, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000002480)={0x4, 0x9, 0x1}) r4 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000606000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f00000039c0)=""/204) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.436460602s ago: executing program 7 (id=495): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2002b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x802, 0x1}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = io_uring_setup(0x2dfd, 0x0) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43ba, 0x80, 0x0, 0x34f}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) r4 = socket(0x2d, 0x2, 0x0) connect$qrtr(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000240)="27050200340f3c00060f2f2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000000000000080", 0x48}], 0x1}, 0x9cdc2384056f013d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) 18.257634094s ago: executing program 4 (id=498): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x804c}, 0x24044804) 16.024241796s ago: executing program 6 (id=499): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10, 0x1}, {0x7, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x5}}]}}, &(0x7f0000000280)=""/235, 0x4e, 0xeb, 0x1}, 0x28) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10) 14.445388356s ago: executing program 7 (id=502): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc55e6ba4e", 0x6}], 0x2, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x44, 0x2}]}}}], 0x18}, 0x0) 13.852247975s ago: executing program 7 (id=503): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 13.644032082s ago: executing program 5 (id=504): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="150004000400000003030000918a76e1efa19e910500"], 0x44}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc55e6ba4e", 0x6}], 0x2, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x44, 0x2}]}}}], 0x18}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "4b7e8881a8bd685c87161b5536249a03"}]}, 0x44}}, 0x1) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 13.545317885s ago: executing program 4 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x40) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x24044884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) 11.924857087s ago: executing program 6 (id=506): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) 9.492097655s ago: executing program 5 (id=507): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="150004000400000003030000918a76e1efa19e910500"], 0x44}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc55e6ba4e", 0x6}], 0x2, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x44, 0x2}]}}}], 0x18}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "4b7e8881a8bd685c87161b5536249a03"}]}, 0x44}}, 0x1) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 9.396257518s ago: executing program 7 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x9, 0xfffffffffffffff2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") creat(0x0, 0x6) 9.34552604s ago: executing program 4 (id=509): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x41, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={0x0}, 0x1) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000080) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) open(0x0, 0x80242, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) gettid() timer_create(0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) 8.131338149s ago: executing program 5 (id=510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x41, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={0x0}, 0x1) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000080) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) open(0x0, 0x80242, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) gettid() timer_create(0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) 7.962926864s ago: executing program 4 (id=511): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000340), 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) r5 = io_uring_setup(0x7a98, &(0x7f0000000080)={0x0, 0x6d47, 0x0, 0x0, 0x35e}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, &(0x7f00000002c0)=[0x2, 0xffff], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x7, 0x2) 5.828811353s ago: executing program 4 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, 0x0, 0x38}}], 0x1, 0x40000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 3.675523662s ago: executing program 7 (id=513): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="150004000400000003030000918a76e1efa19e910500"], 0x44}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc55e6ba4e", 0x6}], 0x2, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x44, 0x2}]}}}], 0x18}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "4b7e8881a8bd685c87161b5536249a03"}]}, 0x44}}, 0x1) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0, 0x0) 3.634341573s ago: executing program 5 (id=514): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x150, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd64df33832dd637a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xffff}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}}}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.777087233s ago: executing program 6 (id=515): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="150004000400000003030000918a76e1efa19e910500"], 0x44}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc55e6ba4e", 0x6}], 0x2, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x44, 0x2}]}}}], 0x18}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "4b7e8881a8bd685c87161b5536249a03"}]}, 0x44}}, 0x1) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 1.609918028s ago: executing program 4 (id=516): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 1.380269425s ago: executing program 5 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x40) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x24044884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) 14.770279ms ago: executing program 5 (id=518): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(r1, 0x800) accept(r1, 0x0, &(0x7f00000000c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 0s ago: executing program 7 (id=519): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 81.278344][ T5760] cgroup: Unknown subsys name 'net' [ 81.420608][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.094037][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.308853][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.322461][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.330292][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.361858][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.369773][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.377316][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.414973][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.431700][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.441420][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.451872][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.462107][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.470791][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.493692][ T5081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.512268][ T5081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.534311][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.548226][ T5081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.572382][ T5081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.572769][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.587047][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.596847][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.606125][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.623137][ T5081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.631623][ T5081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.639076][ T5081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.026232][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 86.132454][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 86.228225][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 86.255850][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.309630][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.317993][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.326042][ T5772] bridge_slave_0: entered allmulticast mode [ 86.333816][ T5772] bridge_slave_0: entered promiscuous mode [ 86.349150][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.358583][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.366722][ T5772] bridge_slave_1: entered allmulticast mode [ 86.374571][ T5772] bridge_slave_1: entered promiscuous mode [ 86.425246][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.464276][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.486006][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.493314][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.500518][ T5779] bridge_slave_0: entered allmulticast mode [ 86.508577][ T5779] bridge_slave_0: entered promiscuous mode [ 86.548469][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.555856][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.566063][ T5779] bridge_slave_1: entered allmulticast mode [ 86.573329][ T5779] bridge_slave_1: entered promiscuous mode [ 86.642922][ T5772] team0: Port device team_slave_0 added [ 86.673474][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.682943][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.690154][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.700106][ T5783] bridge_slave_0: entered allmulticast mode [ 86.707491][ T5783] bridge_slave_0: entered promiscuous mode [ 86.716764][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.724080][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.732184][ T5783] bridge_slave_1: entered allmulticast mode [ 86.739977][ T5783] bridge_slave_1: entered promiscuous mode [ 86.748078][ T5772] team0: Port device team_slave_1 added [ 86.767027][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.812841][ T5779] team0: Port device team_slave_0 added [ 86.819434][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.827117][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.837519][ T5776] bridge_slave_0: entered allmulticast mode [ 86.844743][ T5776] bridge_slave_0: entered promiscuous mode [ 86.878581][ T5779] team0: Port