last executing test programs: 52.344401315s ago: executing program 4 (id=649): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001900)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x10) 50.856682021s ago: executing program 4 (id=653): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(r1, 0x8020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 46.646376999s ago: executing program 4 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xe04ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getcwd(0x0, 0x0) 44.365761276s ago: executing program 4 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 41.414932265s ago: executing program 4 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 38.914458829s ago: executing program 4 (id=666): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 23.636959952s ago: executing program 32 (id=666): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 14.410133118s ago: executing program 0 (id=706): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x28) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 13.2087381s ago: executing program 3 (id=707): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.850954634s ago: executing program 3 (id=711): r0 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r3}, 0x14) lseek(0xffffffffffffffff, 0x3, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x3, @rand_addr=0x64010102}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$', @ANYRES32=r3], 0x28}}], 0x1, 0x0) writev(r0, &(0x7f0000000240), 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) socket$inet6(0xa, 0x800000000000002, 0x0) 9.870303407s ago: executing program 0 (id=715): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33f", 0xee}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4", 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.854915439s ago: executing program 2 (id=716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 9.467705352s ago: executing program 3 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x45, 0x0, 0x6, 0x5, 0x5, 0x9, 0x88001, r5}, &(0x7f0000000540)=0x20) 8.079373781s ago: executing program 1 (id=718): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x1, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) 8.077814299s ago: executing program 2 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) alarm(0x8000000000000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000023c0)={0x24, r3, 0x1, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x86}, 0x4010) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) write$6lowpan_control(r4, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 8.069485698s ago: executing program 3 (id=720): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001300)="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", 0xfe0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33f", 0xee}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7c6012b802872041cfe8c0cd3e0dc1df76772f74d964ff31e481f3c5b96de5d57b25b5e6da0643aa88c693acfefe376af4bc577a451f8000a542b421fbfdedad1b9ba1da752", 0x8c}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77e26464b8dc6ec581588f80c054c025f9", 0x20}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.907339594s ago: executing program 1 (id=721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 6.850702573s ago: executing program 0 (id=722): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0) 5.917183518s ago: executing program 2 (id=723): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 5.391249959s ago: executing program 0 (id=724): io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7}) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 5.378521641s ago: executing program 1 (id=725): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) pwritev(r2, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)="71c6", 0x2}, {&(0x7f0000000700)="4cb8ebb77ea5fae02e1ef6c551b6c7522a17ed10f4574ea7d974328662b30558b8050a07562e74dc2c2effc6a907e39e5bd0f711a561b45ebd5345c0de6be9ec0077796d64", 0x45}, {&(0x7f0000000780)="276dcbeab867f732aa1d5e00858d7ca0aa581013dc8134df140cca6d0d0f389b08acf6224d8970a3e821cd9d964c7b9d287deb3b2d2add797d8e2462c5f8ff7c5a70bce4b7e09ed0b97af79296d29e0d96de652db5e7c87fe048b3184778f11f524787e40157381a90ef1daff25d01f78cc6d2a8113cb444147e2f8a005786536a899975708b80b81c66f6dbd971f35ad98efb874572a4d9d878c1dd109d15d86ec7da35aac6e37500776ff065dc709c2eb135437f14ceff4022747d6f53bd98bd45ec418d7474689fd51cf392781fa179eaa7c25644b17b00084dc8be0f49d0b4345a010cde85517daa3ed82a6bf9e35a417f2b", 0xf4}, {&(0x7f0000000880)="e28d66b924904bba773721d20e9ad8b60028b44356d0a55aa4675a199f043fd056bd174fd34ad563617db71208a79dc8447988fa904422f4bbae3f8f50d5652e023ae958b50dc677c2bb6447dac07b9ce92718ae3ff7d221dac9d5df17d6c943056b023c6f72aa7c9c1b1c697b71ae655edba4a50aa14cf7c72e3473500bf1f8ef5c51a87ad1896a70eb4a4c72f3066171518e89b266932ba2efeb3fb2a463831c9455aaaff89328d07bda3cb58c47f9e2892674e78f77ef53dd777fcbf9c5cbeedddf48b5423779f6fb2d3bedc26277f2566872ff9d65ee7e10cd90ffec6fd0f7f4c4b57d091d5150963c0a0c2ca39a73da0124d54df8", 0xf7}, {&(0x7f0000000980)="5ac0a83763ec2b6ebf3ec21fb3ab66b48639cd975ca8c98f2b2949b40ae7658439929821911d02b8146bc1fccb8689c25d206b55cb92fb6eaa27442a997c3dd6b03d74bcacf68149839051beb9fe21e9ad063858b90389d232fbfd16c224341501252545aa689d61a18512e4", 0x6c}, {&(0x7f0000000a00)="4795c0977fcefbee23ca02c2fcee4b27f42b2f46fca58d7a6ba512b219d9e7ff732457c0da7b95e11029ef3fc64c2693eed7857a9dd180dfff76f04eaa660f8512acd0f79343343c97", 0x49}], 0x7, 0x5, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.06971418s ago: executing program 2 (id=726): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.375945104s ago: executing program 1 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000100)={0x0, 0xff03, @ioapic={0xffffffff, 0x1, 0x3, 0x80000000, 0x0, [{0xd2, 0x5, 0x0, '\x00', 0x6}, {0x7, 0xcd, 0x9f, '\x00', 0xc}, {0x6, 0x2, 0xfc, '\x00', 0xd1}, {0x5, 0x8, 0xfc, '\x00', 0xa}, {0x2, 0x40, 0x7, '\x00', 0x1}, {0x7f, 0x7, 0x9, '\x00', 0x9f}, {0x4, 0x10, 0x1, '\x00', 0x9}, {0x4, 0x7, 0x2, '\x00', 0x10}, {0x2, 0x3, 0x9, '\x00', 0x80}, {0x3, 0x3, 0x7, '\x00', 0x4}, {0x2, 0x8, 0x4, '\x00', 0x9}, {0x0, 0x2, 0x1, '\x00', 0xb4}, {0xeb, 0x10, 0x4, '\x00', 0x9}, {0x6, 0x6, 0x5, '\x00', 0x8}, {0x8d, 0x2, 0x1, '\x00', 0x7}, {0x80, 0x7, 0x1, '\x00', 0x1}, {0xff, 0x4, 0xff, '\x00', 0x6}, {0x0, 0x0, 0x5, '\x00', 0x1}, {0xa, 0x4, 0x2, '\x00', 0x7}, {0x10, 0x1c, 0x4b, '\x00', 0x3}, {0x6, 0x5, 0x9, '\x00', 0x4}, {0xd, 0xfa, 0x40, '\x00', 0xa}, {0x5, 0x6, 0xb, '\x00', 0x1}, {0x90, 0xc, 0x4, '\x00', 0x4}]}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000180), 0x0) 2.057982003s ago: executing program 2 (id=728): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket(0x80000000000000a, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) 2.008857854s ago: executing program 0 (id=729): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x80800) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x28400210}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48050) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.857667835s ago: executing program 3 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0xa, 0x10000) recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) process_vm_readv(r0, 0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/251, 0xfb}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000008c0)=""/153, 0x99}], 0x5, 0x0) 593.154603ms ago: executing program 1 (id=731): r0 = socket$inet6(0xa, 0x801, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x5, 0x0) listen(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 398.429796ms ago: executing program 3 (id=732): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setreuid(0xee01, 0xffffffffffffffff) setfsuid(0x0) socket$nl_generic(0x10, 0x3, 0x10) 301.731541ms ago: executing program 1 (id=733): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f638d408f01002204db10100000109022d00010b06800809045f40030a00004009050d02000202040c0905080840"], &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) 434.094µs ago: executing program 2 (id=734): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x2404c091) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xd, 0x1, &(0x7f00000000c0)={r3, r4+60000000}, 0x0, 0x1) 0s ago: executing program 0 (id=735): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 97.505749][ T10] cfg80211: failed to load regulatory.db [ 97.983500][ T5817] cgroup: Unknown subsys name 'net' [ 98.224936][ T5817] cgroup: Unknown subsys name 'cpuset' [ 98.279353][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.451430][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.537318][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.588220][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.613399][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.614717][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.637575][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.650961][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.656466][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.670831][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.689914][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.696853][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.714250][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.715095][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.716053][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.779803][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.801494][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.834262][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.865190][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.906085][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.936915][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.990240][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.995334][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.019156][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.019667][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.027264][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.028150][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.410784][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 