last executing test programs: 16m31.824594946s ago: executing program 0 (id=10): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000100)="2f724af9c543825836f3d289728ffe5cf028caecaba1443d51edb297fc3af1a907f8b8b149af39b227f0bc64204b0212f8f96467d3927f5869054c98a496372fef594a2634a7a4040e7d7e68637e22b8d80ec6bdd8d3583a5fa746c6730930fb20acb8c8a5d27d299700253a44921aaceb9f7df5afa2aecca79b0f9b0845f8eae74482025ce4ec5fc1b38fbce6cbefa6fab6dd4becb4b8aa", &(0x7f0000000340)="95370b6e7522a43ddacc4170cfafbc6a7e411762e1986eb500b475215286afb36798e5d9e00ece4ead9adf7c7bd168022c70bfedb3b60f063e5e54f601a2255e9878fac57450fe943a9547041f7ffa53d269bcdf5d1315ef6ab34b4b82902de9411cd58be6e0bd49a7c01b55a47de74d7a698c63d05cbd6e0c155a32c44aad730bba25e4b25e26f97e8bd646bb"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x10) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 16m30.903013359s ago: executing program 0 (id=11): sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004005}, 0x8094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8, 0xf}, {0x3, 0xd}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) write$evdev(r3, &(0x7f0000000040), 0x0) r7 = socket$kcm(0x1e, 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000001100000000000000000400000000000000000000000000000a00100001000000000000000512f3c6b9661a"], 0xc4}}, 0x4c050) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000340)="c66db8281fb85aee82d84a8eb7684daff4651b5a13832e32ef4d6f9a822b9246f6517f3743099cd53b33a75994037f39bb32c517a8763f4963578ed1e00d98b9d7542449d2a7b69c1d8a043c", 0x4c}, {&(0x7f00000003c0)="df57f2f20b76b40193d8d7cab727a84f7d3233967b9bd48dd415de3923e6eb8a96a3012d2f48bb60acf4f322ea101bf84b8bf704a268b9f2fd6530d19b124b9c28abdcc1e127d62b589b4669b0a384", 0x4f}, {&(0x7f0000000440)="7bc5b5c263de68bc895ab8790358c9dbd495", 0x12}, {&(0x7f00000007c0)="e4e0149a553a77fda7f53cc9339d80bc1ca599de0d79b9f6d8e568a9432351613aed804754cc82579f00ca5fae92ea67508bd98a5beae317f9b6ebe12683392313c8729d1bfcc6aad94323ead0b869da1f8ecd59a3e48241dd94b858a3a0850c50f606766ee0cc67c533b4b8085ff5168cc67baae862d7650c95d9987e1977efdac62b165532fd3dea5b69e89fe3a2b6652c3cfa1174ae7542cf518e1ba33e686c0c90cc5c5f6cc8f725db788e3ea2bbc8afe150ff65ecf8e64eacc10ce59825e9d625af727f4c22ecdd0a45c870ce17c360698182fdeb1da0ba7cf9013a9b58d8a0e36f8c92c871072a0cb3c0acb38fd7ed6ef48e2e49be4e1fa144", 0xfc}, {&(0x7f00000008c0)="6a0e32192ee3b3f6e9eec4c6c88c1f9604420dbd992413cd81944f83a49ada421386ee4985df3328f727ead6a431dae8b39571b12a897dddaf7e779dbd1e8e982ed95373d9fb0eb57d07b7458cfbcc185714e70b1f0978fe40cc657ac7ca8e", 0x5f}], 0x5, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xb4, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @private=0xa010101]}, @noop]}}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xb8, [@private=0xa010102, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102]}, @noop, @cipso={0x86, 0x5c, 0x0, [{0x1, 0x12, "82cc5ca810cf5c71e70d6127b7f75263"}, {0x1, 0x3, "d3"}, {0x0, 0xb, "f55118505e1dfebf36"}, {0x5, 0x11, "b5d7993c815238c0e51aec3e231053"}, {0x2, 0xa, "f4f8d5dbf7b03600"}, {0x1, 0xf, "46874602943411ec1e1b21f17f"}, {0x5, 0xc, "b1140c30b81adb2d015f"}]}, @timestamp_addr={0x44, 0x1c, 0x27, 0x1, 0x3, [{@empty, 0x33c2}, {@multicast2, 0xc76}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf34a}]}, @lsrr={0x83, 0x1b, 0x7, [@local, @empty, @remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}]}, @ssrr={0x89, 0x17, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @empty, @empty]}, @ssrr={0x89, 0xb, 0xb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0xf, 0xd5, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0xa010101]}, @rr={0x7, 0x1b, 0xaa, [@rand_addr=0x64010102, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @private=0xa010102]}, @rr={0x7, 0x7, 0x74, [@dev={0xac, 0x14, 0x14, 0x21}]}, @rr={0x7, 0x1f, 0xb9, [@private=0xa010101, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9a}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x1f0}, 0x5) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20050840) 16m29.43752806s ago: executing program 0 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@ssrr={0x89, 0xb, 0xec, [@dev={0xac, 0x14, 0x14, 0x29}, @broadcast]}, @generic={0x7, 0x12, "09904b30ad2bb75f7e1e5d0385566103"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 16m28.042258515s ago: executing program 0 (id=15): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000f22705b0693300"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x80005) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x3, @in6={0xa, 0x4e20, 0xfffffffc, @remote, 0x3}}}, 0xa0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 16m26.776598245s ago: executing program 0 (id=20): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x180) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) close(0xffffffffffffffff) 16m25.195336667s ago: executing program 0 (id=23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000002500), 0x6, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0d00000082bdbd01087700730da4bb0b4f8149968bea4f45741a8cc62d2d6f7a164692bcc71c0668f791f898886afbb3c8f6bd1108ae009a6eb787316f4c08e0b2b4572b7f1b3f1a140ef2b1e4c56dbdc7730400835a45cb7a6827acb7c1522dc4cc1e1f5c3f7637153bace3c1564dcf9b42f77c5d7f3ca145dd92dacedb60becd841320e6bb5977fb6819f36e7112e92d596b1084f1a0437871df363c63e75709001f934fad838f9d2849f83fb02aa4cf89b8f2bb106cdb712395bd73504143b13e572e47b370956cc358d915dfacc1a04428b3d6ca969bc291", @ANYRESOCT=r0, @ANYRES16], 0x44}}, 0x4) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0x20c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffffffffffc67) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="240000000300000000000000000000070200000000000000030000000000000073797a00"], 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2b, 0x1, 0x0) 16m9.981068145s ago: executing program 32 (id=23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000002500), 0x6, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0d00000082bdbd01087700730da4bb0b4f8149968bea4f45741a8cc62d2d6f7a164692bcc71c0668f791f898886afbb3c8f6bd1108ae009a6eb787316f4c08e0b2b4572b7f1b3f1a140ef2b1e4c56dbdc7730400835a45cb7a6827acb7c1522dc4cc1e1f5c3f7637153bace3c1564dcf9b42f77c5d7f3ca145dd92dacedb60becd841320e6bb5977fb6819f36e7112e92d596b1084f1a0437871df363c63e75709001f934fad838f9d2849f83fb02aa4cf89b8f2bb106cdb712395bd73504143b13e572e47b370956cc358d915dfacc1a04428b3d6ca969bc291", @ANYRESOCT=r0, @ANYRES16], 0x44}}, 0x4) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0x20c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffffffffffc67) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="240000000300000000000000000000070200000000000000030000000000000073797a00"], 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2b, 0x1, 0x0) 12m26.564202655s ago: executing program 1 (id=376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x28}, 0x4000050) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f00000003c0)={0x20, 0x0, 0x80}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f7b8b3cc426606b2"], 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) pwritev(r6, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000480)}], 0x3, 0x3d8, 0x1) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x1}) r7 = socket$unix(0x1, 0x5, 0x0) read(r7, &(0x7f0000000140)=""/244, 0xf4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m25.160981279s ago: executing program 1 (id=377): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x13, "f9808039360bcc2b16d413871108db2bf1b8e1"}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff9fa65095c3480ab2d87a93d5bb37fbb7fec543faf1d11d05dfd615db70ca60d84182b587e7aa8f3844001e057d44d0724a081e09a5a98ac9960872b7ea40b3fb5f9e349216128e5c8d0b9f38cd9d6b9a3778e2369631595aaee62671ba39c763b17121975b15fb527f44e827636b16f8b18ec6dd731a2b08031759905b60a3d3d78fd5fb7d8ba2ab36e84653552e9a96dc86ac7d89d08ef228a92ce6efce077ab8b8822e"], 0xc8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000b80)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) r7 = dup(r4) r8 = fcntl$dupfd(r3, 0x406, r5) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYRES8=r7, @ANYRES16=0x0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d5063300800000f6c7b0054f5a2ef10211f868c7"], 0x6f4}}, 0x0) 12m22.457725574s ago: executing program 1 (id=383): mkdir(&(0x7f0000000400)='./file0\x00', 0x40) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_ino']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1c0) 12m20.823863298s ago: executing program 1 (id=386): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)=""/4096, &(0x7f0000000000)=0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x400000, 0x80, 0xd}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@setlink={0x238, 0x13, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8080, 0x1911}, [@IFLA_OPERSTATE={0x5, 0x10, 0x40}, @IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3c3c8db7b56556399aa7729e5b4082b5"}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}, @IFLA_VFINFO_LIST={0x1d0, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x100000001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x10, 0x5107}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x101, 0xebb}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @broadcast}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4000003, 0x10000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x8}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0x2, 0x15}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xed5, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xa}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xaf, 0x5f0}}, @IFLA_VF_IB_NODE_GUID={0x14}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @broadcast}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x800, 0x8}}]}, {0x4}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x600, 0x60a, 0x0, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x7fff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x329}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x100, 0xc3a}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x19d, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x9f2a}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x3ff, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xb67, 0x9}}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)=""/4096, &(0x7f0000000000)=0x1000) (async) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x400000, 0x80, 0xd}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@setlink={0x238, 0x13, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8080, 0x1911}, [@IFLA_OPERSTATE={0x5, 0x10, 0x40}, @IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3c3c8db7b56556399aa7729e5b4082b5"}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}, @IFLA_VFINFO_LIST={0x1d0, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x100000001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x10, 0x5107}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x101, 0xebb}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @broadcast}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4000003, 0x10000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x8}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0x2, 0x15}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xed5, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xa}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xaf, 0x5f0}}, @IFLA_VF_IB_NODE_GUID={0x14}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @broadcast}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x800, 0x8}}]}, {0x4}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x600, 0x60a, 0x0, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x7fff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x329}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x100, 0xc3a}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x19d, 0x9}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x9f2a}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x3ff, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xb67, 0x9}}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) (async) 12m20.307066824s ago: executing program 1 (id=389): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x33, @remote, 0x4e22, 0x2, 'fo\x00', 0x1e, 0x80, 0x272}, 0x2c) socket(0x2, 0x80805, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x32, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(0x0, 0x0, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x1a0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@my=0x1, 0xffffffff}, @hyper, 0x0, 0x400fffe, 0x5a, 0xfffffffffffffff9, 0x40000000008000, 0x81, 0x4}) 12m18.479518065s ago: executing program 1 (id=391): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x180) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) close(0xffffffffffffffff) 12m3.252485609s ago: executing program 33 (id=391): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x180) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) close(0xffffffffffffffff) 11m48.249695006s ago: executing program 4 (id=424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x195b, 0x4758, 0x5, &(0x7f00000000c0)={[0x8]}, 0x8) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0x0) socket$alg(0x26, 0x5, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r5}) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r5, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000180)={r8, 0x3}, &(0x7f00000001c0)=0x8) 11m46.157321121s ago: executing program 4 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9800"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet(0x2, 0x1, 0x100) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000000), 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000054) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 11m40.900913641s ago: executing program 4 (id=431): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x4}, {0x40, 0xc9}}}}, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0x2710}, {0x0, 0x3ffffffe}}, 0x0) 11m38.252444374s ago: executing program 4 (id=434): syz_usb_connect(0x0, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090400000002020100022406"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c00000003000000000000000100fffe0900010073797a30000000000900030073797a30000000003c000000060a010400000000000000000100000008000b400000000014000480100001800b0001006f626a72656600000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb0}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x347fe10f2ca3a00a, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x9, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "49ab7d9b"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x1c0, 0x7, 0x2}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3d7, 0x8, 0x1, 0x23}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x408, 0x8, 0x0, 0x40}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x8, 0x3, 0x7f, 0x40, 0x3}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0xbb, &(0x7f0000000180)=@string={0xbb, 0x3, "6b0dc7f8d9a462e17e41c036f1c2131814b152c1809b989503846e0a1bcc632f1d2ea1486ebbb306bce9424055812752ef5fd03ff5a0679cfc7414238cb4f0a7ae5ecd62c8d70b20be909b877ae331526ca53aaa9e9949415a0db1d00573e5cff0c7be818f1a0d227cfa10a7c7b8cab4663612e1a8b1aff2cdeacea818b58c8499192612f9daf2f655e0f6c5d30ffcb02151149741008b328a9201a0da8ef03f57c3cbd1ee121132f19b29bd50cc92fc983c50006fd5bb7f68"}}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 11m34.581622155s ago: executing program 4 (id=435): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x33, @remote, 0x4e22, 0x2, 'fo\x00', 0x1e, 0x80, 0x272}, 0x2c) socket(0x2, 0x80805, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x32, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(0x0, 0x0, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) fchdir(0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x1a0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@my=0x1, 0xffffffff}, @hyper, 0x0, 0x400fffe, 0x5a, 0xfffffffffffffff9, 0x40000000008000, 0x81, 0x4}) 11m32.932386942s ago: executing program 4 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000047c00000400fc800c000180"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, {0xa, 0x4e20, 0x1, @mcast2, 0x3}}}, 0x32) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0xfffffffe, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x41f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80047453, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/key-users\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x16, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x6, 0x2, 0x3, 0x662, 0x1, 0x0, [{0x4, 0x35, 0x2, '\x00', 0x88}]}) fgetxattr(r7, &(0x7f0000000080)=@known='user.incfs.metadata\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="000c0000000000a52ac241245a744ae6b5762ceb31124ad89667848ea61f59fa3be356759fd2f80834cb00d13868086a8920d983f21d9f177072c7d25c24af5b5a4e759ff6d8fb3e8a136695b77135ecc50c4b56c182a4a989e3eb7f1bd6d9733c307dc49c29c3ddf57bc53936c4a0b4e9e8e03787d87fdb24b40ddef6d9bcb42c22c321ea6b9790911387e7402dc29d0d0f9b0553f225a3b8e397d110c75b6c3f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r9}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_io_uring_setup(0x113, &(0x7f00000000c0)={0x0, 0x59fa, 0x73cc1428ba8b9604, 0x1, 0xd8}, &(0x7f0000000040), 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000340), 0x8) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) 11m16.814816816s ago: executing program 34 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000047c00000400fc800c000180"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, {0xa, 0x4e20, 0x1, @mcast2, 0x3}}}, 0x32) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0xfffffffe, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x41f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80047453, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/key-users\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x16, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x6, 0x2, 0x3, 0x662, 0x1, 0x0, [{0x4, 0x35, 0x2, '\x00', 0x88}]}) fgetxattr(r7, &(0x7f0000000080)=@known='user.incfs.metadata\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="000c0000000000a52ac241245a744ae6b5762ceb31124ad89667848ea61f59fa3be356759fd2f80834cb00d13868086a8920d983f21d9f177072c7d25c24af5b5a4e759ff6d8fb3e8a136695b77135ecc50c4b56c182a4a989e3eb7f1bd6d9733c307dc49c29c3ddf57bc53936c4a0b4e9e8e03787d87fdb24b40ddef6d9bcb42c22c321ea6b9790911387e7402dc29d0d0f9b0553f225a3b8e397d110c75b6c3f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r9}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_io_uring_setup(0x113, &(0x7f00000000c0)={0x0, 0x59fa, 0x73cc1428ba8b9604, 0x1, 0xd8}, &(0x7f0000000040), 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000340), 0x8) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) 10m20.653553353s ago: executing program 3 (id=503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x1) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) 10m17.234595903s ago: executing program 3 (id=508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 10m15.694481488s ago: executing program 3 (id=509): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x1, 0x2}, {0x3c, 0x1, 0x9, 0x8016}, {0x1, 0x9, 0x7, 0x5}]}) 10m14.032145551s ago: executing program 3 (id=510): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_usb_connect(0x5, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x5100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000040)={0x0, 0x3, 0xf944, 0x10, r6}) 10m8.688053772s ago: executing program 3 (id=513): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000200000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m8.482080105s ago: executing program 3 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000008c0)="d5", 0x1}, {0x0}, {&(0x7f0000000540), 0x1900}], 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x48000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x4, '\x00', 0x7fff}) sendfile(r4, r6, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 9m52.758054031s ago: executing program 35 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000008c0)="d5", 0x1}, {0x0}, {&(0x7f0000000540), 0x1900}], 