device team_slave_1 added [ 86.896978][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.907204][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.914660][ T5776] bridge_slave_1: entered allmulticast mode [ 86.922226][ T5776] bridge_slave_1: entered promiscuous mode [ 86.960831][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.973160][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.980175][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.007477][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.026743][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.036545][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.067366][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.132691][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.149051][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.175454][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.187277][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.217851][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.232332][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.279290][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.291263][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.323061][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.422496][ T5081] Bluetooth: hci0: command tx timeout [ 87.437418][ T5776] team0: Port device team_slave_0 added [ 87.447322][ T5783] team0: Port device team_slave_0 added [ 87.464247][ T5772] hsr_slave_0: entered promiscuous mode [ 87.477827][ T5772] hsr_slave_1: entered promiscuous mode [ 87.500667][ T5776] team0: Port device team_slave_1 added [ 87.506884][ T5081] Bluetooth: hci1: command tx timeout [ 87.531088][ T5783] team0: Port device team_slave_1 added [ 87.569337][ T5779] hsr_slave_0: entered promiscuous mode [ 87.577629][ T5779] hsr_slave_1: entered promiscuous mode [ 87.585366][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.593398][ T5779] Cannot create hsr debugfs directory [ 87.626394][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.633659][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.660848][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.672073][ T5081] Bluetooth: hci2: command tx timeout [ 87.677726][ T5081] Bluetooth: hci3: command tx timeout [ 87.699411][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.707292][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.733699][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.747624][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.755070][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.791362][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.827243][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.834316][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.860342][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.008503][ T5783] hsr_slave_0: entered promiscuous mode [ 88.015860][ T5783] hsr_slave_1: entered promiscuous mode [ 88.022748][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.030320][ T5783] Cannot create hsr debugfs directory [ 88.098449][ T5776] hsr_slave_0: entered promiscuous mode [ 88.106307][ T5776] hsr_slave_1: entered promiscuous mode [ 88.113153][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.120750][ T5776] Cannot create hsr debugfs directory [ 88.424808][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.457367][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.469135][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.502583][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.581934][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.595478][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.627916][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.638853][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.699090][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.716416][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.734013][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.748179][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.834219][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.845384][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.866541][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.894842][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.948439][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.026324][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.087044][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.106042][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.113493][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.130212][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.137425][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.235796][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.264433][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.286210][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.293469][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.328515][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.364964][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.372229][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.414253][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.437924][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.445145][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.501644][ T51] Bluetooth: hci0: command tx timeout [ 89.510867][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.553823][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.561051][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.573874][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.581093][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.589284][ T51] Bluetooth: hci1: command tx timeout [ 89.605637][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.612861][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.715112][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.757754][ T51] Bluetooth: hci3: command tx timeout [ 89.757767][ T5081] Bluetooth: hci2: command tx timeout [ 89.898760][ T5772] veth0_vlan: entered promiscuous mode [ 89.930749][ T5772] veth1_vlan: entered promiscuous mode [ 90.056794][ T5772] veth0_macvtap: entered promiscuous mode [ 90.094529][ T5772] veth1_macvtap: entered promiscuous mode [ 90.136385][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.175331][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.200422][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.224072][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.235370][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.246894][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.293905][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.459329][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.505135][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.529290][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.541715][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.598491][ T5779] veth0_vlan: entered promiscuous mode [ 90.630895][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.641961][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.644263][ T5779] veth1_vlan: entered promiscuous mode [ 90.729836][ T5783] veth0_vlan: entered promiscuous mode [ 90.780731][ T5783] veth1_vlan: entered promiscuous mode [ 90.853486][ T5776] veth0_vlan: entered promiscuous mode [ 90.925370][ T5779] veth0_macvtap: entered promiscuous mode [ 90.935636][ T5783] veth0_macvtap: entered promiscuous mode [ 90.955263][ T5776] veth1_vlan: entered promiscuous mode [ 92.911209][ C1] sched: RT throttling activated [ 92.938162][ T27] cfg80211: failed to load regulatory.db [ 92.941621][ T5081] Bluetooth: hci0: command tx timeout [ 93.107947][ T5081] Bluetooth: hci1: command tx timeout [ 93.113544][ T5081] Bluetooth: hci3: command tx timeout [ 93.118993][ T5081] Bluetooth: hci2: command tx timeout [ 93.166530][ T5779] veth1_macvtap: entered promiscuous mode [ 93.213646][ T5783] veth1_macvtap: entered promiscuous mode [ 93.271090][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.294256][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.310413][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.370274][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.389479][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.413657][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.425406][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.437853][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.448633][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.459582][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.476870][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.489161][ T5776] veth0_macvtap: entered promiscuous mode [ 93.504281][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.516147][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.525629][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.534706][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.555724][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.567051][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.577602][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.589696][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.602213][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.615335][ T5776] veth1_macvtap: entered promiscuous mode [ 93.668934][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.679264][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.688743][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.698994][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.786842][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.799397][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.814930][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.827688][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.844965][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.858406][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.875274][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.887122][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.898134][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.908778][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.920338][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.932404][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.943377][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.956199][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.981049][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.994886][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004169][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.018062][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.170229][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.183281][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.195750][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.203220][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.281616][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.289515][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.395668][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.291576][ T5774] Bluetooth: hci2: command tx timeout [ 96.291595][ T5081] Bluetooth: hci3: command tx timeout [ 96.297093][ T5774] Bluetooth: hci1: command tx timeout [ 96.302514][ T51] Bluetooth: hci0: command tx timeout [ 96.356905][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.502394][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.510287][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.747007][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.865996][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.607975][ T5851] input: syz0 as /devices/virtual/input/input5 [ 97.848269][ T5854] syz.0.7[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.877364][ T5854] loop0: detected capacity change from 0 to 1764 [ 98.002180][ T5848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.376002][ T5858] Zero length message leads to an empty skb [ 98.693113][ T5854] netlink: 'syz.0.7': attribute type 11 has an invalid length. [ 98.700859][ T5854] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7'. [ 98.735001][ T5854] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 98.931953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.061391][ T5868] loop3: detected capacity change from 0 to 1764 [ 101.793099][ T5868] netlink: 'syz.3.11': attribute type 11 has an invalid length. [ 101.801413][ T5868] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.11'. [ 101.814366][ T5868] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 106.053212][ T5885] loop3: detected capacity change from 0 to 16 [ 106.060516][ T5885] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 106.883902][ T5888] loop0: detected capacity change from 0 to 64 [ 106.948937][ T5888] hfs: unable to parse mount options [ 109.143218][ T5897] loop0: detected capacity change from 0 to 16 [ 109.150567][ T5897] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 112.476335][ T5906] loop1: detected capacity change from 0 to 1764 [ 114.291875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 114.701560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 115.084315][ T5904] loop0: detected capacity change from 0 to 32768 [ 115.206834][ T5906] netlink: 'syz.1.15': attribute type 11 has an invalid length. [ 115.215108][ T5906] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.15'. [ 115.232141][ T5906] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 116.851791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 117.544527][ T5920] loop2: detected capacity change from 0 to 16 [ 117.551920][ T5920] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 120.330169][ T5930] loop2: detected capacity change from 0 to 16 [ 120.338611][ T5930] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 121.186252][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27'. [ 121.476687][ T5939] loop2: detected capacity change from 0 to 1764 [ 122.226102][ T5941] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 123.209167][ T5949] overlayfs: missing 'lowerdir' [ 123.375324][ T5953] loop3: detected capacity change from 0 to 16 [ 123.406024][ T5951] loop1: detected capacity change from 0 to 1764 [ 123.430490][ T5953] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 123.476051][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 125.627579][ T5958] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 125.980928][ T5957] netlink: 'syz.1.25': attribute type 11 has an invalid length. [ 126.002942][ T5957] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.25'. [ 127.091915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 127.501512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.489145][ T5972] loop1: detected capacity change from 0 to 64 [ 128.512099][ T5972] hfs: unable to parse mount options [ 129.476548][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.603375][ T5981] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 129.705722][ T23] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 129.733214][ T23] usb 2-1: config 0 has no interfaces? [ 129.745707][ T23] usb 2-1: config 0 has no interfaces? [ 129.764016][ T23] usb 2-1: config 0 has no interfaces? [ 129.771900][ T23] usb 2-1: config 0 has no interfaces? [ 129.782620][ T23] usb 2-1: config 0 has no interfaces? [ 131.691358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.019271][ T5988] loop0: detected capacity change from 0 to 1764 [ 132.031528][ T23] usb 2-1: config 0 has no interfaces? [ 132.072852][ T23] usb 2-1: config 0 has no interfaces? [ 132.092295][ T23] usb 2-1: config 0 has no interfaces? [ 132.112015][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 132.121779][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 132.129998][ T23] usb 2-1: Product: syz [ 132.134563][ T23] usb 2-1: Manufacturer: syz [ 132.139205][ T23] usb 2-1: SerialNumber: syz [ 132.154738][ T23] usb 2-1: config 0 descriptor?? [ 132.320224][ T9] usb 2-1: USB disconnect, device number 2 [ 134.629539][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.638927][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.081395][ T6002] netlink: 'syz.2.45': attribute type 11 has an invalid length. [ 135.093060][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.110504][ T6002] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.45'. [ 137.331274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 142.451814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 145.011900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 147.804952][ T6048] loop2: detected capacity change from 0 to 16 [ 147.814053][ T6048] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 150.264865][ T6058] warning: `syz.0.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.703917][ T6061] netlink: 'syz.0.59': attribute type 11 has an invalid length. [ 151.711731][ T6061] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.59'. [ 158.675672][ T6086] loop3: detected capacity change from 0 to 1764 [ 159.494115][ T6086] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 161.330373][ T6099] loop0: detected capacity change from 0 to 64 [ 161.541864][ T6099] hfs: unable to parse mount options [ 162.611367][ T5785] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.627498][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'. [ 172.140663][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 179.397251][ T6177] netlink: 'syz.1.88': attribute type 21 has an invalid length. [ 179.885064][ T6180] IPVS: length: 24 != 67608 [ 184.704390][ T6199] loop2: detected capacity change from 0 to 32768 [ 186.565723][ T6199] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.596440][ T6199] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 186.597777][ T6199] XFS (loop2): log mount failed [ 190.718202][ T6244] netlink: 'syz.2.102': attribute type 2 has an invalid length. [ 190.726505][ T6244] netlink: 224 bytes leftover after parsing attributes in process `syz.2.102'. [ 194.761927][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.768294][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.349446][ T6260] loop1: detected capacity change from 0 to 128 [ 195.372299][ T6260] ======================================================= [ 195.372299][ T6260] WARNING: The mand mount option has been deprecated and [ 195.372299][ T6260] and is ignored by this kernel. Remove the mand [ 195.372299][ T6260] option from the mount to silence this warning. [ 195.372299][ T6260] ======================================================= [ 195.407181][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.539128][ T6260] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.562441][ T6260] hpfs: filesystem error: improperly stopped [ 195.568524][ T6260] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 195.587105][ T6260] hpfs: You really don't want any checks? You are crazy... [ 195.612441][ T6260] hpfs: hpfs_map_sector(): read error [ 195.625888][ T6260] hpfs: code page support is disabled [ 195.647684][ T6260] hpfs: hpfs_map_4sectors(): unaligned read [ 195.661853][ T6260] hpfs: hpfs_map_4sectors(): unaligned read [ 195.678079][ T6260] hpfs: filesystem error: unable to find root dir [ 197.187134][ T6258] loop3: detected capacity change from 0 to 32768 [ 197.285246][ T6258] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 197.499613][ T6258] XFS (loop3): Ending clean mount [ 197.649290][ T5783] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 200.125730][ T6274] netlink: 'syz.2.105': attribute type 11 has an invalid length. [ 200.133595][ T6274] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.105'. [ 200.399778][ T6285] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 200.408352][ T6285] netlink: 224 bytes leftover after parsing attributes in process `syz.1.112'. [ 200.857558][ T6291] netlink: 'syz.1.113': attribute type 11 has an invalid length. [ 200.866331][ T6291] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.113'. [ 201.728258][ T6295] binder: BINDER_SET_CONTEXT_MGR already set [ 201.748534][ T6295] binder: 6294:6295 ioctl 4018620d 200000004a80 returned -16 [ 202.049433][ T6300] IPVS: length: 24 != 67608 [ 210.230086][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 210.984842][ T6336] netlink: 'syz.0.125': attribute type 11 has an invalid length. [ 210.992701][ T6336] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.125'. [ 212.325747][ T6329] Bluetooth: hci1: command 0x0406 tx timeout [ 212.326771][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 212.332130][ T6329] Bluetooth: hci3: command 0x0406 tx timeout [ 212.338751][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 214.731693][ T6358] loop1: detected capacity change from 0 to 64 [ 214.739615][ T6358] hfs: unable to parse mount options [ 215.294221][ T6361] netlink: 'syz.2.132': attribute type 11 has an invalid length. [ 215.373550][ T6361] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.132'. [ 