106.434539][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 106.448421][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 106.475621][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 106.537846][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 106.930712][ T5848] Bluetooth: hci2: command tx timeout [ 106.955823][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.957329][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.957824][ T5839] bridge_slave_0: entered allmulticast mode [ 106.970570][ T5839] bridge_slave_0: entered promiscuous mode [ 107.009775][ T61] Bluetooth: hci1: command tx timeout [ 107.012167][ T5848] Bluetooth: hci4: command tx timeout [ 107.040568][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.040690][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.040876][ T5838] bridge_slave_0: entered allmulticast mode [ 107.042694][ T5838] bridge_slave_0: entered promiscuous mode [ 107.077218][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.077544][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.077772][ T5840] bridge_slave_0: entered allmulticast mode [ 107.097821][ T5848] Bluetooth: hci3: command tx timeout [ 107.104931][ T5840] bridge_slave_0: entered promiscuous mode [ 107.116586][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.116725][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.116912][ T5839] bridge_slave_1: entered allmulticast mode [ 107.144392][ T5839] bridge_slave_1: entered promiscuous mode [ 107.158354][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.161714][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.162422][ T5836] bridge_slave_0: entered allmulticast mode [ 107.173131][ T5848] Bluetooth: hci0: command tx timeout [ 107.190693][ T5836] bridge_slave_0: entered promiscuous mode [ 107.220276][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.220400][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.220575][ T5838] bridge_slave_1: entered allmulticast mode [ 107.222913][ T5838] bridge_slave_1: entered promiscuous mode [ 107.256656][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.256773][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.256948][ T5840] bridge_slave_1: entered allmulticast mode [ 107.273157][ T5840] bridge_slave_1: entered promiscuous mode [ 107.304890][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.304983][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.305154][ T5836] bridge_slave_1: entered allmulticast mode [ 107.307164][ T5836] bridge_slave_1: entered promiscuous mode [ 107.316106][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.316514][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.317078][ T5837] bridge_slave_0: entered allmulticast mode [ 107.343413][ T5837] bridge_slave_0: entered promiscuous mode [ 107.437251][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.437366][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.437528][ T5837] bridge_slave_1: entered allmulticast mode [ 107.460409][ T5837] bridge_slave_1: entered promiscuous mode [ 107.506161][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.550766][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.558295][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.571019][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.593146][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.620447][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.644932][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.647610][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.671005][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.750774][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.785135][ T5839] team0: Port device team_slave_0 added [ 107.839415][ T5838] team0: Port device team_slave_0 added [ 107.841805][ T5839] team0: Port device team_slave_1 added [ 107.843908][ T5840] team0: Port device team_slave_0 added [ 107.846299][ T5836] team0: Port device team_slave_0 added [ 107.883059][ T5838] team0: Port device team_slave_1 added [ 107.904957][ T5840] team0: Port device team_slave_1 added [ 107.907617][ T5836] team0: Port device team_slave_1 added [ 107.922311][ T5837] team0: Port device team_slave_0 added [ 107.994571][ T5837] team0: Port device team_slave_1 added [ 108.018246][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.018260][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.018280][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.115409][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.115423][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.115444][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.116631][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.116647][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.116675][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.117891][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.117902][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.117921][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.153192][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.153211][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.153322][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.301811][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.301824][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.301844][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.350582][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.350654][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.350761][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.356057][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.356104][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.356176][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.466738][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.466758][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.466778][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.937905][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.937919][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.937940][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.008766][ T5848] Bluetooth: hci2: command tx timeout [ 109.089431][ T61] Bluetooth: hci1: command tx timeout [ 109.089574][ T5848] Bluetooth: hci4: command tx timeout [ 109.121225][ T5839] hsr_slave_0: entered promiscuous mode [ 109.122561][ T5839] hsr_slave_1: entered promiscuous mode [ 109.170881][ T5848] Bluetooth: hci3: command tx timeout [ 109.183242][ T5838] hsr_slave_0: entered promiscuous mode [ 109.187616][ T5838] hsr_slave_1: entered promiscuous mode [ 109.199752][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 109.199866][ T5838] Cannot create hsr debugfs directory [ 109.231055][ T5840] hsr_slave_0: entered promiscuous mode [ 109.232269][ T5840] hsr_slave_1: entered promiscuous mode [ 109.233059][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 109.233079][ T5840] Cannot create hsr debugfs directory [ 109.250166][ T5848] Bluetooth: hci0: command tx timeout [ 109.270220][ T5836] hsr_slave_0: entered promiscuous mode [ 109.271709][ T5836] hsr_slave_1: entered promiscuous mode [ 109.272719][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 109.272739][ T5836] Cannot create hsr debugfs directory [ 109.344404][ T5837] hsr_slave_0: entered promiscuous mode [ 109.345456][ T5837] hsr_slave_1: entered promiscuous mode [ 109.346208][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 109.346227][ T5837] Cannot create hsr debugfs directory [ 110.520164][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.561418][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.565169][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.606592][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.616507][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.643545][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.673398][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.693609][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.843885][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.874683][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.884427][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.923676][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.928113][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.968348][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.995696][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.034490][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.088910][ T5848] Bluetooth: hci2: command tx timeout [ 111.170612][ T61] Bluetooth: hci1: command tx timeout [ 111.170707][ T5848] Bluetooth: hci4: command tx timeout [ 111.212444][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.235086][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.255722][ T5848] Bluetooth: hci3: command tx timeout [ 111.270778][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.304524][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.320402][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.329057][ T5848] Bluetooth: hci0: command tx timeout [ 