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x48000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x4, '\x00', 0x7fff}) sendfile(r4, r6, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 4m34.840917981s ago: executing program 5 (id=873): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) open$dir(0x0, 0x1, 0x19d) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0f", 0xf}], 0x1}}], 0x1, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) open$dir(0x0, 0x3, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000001c0)={0x980902, 0xffffffe2, @value=0xfffffffffffffff7}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m31.443628125s ago: executing program 5 (id=880): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x7, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x1000, 0x8, 0x9, 0xfffffffd}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/142, 0x8e}], 0x1, &(0x7f0000000180)=""/232, 0xe8}, 0x8}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/59, 0x3b}], 0x2}, 0x7f}, {{&(0x7f0000000400)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000480)=""/65, 0x41}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/95, 0x5f}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x6, &(0x7f0000001800)=""/26, 0x1a}, 0x1ff}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001840)=""/79, 0x4f}], 0x1, &(0x7f0000001900)}, 0x8}, {{&(0x7f0000001940)=@un=@abs, 0x80, &(0x7f0000001e00)=[{&(0x7f00000019c0)=""/143, 0x8f}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)=""/253, 0xfd}, {&(0x7f0000001bc0)=""/29, 0x1d}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001c40)=""/95, 0x5f}, {&(0x7f0000001cc0)=""/34, 0x22}, {&(0x7f0000001d00)=""/234, 0xea}], 0x8}, 0x7ff}, {{&(0x7f0000001e80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000001f00)=""/253, 0xfd}, {&(0x7f0000002000)=""/139, 0x8b}, {&(0x7f00000020c0)=""/107, 0x6b}, {&(0x7f0000002140)=""/231, 0xe7}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/209, 0xd1}, {&(0x7f0000003340)=""/36, 0x24}, {&(0x7f0000003380)=""/96, 0x60}, {&(0x7f0000003400)=""/72, 0x48}], 0x9}, 0x7f}, {{&(0x7f0000003540)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003780)=[{&(0x7f00000035c0)=""/1, 0x1}, {&(0x7f0000003600)=""/192, 0xc0}, {&(0x7f00000036c0)=""/152, 0x98}], 0x3}, 0x2}], 0x7, 0x0, &(0x7f0000003980)={0x0, 0x989680}) 4m31.027098898s ago: executing program 5 (id=881): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x6022, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 4m30.676929672s ago: executing program 5 (id=882): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf39, 0x8) r4 = dup3(r0, r1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000010, 0x0, 0x1}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_crypto(0x10, 0x3, 0x15) r8 = io_uring_setup(0x3c21, &(0x7f0000000040)={0x0, 0x835c, 0x20, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f0000000400)=0x8) io_uring_enter(r8, 0x2219, 0x40a0, 0x16, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a320000000005000100e7ffffff040005000200000005000400000000000c000780050015000200000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000440)={'\x00', 0x2, 0x7, 0x7, 0x3, 0x81, 0xffffffffffffffff}) r12 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r12, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r11, 0x2, &(0x7f00000003c0)) syz_clone(0x200000, &(0x7f00000001c0)="c912461465e9232e2b75bcbcc913f71661ab872cf9531be8eafe50bfc88e0e55191b78b610f7d78334e56c42c9f10821e8f7a26d0272823e82f7d1dd29b71ec519e8ab0621292519cd258634dd6727ccad05d97505de87f4d4d96c346f20700eed807da2e97ff672bdab1df19df6a5aafb2ba46a80ea199eb630ca374cad6f997452cc5faff2dc4054835488f391baee1bf335759d009c6649d05a8747ec306cc21e1901027d881bd2acfc84f535528372dbe8ddbbb3133e002fae1e742d1ebbcacf205a75b34927fd31e14e5fa1e307f7363389", 0xd4, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)="4ff1efa61bec33380d53405f21ac919b0046bdf0845a8c6ada6be84f38b782ddad50043594f5ddb887551f309c059340a0ca7a13098467dc9a2aa83c66b8791ba2df24bb332a2ba48fece4b54561680712a848") 4m30.047780237s ago: executing program 5 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e21, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000540)='8', 0x1}], 0x1, 0x0, 0xff84}, 0x4048043) 4m27.111871611s ago: executing program 5 (id=890): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000340)={0x200003, 0x2200083, 0x801, 0x4, 0x37d, 0xfffffffe}) r0 = syz_clone(0x41002000, &(0x7f0000000440)="61bbfce7dd5323c49bb447a75e9d7b09cd947cb45edfa8be0bfe3fd24bcb35bc80bf04a0ccbacf43dcd16d0c8942415d9b3464770340d4173c5fc02392c0270cfde896eb99563d231b55a5cc4c9fc21ca5110ce30526e5e80998cf7b", 0x5c, &(0x7f0000000500), &(0x7f0000001080), &(0x7f00000010c0)="c7c037904698acc9c0bb44bca3c4eac99a859cf367f466d2f31f55b8501eda93ce6a671d6c0347fe7689144244a92cc2a8de985cd66c622847669b58d984466731f552b4c71999609e8129f3aa29c82cc9ea52d51a44899084d1fb1998de149ed4ee3fe3a5f3b58b3ea2da07be789d14bb97ab713f8598b1b0ca5e5ef41a200c6102177db2065ff60397e9cac8f03855e0682c3348a7c9c5620fabeb842b025986abfea616eb88e2e3803c81a62c4fcdd9dc91fcfdb79d313f35d7f1b1e213fd6a8df78fde5219ceac3a7549d1") ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000340)=""/234, 0x2}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0xfffffffd, {0x1c}, [@NDA_CACHEINFO={0x14, 0x3, {0xb, 0x2000000, 0x0, 0x7fffd}}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x44}}, 0xd0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x64, 0x0, &(0x7f0000000f00)=[@release={0x40046306, 0x2}, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000e40)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000d40)=""/205, 0xcd, 0x0, 0x12}, @flat=@weak_handle={0x77682a85, 0x10b}}, &(0x7f0000000ec0)={0x0, 0x18, 0x40}}, 0x40}], 0xbc, 0x0, &(0x7f0000000f80)="324304a479c7fa8b1415ab86204d75e55f073728579055d5e3843a70096a7b9a9054b9546b3f96a83de1472efab6707d5af58276494bd82bc66065093bf156bdab8592a64298dc5d9d0e7d63b8b7cd1a39c7cd191bd22f1b09e0b792dc20aa31da952eab0f9996d15a8795928ab5eb5e8f4614cfaf124f9d4501e68fd036f74ed49549c1dbd3aba95f5078dc19873c4a405b01dfabb8f5ecd2284484b8304e69e05d7e4bdbd2f4f26cb480dddeeb6671a1a779981347190c415493d1"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r4 = getpid() getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/61, &(0x7f0000000180)=0x3d) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r5 = syz_usb_connect$uac1(0x3, 0xc8, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x0, 0xf0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x8deb4e777442886d, 0x1, 0x9, 0x8, 0x3, 0x63}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x3, '#', "3a85"}, @as_header={0x7, 0x24, 0x1, 0x40, 0xc2, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x10, "b3a0", "d680c4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x68, 0x7, 0x4, {0x7, 0x25, 0x1, 0x82, 0xab, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2, 0x8, "d819"}, @as_header={0x7, 0x24, 0x1, 0xff, 0xf, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x4, 0x47, "a608d76adf9372"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x0, "12091d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb, 0x6, 0x8, {0x7, 0x25, 0x1, 0x81, 0x80, 0x6}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xc7, 0x13, 0x3, 0xff, 0x7}, 0x102, &(0x7f0000000380)={0x5, 0xf, 0x102, 0x3}, 0xa, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xce2}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x412}}, {0x1, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x180c}}, {0xcb, &(0x7f0000000700)=@string={0xcb, 0x3, "6e1f3c147fc359813e4b10caaf06693ac0bc93f089816121fd43b9b522b24dfd1e81772be4cca04cabde8620a1c4327654c53e098d86fcce18b7b05e8cf2c0bd3d98acc2b43083309cf255e9d5f92c1924d2f7f52c03803aed242e7f6bed56f6a83083b88c0556983122bf8f74ea7f44ad56bd5e22e3ea16e354f38e72fbd0c547ae62abf7d3b9ea4b5438cd665e6f103944746e7acf9f8bc7e89354b9aa1aa0770251d6c71d340f10825c7017199813c351b57cdc7e87b56cf834bbe5a45938a7bdfd11dcdf440bc9"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x0, 0xd, 0x29, {0x29, 0x5, "d5614d3ec2c7773e6e4f5041dd72704698e2f93b3c3865ffb70e7e47e3875ddb3163ef1f2a97f3"}}, &(0x7f0000000940)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "a000a90eb213345887b50d0192df27f387ad6d0e89b46d1c091d3afabd40b2ecd0078723ce30c8081da3c357e2edc6282b781d3c379f61631fcbfbd23110ceecd9703b63392aff72215de98181a848b77a34d6d848bba4c446f5945224c2fabe6a7605babd5ef4dd50494035f1136781cc5e1bf1609a4d73a943932b714db2b0299d3c3d687fdc4ee3a995eb2283312c829e6b7d56be480fb2ccde5fbf811bda03444303b3be3520af9b32491f40c483a6eb4b7c97290507d15431b8c9e6af877fabfdc917e6b079f81246771890a3d4c6dacf7d7a06eb3ab9e0b3bb4f3880933fa670bb72de6350630880c22b5ee5fba6"}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x0, 0xe, 0x19, "2adc190e62658898ccde858ac8ac2f24f5ef55dbcb777cd83d"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000000b40)={0x20, 0x81, 0x1, "f5"}, &(0x7f0000000bc0)={0x20, 0x82, 0x3, "5f1ef7"}, &(0x7f0000000c00)={0x20, 0x83, 0x2, "520e"}, &(0x7f0000000c40)={0x20, 0x84, 0x3, "edb136"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "41b522"}}) prlimit64(r4, 0x0, &(0x7f0000000000)={0x1, 0x40}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 4m11.744028165s ago: executing program 36 (id=890): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000340)={0x200003, 0x2200083, 0x801, 0x4, 0x37d, 0xfffffffe}) r0 = syz_clone(0x41002000, &(0x7f0000000440)="61bbfce7dd5323c49bb447a75e9d7b09cd947cb45edfa8be0bfe3fd24bcb35bc80bf04a0ccbacf43dcd16d0c8942415d9b3464770340d4173c5fc02392c0270cfde896eb99563d231b55a5cc4c9fc21ca5110ce30526e5e80998cf7b", 0x5c, &(0x7f0000000500), &(0x7f0000001080), &(0x7f00000010c0)="c7c037904698acc9c0bb44bca3c4eac99a859cf367f466d2f31f55b8501eda93ce6a671d6c0347fe7689144244a92cc2a8de985cd66c622847669b58d984466731f552b4c71999609e8129f3aa29c82cc9ea52d51a44899084d1fb1998de149ed4ee3fe3a5f3b58b3ea2da07be789d14bb97ab713f8598b1b0ca5e5ef41a200c6102177db2065ff60397e9cac8f03855e0682c3348a7c9c5620fabeb842b025986abfea616eb88e2e3803c81a62c4fcdd9dc91fcfdb79d313f35d7f1b1e213fd6a8df78fde5219ceac3a7549d1") ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000340)=""/234, 0x2}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0xfffffffd, {0x1c}, [@NDA_CACHEINFO={0x14, 0x3, {0xb, 0x2000000, 0x0, 0x7fffd}}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x44}}, 0xd0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x64, 0x0, &(0x7f0000000f00)=[@release={0x40046306, 0x2}, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000e40)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000d40)=""/205, 0xcd, 0x0, 0x12}, @flat=@weak_handle={0x77682a85, 0x10b}}, &(0x7f0000000ec0)={0x0, 0x18, 0x40}}, 0x40}], 0xbc, 0x0, &(0x7f0000000f80)="324304a479c7fa8b1415ab86204d75e55f073728579055d5e3843a70096a7b9a9054b9546b3f96a83de1472efab6707d5af58276494bd82bc66065093bf156bdab8592a64298dc5d9d0e7d63b8b7cd1a39c7cd191bd22f1b09e0b792dc20aa31da952eab0f9996d15a8795928ab5eb5e8f4614cfaf124f9d4501e68fd036f74ed49549c1dbd3aba95f5078dc19873c4a405b01dfabb8f5ecd2284484b8304e69e05d7e4bdbd2f4f26cb480dddeeb6671a1a779981347190c415493d1"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r4 = getpid() getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/61, &(0x7f0000000180)=0x3d) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r5 = syz_usb_connect$uac1(0x3, 0xc8, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x0, 0xf0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x8deb4e777442886d, 0x1, 0x9, 0x8, 0x3, 0x63}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x3, '#', "3a85"}, @as_header={0x7, 0x24, 0x1, 0x40, 0xc2, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x10, "b3a0", "d680c4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x68, 0x7, 0x4, {0x7, 0x25, 0x1, 0x82, 0xab, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2, 0x8, "d819"}, @as_header={0x7, 0x24, 0x1, 0xff, 0xf, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x4, 0x47, "a608d76adf9372"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x0, "12091d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb, 0x6, 0x8, {0x7, 0x25, 0x1, 0x81, 0x80, 0x6}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xc7, 0x13, 0x3, 0xff, 0x7}, 0x102, &(0x7f0000000380)={0x5, 0xf, 0x102, 0x3}, 0xa, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xce2}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x412}}, {0x1, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x180c}}, {0xcb, &(0x7f0000000700)=@string={0xcb, 0x3, "6e1f3c147fc359813e4b10caaf06693ac0bc93f089816121fd43b9b522b24dfd1e81772be4cca04cabde8620a1c4327654c53e098d86fcce18b7b05e8cf2c0bd3d98acc2b43083309cf255e9d5f92c1924d2f7f52c03803aed242e7f6bed56f6a83083b88c0556983122bf8f74ea7f44ad56bd5e22e3ea16e354f38e72fbd0c547ae62abf7d3b9ea4b5438cd665e6f103944746e7acf9f8bc7e89354b9aa1aa0770251d6c71d340f10825c7017199813c351b57cdc7e87b56cf834bbe5a45938a7bdfd11dcdf440bc9"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x0, 0xd, 0x29, {0x29, 0x5, "d5614d3ec2c7773e6e4f5041dd72704698e2f93b3c3865ffb70e7e47e3875ddb3163ef1f2a97f3"}}, &(0x7f0000000940)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "a000a90eb213345887b50d0192df27f387ad6d0e89b46d1c091d3afabd40b2ecd0078723ce30c8081da3c357e2edc6282b781d3c379f61631fcbfbd23110ceecd9703b63392aff72215de98181a848b77a34d6d848bba4c446f5945224c2fabe6a7605babd5ef4dd50494035f1136781cc5e1bf1609a4d73a943932b714db2b0299d3c3d687fdc4ee3a995eb2283312c829e6b7d56be480fb2ccde5fbf811bda03444303b3be3520af9b32491f40c483a6eb4b7c97290507d15431b8c9e6af877fabfdc917e6b079f81246771890a3d4c6dacf7d7a06eb3ab9e0b3bb4f3880933fa670bb72de6350630880c22b5ee5fba6"}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x0, 0xe, 0x19, "2adc190e62658898ccde858ac8ac2f24f5ef55dbcb777cd83d"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000000b40)={0x20, 0x81, 0x1, "f5"}, &(0x7f0000000bc0)={0x20, 0x82, 0x3, "5f1ef7"}, &(0x7f0000000c00)={0x20, 0x83, 0x2, "520e"}, &(0x7f0000000c40)={0x20, 0x84, 0x3, "edb136"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "41b522"}}) prlimit64(r4, 0x0, &(0x7f0000000000)={0x1, 0x40}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 14.69260333s ago: executing program 6 (id=1189): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) accept(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) connect$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x800400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}]}) 13.664636277s ago: executing program 6 (id=1190): sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004005}, 0x8094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8, 0xf}, {0x3, 0xd}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r7 = socket$kcm(0x1e, 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000001100000000000000000400000000000000000000000000000a00100001000000000000000512f3c6b966"], 0xc4}}, 0x4c050) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f00000003c0)="df57f2f20b76b40193d8d7cab727a84f7d3233967b9bd48dd415de3923e6eb8a96a3012d2f48bb60acf4f322ea101bf84b8bf704a268b9f2fd6530d19b124b9c28abdcc1e127d62b589b4669b0a384", 0x4f}, {&(0x7f0000000440)="7bc5b5c263de68bc895ab8790358c9dbd495", 0x12}, {&(0x7f00000007c0)="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", 0xfc}, {&(0x7f00000008c0)="6a0e32192ee3b3f6e9eec4c6c88c1f9604420dbd992413cd81944f83a49ada421386ee4985df3328f727ead6a431dae8b39571b12a897dddaf7e779dbd1e8e982ed95373d9fb0eb57d07b7458cfbcc185714e70b1f0978fe40cc657ac7ca8e", 0x5f}], 0x4, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xb4, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @private=0xa010101]}, @noop]}}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xb8, [@private=0xa010102, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102]}, @noop, @cipso={0x86, 0x5c, 0x0, [{0x1, 0x12, "82cc5ca810cf5c71e70d6127b7f75263"}, {0x1, 0x3, "d3"}, {0x0, 0xb, "f55118505e1dfebf36"}, {0x5, 0x11, "b5d7993c815238c0e51aec3e231053"}, {0x2, 0xa, "f4f8d5dbf7b03600"}, {0x1, 0xf, "46874602943411ec1e1b21f17f"}, {0x5, 0xc, "b1140c30b81adb2d015f"}]}, @timestamp_addr={0x44, 0x1c, 0x27, 0x1, 0x3, [{@empty, 0x33c2}, {@multicast2, 0xc76}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf34a}]}, @lsrr={0x83, 0x1b, 0x7, [@local, @empty, @remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}]}, @ssrr={0x89, 0x17, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @empty, @empty]}, @ssrr={0x89, 0xb, 0xb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0xf, 0xd5, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0xa010101]}, @rr={0x7, 0x1b, 0xaa, [@rand_addr=0x64010102, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @private=0xa010102]}, @rr={0x7, 0x7, 0x74, [@dev={0xac, 0x14, 0x14, 0x21}]}, @rr={0x7, 0x1f, 0xb9, [@private=0xa010101, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9a}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x1f0}, 0x5) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20050840) 9.397172536s ago: executing program 6 (id=1195): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.647476677s ago: executing program 2 (id=1201): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x0, 0x822b01) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x800, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x65) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x8000005, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000180)={0xac, 0x10008c}, 0x23) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 4.056963084s ago: executing program 2 (id=1202): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x1) (fail_nth: 14) 4.00561948s ago: executing program 6 (id=1203): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getpgrp(0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0xe0600, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x5c, 0x3, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x52b}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x401}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x6fb0f207f958e9d8, 0x840}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x5c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 3.858430566s ago: executing program 6 (id=1204): fsopen(&(0x7f0000000000)='jffs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 3.617938547s ago: executing program 6 (id=1205): creat(0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x321003, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xf4}}, 0x0) 2.89085962s ago: executing program 2 (id=1206): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080) write$sndseq(r2, &(0x7f0000000180)=[{0x4, 0xf, 0x6, 0x6, @tick=0x5, {}, {0x2, 0x8}, @control={0x7, 0xde, 0x8}}, {0x2, 0x3c, 0x6, 0x8, @time={0x1, 0x80000001}, {0x2, 0x7a}, {0xe, 0x5}, @queue={0x8, {0x1fc, 0x4c}}}, {0x9, 0x2, 0x10, 0x8, @tick=0xe1, {0x2, 0x1e}, {0x0, 0x1}, @time=@tick=0x5}, {0x0, 0x1, 0x34, 0x2, @time={0x3, 0x4}, {0x7b, 0x66}, {0x2, 0x80}, @quote={{0x4, 0x5}, 0xff, &(0x7f0000000100)={0xfb, 0x9, 0x3, 0x0, @time={0x0, 0x6f3}, {0x3, 0x2}, {0x7, 0x6}, @connect={{0x10, 0xd}, {0x9, 0x4}}}}}, {0xaa, 0x6, 0x20, 0x5, @tick=0x3, {0xe, 0x2}, {0xd, 0x85}, @control={0x9, 0x400, 0x6}}, {0x9, 0x7, 0xf2, 0x2, @tick=0xc2, {0x4, 0x3}, {0x2, 0xdc}, @addr={0x8, 0x8}}, {0x7, 0x0, 0x4, 0x5, @time={0x8, 0x3}, {0x81, 0x7}, {0xb0, 0x8}, @quote={{0x8, 0xf4}, 0x6, &(0x7f0000000140)={0x4, 0x1, 0x0, 0x61, @tick=0x8, {0x8, 0x7}, {0x8, 0xe}, @result={0x4, 0xb}}}}], 0xc4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) (async) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040), 0x4) 1.690213193s ago: executing program 2 (id=1207): socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x7f) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xb, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYBLOB="d86fefa34c428c5ad112408b16a9b18537c6ed3aa7f2af9235109a1ce3974e29311a454e41d0dbd5bed9303209a49319b85dcf2e12e7339baa4fbdf7c2264827a20e42ef85c531f27d4eabd550fda5f9011ce8a98dbf2c6e064f0ee894bd954e1d849ed046c89ab028c7a0c0ce5648b335c8531ce4e75f48e856f88f8f", @ANYRES8], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000200)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f63696f2b6d651ca9"], 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 474.607177ms ago: executing program 2 (id=1208): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x1, 0x2, 0x1}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) 0s ago: executing program 2 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="7cf5131c", 