218.280770][ T28] audit: type=1326 audit(1779674775.433:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.2.135" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f99ce59 code=0x7ffc0000 [ 218.355694][ T28] audit: type=1326 audit(1779674775.433:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.2.135" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fcb4f99ce59 code=0x7ffc0000 [ 218.440747][ T28] audit: type=1326 audit(1779674775.433:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.2.135" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f99ce59 code=0x7ffc0000 [ 218.561239][ T28] audit: type=1326 audit(1779674775.443:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.2.135" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f99ce59 code=0x7ffc0000 [ 218.788185][ T28] audit: type=1326 audit(1779674775.443:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.2.135" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb4f95d68e code=0x7ffc0000 [ 218.883164][ T28] audit: type=1326 audit(1779674775.443:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.2.135" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f99ce59 code=0x7ffc0000 [ 220.237609][ T28] audit: type=1326 audit(1779674775.443:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.2.135" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f99ce59 code=0x7ffc0000 [ 220.969654][ T6387] netlink: 'syz.0.131': attribute type 11 has an invalid length. [ 220.977703][ T6387] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.131'. [ 224.964825][ T6408] netlink: 'syz.1.145': attribute type 21 has an invalid length. [ 226.232988][ T28] audit: type=1326 audit(1779674783.553:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effec99ce59 code=0x7ffc0000 [ 226.301395][ T28] audit: type=1326 audit(1779674783.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.3.144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effec99ce59 code=0x7ffc0000 [ 229.325127][ T6425] netlink: 'syz.0.149': attribute type 11 has an invalid length. [ 229.333646][ T6425] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.149'. [ 233.773847][ T28] audit: type=1326 audit(1779674791.043:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.148" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f99ce59 code=0x7ffc0000 [ 233.809597][ T28] audit: type=1326 audit(1779674791.063:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.148" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f99ce59 code=0x7ffc0000 [ 244.101597][ T6479] netlink: 'syz.3.164': attribute type 21 has an invalid length. [ 248.611144][ T28] audit: type=1326 audit(1779674805.793:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effec99ce59 code=0x7ffc0000 [ 248.699216][ T6508] input: syz0 as /devices/virtual/input/input6 [ 248.730340][ T28] audit: type=1326 audit(1779674805.793:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.3.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effec99ce59 code=0x7ffc0000 [ 248.882602][ T6505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.395032][ T6511] loop0: detected capacity change from 0 to 32768 [ 250.544133][ T6511] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.722250][ T6511] XFS (loop0): Ending clean mount [ 251.013820][ T28] audit: type=1800 audit(1779674808.333:15): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.171" name="file2" dev="loop0" ino=6151 res=0 errno=0 [ 251.754326][ T5779] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.777422][ T6522] loop2: detected capacity change from 0 to 32768 [ 251.944553][ T6522] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.131147][ T6549] netlink: 'syz.1.175': attribute type 11 has an invalid length. [ 252.139137][ T6549] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.175'. [ 252.228974][ T6522] XFS (loop2): Ending clean mount [ 252.415506][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.749888][ T6558] loop0: detected capacity change from 0 to 1764 [ 253.834424][ T6561] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 255.921973][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.928463][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.748519][ T6582] netlink: 'syz.2.183': attribute type 21 has an invalid length. [ 271.721283][ T6618] netlink: 'syz.1.192': attribute type 11 has an invalid length. [ 271.729076][ T6618] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.192'. [ 279.800195][ T6643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.200'. [ 287.197701][ T5081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.217213][ T5081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.225333][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.246732][ T5081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.255982][ T5081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.272314][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.568171][ T6686] netlink: 44 bytes leftover after parsing attributes in process `syz.1.210'. [ 289.345009][ T5774] Bluetooth: hci3: command tx timeout [ 291.731847][ T5774] Bluetooth: hci3: command tx timeout [ 292.311497][ T6713] netlink: 'syz.2.211': attribute type 11 has an invalid length. [ 292.391163][ T6713] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.211'. [ 292.726691][ T6681] chnl_net:caif_netlink_parms(): no params data found [ 293.645700][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.697325][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.731522][ T6681] bridge_slave_0: entered allmulticast mode [ 293.741273][ T5774] Bluetooth: hci3: command tx timeout [ 293.758077][ T6681] bridge_slave_0: entered promiscuous mode [ 294.144744][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.171415][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.199078][ T6681] bridge_slave_1: entered allmulticast mode [ 294.242914][ T6681] bridge_slave_1: entered promiscuous mode [ 294.432501][ T6726] IPVS: length: 24 != 67608 [ 294.523226][ T6115] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.733725][ T6681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.805835][ T6681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.119722][ T6115] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.300736][ T6681] team0: Port device team_slave_0 added [ 295.373550][ T6681] team0: Port device team_slave_1 added [ 295.672463][ T6115] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.831316][ T5774] Bluetooth: hci3: command tx timeout [ 296.489196][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.649114][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.741302][ T6681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.909696][ T6115] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.194777][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.231229][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.309092][ T6681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.342038][ T6741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.220'. [ 297.814953][ T6681] hsr_slave_0: entered promiscuous mode [ 297.863612][ T6681] hsr_slave_1: entered promiscuous mode [ 297.902757][ T6681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.109411][ T6681] Cannot create hsr debugfs directory [ 298.929438][ T6750] input: syz0 as /devices/virtual/input/input7 [ 299.054529][ T6749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.122606][ T6681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.266032][ T6681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.711220][ T6681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.823636][ T6681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.862482][ T6681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.083055][ T6681] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.263723][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.271025][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.331910][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.339144][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.083221][ T6681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.557912][ T6115] hsr_slave_0: left promiscuous mode [ 313.583731][ T6115] hsr_slave_1: left promiscuous mode [ 313.675854][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.694721][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.783432][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.790911][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.892327][ T6115] bridge_slave_1: left allmulticast mode [ 313.898079][ T6115] bridge_slave_1: left promiscuous mode [ 313.917077][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.063247][ T6115] bridge_slave_0: left allmulticast mode [ 314.068987][ T6115] bridge_slave_0: left promiscuous mode [ 314.105027][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.482076][ T6115] veth1_macvtap: left promiscuous mode [ 314.488818][ T6115] veth0_macvtap: left promiscuous mode [ 315.188508][ T6115] bond1 (unregistering): Released all slaves [ 317.349933][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.357219][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.431885][ T5081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.473323][ T5081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.537251][ T5081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.547712][ T5081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.557095][ T5081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 317.564760][ T5081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.987852][ T6115] team0 (unregistering): Port device team_slave_1 removed [ 318.217987][ T6115] team0 (unregistering): Port device team_slave_0 removed [ 318.452871][ T6115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.574095][ T6115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.266074][ T6115] bond0 (unregistering): Released all slaves [ 319.376904][ T6837] netlink: 44 bytes leftover after parsing attributes in process `syz.1.233'. [ 319.666251][ T5774] Bluetooth: hci4: command tx timeout [ 322.022594][ T5774] Bluetooth: hci4: command tx timeout [ 322.294419][ T6681] veth0_vlan: entered promiscuous mode [ 322.380701][ T6681] veth1_vlan: entered promiscuous mode [ 322.589132][ T6681] veth0_macvtap: entered promiscuous mode [ 322.625697][ T6842] chnl_net:caif_netlink_parms(): no params data found [ 322.682710][ T6681] veth1_macvtap: entered promiscuous mode [ 323.032954][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.040265][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.048199][ T6842] bridge_slave_0: entered allmulticast mode [ 323.056137][ T6842] bridge_slave_0: entered promiscuous mode [ 323.065580][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.081474][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.089446][ T6842] bridge_slave_1: entered allmulticast mode [ 323.132503][ T6842] bridge_slave_1: entered promiscuous mode [ 323.161643][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.216499][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.241769][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.286752][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.331615][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.381165][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.413050][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.606050][ T6115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.717793][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.757725][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.781227][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.807921][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.831177][ T6681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.849503][ T6681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.879269][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.879799][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.913043][ T5081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.927217][ T5081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.936289][ T5081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.954909][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.967148][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.026542][ T6115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.056294][ T6842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.070932][ T5774] Bluetooth: hci4: command tx timeout [ 324.087762][ T6842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.218138][ T6115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.248076][ T6681] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.270484][ T6681] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.279911][ T6681] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.289368][ T6681] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.582646][ T6842] team0: Port device team_slave_0 added [ 324.921979][ T6115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.970523][ T28] audit: type=1326 audit(1779674882.283:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87e39ce59 code=0x7ffc0000 [ 324.999335][ T6842] team0: Port device team_slave_1 added [ 325.010731][ T28] audit: type=1326 audit(1779674882.283:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.1.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87e39ce59 code=0x7ffc0000 [ 325.034641][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.100192][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.111408][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.137350][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.158927][ T6842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.197287][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.204554][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.230517][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.285464][ T6842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.496139][ T6842] hsr_slave_0: entered promiscuous mode [ 325.507041][ T6842] hsr_slave_1: entered promiscuous mode [ 327.332988][ T5774] Bluetooth: hci1: command tx timeout [ 327.336600][ T5081] Bluetooth: hci4: command tx timeout [ 327.352650][ T6842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.360274][ T6842] Cannot create hsr debugfs directory [ 327.387851][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.411381][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.605850][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.652120][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.846142][ T5081] Bluetooth: hci1: command tx timeout [ 330.071261][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 330.347109][ T6924] netlink: 'syz.1.241': attribute type 2 has an invalid length. [ 330.355877][ T6924] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'. [ 332.547139][ T5081] Bluetooth: hci1: command tx timeout [ 334.711189][ T5081] Bluetooth: hci1: command tx timeout [ 334.814462][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.841614][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.848935][ T6886] bridge_slave_0: entered allmulticast mode [ 334.882847][ T6886] bridge_slave_0: entered promiscuous mode [ 334.913226][ T6842] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.945157][ T6842] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 335.084060][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.101364][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.108681][ T6886] bridge_slave_1: entered allmulticast mode [ 335.149271][ T6886] bridge_slave_1: entered promiscuous mode [ 335.157995][ T6842] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.186608][ T6842] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 335.457105][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.495151][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.588277][ T6115] hsr_slave_0: left promiscuous mode [ 335.621427][ T6115] hsr_slave_1: left promiscuous mode [ 335.675688][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.701718][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.722024][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.729528][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.801965][ T6115] bridge_slave_1: left allmulticast mode [ 335.807702][ T6115] bridge_slave_1: left promiscuous mode [ 335.831380][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.868137][ T6115] bridge_slave_0: left allmulticast mode [ 335.892600][ T6115] bridge_slave_0: left promiscuous mode [ 335.898449][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.999283][ T6115] veth1_macvtap: left promiscuous mode [ 336.011558][ T6115] veth0_macvtap: left promiscuous mode [ 336.017261][ T6115] veth1_vlan: left promiscuous mode [ 336.042008][ T6115] veth0_vlan: left promiscuous mode [ 337.829503][ T6115] bond1 (unregistering): Released all slaves [ 338.535255][ T6115] team0 (unregistering): Port device team_slave_1 removed [ 338.593386][ T6115] team0 (unregistering): Port device team_slave_0 removed [ 338.638436][ T6115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.685747][ T6115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.033064][ T6115] bond0 (unregistering): Released all slaves [ 339.297197][ T6886] team0: Port device team_slave_0 added [ 339.380462][ T6886] team0: Port device team_slave_1 added [ 339.518671][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.529943][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.592432][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.642676][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.649705][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.687027][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.710927][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.093340][ T6886] hsr_slave_0: entered promiscuous mode [ 340.279509][ T6886] hsr_slave_1: entered promiscuous mode [ 340.391532][ T6886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.399179][ T6886] Cannot create hsr debugfs directory [ 340.498379][ T6969] netlink: 'syz.4.248': attribute type 11 has an invalid length. [ 340.518562][ T6969] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.248'. [ 340.606282][ T6842] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.688326][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.695576][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.756994][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.764204][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.854283][ T6115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.988021][ T6842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.216206][ T6115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.720245][ T6115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.204840][ T6115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.471896][ T6886] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.512206][ T6886] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.556304][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.599451][ T6886] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.899126][ T6886] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.957906][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.093925][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.865002][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.872266][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.532481][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.539703][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.975446][ T6842] veth0_vlan: entered promiscuous mode [ 354.115224][ T6842] veth1_vlan: entered promiscuous mode [ 354.269807][ T6842] veth0_macvtap: entered promiscuous mode [ 354.307648][ T6842] veth1_macvtap: entered promiscuous mode [ 354.569094][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.591582][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.620457][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.657120][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.711339][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.730717][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.753165][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.833771][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.869826][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.912541][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.931152][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.961472][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.006509][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.053429][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.413302][ T6842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.461145][ T6842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.491162][ T6842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.499942][ T6842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.715844][ T6115] hsr_slave_0: left promiscuous mode [ 356.775323][ T6115] hsr_slave_1: left promiscuous mode [ 356.811760][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.819251][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.849799][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.873547][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.902119][ T6115] bridge_slave_1: left allmulticast mode [ 356.907849][ T6115] bridge_slave_1: left promiscuous mode [ 356.922025][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.933801][ T6115] bridge_slave_0: left allmulticast mode [ 356.939538][ T6115] bridge_slave_0: left promiscuous mode [ 356.972350][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.037965][ T6115] veth1_macvtap: left promiscuous mode [ 357.051344][ T6115] veth0_macvtap: left promiscuous mode [ 357.495243][ T6115] bond1 (unregistering): Released all slaves [ 361.515244][ T6115] team0 (unregistering): Port device team_slave_1 removed [ 361.683349][ T6115] team0 (unregistering): Port device team_slave_0 removed [ 361.856256][ T6115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.032426][ T6115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.789964][ T6115] bond0 (unregistering): Released all slaves [ 362.940377][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.217057][ T5883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.260028][ T5883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.387914][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.423255][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.434153][ T7101] Bluetooth: MGMT ver 1.22 [ 363.439091][ T7101] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 365.706815][ T6886] veth0_vlan: entered promiscuous mode [ 365.776751][ T6886] veth1_vlan: entered promiscuous mode [ 365.935897][ T6886] veth0_macvtap: entered promiscuous mode [ 365.964949][ T6886] veth1_macvtap: entered promiscuous mode [ 366.056570][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.088290][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.119702][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.141375][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.161172][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.191418][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.213161][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.233154][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.264765][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.291203][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.311290][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.331913][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.351340][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.388714][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.450431][ T6886] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.479705][ T6886] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.511179][ T6886] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.530363][ T6886] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.551220][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.571452][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.661389][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.669292][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.451923][ T7183] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 378.787538][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.795645][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.299718][ T28] audit: type=1326 audit(1779674953.463:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.6.279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae39ce59 code=0x7ffc0000 [ 396.391314][ T28] audit: type=1326 audit(1779674953.463:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.6.279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae39ce59 code=0x7ffc0000 [ 398.812750][ T7296] loop6: detected capacity change from 0 to 64 [ 398.820262][ T7296] hfs: unable to parse mount options [ 403.563881][ T7321] loop6: detected capacity change from 0 to 64 [ 403.622337][ T7321] hfs: unable to parse mount options [ 403.722826][ T7258] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.381312][ T7361] netlink: 44 bytes leftover after parsing attributes in process `syz.4.293'. [ 411.590057][ T7364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.665816][ T7351] loop5: detected capacity change from 0 to 32768 [ 411.827668][ T7351] (syz.5.295,7351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 411.884379][ T7351] (syz.5.295,7351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 412.269092][ T7351] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 412.270747][ T7351] (syz.5.295,7351,0):ocfs2_initialize_super:2285 ERROR: status = -12 [ 412.362456][ T7351] (syz.5.295,7351,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 413.027404][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 413.213655][ T7379] loop6: detected capacity change from 0 to 64 [ 413.252193][ T7379] hfs: unable to parse mount options [ 413.423078][ T7258] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 417.456358][ T7393] loop5: detected capacity change from 0 to 1764 [ 417.939923][ T7398] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 419.494188][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.581660][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.598431][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.671698][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 446.682503][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'. [ 449.301656][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 455.559462][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 455.986302][ T7591] loop5: detected capacity change from 0 to 64 [ 456.006240][ T7591] hfs: unable to parse mount options [ 456.082925][ T7516] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 464.301405][ T5777] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 464.571169][ T5777] usb 5-1: Using ep0 maxpacket: 16 [ 464.631331][ T5777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.691224][ T5777] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.700367][ T5777] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 464.775381][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.839594][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.850443][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.859256][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.860700][ T5777] usb 5-1: config 0 descriptor?? [ 464.878806][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.886869][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 464.894525][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.292688][ T7648] loop6: detected capacity change from 0 to 1764 [ 465.673146][ T5772] syz-executor (5772) used greatest stack depth: 20872 bytes left [ 465.762816][ T7649] netlink: 'syz.6.330': attribute type 11 has an invalid length. [ 465.771073][ T7649] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.330'. [ 466.849777][ T3463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.941195][ T5774] Bluetooth: hci2: command tx timeout [ 467.123271][ T9] usb 5-1: USB disconnect, device number 2 [ 469.035920][ T5774] Bluetooth: hci2: command tx timeout [ 469.063872][ T3463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.205336][ T7670] loop6: detected capacity change from 0 to 1764 [ 469.791125][ T28] audit: type=1326 audit(1779675026.933:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0179ce59 code=0x7ffc0000 [ 469.880967][ T28] audit: type=1326 audit(1779675026.933:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.4.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0179ce59 code=0x7ffc0000 [ 470.325364][ T3463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.651622][ T7675] netlink: 'syz.6.337': attribute type 11 has an invalid length. [ 470.686490][ T7675] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.337'. [ 470.815799][ T3463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.101343][ T5774] Bluetooth: hci2: command tx timeout [ 473.185953][ T5774] Bluetooth: hci2: command tx timeout [ 473.487333][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 477.220550][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.251571][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.258881][ T7641] bridge_slave_0: entered allmulticast mode [ 477.297726][ T7641] bridge_slave_0: entered promiscuous mode [ 478.015938][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.061415][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.094804][ T7641] bridge_slave_1: entered allmulticast mode [ 478.141375][ T7641] bridge_slave_1: entered promiscuous mode [ 480.045975][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.184791][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.405722][ T7641] team0: Port device team_slave_0 added [ 480.435048][ T7641] team0: Port device team_slave_1 added [ 480.451830][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 480.906190][ T28] audit: type=1326 audit(1779675038.223:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.6.343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae39ce59 code=0x7ffc0000 [ 480.946947][ T28] audit: type=1326 audit(1779675038.223:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.6.343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae39ce59 code=0x7ffc0000 [ 481.232528][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.252657][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.340278][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.010726][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.071877][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.156694][ T7738] loop4: detected capacity change from 0 to 1764 [ 482.181971][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.673430][ T7744] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 483.140516][ T7743] netlink: 'syz.4.350': attribute type 11 has an invalid length. [ 484.739513][ T7743] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.350'. [ 484.867330][ T7641] hsr_slave_0: entered promiscuous mode [ 484.895335][ T7641] hsr_slave_1: entered promiscuous mode [ 486.204306][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.221677][ T7641] Cannot create hsr debugfs directory [ 486.433605][ T3463] hsr_slave_0: left promiscuous mode [ 486.452090][ T3463] hsr_slave_1: left promiscuous mode [ 