111.362224][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.395505][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.433767][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.641331][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.680316][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.702847][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.732740][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.737466][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.760666][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.805407][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.844968][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.867103][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.042852][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.082433][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.097209][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.106101][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.134357][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.159949][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.192461][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.204210][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.242499][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.275160][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.275497][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.347601][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.347807][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.404914][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.554532][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.609959][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.635905][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.636067][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.702444][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.702558][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.782263][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.869208][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.912664][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.915691][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.018382][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.020489][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.131316][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.170254][ T5848] Bluetooth: hci2: command tx timeout [ 113.217907][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.218285][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.250353][ T5848] Bluetooth: hci4: command tx timeout [ 113.250364][ T61] Bluetooth: hci1: command tx timeout [ 113.287185][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.326671][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.326918][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.331629][ T61] Bluetooth: hci3: command tx timeout [ 113.409643][ T61] Bluetooth: hci0: command tx timeout [ 113.465733][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.551841][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.685015][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.685226][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.765084][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.765173][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.965428][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.073236][ T5839] veth0_vlan: entered promiscuous mode [ 114.146640][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.176670][ T5839] veth1_vlan: entered promiscuous mode [ 114.288953][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.387409][ T5837] veth0_vlan: entered promiscuous mode [ 114.478402][ T5839] veth0_macvtap: entered promiscuous mode [ 114.503674][ T5837] veth1_vlan: entered promiscuous mode [ 114.534523][ T5839] veth1_macvtap: entered promiscuous mode [ 114.591884][ T5840] veth0_vlan: entered promiscuous mode [ 114.645889][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.657511][ T5840] veth1_vlan: entered promiscuous mode [ 114.701773][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.707252][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.707437][ T5838] veth0_vlan: entered promiscuous mode [ 114.777907][ T5837] veth0_macvtap: entered promiscuous mode [ 114.818040][ T3592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.835319][ T5837] veth1_macvtap: entered promiscuous mode [ 114.851317][ T3592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.870332][ T5838] veth1_vlan: entered promiscuous mode [ 114.891373][ T3592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.895419][ T3592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.096379][ T5840] veth0_macvtap: entered promiscuous mode [ 115.141548][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.264222][ T5840] veth1_macvtap: entered promiscuous mode [ 115.308143][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.452841][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.497317][ T5838] veth0_macvtap: entered promiscuous mode [ 115.525415][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.554000][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.574656][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.601557][ T5838] veth1_macvtap: entered promiscuous mode [ 115.701968][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.772332][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.889400][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.889425][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.993756][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.995010][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.037484][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.076127][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.109813][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.138122][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.161998][ T5836] veth0_vlan: entered promiscuous mode [ 116.165328][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.165344][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.283977][ T3528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.351778][ T3528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.402898][ T3528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.406712][ T3528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.468944][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.468965][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.479051][ T5836] veth1_vlan: entered promiscuous mode [ 117.212696][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.212718][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.656193][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.656216][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.712336][ T5836] veth0_macvtap: entered promiscuous mode [ 117.843178][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.843202][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.871020][ T5836] veth1_macvtap: entered promiscuous mode [ 118.880851][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.880873][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.066970][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.241475][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.241498][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.274010][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.274845][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.347576][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.392063][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.424692][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.467053][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.371598][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.371620][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.591477][ T5970] loop1: detected capacity change from 0 to 1024 [ 120.774001][ T37] audit: type=1326 audit(1776265831.446:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f020ed6c819 code=0x0 [ 120.882661][ T5970] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.994890][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.994913][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.102830][ T5970] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 121.135529][ T5970] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.157209][ T5970] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.9: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.157403][ T5970] loop1: lost filesystem error report for type 5 error -117 [ 121.161146][ C1] EXT4-fs (loop1): initial error at time 1776265831: ext4_free_blocks:6718 [ 121.161181][ C1] EXT4-fs (loop1): last error at time 1776265831: ext4_free_blocks:6718 [ 121.248122][ T5970] EXT4-fs (loop1): Remounting filesystem read-only [ 121.268926][ T5970] EXT4-fs (loop1): 1 orphan inode deleted [ 121.299754][ T5970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.742304][ T5982] loop3: detected capacity change from 0 to 1024 [ 121.965116][ T5982] ======================================================= [ 121.965116][ T5982] WARNING: The mand mount option has been deprecated and [ 121.965116][ T5982] and is ignored by this kernel. Remove the mand [ 121.965116][ T5982] option from the mount to silence this warning. [ 121.965116][ T5982] ======================================================= [ 122.608332][ T5982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.644270][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.865147][ T6004] loop1: detected capacity change from 0 to 256 [ 123.931736][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.289812][ T6008] binder: 6006:6008 ioctl c0306201 2000000003c0 returned -14 [ 124.466596][ T6004] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 124.715979][ T6012] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 