0x4}], 0x1}, 0x51) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): e beyond EOD, truncated [ 826.082673][T10152] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 826.150032][T10031] chnl_net:caif_netlink_parms(): no params data found [ 826.214845][T10155] fuse: Bad value for 'rootmode' [ 826.250597][T10155] netlink: 72 bytes leftover after parsing attributes in process `syz.6.878'. [ 826.317750][ T9918] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 826.339452][ T9918] usb 6-1: device descriptor read/8, error -71 [ 826.510018][ T9918] usb usb6-port1: unable to enumerate USB device [ 826.579783][T10159] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 826.711401][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.724971][T10182] netlink: 'syz.5.882': attribute type 5 has an invalid length. [ 827.732759][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.5.882'. [ 828.150086][T10195] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 829.676476][T10204] loop8: detected capacity change from 0 to 8 [ 829.695371][T10204] Dev loop8: unable to read RDB block 8 [ 829.695423][T10204] loop8: unable to read partition table [ 829.695681][T10204] loop8: partition table beyond EOD, truncated [ 829.695700][T10204] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 830.986566][T10031] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.986711][T10031] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.007101][T10031] bridge_slave_0: entered allmulticast mode [ 831.034746][T10031] bridge_slave_0: entered promiscuous mode [ 831.079953][T10211] netlink: 'syz.6.889': attribute type 32 has an invalid length. [ 831.079978][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.889'. [ 831.144633][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.144789][T10031] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.145022][T10031] bridge_slave_1: entered allmulticast mode [ 831.172308][T10031] bridge_slave_1: entered promiscuous mode [ 831.289266][T10211] bond1: option coupled_control: invalid value (128) [ 831.332695][T10211] bond1 (unregistering): Released all slaves [ 831.563587][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.890'. [ 831.692683][T10225] netlink: 'syz.5.890': attribute type 1 has an invalid length. [ 831.967066][ T5981] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 832.136773][ T5981] usb 6-1: device descriptor read/64, error -71 [ 832.345255][T10031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.378595][ T5981] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 832.504740][T10031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.506872][ T5981] usb 6-1: device descriptor read/64, error -71 [ 832.618656][ T5981] usb usb6-port1: attempt power cycle [ 832.867597][ T13] bridge_slave_1: left allmulticast mode [ 832.867632][ T13] bridge_slave_1: left promiscuous mode [ 832.867941][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.986906][ T5981] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 833.082050][ T5981] usb 6-1: device descriptor read/8, error -71 [ 834.150925][ T13] bridge_slave_0: left allmulticast mode [ 834.150957][ T13] bridge_slave_0: left promiscuous mode [ 834.151355][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.376744][ T5981] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 834.941596][T10254] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 834.941816][T10254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.407248][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.447913][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.466728][ T5981] usb 6-1: device descriptor read/8, error -110 [ 839.472615][ T13] bond0 (unregistering): Released all slaves [ 839.576832][ T5981] usb usb6-port1: unable to enumerate USB device [ 839.664171][T10262] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 839.759346][T10031] team0: Port device team_slave_0 added [ 840.007731][T10031] team0: Port device team_slave_1 added [ 843.749163][T10031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.749180][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.749209][T10031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.806263][ T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 843.957812][T10031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.957831][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.957860][T10031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.996797][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 844.001849][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 844.001877][ T43] usb 3-1: config 0 has no interface number 0 [ 844.018106][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 844.018135][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.018154][ T43] usb 3-1: Product: syz [ 844.018167][ T43] usb 3-1: Manufacturer: syz [ 844.018180][ T43] usb 3-1: SerialNumber: syz [ 844.033734][ T43] usb 3-1: config 0 descriptor?? [ 844.063870][ T43] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 844.063897][ T43] usb 3-1: selecting invalid altsetting 1 [ 844.063911][ T43] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 844.073311][ T43] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 844.074121][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 844.074177][ T43] usb 3-1: media controller created [ 844.119836][ T13] hsr_slave_0: left promiscuous mode [ 844.137147][ T13] hsr_slave_1: left promiscuous mode [ 844.139660][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.139686][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.141447][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 844.177727][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.177754][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.655913][ T13] veth1_macvtap: left promiscuous mode [ 844.656250][ T13] veth0_macvtap: left promiscuous mode [ 844.656534][ T13] veth1_vlan: left promiscuous mode [ 844.656723][ T13] veth0_vlan: left promiscuous mode [ 845.669437][ T43] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 845.672092][ T43] zl10353_read_register: readreg error (reg=127, ret==-110) [ 845.749436][T10281] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 845.925113][ T43] usb 3-1: USB disconnect, device number 40 [ 846.528720][T10298] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 847.980948][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.997337][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 848.038114][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.040344][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.041491][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.382484][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 848.394496][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 848.411710][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 848.425204][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 848.437688][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 850.098624][ T61] Bluetooth: hci5: command tx timeout [ 850.581419][ T61] Bluetooth: hci6: command tx timeout [ 850.707361][ T13] team0 (unregistering): Port device team_slave_1 removed [ 850.946392][ T13] team0 (unregistering): Port device team_slave_0 removed [ 852.181179][ T61] Bluetooth: hci5: command tx timeout [ 852.655729][ T61] Bluetooth: hci6: command tx timeout [ 854.255738][ T61] Bluetooth: hci5: command tx timeout [ 854.735635][ T61] Bluetooth: hci6: command tx timeout [ 854.771557][T10031] hsr_slave_0: entered promiscuous mode [ 854.772594][T10031] hsr_slave_1: entered promiscuous mode [ 854.773314][T10031] debugfs: 'hsr0' already exists in 'hsr' [ 854.773331][T10031] Cannot create hsr debugfs directory [ 855.339563][ T9918] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 855.533204][ T9918] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 855.533239][ T9918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.568302][ T9918] usb 7-1: config 0 descriptor?? [ 855.583454][ T9918] cp210x 7-1:0.0: cp210x converter detected [ 855.911750][T10333] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 857.565992][ T61] Bluetooth: hci5: command tx timeout [ 857.566032][ T61] Bluetooth: hci6: command tx timeout [ 857.606113][ T9918] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 857.646511][ T9918] usb 7-1: cp210x converter now attached to ttyUSB0 [ 859.826124][ T9918] usb 7-1: USB disconnect, device number 3 [ 859.856858][ T9918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 860.239460][ T9918] cp210x 7-1:0.0: device disconnected [ 861.992909][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 861.994761][T10370] batman_adv: batadv0: Adding interface: dummy0 [ 861.994783][T10370] batman_adv: batadv0: Interface activated: dummy0 [ 861.996305][T10376] sch_fq: defrate 5 ignored. [ 862.805009][T10401] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 862.826717][T10301] chnl_net:caif_netlink_parms(): no params data found [ 862.862592][T10303] chnl_net:caif_netlink_parms(): no params data found [ 868.487921][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.492237][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.492522][T10301] bridge_slave_0: entered allmulticast mode [ 868.496910][T10301] bridge_slave_0: entered promiscuous mode [ 868.574855][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 868.727237][T10432] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 870.400644][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.400911][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.401217][T10301] bridge_slave_1: entered allmulticast mode [ 870.426008][T10301] bridge_slave_1: entered promiscuous mode [ 870.576288][T10303] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.584937][T10303] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.585211][T10303] bridge_slave_0: entered allmulticast mode [ 870.588141][T10303] bridge_slave_0: entered promiscuous mode [ 870.740079][T10303] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.740201][T10303] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.740356][T10303] bridge_slave_1: entered allmulticast mode [ 870.742110][T10303] bridge_slave_1: entered promiscuous mode [ 871.024265][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.191366][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.191966][ T13] bridge_slave_1: left allmulticast mode [ 871.191991][ T13] bridge_slave_1: left promiscuous mode [ 871.192277][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.317052][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 871.321254][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 871.322932][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 871.352518][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 871.353351][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 871.396492][ T13] bridge_slave_0: left allmulticast mode [ 871.396524][ T13] bridge_slave_0: left promiscuous mode [ 871.396785][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.390522][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.653227][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.708057][ T13] bond0 (unregistering): Released all slaves [ 872.904980][T10303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.535203][T10336] Bluetooth: hci1: command tx timeout [ 875.664060][T10336] Bluetooth: hci1: command tx timeout [ 875.707101][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.708751][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.791753][T10441] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 875.934009][T10446] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 875.947652][T10446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 875.999379][T10303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.054607][T10446] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 876.054756][T10446] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 876.163637][T10446] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 876.211486][T10301] team0: Port device team_slave_0 added [ 876.235893][T10446] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 876.236003][T10446] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 876.315670][T10446] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 876.399209][T10446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 876.399362][T10446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 876.416611][ T13] hsr_slave_0: left promiscuous mode [ 876.454487][ T13] hsr_slave_1: left promiscuous mode [ 876.455365][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.486655][T10446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 876.505309][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.268914][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 878.268967][ T5815] Bluetooth: hci5: command 0x0c1a tx timeout [ 878.269284][ T5815] Bluetooth: hci6: command 0x0c1a tx timeout [ 878.352131][T10460] fuse: Unknown parameter 'fd<0x0000000000000004' [ 878.414230][ T61] Bluetooth: hci1: command 0x0419 tx timeout [ 879.435430][ T13] team0 (unregistering): Port device team_slave_1 removed [ 879.584798][ T13] team0 (unregistering): Port device team_slave_0 removed [ 880.161033][T10301] team0: Port device team_slave_1 added [ 880.289289][T10303] team0: Port device team_slave_0 added [ 880.328576][T10466] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 880.344341][T10336] Bluetooth: hci0: command 0x0406 tx timeout [ 880.344405][ T61] Bluetooth: hci6: command 0x0c1a tx timeout [ 880.348486][T10458] Bluetooth: hci5: command 0x0c1a tx timeout [ 882.000860][ T61] Bluetooth: hci1: command 0x0419 tx timeout [ 883.382485][T10458] Bluetooth: hci5: command 0x0c1a tx timeout [ 883.382547][ T61] Bluetooth: hci6: command 0x0c1a tx timeout [ 883.545111][T10303] team0: Port device team_slave_1 added [ 883.888415][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.888435][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.888463][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.013925][ T61] Bluetooth: hci1: command 0x0419 tx timeout [ 884.067483][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.067502][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.067532][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.154569][T10303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.154586][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.154611][T10303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.205447][T10303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.205465][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.205490][T10303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.527497][T10489] FAULT_INJECTION: forcing a failure. [ 884.527497][T10489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.527538][T10489] CPU: 0 UID: 0 PID: 10489 Comm: syz.2.945 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.527568][T10489] Tainted: [L]=SOFTLOCKUP [ 884.527575][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 884.527587][T10489] Call Trace: [ 884.527596][T10489] [ 884.527605][T10489] dump_stack_lvl+0x189/0x250 [ 884.527638][T10489] ? __pfx____ratelimit+0x10/0x10 [ 884.527680][T10489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.527708][T10489] ? __pfx__printk+0x10/0x10 [ 884.527745][T10489] should_fail_ex+0x46c/0x600 [ 884.527779][T10489] strncpy_from_user+0x36/0x2c0 [ 884.527809][T10489] path_setxattrat+0x150/0x3a0 [ 884.527848][T10489] ? __pfx_path_setxattrat+0x10/0x10 [ 884.527906][T10489] ? ksys_write+0x230/0x260 [ 884.527936][T10489] ? __pfx_ksys_write+0x10/0x10 [ 884.527969][T10489] __x64_sys_setxattr+0xbc/0xe0 [ 884.527997][T10489] do_syscall_64+0xfa/0xf80 [ 884.528020][T10489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.528040][T10489] ? clear_bhb_loop+0x60/0xb0 [ 884.528066][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.528085][T10489] RIP: 0033:0x7ff5ad2df749 [ 884.528105][T10489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.528123][T10489] RSP: 002b:00007ff5ab51d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 884.528147][T10489] RAX: ffffffffffffffda RBX: 00007ff5ad536090 RCX: 00007ff5ad2df749 [ 884.528162][T10489] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000000 [ 884.528177][T10489] RBP: 00007ff5ab51d090 R08: 0000000000000001 R09: 0000000000000000 [ 884.528190][T10489] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 884.528203][T10489] R13: 00007ff5ad536128 R14: 00007ff5ad536090 R15: 00007ffe0e1428d8 [ 884.528238][T10489] [ 884.891781][T10301] hsr_slave_0: entered promiscuous mode [ 884.892701][T10301] hsr_slave_1: entered promiscuous mode [ 884.996108][T10303] hsr_slave_0: entered promiscuous mode [ 884.997139][T10303] hsr_slave_1: entered promiscuous mode [ 884.997819][T10303] debugfs: 'hsr0' already exists in 'hsr' [ 884.997836][T10303] Cannot create hsr debugfs directory [ 885.251363][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.946'. [ 885.523948][ T5965] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 885.674907][ T5965] usb 7-1: Using ep0 maxpacket: 16 [ 885.677177][ T5965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.677213][ T5965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.677256][ T5965] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 885.677274][ T5965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.683017][ T5965] usb 7-1: config 0 descriptor?? [ 886.105875][ T61] Bluetooth: hci1: command 0x0419 tx timeout [ 886.148286][ T5965] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 886.571996][T10504] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 888.814942][ T5965] corsair 0003:1B1C:1B02.0004: Failed to get K90 initial state (error -71). [ 888.844352][ T5965] usb 7-1: USB disconnect, device number 4 [ 891.096522][T10443] chnl_net:caif_netlink_parms(): no params data found [ 891.223656][ T5965] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 891.395333][ T5965] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 891.395367][ T5965] usb 3-1: config 1 has no interface number 0 [ 891.395445][ T5965] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 891.395473][ T5965] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 891.395501][ T5965] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 891.395537][ T5965] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 891.395565][ T5965] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 891.395590][ T5965] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x88 has an invalid bInterval 0, changing to 4 [ 891.402888][ T5965] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.402922][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.402943][ T5965] usb 3-1: Product: syz [ 891.402956][ T5965] usb 3-1: Manufacturer: syz [ 891.402969][ T5965] usb 3-1: SerialNumber: syz [ 891.552083][T10532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 891.923167][T10301] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 892.638851][T10301] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 893.059984][T10544] comedi comedi0: dmm32at: I/O port conflict (0x3,16) [ 893.371206][T10301] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 895.726930][T10301] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 895.868032][ T5965] cdc_ncm 3-1:1.1: bind() failure [ 895.922171][ T5965] usb 3-1: USB disconnect, device number 41 [ 895.928541][T10469] udevd[10469]: setting mode of /dev/bus/usb/003/041 to 020664 failed: No such file or directory [ 895.928736][T10469] udevd[10469]: setting owner of /dev/bus/usb/003/041 to uid=0, gid=0 failed: No such file or directory [ 895.953723][T10443] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.953887][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.954175][T10443] bridge_slave_0: entered allmulticast mode [ 895.964843][T10443] bridge_slave_0: entered promiscuous mode [ 895.978413][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.978562][T10443] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.978823][T10443] bridge_slave_1: entered allmulticast mode [ 895.994996][T10443] bridge_slave_1: entered promiscuous mode [ 897.253897][T10570] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 897.942814][ T13] bridge_slave_1: left allmulticast mode [ 897.942848][ T13] bridge_slave_1: left