486.468578][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.481134][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.505758][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.521361][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.257425][ T3463] bridge_slave_1: left allmulticast mode [ 488.263267][ T3463] bridge_slave_1: left promiscuous mode [ 488.269096][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.282889][ T3463] bridge_slave_0: left allmulticast mode [ 488.296524][ T3463] bridge_slave_0: left promiscuous mode [ 488.302717][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.480696][ T3463] veth1_macvtap: left promiscuous mode [ 488.527970][ T3463] veth0_macvtap: left promiscuous mode [ 488.898546][ T3463] bond2 (unregistering): Released all slaves [ 488.945989][ T3463] bond1 (unregistering): Released all slaves [ 491.408839][ T7771] loop6: detected capacity change from 0 to 1764 [ 493.460804][ T7775] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 493.729224][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 493.810496][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 493.910926][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.654378][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.120889][ T3463] bond0 (unregistering): Released all slaves [ 496.258630][ T7773] netlink: 'syz.6.354': attribute type 11 has an invalid length. [ 496.299861][ T7773] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.354'. [ 496.535486][ T7789] netlink: 'syz.5.357': attribute type 2 has an invalid length. [ 496.545308][ T7789] netlink: 224 bytes leftover after parsing attributes in process `syz.5.357'. [ 496.743034][ T5774] Bluetooth: hci1: unexpected event for opcode 0x007f [ 498.967967][ T7805] loop6: detected capacity change from 0 to 1764 [ 498.996852][ T7641] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 499.062976][ T7641] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 499.258001][ T7641] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 499.606979][ T7641] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 499.758974][ T7805] netlink: 'syz.6.362': attribute type 11 has an invalid length. [ 499.766863][ T7805] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.362'. [ 499.783089][ T7805] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 499.985325][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.044912][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.105790][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.113084][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.389478][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.396786][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.403967][ T7821] loop6: detected capacity change from 0 to 1764 [ 501.713640][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.720651][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.804170][ T7825] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 501.871695][ T7826] netlink: 'syz.6.364': attribute type 11 has an invalid length. [ 501.893337][ T7826] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.364'. [ 504.088280][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.768261][ T7641] veth0_vlan: entered promiscuous mode [ 507.810965][ T7641] veth1_vlan: entered promiscuous mode [ 507.888434][ T7641] veth0_macvtap: entered promiscuous mode [ 507.934514][ T7641] veth1_macvtap: entered promiscuous mode [ 508.040585][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.091232][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.133119][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.178381][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.211219][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.242143][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.288386][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.328821][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.359226][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.391142][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.451985][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.501040][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.531071][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.599192][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.177438][ T7641] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.385670][ T7641] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.564960][ T7641] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.707138][ T7641] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.875976][ T5774] Bluetooth: hci3: unexpected event for opcode 0x007f [ 510.677111][ T28] audit: type=1326 audit(1779675067.983:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.6.368" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae39ce59 code=0x7ffc0000 [ 510.902697][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.098244][ T28] audit: type=1326 audit(1779675067.983:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.6.368" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae39ce59 code=0x7ffc0000 [ 511.162836][ T6179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.170730][ T6179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.359208][ T7899] loop5: detected capacity change from 0 to 1764 [ 512.389286][ T6115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.397806][ T6115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.663648][ T7901] netlink: 'syz.5.371': attribute type 11 has an invalid length. [ 512.671910][ T7901] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.371'. [ 512.688842][ T7901] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 513.709944][ T7908] loop7: detected capacity change from 0 to 1764 [ 515.666796][ T7916] netlink: 'syz.7.332': attribute type 11 has an invalid length. [ 515.681318][ T7916] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.332'. [ 515.943744][ T7916] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 517.621095][ T5777] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 526.224263][ T5774] Bluetooth: hci1: unexpected event for opcode 0x007f [ 528.671858][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.386'. [ 545.633311][ T8063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.219239][ T8081] loop6: detected capacity change from 0 to 1764 [ 550.515847][ T8085] netlink: 'syz.6.399': attribute type 11 has an invalid length. [ 550.525088][ T8085] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.399'. [ 550.901503][ T8085] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 563.951524][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.958354][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.256236][ T8151] binder_alloc: 8148: binder_alloc_buf, no vma [ 574.317228][ T8203] loop7: detected capacity change from 0 to 1764 [ 574.635210][ T8205] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 574.685138][ T8191] netlink: 'syz.5.413': attribute type 21 has an invalid length. [ 575.001153][ T8204] netlink: 'syz.7.418': attribute type 11 has an invalid length. [ 575.021118][ T8204] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.418'. [ 584.471347][ T28] audit: type=1326 audit(1779675141.773:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.4.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0179ce59 code=0x7ffc0000 [ 584.541306][ T28] audit: type=1326 audit(1779675141.773:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.4.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0179ce59 code=0x7ffc0000 [ 587.936939][ T8279] netlink: 'syz.5.431': attribute type 21 has an invalid length. [ 593.421535][ T8282] Bluetooth: hci2: command 0x0406 tx timeout [ 593.739126][ T8300] binder_alloc: 8297: binder_alloc_buf, no vma [ 597.181938][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 599.020886][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 599.035400][ T9] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 599.058928][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.107098][ T9] usb 7-1: config 0 descriptor?? [ 599.153496][ T9] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 599.378876][ T9] usb 7-1: Detected FT232A [ 599.398882][ T9] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 601.594387][ T9] usb 7-1: USB disconnect, device number 2 [ 601.651854][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 601.677588][ T9] ftdi_sio 7-1:0.0: device disconnected [ 602.386182][ T28] audit: type=1326 audit(1779675159.703:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.6.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae39ce59 code=0x7ffc0000 [ 602.471042][ T28] audit: type=1326 audit(1779675159.773:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.6.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae39ce59 code=0x7ffc0000 [ 602.739761][ T8348] netlink: 'syz.4.443': attribute type 21 has an invalid length. [ 614.705785][ T8440] netlink: 'syz.4.454': attribute type 21 has an invalid length. [ 625.486001][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.492558][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.324380][ T8517] netlink: 'syz.5.466': attribute type 21 has an invalid length. [ 643.441117][ T8350] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 643.641434][ T8350] usb 7-1: Using ep0 maxpacket: 32 [ 643.653441][ T8350] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.685112][ T8350] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.737781][ T8350] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 643.762037][ T8350] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 643.791246][ T8350] usb 7-1: Product: syz [ 643.795535][ T8350] usb 7-1: Manufacturer: syz [ 643.840849][ T8350] hub 7-1:4.0: USB hub found [ 644.091115][ T8350] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 645.247236][ T8350] usb 7-1: USB disconnect, device number 3 [ 652.996841][ T8610] netlink: 'syz.7.476': attribute type 21 has an invalid length. [ 657.168063][ T8675] binder_alloc: 8674: binder_alloc_buf, no vma [ 660.075368][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 670.408487][ T8744] netlink: 'syz.4.492': attribute type 21 has an invalid length. [ 671.521517][ T8752] binder_alloc: 8751: binder_alloc_buf, no vma [ 673.381010][ T8614] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 673.571275][ T8614] usb 6-1: Using ep0 maxpacket: 16 [ 673.604831][ T8614] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 673.631313][ T8614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.662160][ T8614] usb 6-1: config 0 descriptor?? [ 673.688555][ T8614] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 673.891907][ T8614] usb 6-1: Detected FT232A [ 673.931497][ T8614] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 675.711251][ T5762] usb 6-1: USB disconnect, device number 3 [ 675.753622][ T5762] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 675.811613][ T5762] ftdi_sio 6-1:0.0: device disconnected [ 676.818466][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.500'. [ 677.471179][ T28] audit: type=1326 audit(1779675234.633:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.5.