127.107955][ T6042] loop3: detected capacity change from 0 to 16 [ 127.162608][ T6016] loop2: detected capacity change from 0 to 32768 [ 127.185028][ T6042] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 128.143636][ T6016] read_mapping_page failed! [ 128.143652][ T6016] diRead: diIAGRead returned -5 [ 129.312040][ T818] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.626072][ T818] usb 5-1: Using ep0 maxpacket: 32 [ 129.792576][ T818] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 129.792606][ T818] usb 5-1: config 0 has no interface number 0 [ 129.792653][ T818] usb 5-1: config 0 interface 184 has no altsetting 0 [ 129.809476][ T818] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 129.809509][ T818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.809529][ T818] usb 5-1: Product: syz [ 129.809544][ T818] usb 5-1: Manufacturer: syz [ 129.809559][ T818] usb 5-1: SerialNumber: syz [ 130.194990][ T818] usb 5-1: config 0 descriptor?? [ 130.700170][ T6076] batman_adv: batadv0: Adding interface: dummy0 [ 130.700189][ T6076] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.700245][ T6076] batman_adv: batadv0: Interface activated: dummy0 [ 130.934874][ T6078] batadv0: mtu less than device minimum [ 131.026427][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.058276][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.070947][ T818] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 131.092141][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.098071][ T818] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 131.120318][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.141215][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.175906][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.196578][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.215294][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.249519][ T6078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 131.648278][ T818] usb 5-1: USB disconnect, device number 2 [ 132.085508][ T6096] wg0: Master is either lo or non-ether device [ 132.087483][ T6057] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.448633][ T6057] usb 3-1: Using ep0 maxpacket: 32 [ 132.463701][ T6057] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.463783][ T6057] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.504110][ T6057] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 132.504133][ T6057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.504148][ T6057] usb 3-1: Product: syz [ 132.504158][ T6057] usb 3-1: Manufacturer: syz [ 132.504169][ T6057] usb 3-1: SerialNumber: syz [ 132.633530][ T6057] usb 3-1: config 0 descriptor?? [ 133.079369][ T819] usb 3-1: USB disconnect, device number 2 [ 135.818892][ T6122] input: syz0 as /devices/virtual/input/input5 [ 136.301489][ T6145] process 'syz.3.58' launched './file0' with NULL argv: empty string added [ 138.462972][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.463043][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.535621][ T6200] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 139.686158][ T6202] netlink: 14 bytes leftover after parsing attributes in process `syz.0.74'. [ 139.739316][ T818] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 139.920856][ T818] usb 3-1: config 246 has an invalid interface number: 166 but max is 0 [ 139.920883][ T818] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 139.920899][ T818] usb 3-1: config 246 has no interface number 0 [ 139.920935][ T818] usb 3-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.920960][ T818] usb 3-1: config 246 interface 166 has no altsetting 0 [ 140.010007][ T818] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 140.010037][ T818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.010055][ T818] usb 3-1: Product: syz [ 140.010067][ T818] usb 3-1: Manufacturer: syz [ 140.010080][ T818] usb 3-1: SerialNumber: syz [ 140.801391][ T818] usb 3-1: Limiting number of CPorts to U8_MAX [ 140.893658][ T818] usb 3-1: Not enough endpoints found in device, aborting! [ 141.097519][ T6207] loop3: detected capacity change from 0 to 1024 [ 141.166689][ T5813] usb 3-1: USB disconnect, device number 3 [ 141.507162][ T6207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.595697][ T6224] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET) [ 142.681093][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.030014][ T6229] loop3: detected capacity change from 0 to 128 [ 143.517195][ T6236] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.664323][ T6255] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 146.006097][ T6254] mmap: syz.0.91 (6254) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.030441][ T5813] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 149.266635][ T5813] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 149.266663][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.266681][ T5813] usb 3-1: config 0 has no interfaces? [ 149.266708][ T5813] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 149.266731][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.391979][ T5813] usb 3-1: config 0 descriptor?? [ 149.558808][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.799221][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 149.799668][ T6057] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 149.808365][ T5917] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.808395][ T5917] usb 4-1: config 0 has no interface number 0 [ 149.808980][ T5917] usb 4-1: config 0 interface 184 has no altsetting 0 [ 149.820553][ T5917] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.820686][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.820742][ T5917] usb 4-1: Product: syz [ 149.820787][ T5917] usb 4-1: Manufacturer: syz [ 149.820831][ T5917] usb 4-1: SerialNumber: syz [ 149.998501][ T32] usb 3-1: USB disconnect, device number 4 [ 150.045311][ T5917] usb 4-1: config 0 descriptor?? [ 150.089712][ T6057] usb 2-1: Using ep0 maxpacket: 16 [ 150.092367][ T6057] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.092396][ T6057] usb 2-1: config 0 has no interface number 0 [ 150.098027][ T6057] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 150.098060][ T6057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.098080][ T6057] usb 2-1: Product: syz [ 150.098095][ T6057] usb 2-1: Manufacturer: syz [ 150.098111][ T6057] usb 2-1: SerialNumber: syz [ 150.207667][ T6057] usb 2-1: config 0 descriptor?? [ 150.815446][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 150.815482][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 152.310979][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 152.311023][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 152.311045][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 152.311065][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 152.318308][ T5917] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 152.419899][ T5917] usb 4-1: USB disconnect, device number 2 [ 152.810680][ T6057] usb 2-1: selecting invalid altsetting 1 [ 152.810715][ T6057] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 152.810771][ T6057] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 152.810839][ T6057] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 152.890346][ T6057] usb 2-1: USB disconnect, device number 2 [ 154.958310][ T6354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.065517][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 155.234721][ T6357] bond1: (slave ip6gretap1): making interface the new active one [ 155.316740][ T6357] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 155.921066][ T6370] Zero length message leads to an empty skb [ 156.572197][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 156.744376][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 156.794688][ T10] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 156.794723][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.794746][ T10] usb 1-1: Product: syz [ 156.794761][ T10] usb 1-1: Manufacturer: syz [ 156.794777][ T10] usb 1-1: SerialNumber: syz [ 156.857138][ T10] usb 1-1: config 0 descriptor?? [ 156.942050][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 159.049022][ T10] gspca_ov534_9: reg_r err -71 [ 159.310105][ T10] gspca_ov534_9: Unknown sensor 0000 [ 159.310211][ T10] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 159.426924][ T10] usb 1-1: USB disconnect, device number 2 [ 162.345193][ T6426] binder: 6425:6426 ioctl c0306201 2000000003c0 returned -14 [ 162.869552][ T6430] ip6erspan0: entered allmulticast mode [ 163.098710][ T44] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 163.451503][ T44] usb 1-1: config 3 has an invalid interface number: 230 but max is 0 [ 163.451536][ T44] usb 1-1: config 3 has no interface number 0 [ 163.451570][ T44] usb 1-1: config 3 interface 230 has no altsetting 0 [ 163.457084][ T44] usb 1-1: string descriptor 0 read error: -22 [ 163.457328][ T44] usb 1-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 163.457356][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.566662][ T44] uvcvideo 1-1:3.230: Found UVC 0.00 device (199e:8002) [ 163.566708][ T44] uvcvideo 1-1:3.230: No valid video chain found. [ 163.900865][ T10] usb 1-1: USB disconnect, device number 3 [ 164.221317][ T6447] loop1: detected capacity change from 0 to 131072 [ 164.279950][ T6447] F2FS-fs (loop1): invalid crc value [ 164.515653][ T6447] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 164.542041][ T6447] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 164.623524][ T37] audit: type=1800 audit(1776265875.286:3): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.150" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 164.623576][ T37] audit: type=1800 