promiscuous mode [ 897.963457][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.154813][ T13] bridge_slave_0: left allmulticast mode [ 899.154847][ T13] bridge_slave_0: left promiscuous mode [ 899.155160][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.784637][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.885431][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.976597][ T13] bond0 (unregistering): Released all slaves [ 900.058074][T10443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.077782][T10443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.974736][ T43] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 901.127218][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 901.187405][ T43] usb 3-1: config index 0 descriptor too short (expected 6683, got 27) [ 901.187440][ T43] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 901.187503][ T43] usb 3-1: config 0 has no interface number 0 [ 901.187862][ T43] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 104, changing to 10 [ 901.187904][ T43] usb 3-1: config 0 interface 85 has no altsetting 0 [ 901.345985][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 901.346053][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.346111][ T43] usb 3-1: Product: syz [ 901.346167][ T43] usb 3-1: Manufacturer: syz [ 901.346183][ T43] usb 3-1: SerialNumber: syz [ 901.579827][ T43] usb 3-1: config 0 descriptor?? [ 904.022017][ T13] hsr_slave_0: left promiscuous mode [ 904.055959][ T13] hsr_slave_1: left promiscuous mode [ 904.059580][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.068564][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.963'. [ 904.068604][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.963'. [ 904.116961][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.998136][ T43] appletouch 3-1:0.85: Failed to read mode from device. [ 904.998411][ T43] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 905.066525][ T43] usb 3-1: USB disconnect, device number 42 [ 906.555241][ T13] team0 (unregistering): Port device team_slave_1 removed [ 906.700935][T10458] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 906.708383][ T13] team0 (unregistering): Port device team_slave_0 removed [ 906.817361][T10458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 906.819443][T10458] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 906.821134][T10458] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 906.822174][T10458] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 907.356368][T10443] team0: Port device team_slave_0 added [ 907.520622][T10601] ip6gretap0: entered promiscuous mode [ 907.533172][T10601] syz_tun: entered promiscuous mode [ 907.606346][T10443] team0: Port device team_slave_1 added [ 908.967690][ T61] Bluetooth: hci3: command tx timeout [ 909.044826][T10613] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 910.973094][ T61] Bluetooth: hci3: command tx timeout [ 911.313840][T10443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.313860][T10443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.313891][T10443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.715261][T10443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.715280][T10443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.715309][T10443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.119797][T10458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 912.169130][T10458] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 912.193304][T10458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 912.196403][T10458] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 912.197408][T10458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 912.709579][ T37] audit: type=1326 audit(2000000687.208:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 912.709907][ T37] audit: type=1326 audit(2000000687.208:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 912.710392][ T37] audit: type=1326 audit(2000000687.208:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 912.710764][ T37] audit: type=1326 audit(2000000687.208:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 912.711055][ T37] audit: type=1326 audit(2000000687.208:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 912.711372][ T37] audit: type=1326 audit(2000000687.208:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 912.736976][T10443] hsr_slave_0: entered promiscuous mode [ 912.744039][T10443] hsr_slave_1: entered promiscuous mode [ 912.747486][T10443] debugfs: 'hsr0' already exists in 'hsr' [ 912.747513][T10443] Cannot create hsr debugfs directory [ 912.875371][ T37] audit: type=1326 audit(2000000687.208:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 912.875703][ T37] audit: type=1326 audit(2000000687.378:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 913.062229][T10458] Bluetooth: hci3: command tx timeout [ 913.208494][ T37] audit: type=1326 audit(2000000687.708:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 913.208818][ T37] audit: type=1326 audit(2000000687.708:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.6.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 915.180690][ T61] Bluetooth: hci3: command tx timeout [ 915.180785][T10458] Bluetooth: hci4: command tx timeout [ 917.212695][T10458] Bluetooth: hci4: command tx timeout [ 918.492409][ T5981] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 918.643271][ T5981] usb 7-1: Using ep0 maxpacket: 8 [ 918.657501][ T5981] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 918.657534][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.657553][ T5981] usb 7-1: Product: syz [ 918.657567][ T5981] usb 7-1: Manufacturer: syz [ 918.657581][ T5981] usb 7-1: SerialNumber: syz [ 918.673512][ T5981] usb 7-1: config 0 descriptor?? [ 919.301850][T10458] Bluetooth: hci4: command tx timeout [ 919.506644][T10686] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 920.692924][ T5981] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110 [ 920.693027][ T5981] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 921.022016][ T5965] usb 7-1: USB disconnect, device number 5 [ 921.120159][T10608] chnl_net:caif_netlink_parms(): no params data found [ 921.372965][T10458] Bluetooth: hci4: command tx timeout [ 923.785882][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.786102][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.786375][T10608] bridge_slave_0: entered allmulticast mode [ 923.789572][T10608] bridge_slave_0: entered promiscuous mode [ 924.744804][T10620] chnl_net:caif_netlink_parms(): no params data found [ 924.794893][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.820138][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.820477][T10608] bridge_slave_1: entered allmulticast mode [ 924.844001][T10608] bridge_slave_1: entered promiscuous mode [ 925.071199][ T5965] kernel write not supported for file bpf-prog (pid: 5965 comm: kworker/1:7) [ 925.308846][T10727] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 928.448353][T10608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.635216][T10608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.600801][T10736] macsec2: entered promiscuous mode [ 929.600822][T10736] macsec2: entered allmulticast mode [ 929.603927][T10608] team0: Port device team_slave_0 added [ 931.867968][T10608] team0: Port device team_slave_1 added [ 932.182765][T10620] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.182922][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.183088][T10620] bridge_slave_0: entered allmulticast mode [ 932.184847][T10620] bridge_slave_0: entered promiscuous mode [ 932.283008][T10620] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.283155][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.283393][T10620] bridge_slave_1: entered allmulticast mode [ 932.285675][T10620] bridge_slave_1: entered promiscuous mode [ 934.021402][T10608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.021423][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.021450][T10608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.034652][T10766] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 935.462646][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 935.474348][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 935.483602][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 935.501818][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 935.502601][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 935.594791][T10608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.594804][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.594820][T10608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.116461][T10620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.167684][T10620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.119870][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.120492][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.660932][ T61] Bluetooth: hci1: command tx timeout [ 937.700040][T10608] hsr_slave_0: entered promiscuous mode [ 937.710496][T10608] hsr_slave_1: entered promiscuous mode [ 937.718431][T10608] debugfs: 'hsr0' already exists in 'hsr' [ 937.718455][T10608] Cannot create hsr debugfs directory [ 937.723753][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 937.823198][T10620] team0: Port device team_slave_0 added [ 937.848800][T10620] team0: Port device team_slave_1 added [ 937.882777][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 937.882812][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.882833][ T9] usb 3-1: Product: syz [ 937.882847][ T9] usb 3-1: Manufacturer: syz [ 937.882862][ T9] usb 3-1: SerialNumber: syz [ 937.973819][ T9] usb 3-1: config 0 descriptor?? [ 938.202066][ T9] hso 3-1:0.0: Failed to find BULK IN ep [ 938.209654][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 939.013307][ T9] usb 3-1: USB disconnect, device number 43 [ 940.681538][ T61] Bluetooth: hci1: command tx timeout [ 940.775372][T10620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.775386][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.775402][T10620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.989933][T10620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.989953][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.989981][T10620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.420847][ T3861] bridge_slave_1: left allmulticast mode [ 941.420880][ T3861] bridge_slave_1: left promiscuous mode [ 941.421168][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.474653][ T3861] bridge_slave_0: left allmulticast mode [ 941.474777][ T3861] bridge_slave_0: left promiscuous mode [ 941.475073][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.569296][ T3861] bridge_slave_1: left allmulticast mode [ 941.569329][ T3861] bridge_slave_1: left promiscuous mode [ 941.580406][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.642406][ T3861] bridge_slave_0: left allmulticast mode [ 941.642440][ T3861] bridge_slave_0: left promiscuous mode [ 941.642725][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.285044][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.381995][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.479275][ T3861] bond0 (unregistering): Released all slaves [ 942.731534][ T61] Bluetooth: hci1: command tx timeout [ 943.901379][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.981393][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.062831][ T3861] bond0 (unregistering): Released all slaves [ 944.688382][T10824] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 944.746357][T10620] hsr_slave_0: entered promiscuous mode [ 944.748435][T10620] hsr_slave_1: entered promiscuous mode [ 944.764182][T10620] debugfs: 'hsr0' already exists in 'hsr' [ 944.764224][T10620] Cannot create hsr debugfs directory [ 944.813549][ T61] Bluetooth: hci1: command tx timeout [ 945.100691][ T9956] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 945.253506][ T9956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 945.253543][ T9956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 945.253572][ T9956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 945.253599][ T9956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 945.253644][ T9956] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 945.253668][ T9956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.262624][ T9956] usb 3-1: config 0 descriptor?? [ 945.346298][T10822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 945.849045][ T9956] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 946.720937][ T9956] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 946.727203][ T9956] usb 3-1: USB disconnect, device number 44 [ 947.010071][T10828] fido_id[10828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 947.471287][ T3861] hsr_slave_0: left promiscuous mode [ 947.492546][ T3861] hsr_slave_1: left promiscuous mode [ 947.493855][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.521602][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.480467][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 949.430334][ T3861] hsr_slave_0: left promiscuous mode [ 949.450359][ T3861] hsr_slave_1: left promiscuous mode [ 949.499295][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.531388][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.620153][ T5965] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 951.681327][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 951.811048][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.811081][ T5965] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 951.811095][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.816757][ T5965] usb 3-1: config 0 descriptor?? [ 951.870656][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 952.373501][ T5965] usbhid 3-1:0.0: can't add hid device: -71 [ 952.373651][ T5965] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 952.378190][ T5965] usb 3-1: USB disconnect, device number 45 [ 953.138518][T10848] sg_write: data in/out 83894236/28 bytes for SCSI command 0x1-- guessing data in; [ 953.138518][T10848] program syz.2.1008 not setting count and/or reply_len properly [ 953.320823][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 953.461361][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 957.270898][T10768] chnl_net:caif_netlink_parms(): no params data found [ 957.333138][ T5875] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 957.545481][ T5875] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 957.545551][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.547113][ T5875] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 957.547140][ T5875] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 957.547161][ T5875] usb 7-1: Manufacturer: syz [ 957.586499][ T5875] usb 7-1: config 0 descriptor?? [ 958.229033][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.229989][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.255384][ T5875] rc_core: IR keymap rc-hauppauge not found [ 958.255408][ T5875] Registered IR keymap rc-empty [ 958.267291][ T5875] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 958.294343][ T5875] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 958.444001][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.444803][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.489381][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.490338][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.491274][ C0] igorplugusb 7-1:0.0: Error: urb status = -32 [ 959.245640][ T5875] usb 7-1: USB disconnect, device number 6 [ 961.090641][T10768] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.091296][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.091715][T10768] bridge_slave_0: entered allmulticast mode [ 961.095165][T10768] bridge_slave_0: entered promiscuous mode [ 961.133730][T10768] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.139946][T10768] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.140272][T10768] bridge_slave_1: entered allmulticast mode [ 961.164363][T10768] bridge_slave_1: entered promiscuous mode [ 963.297301][T10768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.333766][T10768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.694512][T10768] team0: Port device team_slave_0 added [ 963.830667][T10768] team0: Port device team_slave_1 added [ 964.195500][T10768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.195519][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.195548][T10768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.245446][T10768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.245464][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.245492][T10768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.499628][ T5875] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 964.552967][ T9918] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 964.641914][T10768] hsr_slave_0: entered promiscuous mode [ 964.642886][T10768] hsr_slave_1: entered promiscuous mode [ 964.683245][ T5875] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 964.683318][ T5875] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 964.683340][ T5875] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 964.683362][ T5875] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 964.683376][ T5875] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 964.686182][ T5875] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 964.686210][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.686221][ T5875] usb 7-1: Product: syz [ 964.686230][ T5875] usb 7-1: Manufacturer: syz [ 964.686238][ T5875] usb 7-1: SerialNumber: syz [ 964.730246][ T9918] usb 3-1: Using ep0 maxpacket: 32 [ 964.733981][ T9918] usb 3-1: config 158 has an invalid descriptor of length 203, skipping remainder of the config [ 964.734006][ T9918] usb 3-1: config 158 has 0 interfaces, different from the descriptor's value: 1 [ 964.734041][ T9918] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 964.734115][ T9918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.835495][ T5875] usb 7-1: ucan: probing device on interface #0 [ 964.835522][ T5875] usb 7-1: ucan: invalid endpoint configuration [ 964.835536][ T5875] usb 7-1: ucan: probe failed; try to update the device firmware [ 965.051443][ T5875] usb 7-1: USB disconnect, device number 7 [ 965.114902][ T9918] usb 3-1: string descriptor 0 read error: -71 [ 965.196521][ T9918] usb 3-1: USB disconnect, device number 46 [ 965.747879][T10608] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 965.845610][T10608] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 966.049399][T10608] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 966.522601][T10608] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 967.911427][T10920] overlayfs: missing 'workdir' [ 969.957744][T10458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 969.982706][T10458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 970.004446][T10458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 970.006172][T10458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 970.007210][T10458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 971.818902][T10620] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 971.891882][T10620] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 971.974444][T10620] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 972.057093][ T3861] bridge_slave_1: left allmulticast mode [ 972.057124][ T3861] bridge_slave_1: left promiscuous mode [ 972.057401][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.089164][ T61] Bluetooth: hci5: command tx timeout [ 972.150967][ T3861] bridge_slave_0: left allmulticast mode [ 972.151001][ T3861] bridge_slave_0: left promiscuous mode [ 972.151332][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.202067][T10944] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1033'. [ 973.202119][T10944] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 974.168901][ T61] Bluetooth: hci5: command tx timeout [ 974.681169][T10458] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.696921][T10458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.713320][T10458] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.715923][T10458] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.717054][T10458] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 