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a2d9ce59 code=0x7ffc0000 [ 677.571402][ T28] audit: type=1326 audit(1779675234.643:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.5.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a2d9ce59 code=0x7ffc0000 [ 678.141643][ T8617] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 679.832649][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.504'. [ 679.931041][ T8617] usb 8-1: Using ep0 maxpacket: 32 [ 679.966141][ T8617] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.048321][ T8822] netlink: 'syz.4.505': attribute type 21 has an invalid length. [ 682.023453][ T8617] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.191555][ T8617] usb 8-1: string descriptor 0 read error: -71 [ 682.197915][ T8617] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 682.268843][ T8617] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 682.336485][ T8617] usb 8-1: can't set config #4, error -71 [ 682.372724][ T8617] usb 8-1: USB disconnect, device number 2 [ 682.611274][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.507'. [ 683.118986][ T8836] netlink: 'syz.4.509': attribute type 11 has an invalid length. [ 683.127677][ T8836] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.509'. [ 684.151578][ T8846] netlink: 'syz.5.510': attribute type 11 has an invalid length. [ 684.160133][ T8846] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.510'. [ 684.315094][ T8849] IPVS: length: 24 != 67608 [ 685.986634][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.001318][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.191078][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.513'. [ 690.637316][ T8879] netlink: 'syz.5.517': attribute type 21 has an invalid length. [ 691.727853][ T8885] netlink: 'syz.5.518': attribute type 2 has an invalid length. [ 691.770821][ C1] [ 691.773244][ C1] ================================ [ 691.778387][ C1] WARNING: inconsistent lock state [ 691.783548][ C1] syzkaller #0 Not tainted [ 691.788007][ C1] -------------------------------- [ 691.793169][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 691.800068][ C1] syz.5.518/8882 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 691.806356][ C1] ffff888069410d30 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x180/0x990 [ 691.816144][ C1] {SOFTIRQ-ON-W} state was registered at: [ 691.821891][ C1] lock_acquire+0x19e/0x420 [ 691.826585][ C1] _raw_spin_lock_nested+0x32/0x50 [ 691.831919][ C1] __sk_receive_skb+0x180/0x990 [ 691.836908][ C1] pep_do_rcv+0x682/0xa90 [ 691.841449][ C1] __release_sock+0x1e5/0x460 [ 691.846252][ C1] release_sock+0x5f/0x1c0 [ 691.850783][ C1] pep_sock_accept+0xd58/0x12d0 [ 691.855749][ C1] pn_socket_accept+0x12a/0x370 [ 691.860716][ C1] do_accept+0x4d8/0x6c0 [ 691.865078][ C1] __sys_accept4+0x9b/0x100 [ 691.869689][ C1] __x64_sys_accept+0x7d/0x90 [ 691.874474][ C1] do_syscall_64+0x55/0xb0 [ 691.879070][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.885128][ C1] irq event stamp: 3920 [ 691.889298][ C1] hardirqs last enabled at (3920): [] _raw_spin_unlock_irq+0x23/0x50 [ 691.899055][ C1] hardirqs last disabled at (3919): [] _raw_spin_lock_irq+0x8a/0xf0 [ 691.908648][ C1] softirqs last enabled at (3914): [] netif_rx+0x79/0x90 [ 691.917433][ C1] softirqs last disabled at (3915): [] do_softirq+0xfa/0x1a0 [ 691.926423][ C1] [ 691.926423][ C1] other info that might help us debug this: [ 691.934505][ C1] Possible unsafe locking scenario: [ 691.934505][ C1] [ 691.941971][ C1] CPU0 [ 691.945263][ C1] ---- [ 691.948553][ C1] lock(slock-AF_PHONET/1); [ 691.953174][ C1] [ 691.956642][ C1] lock(slock-AF_PHONET/1); [ 691.961436][ C1] [ 691.961436][ C1] *** DEADLOCK *** [ 691.961436][ C1] [ 691.969616][ C1] 5 locks held by syz.5.518/8882: [ 691.974667][ C1] #0: ffff888077fa1a20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 691.984908][ C1] #1: ffff888069410770 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 691.994595][ C1] #2: ffffffff8d132120 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x2cf/0x6f0 [ 692.004195][ C1] #3: ffff8880694100b0 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18f/0x990 [ 692.013974][ C1] #4: ffff888069410130 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x78f/0xc80 [ 692.023403][ C1] [ 692.023403][ C1] stack backtrace: [ 692.029326][ C1] CPU: 1 PID: 8882 Comm: syz.5.518 Not tainted syzkaller #0 [ 692.036628][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 692.046717][ C1] Call Trace: [ 692.050026][ C1] [ 692.052896][ C1] dump_stack_lvl+0x18c/0x250 [ 692.057601][ C1] ? show_regs_print_info+0x20/0x20 [ 692.062830][ C1] ? __kernel_text_address+0xd/0x30 [ 692.068060][ C1] ? unwind_get_return_address+0x91/0xc0 [ 692.073746][ C1] valid_state+0x13b/0x1d0 [ 692.078189][ C1] mark_lock_irq+0xad/0x900 [ 692.082719][ C1] ? stack_trace_save+0xaa/0x100 [ 692.087680][ C1] ? save_trace+0xcd0/0xcd0 [ 692.092210][ C1] ? mark_lock+0x94/0x320 [ 692.096568][ C1] ? save_trace+0x5d/0xcd0 [ 692.101019][ C1] mark_lock+0x208/0x320 [ 692.105286][ C1] __lock_acquire+0xd1a/0x7d40 [ 692.110072][ C1] ? verify_lock_unused+0x140/0x140 [ 692.115301][ C1] ? mark_lock+0x94/0x320 [ 692.119654][ C1] ? verify_lock_unused+0x140/0x140 [ 692.124883][ C1] ? sk_filter_trim_cap+0x18a/0x900 [ 692.130106][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 692.135157][ C1] lock_acquire+0x19e/0x420 [ 692.139686][ C1] ? __sk_receive_skb+0x180/0x990 [ 692.144740][ C1] ? read_lock_is_recursive+0x20/0x20 [ 692.150134][ C1] ? sk_filter_trim_cap+0x18a/0x900 [ 692.155356][ C1] ? copy_bpf_fprog_from_user+0x2d0/0x2d0 [ 692.161100][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 692.166154][ C1] ? __lock_acquire+0x1273/0x7d40 [ 692.171201][ C1] _raw_spin_lock_nested+0x32/0x50 [ 692.176352][ C1] ? __sk_receive_skb+0x180/0x990 [ 692.181404][ C1] __sk_receive_skb+0x180/0x990 [ 692.186284][ C1] pep_do_rcv+0x682/0xa90 [ 692.190636][ C1] ? pep_recvmsg+0x600/0x600 [ 692.195250][ C1] ? phonet_rcv+0x78f/0xc80 [ 692.199775][ C1] __sk_receive_skb+0x436/0x990 [ 692.204652][ C1] phonet_rcv+0x78f/0xc80 [ 692.209015][ C1] ? phonet_proto_unregister+0x130/0x130 [ 692.214664][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 692.220663][ C1] ? read_lock_is_recursive+0x20/0x20 [ 692.226053][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 692.231101][ C1] ? phonet_proto_unregister+0x130/0x130 [ 692.236760][ C1] __netif_receive_skb+0xcc/0x290 [ 692.241822][ C1] ? process_backlog+0x2cf/0x6f0 [ 692.246784][ C1] process_backlog+0x391/0x6f0 [ 692.251585][ C1] ? trigger_rx_softirq+0x60/0x60 [ 692.256635][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 692.262641][ C1] ? lock_chain_count+0x20/0x20 [ 692.267510][ C1] __napi_poll+0xc0/0x460 [ 692.271857][ C1] ? net_rx_action+0x3a0/0xc40 [ 692.276643][ C1] net_rx_action+0x616/0xc40 [ 692.281259][ C1] ? net_tx_action+0x980/0x980 [ 692.286043][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 692.292049][ C1] ? lock_chain_count+0x20/0x20 [ 692.296922][ C1] handle_softirqs+0x280/0x820 [ 692.301709][ C1] ? do_softirq+0xfa/0x1a0 [ 692.306144][ C1] ? do_softirq+0x1a0/0x1a0 [ 692.310661][ C1] ? rcu_is_watching+0x15/0xb0 [ 692.315451][ C1] ? rcu_is_watching+0x15/0xb0 [ 692.320240][ C1] ? netif_rx+0x79/0x90 [ 692.324418][ C1] do_softirq+0xfa/0x1a0 [ 692.328678][ C1] [ 692.331628][ C1] [ 692.334575][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 692.339978][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 692.345995][ C1] ? rcu_is_watching+0x15/0xb0 [ 692.350815][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 692.356040][ C1] ? _local_bh_enable+0xa0/0xa0 [ 692.360928][ C1] netif_rx+0x83/0x90 [ 692.364947][ C1] pn_send+0x553/0x7f0 [ 692.369054][ C1] pn_skb_send+0x218/0x510 [ 692.373494][ C1] pep_sock_close+0x2c1/0x5b0 [ 692.378195][ C1] pn_socket_release+0x95/0xb0 [ 692.382985][ C1] sock_close+0xbd/0x230 [ 692.387255][ C1] ? sock_mmap+0xa0/0xa0 [ 692.391523][ C1] __fput+0x234/0x970 [ 692.395556][ C1] task_work_run+0x1d4/0x260 [ 692.400176][ C1] ? task_work_cancel+0x220/0x220 [ 692.405228][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 692.410716][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 692.416030][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 692.421606][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 692.427263][ C1] do_syscall_64+0x61/0xb0 [ 692.431698][ C1] ? clear_bhb_loop+0x40/0x90 [ 692.436399][ C1] ? clear_bhb_loop+0x40/0x90 [ 692.441106][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.447030][ C1] RIP: 0033:0x7fe0a2d9ce59 [ 692.451551][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.471192][ C1] RSP: 002b:00007ffd0ac7e428 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 692.479642][ C1] RAX: 0000000000000000 RBX: 00007ffd0ac7e510 RCX: 00007fe0a2d9ce59 [ 692.487638][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 692.495727][ C1] RBP: 00000000000a8da7 R08: 0000000000000001 R09: 0000000000000000 [ 692.503714][ C1] R10: 0000001b2f920000 R11: 0000000000000246 R12: 00007ffd0ac7e550 [ 692.511701][ C1] R13: 00007fe0a3015fac R14: 00000000000a8e36 R15: 00007fe0a3015fa0 [ 692.519700][ C1] [ 692.603578][ T8882] gprs0: detached [ 694.334466][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.515'. [ 694.451193][ T5762] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 694.652697][ T5762] usb 5-1: Using ep0 maxpacket: 32 [ 694.708111][ T5762] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.744802][ T5762] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.773553][ T5762] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 694.793125][ T5762] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 694.821545][ T5762] usb 5-1: Product: syz [ 694.830334][ T5762] usb 5-1: Manufacturer: syz [ 694.847287][ T5762] hub 5-1:4.0: USB hub found [ 695.072098][ T5762] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 695.411835][ T8614] usb 5-1: USB disconnect, device number 3