975.513208][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.610214][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.695637][ T3861] bond0 (unregistering): Released all slaves [ 975.810767][ T9956] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 975.938739][ T9956] usb 3-1: device descriptor read/64, error -71 [ 975.938828][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 976.088839][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 976.124565][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.124596][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 976.124655][ T9] usb 7-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=98.c8 [ 976.124679][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.170839][ T9] usb 7-1: config 0 descriptor?? [ 976.188711][ T9956] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 976.249682][T10458] Bluetooth: hci5: command tx timeout [ 976.338972][ T9956] usb 3-1: device descriptor read/64, error -71 [ 976.392773][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.393288][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.416362][ T9] usb 7-1: string descriptor 0 read error: -71 [ 976.433673][ T9] usb 7-1: USB disconnect, device number 8 [ 976.449324][ T9956] usb usb3-port1: attempt power cycle [ 976.620464][ T3861] hsr_slave_0: left promiscuous mode [ 976.638844][ T3861] hsr_slave_1: left promiscuous mode [ 976.640779][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.679798][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.798829][ T9956] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 976.821389][T10458] Bluetooth: hci3: command tx timeout [ 976.822371][ T9956] usb 3-1: device descriptor read/8, error -71 [ 977.082248][ T9956] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 977.109335][ T9956] usb 3-1: device descriptor read/8, error -71 [ 977.219457][ T9956] usb usb3-port1: unable to enumerate USB device [ 977.569249][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 977.588712][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 977.749970][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 977.760707][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.760736][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.761880][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 977.761903][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 977.761914][ T9] usb 7-1: SerialNumber: syz [ 978.019576][ T9] usb 7-1: 0:2 : does not exist [ 978.075774][ T9] usb 7-1: USB disconnect, device number 9 [ 978.184330][T10925] udevd[10925]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.328671][T10458] Bluetooth: hci5: command tx timeout [ 978.888609][T10458] Bluetooth: hci3: command tx timeout [ 979.412953][T10979] tipc: Failed to remove unknown binding: 66,1,1/4:426739518/426739520 [ 979.412999][T10979] tipc: Failed to remove unknown binding: 66,1,1/4:426739518/426739520 [ 980.103225][T10926] chnl_net:caif_netlink_parms(): no params data found [ 980.968546][T10458] Bluetooth: hci3: command tx timeout [ 981.380627][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.380786][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.381040][T10926] bridge_slave_0: entered allmulticast mode [ 981.383015][T10926] bridge_slave_0: entered promiscuous mode [ 981.461109][T10951] chnl_net:caif_netlink_parms(): no params data found [ 981.482376][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.482561][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.482810][T10926] bridge_slave_1: entered allmulticast mode [ 981.484517][T10926] bridge_slave_1: entered promiscuous mode [ 981.740138][T10768] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 981.909971][T10768] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 982.186774][ T9956] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 982.882080][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.942568][T10768] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 983.001041][ T9956] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 983.001115][ T9956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.003426][ T9956] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 983.003457][ T9956] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 983.003478][ T9956] usb 7-1: Manufacturer: syz [ 983.021351][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.054759][T11019] Bluetooth: MGMT ver 1.23 [ 983.056145][T11019] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 983.059186][T10458] Bluetooth: hci3: command tx timeout [ 983.090293][ T9956] usb 7-1: config 0 descriptor?? [ 983.198564][ T9956] rc_core: IR keymap rc-hauppauge not found [ 983.198588][ T9956] Registered IR keymap rc-empty [ 983.200489][ T9956] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 983.204211][ T9956] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 983.320521][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 983.541847][ T9] usb 7-1: USB disconnect, device number 10 [ 983.555995][T10768] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 984.591806][T10926] team0: Port device team_slave_0 added [ 984.683659][T10926] team0: Port device team_slave_1 added [ 984.936794][T10951] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.937768][T10951] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.941047][T10951] bridge_slave_0: entered allmulticast mode [ 984.947901][T10951] bridge_slave_0: entered promiscuous mode [ 985.072694][T10951] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.072805][T10951] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.072970][T10951] bridge_slave_1: entered allmulticast mode [ 985.074677][T10951] bridge_slave_1: entered promiscuous mode [ 985.302033][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.302052][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.302082][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.318598][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.318614][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.318640][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.501746][T10951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.659749][T10951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.999926][T10926] hsr_slave_0: entered promiscuous mode [ 986.000925][T10926] hsr_slave_1: entered promiscuous mode [ 986.001644][T10926] debugfs: 'hsr0' already exists in 'hsr' [ 986.001662][T10926] Cannot create hsr debugfs directory [ 986.130598][T10951] team0: Port device team_slave_0 added [ 986.182727][T10951] team0: Port device team_slave_1 added [ 987.560853][T10951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.560871][T10951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.560897][T10951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.589624][ T37] audit: type=1326 audit(2000000762.102:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11076 comm="syz.6.1057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x0 [ 987.799302][T10951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.799319][T10951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.799344][T10951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.430800][T11084] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1059'. [ 988.768028][ T9918] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 988.918382][ T9918] usb 7-1: Using ep0 maxpacket: 16 [ 988.951993][ T9918] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 988.952022][ T9918] usb 7-1: config 1 has no interface number 0 [ 988.952059][ T9918] usb 7-1: config 1 interface 105 has no altsetting 0 [ 988.954793][ T9918] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 988.954822][ T9918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.954841][ T9918] usb 7-1: Product: syz [ 988.954856][ T9918] usb 7-1: Manufacturer: syz [ 988.954869][ T9918] usb 7-1: SerialNumber: syz [ 989.173109][T10951] hsr_slave_0: entered promiscuous mode [ 989.174577][T10951] hsr_slave_1: entered promiscuous mode [ 989.175550][T10951] debugfs: 'hsr0' already exists in 'hsr' [ 989.175577][T10951] Cannot create hsr debugfs directory [ 989.504042][ T9918] aqc111 7-1:1.105: probe with driver aqc111 failed with error -22 [ 989.560245][ T9918] usb 7-1: USB disconnect, device number 11 [ 989.595479][T11094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.706229][T10768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.397291][T11106] usb usb5: usbfs: process 11106 (syz.2.1066) did not claim interface 0 before use [ 992.036460][T10768] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.074061][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.074338][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.104432][ T3861] bridge_slave_1: left allmulticast mode [ 992.104459][ T3861] bridge_slave_1: left promiscuous mode [ 992.104645][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.157913][ T43] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 992.179724][ T3861] bridge_slave_0: left allmulticast mode [ 992.179758][ T3861] bridge_slave_0: left promiscuous mode [ 992.180054][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.253823][ T3861] bridge_slave_1: left allmulticast mode [ 992.253858][ T3861] bridge_slave_1: left promiscuous mode [ 992.254162][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.307775][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 992.310205][ T43] usb 7-1: config 0 has an invalid interface number: 100 but max is 0 [ 992.310232][ T43] usb 7-1: config 0 has no interface number 0 [ 992.310286][ T43] usb 7-1: config 0 interface 100 altsetting 16 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 992.310315][ T43] usb 7-1: config 0 interface 100 altsetting 16 bulk endpoint 0x86 has invalid maxpacket 1023 [ 992.310341][ T43] usb 7-1: config 0 interface 100 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 992.310364][ T43] usb 7-1: config 0 interface 100 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 992.310387][ T43] usb 7-1: config 0 interface 100 has no altsetting 0 [ 992.314422][ T43] usb 7-1: New USB device found, idVendor=2c7c, idProduct=6008, bcdDevice=67.1d [ 992.314449][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.314470][ T43] usb 7-1: Product: syz [ 992.314485][ T43] usb 7-1: Manufacturer: syz [ 992.314500][ T43] usb 7-1: SerialNumber: syz [ 992.422064][ T3861] bridge_slave_0: left allmulticast mode [ 992.422096][ T3861] bridge_slave_0: left promiscuous mode [ 992.422374][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.426729][ T43] usb 7-1: config 0 descriptor?? [ 992.433472][T11108] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 992.557543][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1069'. [ 992.662589][ T43] option 7-1:0.100: GSM modem (1-port) converter detected [ 992.697593][ T43] usb 7-1: USB disconnect, device number 12 [ 992.739276][ T43] option 7-1:0.100: device disconnected [ 992.928571][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.008963][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.077522][ T3861] bond0 (unregistering): Released all slaves [ 993.329127][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.498795][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.513800][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 993.519673][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 993.531941][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 993.537012][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.541266][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.634101][ T3861] bond0 (unregistering): Released all slaves [ 993.707744][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 993.868034][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 993.871239][ T9] usb 7-1: config 0 has no interfaces? [ 993.877947][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 993.877980][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.878000][ T9] usb 7-1: Product: syz [ 993.878014][ T9] usb 7-1: Manufacturer: syz [ 993.878159][ T9] usb 7-1: SerialNumber: syz [ 993.928219][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 993.928246][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 994.060278][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.060443][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.267774][ T3861] hsr_slave_0: left promiscuous mode [ 994.307699][ T3861] hsr_slave_1: left promiscuous mode [ 994.310220][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.336745][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.607919][ T3861] hsr_slave_0: left promiscuous mode [ 994.657983][ T3861] hsr_slave_1: left promiscuous mode [ 994.660209][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.688720][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.057926][T11121] binder: 11120:11121 ioctl c0306201 200000000180 returned -14 [ 995.571658][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 995.637675][T10458] Bluetooth: hci4: command tx timeout [ 995.758341][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 995.827771][ T9956] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 995.977573][ T9956] usb 3-1: Using ep0 maxpacket: 8 [ 996.025611][ T9956] usb 3-1: config 0 interface 0 has no altsetting 0 [ 996.037377][ T9956] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 996.037398][ T9956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.037502][ T9956] usb 3-1: Product: syz [ 996.037520][ T9956] usb 3-1: Manufacturer: syz [ 996.037536][ T9956] usb 3-1: SerialNumber: syz [ 996.045818][ T9956] usb 3-1: config 0 descriptor?? [ 996.349038][ T9956] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 996.412184][ T6076] r8152-cfgselector 7-1: USB disconnect, device number 13 [ 996.752584][ T9956] gspca_sonixj: reg_w1 err -71 [ 996.752704][ T9956] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 996.766556][ T9956] usb 3-1: USB disconnect, device number 51 [ 997.160694][ T9956] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 997.297804][ T9956] usb 7-1: device descriptor read/64, error -71 [ 997.567550][ T9956] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 997.592070][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 997.687545][T10458] Bluetooth: hci4: command tx timeout [ 997.784810][ T9956] usb 7-1: device descriptor read/64, error -71 [ 997.845918][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 997.917747][ T9956] usb usb7-port1: attempt power cycle [ 998.284020][ T9956] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 998.312861][ T9956] usb 7-1: device descriptor read/8, error -71 [ 998.528816][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.528867][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.587552][ T9956] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 998.608837][ T9956] usb 7-1: device descriptor read/8, error -71 [ 998.717868][ T9956] usb usb7-port1: unable to enumerate USB device [ 999.796749][T10458] Bluetooth: hci4: command tx timeout [ 1001.613522][T11146] ip6gre1: entered allmulticast mode [ 1001.713753][T11153] FAULT_INJECTION: forcing a failure. [ 1001.713753][T11153] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.713793][T11153] CPU: 0 UID: 0 PID: 11153 Comm: syz.2.1080 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1001.713819][T11153] Tainted: [L]=SOFTLOCKUP [ 1001.713826][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1001.713839][T11153] Call Trace: [ 1001.713847][T11153] [ 1001.713856][T11153] dump_stack_lvl+0x189/0x250 [ 1001.713887][T11153] ? __pfx____ratelimit+0x10/0x10 [ 1001.713925][T11153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1001.713950][T11153] ? __pfx__printk+0x10/0x10 [ 1001.713977][T11153] ? __pfx___might_resched+0x10/0x10 [ 1001.714003][T11153] should_fail_ex+0x46c/0x600 [ 1001.714034][T11153] ? p9_client_prepare_req+0x159/0xa10 [ 1001.714071][T11153] should_failslab+0xa8/0x100 [ 1001.714090][T11153] ? p9_client_prepare_req+0x159/0xa10 [ 1001.714114][T11153] kmem_cache_alloc_noprof+0x84/0x6c0 [ 1001.714139][T11153] ? do_raw_spin_lock+0x121/0x290 [ 1001.714169][T11153] p9_client_prepare_req+0x159/0xa10 [ 1001.714205][T11153] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1001.714232][T11153] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1001.714253][T11153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1001.714292][T11153] p9_client_rpc+0x18d/0xa60 [ 1001.714318][T11153] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1001.714348][T11153] ? rt_spin_unlock+0x150/0x200 [ 1001.714383][T11153] ? __pfx_p9_client_rpc+0x10/0x10 [ 1001.714418][T11153] ? p9_conn_create+0x54c/0x5d0 [ 1001.714441][T11153] ? p9_fd_create+0x341/0x450 [ 1001.714466][T11153] p9_client_create+0x57a/0xc60 [ 1001.714497][T11153] ? __pfx_p9_client_create+0x10/0x10 [ 1001.714543][T11153] v9fs_session_init+0x46/0xe00 [ 1001.714564][T11153] ? __kasan_kmalloc+0x93/0xb0 [ 1001.714595][T11153] ? __kmalloc_cache_noprof+0x1fb/0x6d0 [ 1001.714623][T11153] ? kfree+0x1bd/0x900 [ 1001.714645][T11153] ? vfs_parse_monolithic_sep+0x26a/0x320 [ 1001.714667][T11153] ? v9fs_get_tree+0xa4/0xa60 [ 1001.714699][T11153] v9fs_get_tree+0xb7/0xa60 [ 1001.714727][T11153] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1001.714753][T11153] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1001.714780][T11153] ? cap_capable+0x123/0x440 [ 1001.714803][T11153] ? v9fs_init_fs_context+0x137/0x500 [ 1001.714829][T11153] ? safesetid_security_capable+0xa9/0x1a0 [ 1001.714865][T11153] vfs_get_tree+0x92/0x2a0 [ 1001.714898][T11153] do_new_mount+0x302/0xa10 [ 1001.714918][T11153] ? safesetid_security_capable+0xa9/0x1a0 [ 1001.714951][T11153] ? __pfx_do_new_mount+0x10/0x10 [ 1001.714971][T11153] ? ns_capable+0x8a/0xf0 [ 1001.714997][T11153] ? path_mount+0x628/0xff0 [ 1001.715031][T11153] __se_sys_mount+0x313/0x410 [ 1001.715069][T11153] ? __pfx___se_sys_mount+0x10/0x10 [ 1001.715096][T11153] ? do_syscall_64+0xbe/0xf80 [ 1001.715114][T11153] ? __x64_sys_mount+0x20/0xc0 [ 1001.715138][T11153] do_syscall_64+0xfa/0xf80 [ 1001.715159][T11153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.715179][T11153] ? clear_bhb_loop+0x60/0xb0 [ 1001.715205][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.715225][T11153] RIP: 0033:0x7ff5ad2df749 [ 1001.715245][T11153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.715264][T11153] RSP: 002b:00007ff5ab53e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1001.715287][T11153] RAX: ffffffffffffffda RBX: 00007ff5ad535fa0 RCX: 00007ff5ad2df749 [ 1001.715303][T11153] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 1001.715316][T11153] RBP: 00007ff5ab53e090 R08: 0000200000000080 R09: 0000000000000000 [ 1001.715330][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1001.715343][T11153] R13: 00007ff5ad536038 R14: 00007ff5ad535fa0 R15: 00007ffe0e1428d8 [ 1001.715379][T11153] [ 1001.847349][T10458] Bluetooth: hci4: command tx timeout [ 1002.269086][ T1400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1002.278206][T11118] chnl_net:caif_netlink_parms(): no params data found [ 1002.650699][T11160] kvm: kvm [11159]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3f78 [ 1003.021528][T11163] erspan0: entered promiscuous mode [ 1003.021561][T11163] erspan0: entered allmulticast mode [ 1003.600863][T11118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.601084][T11118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.601336][T11118] bridge_slave_0: entered allmulticast mode [ 1003.610290][T11118] bridge_slave_0: entered promiscuous mode [ 1003.631675][T11118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.640741][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.641009][T11118] bridge_slave_1: entered allmulticast mode [ 1003.674318][T11118] bridge_slave_1: entered promiscuous mode [ 1004.237462][T11118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.691462][T11118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.318962][ T37] audit: type=1326 audit(2000000779.823:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1005.323549][ T37] audit: type=1326 audit(2000000779.833:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1005.323871][ T37] audit: type=1326 audit(2000000779.833:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1005.324257][ T37] audit: type=1326 audit(2000000779.833:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1006.175531][T11118] team0: Port device team_slave_0 added [ 1006.253050][T11118] team0: Port device team_slave_1 added [ 1006.337175][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1006.548599][T10926] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1006.939342][T10926] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1007.721939][T11199] syz.2.1091 (11199): drop_caches: 2 [ 1008.483606][T10926] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1009.037524][T11118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.037544][T11118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.037573][T11118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.869213][T11118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.869233][T11118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.869264][T11118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.869904][T10926] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1010.571837][T11118] hsr_slave_0: entered promiscuous mode [ 1010.573543][T11118] hsr_slave_1: entered promiscuous mode [ 1010.574702][T11118] debugfs: 'hsr0' already exists in 'hsr' [ 1010.574729][T11118] Cannot create hsr debugfs directory [ 1010.938735][T10951] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1011.174012][T10951] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1011.339347][T10951] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1011.491401][T10951] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1011.747499][ T74] bridge_slave_1: left allmulticast mode [ 1011.747532][ T74] bridge_slave_1: left promiscuous mode [ 1011.747879][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.829444][ T74] bridge_slave_0: left allmulticast mode [ 1011.829478][ T74] bridge_slave_0: left promiscuous mode [ 1011.829786][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.126651][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1015.897147][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.997653][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.038537][ T74] bond0 (unregistering): Released all slaves [ 1016.565372][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 1016.816593][ T74] hsr_slave_0: left promiscuous mode [ 1016.838262][ T74] hsr_slave_1: left promiscuous mode [ 1016.842319][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.864019][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.396991][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1018.746338][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1018.748823][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.748850][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.752161][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1018.752189][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.752210][ T9] usb 7-1: Product: syz [ 1018.752225][ T9] usb 7-1: Manufacturer: syz [ 1018.752239][ T9] usb 7-1: SerialNumber: syz [ 1019.045389][ T9] usb 7-1: 0:2 : does not exist [ 1019.063946][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1019.138994][ T9] usb 7-1: USB disconnect, device number 18 [ 1019.216442][ T9956] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1019.230470][T10925] udevd[10925]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.388548][ T9956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.388623][ T9956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1019.388639][ T9956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1019.388655][ T9956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1019.388667][ T9956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1019.392441][ T9956] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1019.392466][ T9956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1019.392478][ T9956] usb 3-1: Product: syz [ 1019.392486][ T9956] usb 3-1: Manufacturer: syz [ 1019.392494][ T9956] usb 3-1: SerialNumber: syz [ 1019.409356][ T9956] usb 3-1: config 0 descriptor?? [ 1019.528186][ T74] team0 (unregistering): Port device team_slave_1 removed [ 1019.654484][ T9956] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1019.654515][ T9956] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1019.717238][ T74] team0 (unregistering): Port device team_slave_0 removed [ 1019.853102][ T9956] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1019.853121][ T9956] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1019.853137][ T9956] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1020.065500][ T9956] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1021.140060][ T9956] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1021.145243][ T9956] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1021.155919][ T9956] usb 3-1: USB disconnect, device number 52 [ 1023.476103][ T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1023.639220][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.639286][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1023.639315][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1023.639337][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1023.645335][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1023.645368][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1023.645390][ T9] usb 3-1: Manufacturer: syz [ 1023.731383][ T9] usb 3-1: config 0 descriptor?? [ 1023.966315][ T5966] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1024.047005][ T9] rc_core: IR keymap rc-hauppauge not found [ 1024.047028][ T9] Registered IR keymap rc-empty [ 1024.047221][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.074175][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.123428][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1024.177188][ T5966] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1024.177234][ T5966] usb 7-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1024.177258][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.207235][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 1024.213103][ T5966] usb 7-1: config 0 descriptor?? [ 1024.215033][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.281033][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.306531][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.361365][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.386751][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.402225][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.416287][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.446138][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.486303][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.516295][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.533353][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.556539][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1024.559302][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.562728][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.622172][ T9] mceusb 3-1:0.0: Registered ÒŸ with mce emulator interface version 1 [ 1024.622436][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1024.819382][T10951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.887608][ T2218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.887861][ T2218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.773601][ T5966] kye 0003:0458:500F.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1025.828605][ T5966] kye 0003:0458:500F.0006: unknown main item tag 0x0 [ 1025.828885][ T5966] kye 0003:0458:500F.0006: unknown main item tag 0x0 [ 1025.828915][ T5966] kye 0003:0458:500F.0006: unknown main item tag 0x0 [ 1025.945544][ T5966] kye 0003:0458:500F.0006: hidraw0: USB HID v1.01 Device [HID 0458:500f] on usb-dummy_hcd.6-1/input0 [ 1025.945581][ T5966] kye 0003:0458:500F.0006: tablet-enabling feature report not found [ 1025.945597][ T5966] kye 0003:0458:500F.0006: tablet enabling failed [ 1026.275473][T11274] netlink: 6912 bytes leftover after parsing attributes in process `syz.6.1114'. [ 1026.276748][T11274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1026.414785][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.414994][T10731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.735399][T10951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.871535][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.871783][T10731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.901486][ T805] usb 7-1: USB disconnect, device number 19 [ 1027.030160][ T5981] usb 3-1: USB disconnect, device number 53 [ 1027.041181][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.041326][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.948188][T11305] geneve3: entered promiscuous mode [ 1028.066225][T11118] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1028.218876][T11118] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1028.326808][T11118] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1028.428320][T11118] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1028.465166][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1028.488104][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1028.489737][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1028.504191][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1028.505107][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1028.590747][ T6076] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1028.738804][ T6076] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.738869][ T6076] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1028.738897][ T6076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1028.738923][ T6076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1028.738947][ T6076] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1028.742074][ T6076] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1028.742103][ T6076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1028.742123][ T6076] usb 3-1: Product: syz [ 1028.742136][ T6076] usb 3-1: Manufacturer: syz [ 1028.742150][ T6076] usb 3-1: SerialNumber: syz [ 1028.856394][ T6076] usb 3-1: config 0 descriptor?? [ 1029.075853][ T6076] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1029.075881][ T6076] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1029.279074][ T6076] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1029.279101][ T6076] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1029.279122][ T6076] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1029.328257][T10951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.525878][ T6076] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1030.538906][ T6076] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1030.539126][ T6076] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1030.566209][ T6076] usb 3-1: USB disconnect, device number 54 [ 1030.677576][T10458] Bluetooth: hci1: command tx timeout [ 1030.785627][ T5966] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1030.925647][ T5966] usb 7-1: device descriptor read/64, error -71 [ 1031.210271][ T5966] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1031.355708][ T5966] usb 7-1: device descriptor read/64, error -71 [ 1031.486307][ T5966] usb usb7-port1: attempt power cycle [ 1031.868734][ T5966] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1031.888962][ T5966] usb 7-1: device descriptor read/8, error -71 [ 1031.958131][T11311] chnl_net:caif_netlink_parms(): no params data found [ 1031.990783][T11118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.135785][ T5966] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1032.157081][ T5966] usb 7-1: device descriptor read/8, error -71 [ 1032.266264][ T5966] usb usb7-port1: unable to enumerate USB device [ 1032.573611][T11118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.678982][T10951] veth0_vlan: entered promiscuous mode [ 1032.725508][T10458] Bluetooth: hci1: command tx timeout [ 1032.780570][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.780718][T10731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.045703][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1033.223262][ T2218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.223456][ T2218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.241036][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.241178][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.241449][T11311] bridge_slave_0: entered allmulticast mode [ 1033.256203][T11311] bridge_slave_0: entered promiscuous mode [ 1033.288754][T11311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.288878][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.289125][T11311] bridge_slave_1: entered allmulticast mode [ 1033.292409][T11311] bridge_slave_1: entered promiscuous mode [ 1033.531254][T10951] veth1_vlan: entered promiscuous mode [ 1033.716717][ T6076] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1034.018869][ T6076] usb 3-1: Using ep0 maxpacket: 16 [ 1034.291904][ T6076] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1034.291935][ T6076] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.291955][ T6076] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1034.291977][ T6076] usb 3-1: config 1 has no interface number 1 [ 1034.292062][ T6076] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1034.292106][ T6076] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1034.297635][ T6076] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1034.297666][ T6076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.297687][ T6076] usb 3-1: Product: syz [ 1034.297700][ T6076] usb 3-1: Manufacturer: syz [ 1034.297714][ T6076] usb 3-1: SerialNumber: syz [ 1034.444316][T11311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.538715][T11311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.683622][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.684225][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.742823][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1124'. [ 1034.805394][T10458] Bluetooth: hci1: command tx timeout [ 1036.252741][T11311] team0: Port device team_slave_0 added [ 1036.519930][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1036.541851][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1036.543827][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1036.552882][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1036.558717][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1036.886350][T10458] Bluetooth: hci1: command tx timeout [ 1036.934333][T11311] team0: Port device team_slave_1 added [ 1037.397859][T11398] mkiss: ax0: crc mode is auto. [ 1037.414399][T10765] bridge_slave_1: left allmulticast mode [ 1037.414430][T10765] bridge_slave_1: left promiscuous mode [ 1037.414728][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.434703][ T6076] usb 3-1: USB disconnect, device number 55 [ 1037.503598][T10925] udevd[10925]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.548371][T10765] bridge_slave_0: left allmulticast mode [ 1037.548401][T10765] bridge_slave_0: left promiscuous mode [ 1037.548686][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.569855][T11411] overlay: ./file1 is not a directory [ 1038.832955][T10458] Bluetooth: hci3: command tx timeout [ 1038.895716][ T9] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1039.116719][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.116789][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1039.116815][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1039.116841][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1039.116862][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1039.186168][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1039.186201][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1039.186223][ T9] usb 3-1: Product: syz [ 1039.186237][ T9] usb 3-1: Manufacturer: syz [ 1039.186252][ T9] usb 3-1: SerialNumber: syz [ 1039.191313][ T9] usb 3-1: config 0 descriptor?? [ 1039.435338][ T9] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1039.435358][ T9] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1039.640199][ T9] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1039.640220][ T9] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1039.640231][ T9] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1039.844470][ T9] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1040.406603][T10765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.486572][T10765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.522141][T10765] bond0 (unregistering): Released all slaves [ 1040.831733][ T9] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1040.832123][ T9] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1040.887610][T10458] Bluetooth: hci3: command tx timeout [ 1040.929612][ T9] usb 3-1: USB disconnect, device number 56 [ 1041.023828][T11311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.023842][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.023857][T11311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.045116][T10765] hsr_slave_0: left promiscuous mode [ 1042.085136][T10765] hsr_slave_1: left promiscuous mode [ 1042.086242][T10765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.126774][T10765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.719541][T10458] Bluetooth: hci3: command tx timeout [ 1043.855039][ T5875] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1044.008078][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.008145][ T5875] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1044.008170][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.014382][ T5875] usb 3-1: config 0 descriptor?? [ 1044.493844][ T5875] steelseries 0003:1038:12B6.0007: item fetching failed at offset 6/7 [ 1044.551975][ T5875] steelseries 0003:1038:12B6.0007: probe with driver steelseries failed with error -22 [ 1044.685588][ T6076] usb 3-1: USB disconnect, device number 57 [ 1045.387681][T11435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.525706][T10765] team0 (unregistering): Port device team_slave_1 removed [ 1045.584831][ T5966] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1045.765738][T10458] Bluetooth: hci3: command tx timeout [ 1045.770431][ T5966] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1045.770460][ T5966] usb 3-1: config 0 has no interface number 0 [ 1045.773376][ T5966] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1045.773400][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.773413][ T5966] usb 3-1: Product: syz [ 1045.773421][ T5966] usb 3-1: Manufacturer: syz [ 1045.773429][ T5966] usb 3-1: SerialNumber: syz [ 1045.834326][ T5966] usb 3-1: config 0 descriptor?? [ 1045.875845][T10765] team0 (unregistering): Port device team_slave_0 removed [ 1046.088255][ T5966] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1046.092279][ T5966] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1046.092541][ T5966] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1046.092576][ T5966] usb 3-1: media controller created [ 1046.165260][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1046.451646][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.452337][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.930572][ T5875] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1047.109758][ T5875] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.109805][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1047.109866][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1047.109883][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1047.109895][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1047.112801][ T5875] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1047.112821][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1047.112833][ T5875] usb 7-1: Product: syz [ 1047.112841][ T5875] usb 7-1: Manufacturer: syz [ 1047.112849][ T5875] usb 7-1: SerialNumber: syz [ 1047.143685][ T5875] usb 7-1: config 0 descriptor?? [ 1047.289590][ T5966] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1047.467833][ T5875] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1047.467854][ T5875] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1047.500925][ T5966] usb 3-1: USB disconnect, device number 58 [ 1047.669749][ T5875] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 1047.669768][ T5875] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1047.669779][ T5875] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1047.885956][ T5875] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 1048.827098][ T5875] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1048.827490][ T5875] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 1048.846400][ T5875] usb 7-1: USB disconnect, device number 24 [ 1049.334955][T11311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.334975][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.335002][T11311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.530180][T11455] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.1141'. [ 1050.016455][T11311] hsr_slave_0: entered promiscuous mode [ 1050.017372][T11311] hsr_slave_1: entered promiscuous mode [ 1051.301166][ T6076] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1051.457890][ T6076] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.457932][ T6076] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1051.457947][ T6076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1051.457962][ T6076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1051.457975][ T6076] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1051.460325][ T6076] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1051.460349][ T6076] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1051.460362][ T6076] usb 7-1: Product: syz [ 1051.460370][ T6076] usb 7-1: Manufacturer: syz [ 1051.460378][ T6076] usb 7-1: SerialNumber: syz [ 1051.819489][ T6076] usb 7-1: config 0 descriptor?? [ 1053.512542][ T6076] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1053.512930][ T6076] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1054.387185][ T6076] usb 7-1: USB disconnect, device number 25 [ 1055.479646][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1055.497235][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1055.531994][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1055.594875][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1055.595911][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1057.690469][T10458] Bluetooth: hci5: command tx timeout [ 1058.184422][T11402] chnl_net:caif_netlink_parms(): no params data found [ 1059.764082][T10458] Bluetooth: hci5: command tx timeout [ 1059.784107][ T43] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1061.404517][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.404566][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.425935][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.425994][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1061.426010][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1061.426025][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1061.426038][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1061.429878][ T43] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1061.429904][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1061.429916][ T43] usb 3-1: Product: syz [ 1061.429924][ T43] usb 3-1: Manufacturer: syz [ 1061.429932][ T43] usb 3-1: SerialNumber: syz [ 1061.544912][ T43] usb 3-1: config 0 descriptor?? [ 1061.755242][ T43] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1061.755270][ T43] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1061.846719][T10458] Bluetooth: hci5: command tx timeout [ 1061.956371][ T43] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1061.956400][ T43] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1061.956422][ T43] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1062.072740][T11402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.073441][T11402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.089365][T11402] bridge_slave_0: entered allmulticast mode [ 1062.108160][T11402] bridge_slave_0: entered promiscuous mode [ 1062.157842][ T43] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1062.182542][T11402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.192675][T11402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.195087][T11402] bridge_slave_1: entered allmulticast mode [ 1062.199575][T11402] bridge_slave_1: entered promiscuous mode [ 1062.831716][T11402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.857180][T11402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.001566][ T43] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1063.001968][ T43] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1063.008760][ T43] usb 3-1: USB disconnect, device number 59 [ 1063.174086][ T5981] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1063.250984][T11402] team0: Port device team_slave_0 added [ 1063.304748][T11402] team0: Port device team_slave_1 added [ 1063.336262][ T5981] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.336327][ T5981] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1063.336353][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.378847][ T5981] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1063.635081][T11402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.635101][T11402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.635130][T11402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.636799][ T58] bridge_slave_1: left allmulticast mode [ 1063.636826][ T58] bridge_slave_1: left promiscuous mode [ 1063.637099][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.637207][T11545] netlink: 'syz.6.1160': attribute type 4 has an invalid length. [ 1063.745726][ T58] bridge_slave_0: left allmulticast mode [ 1063.745751][ T58] bridge_slave_0: left promiscuous mode [ 1063.745925][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.924064][T10458] Bluetooth: hci5: command tx timeout [ 1064.711893][ T37] audit: type=1326 audit(2000000839.217:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.712381][ T37] audit: type=1326 audit(2000000839.217:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.712722][ T37] audit: type=1326 audit(2000000839.217:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.713113][ T37] audit: type=1326 audit(2000000839.217:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.814322][ T37] audit: type=1326 audit(2000000839.217:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.816109][ T37] audit: type=1326 audit(2000000839.327:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.816167][ T37] audit: type=1326 audit(2000000839.327:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.816227][ T37] audit: type=1326 audit(2000000839.327:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.816275][ T37] audit: type=1326 audit(2000000839.327:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1064.816593][ T37] audit: type=1326 audit(2000000839.327:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11560 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5ad2df749 code=0x7ffc0000 [ 1065.211837][ T5981] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1065.211865][ T5981] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 1065.214032][ T5981] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1065.214052][ T5981] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 1067.504235][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.564219][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.586285][ T58] bond0 (unregistering): Released all slaves [ 1067.648114][T11402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.648127][T11402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.648143][T11402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.812866][ T5981] usb 7-1: USB disconnect, device number 26 [ 1067.813837][T11311] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1068.045152][T11311] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1068.111082][T11572] IPVS: set_ctl: invalid protocol: 29 172.20.20.35:20001 [ 1068.503600][ T5981] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1068.573536][ T58] hsr_slave_0: left promiscuous mode [ 1068.615650][ T58] hsr_slave_1: left promiscuous mode [ 1068.618196][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.674138][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.675768][ T5981] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.675834][ T5981] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1068.675851][ T5981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1068.675866][ T5981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1068.675880][ T5981] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1068.679929][ T5981] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1068.679956][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1068.679975][ T5981] usb 7-1: Product: syz [ 1068.679985][ T5981] usb 7-1: Manufacturer: syz [ 1068.679993][ T5981] usb 7-1: SerialNumber: syz [ 1068.704166][ T5981] usb 7-1: config 0 descriptor?? [ 1068.986892][ T5981] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1068.986922][ T5981] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1069.211520][ T5981] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 1069.211550][ T5981] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1069.211571][ T5981] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1069.423554][ T5981] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 1069.523554][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.982031][ T58] veth1_vlan: left promiscuous mode [ 1069.982550][ T58] veth0_vlan: left promiscuous mode [ 1070.355181][ T5981] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1070.355578][ T5981] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 1070.365993][ T5981] usb 7-1: USB disconnect, device number 27 [ 1071.156584][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 1073.164512][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1073.433984][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1076.455394][T11504] chnl_net:caif_netlink_parms(): no params data found [ 1076.460630][T11311] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1076.517993][T11402] hsr_slave_0: entered promiscuous mode [ 1076.519655][T11402] hsr_slave_1: entered promiscuous mode [ 1076.520783][T11402] debugfs: 'hsr0' already exists in 'hsr' [ 1076.520809][T11402] Cannot create hsr debugfs directory [ 1076.564518][T11311] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1077.258247][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 1077.258268][ T37] audit: type=1326 audit(2000000851.767:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.258399][ T37] audit: type=1326 audit(2000000851.767:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.259426][ T37] audit: type=1326 audit(2000000851.767:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.259477][ T37] audit: type=1326 audit(2000000851.767:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.259523][ T37] audit: type=1326 audit(2000000851.767:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.259569][ T37] audit: type=1326 audit(2000000851.767:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.259615][ T37] audit: type=1326 audit(2000000851.767:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.562960][ T37] audit: type=1326 audit(2000000851.767:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.563052][ T37] audit: type=1326 audit(2000000851.767:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1077.563099][ T37] audit: type=1326 audit(2000000851.767:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11609 comm="syz.6.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab50e7f749 code=0x7ffc0000 [ 1079.713012][T11504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.713240][T11504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.713483][T11504] bridge_slave_0: entered allmulticast mode [ 1079.728452][T11504] bridge_slave_0: entered promiscuous mode [ 1079.750930][T11504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.751085][T11504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.751318][T11504] bridge_slave_1: entered allmulticast mode [ 1079.754379][T11504] bridge_slave_1: entered promiscuous mode [ 1079.785151][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1183'. [ 1080.225493][T11504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.288670][T11504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.513028][ T43] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1080.648671][ T43] usb 7-1: device descriptor read/64, error -71 [ 1080.664859][T11504] team0: Port device team_slave_0 added [ 1080.883697][ T43] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1080.943756][T11504] team0: Port device team_slave_1 added [ 1081.012817][ T43] usb 7-1: device descriptor read/64, error -71 [ 1081.126471][ T43] usb usb7-port1: attempt power cycle [ 1081.552992][ T43] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1081.573791][ T43] usb 7-1: device descriptor read/8, error -71 [ 1081.613184][ T5875] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1081.783382][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 1081.786412][ T5875] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1081.786451][ T5875] usb 3-1: config 0 has no interface number 0 [ 1081.789479][ T5875] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1081.789497][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.789509][ T5875] usb 3-1: Product: syz [ 1081.789517][ T5875] usb 3-1: Manufacturer: syz [ 1081.789525][ T5875] usb 3-1: SerialNumber: syz [ 1081.832877][ T43] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1081.856250][ T5875] usb 3-1: config 0 descriptor?? [ 1081.857247][ T43] usb 7-1: device descriptor read/8, error -71 [ 1081.974348][ T43] usb usb7-port1: unable to enumerate USB device [ 1082.038671][T11504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.038690][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.038718][T11504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.096508][ T5875] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1082.096591][ T5875] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1082.097414][ T5875] uvcvideo 3-1:0.31: Failed to create links for entity 5 [ 1082.097436][ T5875] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1082.102135][T11504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.102153][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.102181][T11504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.186404][ T5875] usb 3-1: USB disconnect, device number 60 [ 1084.026771][T11504] hsr_slave_0: entered promiscuous mode [ 1084.031240][T11504] hsr_slave_1: entered promiscuous mode [ 1084.036536][T11504] debugfs: 'hsr0' already exists in 'hsr' [ 1084.036566][T11504] Cannot create hsr debugfs directory [ 1089.062622][T10011] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1089.168609][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1089.176382][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1089.184078][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1089.206514][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1089.209814][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1089.241511][T10011] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1089.241542][T10011] usb 7-1: config 0 has no interface number 0 [ 1089.241601][T10011] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1089.302575][T10011] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1089.302608][T10011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.302627][T10011] usb 7-1: Product: syz [ 1089.302641][T10011] usb 7-1: Manufacturer: syz [ 1089.302656][T10011] usb 7-1: SerialNumber: syz [ 1089.354836][T10011] usb 7-1: config 0 descriptor?? [ 1089.402931][ T58] bridge_slave_1: left allmulticast mode [ 1089.402964][ T58] bridge_slave_1: left promiscuous mode [ 1089.403227][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.523794][ T58] bridge_slave_0: left allmulticast mode [ 1089.523826][ T58] bridge_slave_0: left promiscuous mode [ 1089.524080][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.568709][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1195'. [ 1091.395780][T10458] Bluetooth: hci4: command tx timeout [ 1092.348520][T11728] dlm: Unknown command passed to DLM device : 33 [ 1092.348520][T11728] [ 1092.844300][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.055646][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.124425][ T58] bond0 (unregistering): Released all slaves [ 1093.442447][T10458] Bluetooth: hci4: command tx timeout [ 1093.966165][T10011] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1093.993408][T10011] usb 7-1: USB disconnect, device number 32 [ 1094.312093][ T58] hsr_slave_0: left promiscuous mode [ 1094.312366][T11738] FAULT_INJECTION: forcing a failure. [ 1094.312366][T11738] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.312400][T11738] CPU: 0 UID: 0 PID: 11738 Comm: syz.2.1202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.312425][T11738] Tainted: [L]=SOFTLOCKUP [ 1094.312431][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1094.312441][T11738] Call Trace: [ 1094.312448][T11738] [ 1094.312456][T11738] dump_stack_lvl+0x189/0x250 [ 1094.312481][T11738] ? __pfx____ratelimit+0x10/0x10 [ 1094.312507][T11738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1094.312533][T11738] ? __pfx__printk+0x10/0x10 [ 1094.312561][T11738] ? __pfx___might_resched+0x10/0x10 [ 1094.312580][T11738] ? fs_reclaim_acquire+0x7d/0x100 [ 1094.312605][T11738] should_fail_ex+0x46c/0x600 [ 1094.312649][T11738] should_failslab+0xa8/0x100 [ 1094.312671][T11738] __kmalloc_cache_noprof+0x84/0x6d0 [ 1094.312699][T11738] ? kfree+0x1bd/0x900 [ 1094.312721][T11738] ? snd_pcm_hw_param_near+0x373/0x500 [ 1094.312740][T11738] ? snd_pcm_hw_param_near+0x7f/0x500 [ 1094.312765][T11738] snd_pcm_hw_param_near+0x7f/0x500 [ 1094.312810][T11738] snd_pcm_oss_change_params_locked+0x219b/0x3f70 [ 1094.312870][T11738] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1094.312890][T11738] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1094.312912][T11738] ? lockdep_hardirqs_on+0x98/0x140 [ 1094.312937][T11738] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1094.312969][T11738] ? mutex_lock_interruptible_nested+0x154/0x1d0 [ 1094.312997][T11738] ? snd_pcm_oss_make_ready+0xc0/0x360 [ 1094.313033][T11738] snd_pcm_oss_make_ready+0x11b/0x360 [ 1094.313060][T11738] snd_pcm_oss_set_trigger+0x95/0x740 [ 1094.313083][T11738] ? __might_fault+0xb0/0x130 [ 1094.313115][T11738] snd_pcm_oss_ioctl+0xbb6/0xe00 [ 1094.313147][T11738] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1094.313176][T11738] __se_sys_ioctl+0xff/0x170 [ 1094.313203][T11738] do_syscall_64+0xfa/0xf80 [ 1094.313225][T11738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.313244][T11738] ? clear_bhb_loop+0x60/0xb0 [ 1094.313267][T11738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.313287][T11738] RIP: 0033:0x7ff5ad2df749 [ 1094.313306][T11738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.313325][T11738] RSP: 002b:00007ff5ab53e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.313346][T11738] RAX: ffffffffffffffda RBX: 00007ff5ad535fa0 RCX: 00007ff5ad2df749 [ 1094.313369][T11738] RDX: 0000200000000080 RSI: 0000000040045010 RDI: 0000000000000003 [ 1094.313382][T11738] RBP: 00007ff5ab53e090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.313395][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1094.313407][T11738] R13: 00007ff5ad536038 R14: 00007ff5ad535fa0 R15: 00007ffe0e1428d8 [ 1094.313445][T11738] [ 1094.432380][ T58] hsr_slave_1: left promiscuous mode [ 1094.433633][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.488464][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.532331][T10458] Bluetooth: hci4: command tx timeout [ 1097.619226][T10458] Bluetooth: hci4: command tx timeout [ 1097.954074][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1097.999349][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1098.007493][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1098.009970][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1098.023915][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1098.566277][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1098.974007][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1100.103531][T10458] Bluetooth: hci1: command tx timeout [ 1102.171641][T10458] Bluetooth: hci1: command tx timeout [ 1102.202093][T11765] batman_adv: batadv0: Interface deactivated: dummy0 [ 1102.682592][T11765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.699456][T11765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.927753][T11765] veth1_macvtap: left allmulticast mode [ 1104.102909][T11765] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 1104.102936][T11765] ------------[ cut here ]------------ [ 1104.102941][T11765] lockdep bfs error:-1 [ 1104.102948][T11765] WARNING: kernel/locking/lockdep.c:2059 at print_bfs_bug+0x20/0x40, CPU#1: syz.2.1209/11765 [ 1104.102976][T11765] Modules linked in: [ 1104.102990][T11765] CPU: 1 UID: 0 PID: 11765 Comm: syz.2.1209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1104.103007][T11765] Tainted: [L]=SOFTLOCKUP [ 1104.103011][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1104.103025][T11765] RIP: 0010:print_bfs_bug+0x22/0x40 [ 1104.103044][T11765] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 07 ce dd 02 89 c5 e8 60 84 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d e0 e4 40 0d 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 87 16 f3 8c e8 e5 [ 1104.103055][T11765] RSP: 0018:ffffc900015ce110 EFLAGS: 00010046 [ 1104.103065][T11765] RAX: 000000000000003b RBX: 00000000ffffffff RCX: a94f52b012d49b00 [ 1104.103074][T11765] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ede4ac0 [ 1104.103082][T11765] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1104.103089][T11765] R10: dffffc0000000000 R11: fffff520002b9bc5 R12: ffffffff957c7758 [ 1104.103097][T11765] R13: ffffffff926e0390 R14: ffff88802f1f1e40 R15: 000000000000001c [ 1104.103106][T11765] FS: 00007ff5ab53e6c0(0000) GS:ffff888126e03000(0000) knlGS:0000000000000000 [ 1104.103116][T11765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1104.103123][T11765] CR2: 00005643eae54a30 CR3: 000000003981a000 CR4: 00000000003526f0 [ 1104.103136][T11765] Call Trace: [ 1104.103141][T11765] [ 1104.103146][T11765] __lock_acquire+0x2551/0x2cf0 [ 1104.103167][T11765] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1104.103179][T11765] lock_acquire+0x117/0x340 [ 1104.103192][T11765] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1104.103205][T11765] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1104.103217][T11765] _raw_spin_lock_nested+0x32/0x50 [ 1104.103227][T11765] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1104.103238][T11765] raw_spin_rq_lock_nested+0xad/0x140 [ 1104.103251][T11765] task_rq_lock+0xbc/0x470 [ 1104.103263][T11765] __schedule+0x1673/0x50a0 [ 1104.103278][T11765] ? rcu_is_watching+0x15/0xb0 [ 1104.103289][T11765] ? lock_release+0x4b/0x3b0 [ 1104.103302][T11765] ? lock_release+0x4b/0x3b0 [ 1104.103317][T11765] ? is_bpf_text_address+0x292/0x2b0 [ 1104.103331][T11765] ? is_bpf_text_address+0x26/0x2b0 [ 1104.103344][T11765] ? irqentry_exit+0x5dd/0x660 [ 1104.103355][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 1104.103366][T11765] ? __pfx___schedule+0x10/0x10 [ 1104.103385][T11765] preempt_schedule_irq+0xb5/0x150 [ 1104.103401][T11765] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1104.103418][T11765] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1104.103430][T11765] irqentry_exit+0x5d8/0x660 [ 1104.103439][T11765] ? rcu_is_watching+0x15/0xb0 [ 1104.103450][T11765] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1104.103461][T11765] RIP: 0010:lock_acquire+0x16c/0x340 [ 1104.103476][T11765] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 b4 c8 14 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1104.103485][T11765] RSP: 0018:ffffc900015ce7a0 EFLAGS: 00000206 [ 1104.103494][T11765] RAX: a94f52b012d49b00 RBX: 0000000000000000 RCX: a94f52b012d49b00 [ 1104.103502][T11765] RDX: 0000000000000002 RSI: ffffffff8cfe1a8a RDI: ffffffff8b3f5660 [ 1104.103510][T11765] RBP: ffffffff88d67350 R08: 0000000000000002 R09: ffffffff95005418 [ 1104.103518][T11765] R10: 00000000142d218e R11: 00000000a8e2605e R12: 0000000000000000 [ 1104.103525][T11765] R13: ffff888034acca30 R14: 0000000000000001 R15: 0000000000000246 [ 1104.103533][T11765] ? dev_reset_queue+0x110/0x1f0 [ 1104.103550][T11765] ? rcu_is_watching+0x15/0xb0 [ 1104.103560][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 1104.103571][T11765] rt_spin_lock+0x88/0x3e0 [ 1104.103584][T11765] ? dev_reset_queue+0x110/0x1f0 [ 1104.103597][T11765] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1104.103610][T11765] ? __pfx_rt_spin_lock+0x10/0x10 [ 1104.103625][T11765] ? dev_reset_queue+0xe7/0x1f0 [ 1104.103637][T11765] dev_reset_queue+0x110/0x1f0 [ 1104.103650][T11765] dev_deactivate_many+0x71f/0xd40 [ 1104.103664][T11765] ? dev_deactivate_many+0x255/0xd40 [ 1104.103677][T11765] __dev_close_many+0x152/0x6b0 [ 1104.103688][T11765] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1104.103702][T11765] ? __pfx___dev_close_many+0x10/0x10 [ 1104.103712][T11765] ? rt_spin_unlock+0x161/0x200 [ 1104.103725][T11765] ? dev_set_rx_mode+0x4d/0x300 [ 1104.103737][T11765] ? dev_set_rx_mode+0x244/0x300 [ 1104.103748][T11765] ? __dev_notify_flags+0x1d9/0x2e0 [ 1104.103762][T11765] __dev_change_flags+0x2be/0x680 [ 1104.103776][T11765] ? __pfx___dev_change_flags+0x10/0x10 [ 1104.103788][T11765] ? netif_state_change+0x241/0x380 [ 1104.103799][T11765] ? __pfx_netif_state_change+0x10/0x10 [ 1104.103811][T11765] netif_change_flags+0x88/0x1a0 [ 1104.103825][T11765] do_setlink+0xc55/0x41c0 [ 1104.103842][T11765] ? __pfx_do_setlink+0x10/0x10 [ 1104.103855][T11765] ? do_raw_spin_unlock+0x122/0x240 [ 1104.103868][T11765] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1104.103883][T11765] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1104.103894][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 1104.103905][T11765] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1104.103915][T11765] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1104.103928][T11765] ? rt_mutex_slowlock+0x3cc/0x6b0 [ 1104.103942][T11765] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1104.103956][T11765] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1104.103972][T11765] ? rtnl_newlink+0x8ec/0x1c90 [ 1104.103984][T11765] ? safesetid_security_capable+0xa9/0x1a0 [ 1104.104000][T11765] ? bpf_lsm_capable+0x9/0x20 [ 1104.104011][T11765] ? security_capable+0x7e/0x2e0 [ 1104.104035][T11765] ? mutex_lock_nested+0x16a/0x1d0 [ 1104.104049][T11765] rtnl_newlink+0x14b0/0x1c90 [ 1104.104061][T11765] ? kasan_save_track+0x3e/0x80 [ 1104.104078][T11765] ? __pfx_rtnl_newlink+0x10/0x10 [ 1104.104090][T11765] ? __lock_acquire+0x6b6/0x2cf0 [ 1104.104108][T11765] ? __local_bh_enable+0x27b/0x410 [ 1104.104121][T11765] ? __local_bh_enable+0x28c/0x410 [ 1104.104133][T11765] ? reacquire_held_locks+0x121/0x1c0 [ 1104.104149][T11765] ? __pfx___local_bh_enable+0x10/0x10 [ 1104.104163][T11765] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 1104.104175][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 1104.104187][T11765] ? __lock_acquire+0x6b6/0x2cf0 [ 1104.104202][T11765] ? __dev_queue_xmit+0x259/0x31d0 [ 1104.104217][T11765] ? __dev_queue_xmit+0x259/0x31d0 [ 1104.104232][T11765] ? __dev_queue_xmit+0x1936/0x31d0 [ 1104.104245][T11765] ? netlink_unicast+0x811/0xa10 [ 1104.104257][T11765] ? netlink_sendmsg+0x805/0xb30 [ 1104.104276][T11765] ? __pfx_rtnl_newlink+0x10/0x10 [ 1104.104287][T11765] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1104.104300][T11765] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1104.104311][T11765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1104.104322][T11765] ? ref_tracker_free+0x61e/0x7c0 [ 1104.104336][T11765] ? __asan_memcpy+0x40/0x70 [ 1104.104349][T11765] ? __pfx_ref_tracker_free+0x10/0x10 [ 1104.104362][T11765] ? __skb_clone+0x63/0x7a0 [ 1104.104377][T11765] netlink_rcv_skb+0x208/0x470 [ 1104.104391][T11765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1104.104403][T11765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1104.104418][T11765] ? netlink_deliver_tap+0x2e/0x1b0 [ 1104.104433][T11765] netlink_unicast+0x846/0xa10 [ 1104.104447][T11765] ? __pfx_netlink_unicast+0x10/0x10 [ 1104.104460][T11765] ? netlink_sendmsg+0x642/0xb30 [ 1104.104473][T11765] ? skb_put+0x11b/0x210 [ 1104.104485][T11765] netlink_sendmsg+0x805/0xb30 [ 1104.104501][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.104516][T11765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1104.104531][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.104544][T11765] __sock_sendmsg+0x21c/0x270 [ 1104.104561][T11765] ____sys_sendmsg+0x508/0x810 [ 1104.104575][T11765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1104.104590][T11765] ? import_iovec+0x74/0xa0 [ 1104.104601][T11765] ___sys_sendmsg+0x21f/0x2a0 [ 1104.104615][T11765] ? __pfx____sys_sendmsg+0x10/0x10 [ 1104.104629][T11765] ? futex_wait+0x285/0x360 [ 1104.104646][T11765] ? __fget_files+0x2a/0x420 [ 1104.104657][T11765] ? __fget_files+0x3a6/0x420 [ 1104.104671][T11765] __x64_sys_sendmsg+0x1a1/0x260 [ 1104.104684][T11765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1104.104701][T11765] ? do_syscall_64+0xbe/0xf80 [ 1104.104712][T11765] do_syscall_64+0xfa/0xf80 [ 1104.104723][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.104733][T11765] ? clear_bhb_loop+0x60/0xb0 [ 1104.104745][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.104756][T11765] RIP: 0033:0x7ff5ad2df749 [ 1104.104767][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.104776][T11765] RSP: 002b:00007ff5ab53e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.104788][T11765] RAX: ffffffffffffffda RBX: 00007ff5ad535fa0 RCX: 00007ff5ad2df749 [ 1104.104796][T11765] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1104.104803][T11765] RBP: 00007ff5ad363f91 R08: 0000000000000000 R09: 0000000000000000 [ 1104.104810][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.104817][T11765] R13: 00007ff5ad536038 R14: 00007ff5ad535fa0 R15: 00007ffe0e1428d8 [ 1104.104829][T11765] [ 1104.104835][T11765] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1104.104845][T11765] CPU: 1 UID: 0 PID: 11765 Comm: syz.2.1209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1104.104861][T11765] Tainted: [L]=SOFTLOCKUP [ 1104.104865][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1104.104871][T11765] Call Trace: [ 1104.104875][T11765] [ 1104.104879][T11765] dump_stack_lvl+0x99/0x250 [ 1104.104894][T11765] ? __asan_memcpy+0x40/0x70 [ 1104.104907][T11765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1104.104921][T11765] ? __pfx__printk+0x10/0x10 [ 1104.104934][T11765] vpanic+0x237/0x6d0 [ 1104.104948][T11765] ? __pfx_vpanic+0x10/0x10 [ 1104.104962][T11765] ? is_bpf_text_address+0x292/0x2b0 [ 1104.104975][T11765] ? is_bpf_text_address+0x26/0x2b0 [ 1104.104990][T11765] panic+0xb9/0xc0 [ 1104.105004][T11765] ? __pfx_panic+0x10/0x10 [ 1104.105027][T11765] __warn+0x317/0x4b0 [ 1104.105042][T11765] ? print_bfs_bug+0x20/0x40 [ 1104.105057][T11765] ? print_bfs_bug+0x20/0x40 [ 1104.105072][T11765] __report_bug+0x288/0x500 [ 1104.105089][T11765] ? print_bfs_bug+0x20/0x40 [ 1104.105105][T11765] ? __pfx___report_bug+0x10/0x10 [ 1104.105124][T11765] report_bug_entry+0x19a/0x290 [ 1104.105141][T11765] ? print_bfs_bug+0x22/0x40 [ 1104.105155][T11765] ? print_bfs_bug+0x27/0x40 [ 1104.105169][T11765] handle_bug+0xca/0x200 [ 1104.105181][T11765] exc_invalid_op+0x1a/0x50 [ 1104.105193][T11765] asm_exc_invalid_op+0x1a/0x20 [ 1104.105203][T11765] RIP: 0010:print_bfs_bug+0x22/0x40 [ 1104.105218][T11765] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 07 ce dd 02 89 c5 e8 60 84 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d e0 e4 40 0d 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 87 16 f3 8c e8 e5 [ 1104.105227][T11765] RSP: 0018:ffffc900015ce110 EFLAGS: 00010046 [ 1104.105236][T11765] RAX: 000000000000003b RBX: 00000000ffffffff RCX: a94f52b012d49b00 [ 1104.105244][T11765] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ede4ac0 [ 1104.105251][T11765] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1104.105258][T11765] R10: dffffc0000000000 R11: fffff520002b9bc5 R12: ffffffff957c7758 [ 1104.105266][T11765] R13: ffffffff926e0390 R14: ffff88802f1f1e40 R15: 000000000000001c [ 1104.105278][T11765] __lock_acquire+0x2551/0x2cf0 [ 1104.105297][T11765] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1104.105308][T11765] lock_acquire+0x117/0x340 [ 1104.105321][T11765] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1104.105334][T11765] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1104.105345][T11765] _raw_spin_lock_nested+0x32/0x50 [ 1104.105356][T11765] ? raw_spin_rq_lock_nested+0xad/0x140 [ 1104.105366][T11765] raw_spin_rq_lock_nested+0xad/0x140 [ 1104.105378][T11765] task_rq_lock+0xbc/0x470 [ 1104.105390][T11765] __schedule+0x1673/0x50a0 [ 1104.105405][T11765] ? rcu_is_watching+0x15/0xb0 [ 1104.105416][T11765] ? lock_release+0x4b/0x3b0 [ 1104.105429][T11765] ? lock_release+0x4b/0x3b0 [ 1104.105444][T11765] ? is_bpf_text_address+0x292/0x2b0 [ 1104.105457][T11765] ? is_bpf_text_address+0x26/0x2b0 [ 1104.105471][T11765] ? irqentry_exit+0x5dd/0x660 [ 1104.105481][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 1104.105491][T11765] ? __pfx___schedule+0x10/0x10 [ 1104.105511][T11765] preempt_schedule_irq+0xb5/0x150 [ 1104.105527][T11765] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1104.105546][T11765] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1104.105557][T11765] irqentry_exit+0x5d8/0x660 [ 1104.105567][T11765] ? rcu_is_watching+0x15/0xb0 [ 1104.105578][T11765] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1104.105589][T11765] RIP: 0010:lock_acquire+0x16c/0x340 [ 1104.105603][T11765] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 b4 c8 14 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1104.105612][T11765] RSP: 0018:ffffc900015ce7a0 EFLAGS: 00000206 [ 1104.105621][T11765] RAX: a94f52b012d49b00 RBX: 0000000000000000 RCX: a94f52b012d49b00 [ 1104.105629][T11765] RDX: 0000000000000002 RSI: ffffffff8cfe1a8a RDI: ffffffff8b3f5660 [ 1104.105636][T11765] RBP: ffffffff88d67350 R08: 0000000000000002 R09: ffffffff95005418 [ 1104.105644][T11765] R10: 00000000142d218e R11: 00000000a8e2605e R12: 0000000000000000 [ 1104.105652][T11765] R13: ffff888034acca30 R14: 0000000000000001 R15: 0000000000000246 [ 1104.105660][T11765] ? dev_reset_queue+0x110/0x1f0 [ 1104.105676][T11765] ? rcu_is_watching+0x15/0xb0 [ 1104.105686][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 1104.105697][T11765] rt_spin_lock+0x88/0x3e0 [ 1104.105711][T11765] ? dev_reset_queue+0x110/0x1f0 [ 1104.105724][T11765] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1104.105737][T11765] ? __pfx_rt_spin_lock+0x10/0x10 [ 1104.105753][T11765] ? dev_reset_queue+0xe7/0x1f0 [ 1104.105766][T11765] dev_reset_queue+0x110/0x1f0 [ 1104.105779][T11765] dev_deactivate_many+0x71f/0xd40 [ 1104.105794][T11765] ? dev_deactivate_many+0x255/0xd40 [ 1104.105808][T11765] __dev_close_many+0x152/0x6b0 [ 1104.105819][T11765] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1104.105833][T11765] ? __pfx___dev_close_many+0x10/0x10 [ 1104.105843][T11765] ? rt_spin_unlock+0x161/0x200 [ 1104.105857][T11765] ? dev_set_rx_mode+0x4d/0x300 [ 1104.105870][T11765] ? dev_set_rx_mode+0x244/0x300 [ 1104.105882][T11765] ? __dev_notify_flags+0x1d9/0x2e0 [ 1104.105896][T11765] __dev_change_flags+0x2be/0x680 [ 1104.105910][T11765] ? __pfx___dev_change_flags+0x10/0x10 [ 1104.105923][T11765] ? netif_state_change+0x241/0x380 [ 1104.105935][T11765] ? __pfx_netif_state_change+0x10/0x10 [ 1104.105947][T11765] netif_change_flags+0x88/0x1a0 [ 1104.105962][T11765] do_setlink+0xc55/0x41c0 [ 1104.105978][T11765] ? __pfx_do_setlink+0x10/0x10 [ 1104.105992][T11765] ? do_raw_spin_unlock+0x122/0x240 [ 1104.106005][T11765] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1104.106026][T11765] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1104.106038][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 1104.106048][T11765] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1104.106059][T11765] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1104.106073][T11765] ? rt_mutex_slowlock+0x3cc/0x6b0 [ 1104.106088][T11765] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1104.106102][T11765] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1104.106119][T11765] ? rtnl_newlink+0x8ec/0x1c90 [ 1104.106131][T11765] ? safesetid_security_capable+0xa9/0x1a0 [ 1104.106147][T11765] ? bpf_lsm_capable+0x9/0x20 [ 1104.106158][T11765] ? security_capable+0x7e/0x2e0 [ 1104.106175][T11765] ? mutex_lock_nested+0x16a/0x1d0 [ 1104.106190][T11765] rtnl_newlink+0x14b0/0x1c90 [ 1104.106201][T11765] ? kasan_save_track+0x3e/0x80 [ 1104.106218][T11765] ? __pfx_rtnl_newlink+0x10/0x10 [ 1104.106231][T11765] ? __lock_acquire+0x6b6/0x2cf0 [ 1104.106249][T11765] ? __local_bh_enable+0x27b/0x410 [ 1104.106262][T11765] ? __local_bh_enable+0x28c/0x410 [ 1104.106275][T11765] ? reacquire_held_locks+0x121/0x1c0 [ 1104.106292][T11765] ? __pfx___local_bh_enable+0x10/0x10 [ 1104.106306][T11765] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 1104.106319][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 1104.106332][T11765] ? __lock_acquire+0x6b6/0x2cf0 [ 1104.106347][T11765] ? __dev_queue_xmit+0x259/0x31d0 [ 1104.106363][T11765] ? __dev_queue_xmit+0x259/0x31d0 [ 1104.106378][T11765] ? __dev_queue_xmit+0x1936/0x31d0 [ 1104.106392][T11765] ? netlink_unicast+0x811/0xa10 [ 1104.106404][T11765] ? netlink_sendmsg+0x805/0xb30 [ 1104.106423][T11765] ? __pfx_rtnl_newlink+0x10/0x10 [ 1104.106435][T11765] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1104.106448][T11765] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1104.106460][T11765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1104.106471][T11765] ? ref_tracker_free+0x61e/0x7c0 [ 1104.106485][T11765] ? __asan_memcpy+0x40/0x70 [ 1104.106499][T11765] ? __pfx_ref_tracker_free+0x10/0x10 [ 1104.106513][T11765] ? __skb_clone+0x63/0x7a0 [ 1104.106528][T11765] netlink_rcv_skb+0x208/0x470 [ 1104.106542][T11765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1104.106555][T11765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1104.106571][T11765] ? netlink_deliver_tap+0x2e/0x1b0 [ 1104.106587][T11765] netlink_unicast+0x846/0xa10 [ 1104.106602][T11765] ? __pfx_netlink_unicast+0x10/0x10 [ 1104.106615][T11765] ? netlink_sendmsg+0x642/0xb30 [ 1104.106628][T11765] ? skb_put+0x11b/0x210 [ 1104.106641][T11765] netlink_sendmsg+0x805/0xb30 [ 1104.106657][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.106674][T11765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1104.106688][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.106703][T11765] __sock_sendmsg+0x21c/0x270 [ 1104.106719][T11765] ____sys_sendmsg+0x508/0x810 [ 1104.106734][T11765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1104.106750][T11765] ? import_iovec+0x74/0xa0 [ 1104.106761][T11765] ___sys_sendmsg+0x21f/0x2a0 [ 1104.106775][T11765] ? __pfx____sys_sendmsg+0x10/0x10 [ 1104.106790][T11765] ? futex_wait+0x285/0x360 [ 1104.106807][T11765] ? __fget_files+0x2a/0x420 [ 1104.106825][T11765] ? __fget_files+0x3a6/0x420 [ 1104.106838][T11765] __x64_sys_sendmsg+0x1a1/0x260 [ 1104.106853][T11765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1104.106870][T11765] ? do_syscall_64+0xbe/0xf80 [ 1104.106882][T11765] do_syscall_64+0xfa/0xf80 [ 1104.106893][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.106904][T11765] ? clear_bhb_loop+0x60/0xb0 [ 1104.106916][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.106927][T11765] RIP: 0033:0x7ff5ad2df749 [ 1104.106936][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.106945][T11765] RSP: 002b:00007ff5ab53e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.106957][T11765] RAX: ffffffffffffffda RBX: 00007ff5ad535fa0 RCX: 00007ff5ad2df749 [ 1104.106965][T11765] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1104.106972][T11765] RBP: 00007ff5ad363f91 R08: 0000000000000000 R09: 0000000000000000 [ 1104.106980][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.106987][T11765] R13: 00007ff5ad536038 R14: 00007ff5ad535fa0 R15: 00007ffe0e1428d8 [ 1104.106999][T11765] [ 1104.107646][T11765] Kernel Offset: disabled