audit(1776265875.296:4): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.150" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 165.759900][ T6480] netlink: 14 bytes leftover after parsing attributes in process `syz.3.159'. [ 165.826515][ T6483] binder: BINDER_SET_CONTEXT_MGR already set [ 165.826532][ T6483] binder: 6481:6483 ioctl 4018620d 200000000040 returned -16 [ 166.081031][ T6480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.231079][ T6480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.296177][ T6480] bond0 (unregistering): Released all slaves [ 167.222430][ T6505] loop3: detected capacity change from 0 to 32768 [ 167.270266][ T6505] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.165 (6505) [ 167.371686][ T6505] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.371732][ T6505] BTRFS info (device loop3): using sha256 checksum algorithm [ 167.490461][ T6137] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.666765][ T6137] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 167.666800][ T6137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.666823][ T6137] usb 1-1: Product: syz [ 167.666840][ T6137] usb 1-1: Manufacturer: syz [ 167.666855][ T6137] usb 1-1: SerialNumber: syz [ 167.722625][ T6505] BTRFS info (device loop3): rebuilding free space tree [ 167.882620][ T6505] BTRFS info (device loop3): enabling ssd optimizations [ 167.882652][ T6505] BTRFS info (device loop3): using spread ssd allocation scheme [ 167.882676][ T6505] BTRFS info (device loop3): enabling free space tree [ 167.882693][ T6505] BTRFS info (device loop3): force clearing of disk cache [ 167.882711][ T6505] BTRFS info (device loop3): enabling auto defrag [ 167.882736][ T6505] BTRFS info (device loop3): max_inline set to 0 [ 167.971488][ T6137] usb 1-1: config 0 descriptor?? [ 168.141072][ T6137] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 168.531590][ T6137] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 169.025584][ T37] audit: type=1804 audit(1776265879.546:5): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.168" name="/newroot/33/file0" dev="tmpfs" ino=204 res=1 errno=0 [ 169.367691][ T6137] usb 1-1: USB disconnect, device number 4 [ 171.115409][ T3575] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 171.333182][ T5917] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.520027][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 171.536457][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 171.536537][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.594729][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.660082][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.660114][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.660133][ T5917] usb 2-1: Product: syz [ 171.660145][ T5917] usb 2-1: Manufacturer: syz [ 171.660158][ T5917] usb 2-1: SerialNumber: syz [ 172.198814][ T5917] usb 2-1: config 0 descriptor?? [ 172.340390][ T5917] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 172.340436][ T5917] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 172.970009][ T5917] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 172.975120][ T5917] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 173.602669][ T5917] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 174.033287][ T5917] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 174.035185][ T5917] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 174.035640][ T5917] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 174.036056][ T5917] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 174.036472][ T5917] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 174.216799][ T5917] usb 2-1: USB disconnect, device number 3 [ 174.525203][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 174.573666][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 174.974197][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 174.974743][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 176.857720][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.762902][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.907738][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.658294][ T6714] loop3: detected capacity change from 0 to 4096 [ 181.707011][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 181.810378][ T6714] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 182.167157][ T6714] ntfs3(loop3): ino=3, mi_enum_attr [ 182.177189][ T6714] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 182.583691][ T6714] ntfs3(loop3): volume is dirty and "force" flag is not set! [ 185.481327][ T6780] loop2: detected capacity change from 0 to 16 [ 186.505416][ T6789] loop4: detected capacity change from 0 to 512 [ 187.072042][ T6789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.238995][ T6799] loop1: detected capacity change from 0 to 512 [ 187.268615][ T6057] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 187.449897][ T6057] usb 4-1: Using ep0 maxpacket: 16 [ 187.456696][ T6057] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 187.456732][ T6057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.521658][ T6057] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.521684][ T6057] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.521699][ T6057] usb 4-1: Product: syz [ 187.521710][ T6057] usb 4-1: Manufacturer: syz [ 187.521722][ T6057] usb 4-1: SerialNumber: syz [ 187.574393][ T6799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.574520][ T6799] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.625827][ T6057] usb 4-1: config 0 descriptor?? [ 187.778741][ T6057] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.778769][ T6057] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 187.785043][ T6800] overlayfs: failed to resolve './bus': -2 [ 188.304699][ T6057] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 188.332376][ T6057] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 188.593778][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.960450][ T6057] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 189.128689][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.207275][ T6057] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 189.207718][ T6057] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 189.213018][ T6057] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 189.213672][ T6057] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 189.216193][ T6057] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 189.393251][ T6057] usb 4-1: USB disconnect, device number 3 [ 189.885136][ T6809] loop4: detected capacity change from 0 to 256 [ 190.158518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 192.868791][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.034699][ T5917] usb 2-1: config 0 has no interfaces? [ 193.034741][ T5917] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.034766][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.079885][ T5917] usb 2-1: config 0 descriptor?? [ 193.108201][ T6840] veth1_macvtap: left promiscuous mode [ 193.225488][ T37] audit: type=1800 audit(1776265903.756:6): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.247" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048617 res=0 errno=0 [ 193.295263][ T5917] usb 2-1: USB disconnect, device number 4 [ 194.188627][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 194.358680][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 194.361738][ T32] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 194.361773][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.420549][ T32] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.420581][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.420604][ T32] usb 5-1: Product: syz [ 194.420619][ T32] usb 5-1: Manufacturer: syz [ 194.420634][ T32] usb 5-1: SerialNumber: syz [ 194.689324][ T32] usb 5-1: config 0 descriptor?? [ 194.724739][ T32] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 194.724777][ T32] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 195.325166][ T32] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 195.326389][ T32] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 196.801793][ T32] em28xx 5-1:0.0: AC97 vendor ID = 0x00fc00fe [ 197.025547][ T32] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 197.026398][ T32] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 197.034576][ T32] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 197.035696][ T32] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 197.038534][ T32] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 197.039544][ T32] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 197.219771][ T32] usb 5-1: USB disconnect, device number 3 [ 199.484818][ T5491] veth1_macvtap: entered promiscuous mode [ 199.911393][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.911454][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.110237][ T6928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.277'. [ 200.432417][ T6937] net_ratelimit: 10 callbacks suppressed [ 200.432441][ T6937] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 201.282764][ T5917] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 201.382425][ T6963] netlink: 'syz.0.284': attribute type 3 has an invalid length. [ 201.383187][ T6963] capability: warning: `syz.0.284' uses deprecated v2 capabilities in a way that may be insecure [ 201.466208][ T5917] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 201.466270][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 201.466302][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 201.466331][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.466377][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.466402][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.656929][ T5917] usb 3-1: GET_CAPABILITIES returned 0 [ 202.656991][ T5917] usbtmc 3-1:16.0: can't read capabilities [ 203.340397][ T5917] usb 3-1: USB disconnect, device number 5 [ 204.869438][ T5851] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 204.939167][ T7003] overlayfs: upper fs does not support tmpfile. [ 205.048802][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 205.086405][ T5851] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 205.086446][ T5851] usb 2-1: config 1 interface 0 has no altsetting 0 [ 205.116738][ T5851] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40 [ 205.129222][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.129257][ T5851] usb 2-1: Product: syz [ 205.129275][ T5851] usb 2-1: Manufacturer: syz [ 205.129291][ T5851] usb 2-1: SerialNumber: syz [ 205.455361][ T61] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 205.455403][ T61] Bluetooth: hci2: Dropping invalid advertising data [ 205.455420][ T61] Bluetooth: hci2: Malformed LE Event: 0x02 [ 205.710334][ T7011] Bluetooth: MGMT ver 1.23 [ 205.776922][ T5851] usbhid 2-1:1.0: can't add hid device: -71 [ 205.777056][ T5851] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 205.856597][ T5851] usb 2-1: USB disconnect, device number 5 [ 206.606711][ T7019] binder: 7018:7019 ioctl c0306201 2000000003c0 returned -14 [ 207.875629][ T7038] loop1: detected capacity change from 0 to 256 [ 207.879399][ T7038] vfat: Deprecated parameter 'posix' [ 207.879418][ T7038] FAT-fs: "posix" option is obsolete, not supported now [ 211.229906][ T7085] binder_alloc: 7083: binder_alloc_buf size 65336 failed, no address space [ 211.230071][ T7085] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 211.611484][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 211.611528][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 211.779961][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 211.965847][ T7088] gtp0: entered promiscuous mode [ 212.962781][ T7108] bridge0: port 3(erspan0) entered blocking state [ 212.991024][ T7108] bridge0: port 3(erspan0) entered disabled state [ 213.046762][ T7108] erspan0: entered allmulticast mode [ 213.411881][ T7108] erspan0: entered promiscuous mode [ 213.746407][ T7108] bridge0: port 3(erspan0) entered blocking state [ 213.746591][ T7108] bridge0: port 3(erspan0) entered forwarding state [ 213.856355][ T5945] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 213.888527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 214.388559][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 214.393891][ T5945] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 214.393929][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.393972][ T5945] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 214.393996][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.464571][ T5945] usb 1-1: config 0 descriptor?? [ 214.650257][ T7114] erspan0: left allmulticast mode [ 214.650288][ T7114] erspan0: left promiscuous mode [ 214.675303][ T7114] bridge0: port 3(erspan0) entered disabled state [ 215.424945][ T5945] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 215.424984][ T5945] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 215.425003][ T5945] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 215.425022][ T5945] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 215.425041][ T5945] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 215.425059][ T5945] cypress 0003:04B4:DE61.0001: unknown main item tag 0x0 [ 215.425077][ T5945] cypress 0003:04B4:DE61.0001: unexpected long global item [ 215.425693][ T5945] cypress 0003:04B4:DE61.0001: parse failed [ 215.425746][ T5945] cypress 0003:04B4:DE61.0001: probe with driver cypress failed with error -22 [ 215.594409][ T5945] usb 1-1: USB disconnect, device number 5 [ 216.274050][ T37] audit: type=1800 audit(1776266182.949:7): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.335" name="file1" dev="fuse" ino=3 res=0 errno=0 [ 216.870943][ T7156] binder: 7155:7156 ioctl c0306201 200000000240 returned -14 [ 217.016605][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016650][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016682][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016713][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016744][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016775][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016806][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016838][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016879][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 217.016911][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 218.258489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.278492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.288504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.298512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.308515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.318513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.328546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.338510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 224.154529][ T7240] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 224.331567][ T5945] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 224.443617][ T7252] loop4: detected capacity change from 0 to 1024 [ 224.484465][ T5945] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 224.484495][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.484514][ T5945] usb 1-1: config 0 has no interfaces? [ 224.484542][ T5945] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 224.484565][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.570060][ T5945] usb 1-1: config 0 descriptor?? [ 224.610618][ T7252] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 224.610657][ T7252] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 224.610777][ T7252] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 224.657400][ T7252] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #5: comm syz.4.365: unexpected bad inode w/o EXT4_IGET_BAD [ 224.657673][ T7252] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 224.671477][ C1] EXT4-fs (loop4): initial error at time 1776266191: ext4_get_journal_inode:5896: inode 5 [ 224.671545][ C1] EXT4-fs (loop4): last error at time 1776266191: ext4_get_journal_inode:5896: inode 5 [ 224.836335][ T7252] EXT4-fs (loop4): no journal found [ 224.836352][ T7252] EXT4-fs (loop4): can't get journal size [ 224.999693][ T7252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.166645][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.475112][ T5851] usb 1-1: USB disconnect, device number 6 [ 227.495920][ T7266] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 227.658866][ T7270] Bluetooth: hci1: command 0x0406 tx timeout [ 227.659092][ T7270] Bluetooth: hci0: command 0x0406 tx timeout [ 227.659121][ T7270] Bluetooth: hci4: command 0x0406 tx timeout [ 227.900692][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 227.977824][ T7266] veth0_vlan: left promiscuous mode [ 227.986006][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 228.063268][ T7266] veth0_vlan: entered promiscuous mode [ 228.122955][ T7266] team0: Device veth0_vlan failed to register rx_handler [ 231.448579][ T32] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 232.469057][ T32] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 232.469086][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.469103][ T32] usb 5-1: config 0 has no interfaces? [ 232.469130][ T32] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 232.469151][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.562369][ T32] usb 5-1: config 0 descriptor?? [ 232.665696][ T7334] fuse: Bad value for 'fd' [ 233.987937][ T5945] usb 5-1: USB disconnect, device number 4 [ 234.409926][ T7348] fuse: fd is not a fuse device [ 236.131534][ T5851] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 237.310528][ T7368] loop2: detected capacity change from 0 to 512 [ 237.459042][ T5851] usb 1-1: Using ep0 maxpacket: 32 [ 237.464260][ T5851] usb 1-1: config 0 has no interfaces? [ 237.467817][ T5851] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 237.467853][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.467878][ T5851] usb 1-1: Product: syz [ 237.467897][ T5851] usb 1-1: Manufacturer: syz [ 237.467915][ T5851] usb 1-1: SerialNumber: syz [ 237.610364][ T5851] usb 1-1: config 0 descriptor?? [ 238.459823][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 238.461139][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 238.587841][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 238.588050][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 238.653832][ T7373] ceph: No mds server is up or the cluster is laggy [ 238.669886][ T5945] usb 1-1: USB disconnect, device number 7 [ 240.167667][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 240.167896][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 241.967005][ T7391] __nla_validate_parse: 42 callbacks suppressed [ 241.967032][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 241.967054][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 242.921943][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 243.057783][ T7410] ip6gre1: entered promiscuous mode [ 243.057815][ T7410] ip6gre1: entered allmulticast mode [ 243.107124][ T7410] netlink: 'syz.1.413': attribute type 6 has an invalid length. [ 243.107150][ T7410] netlink: 72 bytes leftover after parsing attributes in process `syz.1.413'. [ 243.381118][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 243.409426][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 243.517283][ T7427] fuse: fd is not a fuse device [ 244.090259][ T7435] capability: warning: `syz.4.421' uses 32-bit capabilities (legacy support in use) [ 244.092175][ C1] sd 0:0:1:0: [sda] tag#619 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 244.092227][ C1] sd 0:0:1:0: [sda] tag#619 CDB: Read(6) 08 18 4b 56 00 40 [ 245.619591][ T7432] syz.1.420 (7432) used greatest stack depth: 16800 bytes left [ 246.263128][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 247.525660][ T7458] 9p: Bad value for 'rfdno' [ 252.243261][ T7506] Illegal XDP return value 86380600 on prog (id 44) dev syz_tun, expect packet loss! [ 252.323806][ T7509] loop4: detected capacity change from 0 to 1024 [ 252.495539][ T7509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.594936][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 252.594985][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.595006][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.595019][ T5850] Workqueue: hci0 hci_rx_work [ 252.595065][ T5850] Call Trace: [ 252.595074][ T5850] [ 252.595082][ T5850] dump_stack_lvl+0xe8/0x150 [ 252.595105][ T5850] sysfs_create_dir_ns+0x271/0x2a0 [ 252.595126][ T5850] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 252.595150][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 252.595172][ T5850] ? rt_spin_unlock+0x160/0x200 [ 252.595194][ T5850] kobject_add_internal+0x631/0xd10 [ 252.595218][ T5850] kobject_add+0x163/0x240 [ 252.595238][ T5850] ? __pfx_kobject_add+0x10/0x10 [ 252.595259][ T5850] ? get_device_parent+0x370/0x3a0 [ 252.595289][ T5850] device_add+0x408/0xbb0 [ 252.595326][ T5850] hci_conn_add_sysfs+0xd5/0x210 [ 252.595356][ T5850] le_conn_complete_evt+0x10e6/0x16b0 [ 252.595386][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 252.595407][ T5850] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.595432][ T5850] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.595458][ T5850] ? skb_pull_data+0xfb/0x200 [ 252.595484][ T5850] hci_le_enh_conn_complete_evt+0x189/0x490 [ 252.595505][ T5850] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 252.595528][ T5850] hci_event_packet+0x659/0xef0 [ 252.595561][ T5850] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 252.595580][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 252.595598][ T5850] ? __pfx_hci_event_packet+0x10/0x10 [ 252.595622][ T5850] ? rt_spin_unlock+0x14f/0x200 [ 252.595649][ T5850] ? hci_send_to_monitor+0xe2/0x590 [ 252.595672][ T5850] hci_rx_work+0x3ee/0x1040 [ 252.595703][ T5850] ? process_scheduled_works+0xa69/0x1910 [ 252.595723][ T5850] process_scheduled_works+0xb68/0x1910 [ 252.595764][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.595785][ T5850] ? assign_work+0x3d5/0x5e0 [ 252.595805][ T5850] worker_thread+0xa90/0x1040 [ 252.595843][ T5850] kthread+0x388/0x470 [ 252.595891][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 252.595913][ T5850] ? __pfx_kthread+0x10/0x10 [ 252.595945][ T5850] ret_from_fork+0x514/0xb70 [ 252.595974][ T5850] ? __pfx_ret_from_fork+0x10/0x10 [ 252.595998][ T5850] ? __switch_to+0xc79/0x1410 [ 252.596042][ T5850] ? __pfx_kthread+0x10/0x10 [ 252.596064][ T5850] ret_from_fork_asm+0x1a/0x30 [ 252.596098][ T5850] [ 252.596144][ T5850] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 252.596176][ T5850] Bluetooth: hci0: failed to register connection device [ 254.690044][ T7513] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 255.022025][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.119922][ T7554] input: syz1 as /devices/virtual/input/input8 [ 258.905426][ T7570] netlink: 'syz.1.465': attribute type 83 has an invalid length. [ 260.144478][ T7563] loop4: detected capacity change from 0 to 32768 [ 260.582514][ T7580] fuse: fd is not a fuse device [ 260.625419][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 260.803347][ T37] audit: type=1326 audit(1776266227.515:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb49dbc819 code=0x0 [ 261.237233][ T37] audit: type=1800 audit(1776266227.965:9): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.462" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 262.084870][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.084965][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.346328][ T37] audit: type=1800 audit(1776266229.075:10): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.462" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=8 res=0 errno=0 [ 263.688839][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 265.771111][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.485'. [ 269.647466][ T7682] : renamed from bond0 (while UP) [ 270.096236][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 270.190248][ T7697] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.499'. [ 270.413903][ T7697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.891272][ T7709] : renamed from bond_slave_0 (while UP) [ 273.219573][ T7710] team_slave_0: entered promiscuous mode [ 273.219652][ T7710] team_slave_1: entered promiscuous mode [ 273.219986][ T7710] macvlan2: entered allmulticast mode [ 273.220002][ T7710] team0: entered allmulticast mode [ 273.220016][ T7710] team_slave_0: entered allmulticast mode [ 273.220034][ T7710] team_slave_1: entered allmulticast mode [ 273.284793][ T7710] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 273.503531][ T7710] team0: left allmulticast mode [ 273.503573][ T7710] team_slave_0: left allmulticast mode [ 273.503593][ T7710] team_slave_1: left allmulticast mode [ 273.511407][ T7710] team_slave_0: left promiscuous mode [ 273.511479][ T7710] team_slave_1: left promiscuous mode [ 277.286785][ T7723] syz_tun: entered allmulticast mode [ 283.002873][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'. [ 283.396763][ T7780] loop2: detected capacity change from 0 to 512 [ 284.136882][ T7780] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 284.142021][ T7780] EXT4-fs (loop2): mount failed [ 289.180589][ T5843] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 289.346903][ T5843] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.346938][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.346961][ T5843] usb 3-1: Product: syz [ 289.346977][ T5843] usb 3-1: Manufacturer: syz [ 289.346994][ T5843] usb 3-1: SerialNumber: syz [ 289.408011][ T5843] usb 3-1: config 0 descriptor?? [ 289.629143][ T5843] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.401646][ T5843] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 292.237349][ T5843] usb 3-1: USB disconnect, device number 6 [ 294.637599][ T37] audit: type=1107 audit(1776266261.315:11): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 296.326699][ T7859] loop2: detected capacity change from 0 to 1024 [ 297.667281][ T7859] hfsplus: failed to load extents file [ 299.885274][ T7885] fuse: Bad value for 'fd' [ 301.958016][ T7891] batman_adv: batadv0: Interface deactivated: dummy0 [ 301.958049][ T7891] batman_adv: batadv0: Removing interface: dummy0 [ 302.104104][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 302.503123][ T7888] syz.2.551 (7888): drop_caches: 2 [ 305.259292][ T7891] bridge_slave_0: left allmulticast mode [ 305.259321][ T7891] bridge_slave_0: left promiscuous mode [ 305.690398][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.498152][ T7891] bridge_slave_1: left allmulticast mode [ 307.498259][ T7891] bridge_slave_1: left promiscuous mode [ 307.686435][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.363424][ T7891] team0: Port device team_slave_0 removed [ 308.582877][ T7891] team0: Port device team_slave_1 removed [ 308.583993][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.584015][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.209654][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.209686][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.491759][ T7891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.571315][ T7892] team0: Mode changed to "loadbalance" [ 315.606631][ T7969] vivid-000: disconnect [ 316.265882][ T7966] vivid-000: reconnect [ 322.128091][ T37] audit: type=1326 audit(1776266288.835:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.1.584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f042790c819 code=0x0 [ 323.218951][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.219003][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.400735][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 333.725628][ T5850] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 334.683831][ T6137] kernel write not supported for file bpf-prog (pid: 6137 comm: kworker/0:7) [ 337.090401][ T8143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.622'. [ 338.325465][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 348.188522][ T8192] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 349.189294][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'. [ 349.189532][ T8206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.189546][ T8206] IPv6: NLM_F_CREATE should be set when creating new route [ 356.225083][ T8242] dvmrp1: entered allmulticast mode [ 363.499480][ T5917] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 363.701821][ T5917] usb 1-1: config 6 has an invalid interface number: 14 but max is 0 [ 363.701852][ T5917] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 363.701873][ T5917] usb 1-1: config 6 has no interface number 0 [ 363.701925][ T5917] usb 1-1: config 6 interface 14 altsetting 218 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.701955][ T5917] usb 1-1: config 6 interface 14 has no altsetting 0 [ 363.781488][ T5917] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 363.781519][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.781535][ T5917] usb 1-1: Product: syz [ 363.781548][ T5917] usb 1-1: Manufacturer: syz [ 363.781561][ T5917] usb 1-1: SerialNumber: syz [ 366.701721][ T5917] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 366.727471][ T5917] command write [95] error -22 [ 366.765721][ T5917] usb 1-1: USB disconnect, device number 8 [ 372.037975][ T8309] loop2: detected capacity change from 0 to 64 [ 376.918746][ T8330] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 384.240397][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.240468][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.973258][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 385.820527][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.820561][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 385.820582][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.820634][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 385.820664][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 385.822569][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.822602][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 385.822625][ T9] usb 1-1: Product: syz [ 385.822641][ T9] usb 1-1: Manufacturer: syz [ 385.934857][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 385.934898][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 385.992551][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 385.992589][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 387.335574][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.428116][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.459987][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.497090][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.525867][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.521570][ T5851] usb 1-1: USB disconnect, device number 9 [ 389.915954][ T5850] Bluetooth: hci5: command tx timeout [ 391.828595][ T37] audit: type=1326 audit(1776266358.475:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.828667][ T37] audit: type=1326 audit(1776266358.475:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.841186][ T37] audit: type=1326 audit(1776266358.575:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.841518][ T37] audit: type=1326 audit(1776266358.575:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.848878][ T37] audit: type=1326 audit(1776266358.575:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.850949][ T37] audit: type=1326 audit(1776266358.585:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.857527][ T37] audit: type=1326 audit(1776266358.585:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.881417][ T37] audit: type=1326 audit(1776266358.605:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.881825][ T37] audit: type=1326 audit(1776266358.615:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 391.882405][ T37] audit: type=1326 audit(1776266358.615:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a36c819 code=0x7ffc0000 [ 392.218574][ T5850] Bluetooth: hci5: command tx timeout [ 393.026901][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880610c7400: rx timeout, send abort [ 393.265466][ T8401] chnl_net:caif_netlink_parms(): no params data found [ 393.524928][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880610c4800: rx timeout, send abort [ 393.531426][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880610c7400: abort rx timeout. Force session deactivation [ 393.762660][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802af16400: rx timeout, send abort [ 394.154715][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880610c4800: abort rx timeout. Force session deactivation [ 394.773403][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802af16400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 394.787619][ T5850] Bluetooth: hci5: command tx timeout [ 396.861737][ T5850] Bluetooth: hci5: command tx timeout [ 403.444278][ T2153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.721312][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.721445][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.721715][ T8401] bridge_slave_0: entered allmulticast mode [ 404.728774][ T8401] bridge_slave_0: entered promiscuous mode [ 405.724695][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.724853][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.725110][ T8401] bridge_slave_1: entered allmulticast mode [ 405.733883][ T8401] bridge_slave_1: entered promiscuous mode [ 406.047815][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.171873][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.725590][ T8401] team0: Port device team_slave_0 added [ 406.735683][ T8401] team0: Port device team_slave_1 added [ 408.218126][ T8562] ------------[ cut here ]------------ [ 408.218141][ T8562] debug_locks && !(!get_current()->pi_blocked_on) [ 408.218160][ T8562] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#0: syz.2.734/8562 [ 408.218212][ T8562] Modules linked in: [ 408.218238][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.2.734 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.218264][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.218296][ T8562] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 408.218397][ T8562] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3a 93 fb f5 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 1e 93 fb f5 [ 408.218418][ T8562] RSP: 0018:ffffc9000ad075a0 EFLAGS: 00010282 [ 408.218438][ T8562] RAX: 1ffff11005af1167 RBX: 1ffff920015a0eb8 RCX: 0000000000000046 [ 408.218455][ T8562] RDX: 0000000000000000 RSI: ffffffff8d8b06a7 RDI: ffffffff8ba83ce0 [ 408.218472][ T8562] RBP: ffffc9000ad07660 R08: ffffffff822370d4 R09: ffff88801a046758 [ 408.218490][ T8562] R10: dffffc0000000000 R11: fffffbfff1f1a23f R12: ffff88802d788b38 [ 408.218508][ T8562] R13: dffffc0000000000 R14: ffff88801a046700 R15: ffffc9000ad075e0 [ 408.218526][ T8562] FS: 00007fbb4800e6c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 408.218545][ T8562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.218562][ T8562] CR2: 00007fbb49e09f00 CR3: 000000006360a000 CR4: 00000000003526f0 [ 408.218583][ T8562] Call Trace: [ 408.218597][ T8562] [ 408.218611][ T8562] ? __pfx_rt_spin_lock+0x10/0x10 [ 408.218641][ T8562] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 408.218678][ T8562] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.218713][ T8562] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 408.218758][ T8562] ? fill_pool+0x156/0x580 [ 408.218798][ T8562] get_from_partial_node+0x54/0x480 [ 408.218829][ T8562] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 408.218868][ T8562] ? fill_pool+0x156/0x580 [ 408.218900][ T8562] ___slab_alloc+0xb2/0x670 [ 408.218938][ T8562] kmem_cache_alloc_noprof+0xea/0x680 [ 408.218973][ T8562] ? fill_pool+0x156/0x580 [ 408.219010][ T8562] fill_pool+0x156/0x580 [ 408.219049][ T8562] ? __pfx_fill_pool+0x10/0x10 [ 408.219089][ T8562] ? debug_objects_fill_pool+0x6f/0xd0 [ 408.219120][ T8562] ? debug_objects_fill_pool+0x6f/0xd0 [ 408.219155][ T8562] debug_objects_fill_pool+0x97/0xd0 [ 408.219188][ T8562] debug_object_assert_init+0x34/0x340 [ 408.219228][ T8562] hrtimer_start_range_ns+0x3f/0xef0 [ 408.219264][ T8562] ? preempt_schedule_thunk+0x16/0x30 [ 408.219302][ T8562] ? preempt_schedule_common+0x82/0xd0 [ 408.219345][ T8562] futex_lock_pi+0x8df/0xb10 [ 408.219384][ T8562] ? __pfx_futex_lock_pi+0x10/0x10 [ 408.219414][ T8562] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 408.219439][ T8562] ? __lock_acquire+0x6b5/0x2cf0 [ 408.219494][ T8562] ? __pfx_futex_wake_mark+0x10/0x10 [ 408.219545][ T8562] do_futex+0x292/0x420 [ 408.219587][ T8562] ? __pfx_do_futex+0x10/0x10 [ 408.219630][ T8562] __se_sys_futex+0x3a8/0x450 [ 408.219673][ T8562] ? __pfx___se_sys_futex+0x10/0x10 [ 408.219708][ T8562] ? __task_pid_nr_ns+0x28/0x470 [ 408.219746][ T8562] ? __x64_sys_futex+0x21/0xf0 [ 408.219782][ T8562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.219815][ T8562] do_syscall_64+0x15f/0xf80 [ 408.219853][ T8562] ? clear_bhb_loop+0x40/0x90 [ 408.219883][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.219907][ T8562] RIP: 0033:0x7fbb49dbc819 [ 408.219937][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.219956][ T8562] RSP: 002b:00007fbb4800e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 408.219980][ T8562] RAX: ffffffffffffffda RBX: 00007fbb4a035fa0 RCX: 00007fbb49dbc819 [ 408.219998][ T8562] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000000 [ 408.220012][ T8562] RBP: 00007fbb49e52c91 R08: 0000000000000000 R09: 0000000000000001 [ 408.220027][ T8562] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 408.220041][ T8562] R13: 00007fbb4a036038 R14: 00007fbb4a035fa0 R15: 00007ffc95a49008 [ 408.220078][ T8562] [ 408.220098][ T8562] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 408.220119][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.2.734 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.220145][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.220159][ T8562] Call Trace: [ 408.220169][ T8562] [ 408.220178][ T8562] vpanic+0x56c/0xa60 [ 408.220208][ T8562] ? __pfx__printk+0x10/0x10 [ 408.220240][ T8562] ? __pfx_vpanic+0x10/0x10 [ 408.220264][ T8562] ? is_bpf_text_address+0x292/0x2b0 [ 408.220297][ T8562] ? is_bpf_text_address+0x26/0x2b0 [ 408.220338][ T8562] panic+0xc5/0xd0 [ 408.220364][ T8562] ? __pfx_panic+0x10/0x10 [ 408.220409][ T8562] __warn+0x315/0x4c0 [ 408.220434][ T8562] ? rt_spin_lock+0x31c/0x400 [ 408.220463][ T8562] ? rt_spin_lock+0x31c/0x400 [ 408.220491][ T8562] __report_bug+0x29a/0x540 [ 408.220525][ T8562] ? __pfx_css_rstat_updated+0x10/0x10 [ 408.220560][ T8562] ? rt_spin_lock+0x31c/0x400 [ 408.220588][ T8562] ? __pfx___report_bug+0x10/0x10 [ 408.220622][ T8562] ? __lock_acquire+0x6b5/0x2cf0 [ 408.220657][ T8562] ? update_curr_dl_se+0x67d/0x1260 [ 408.220694][ T8562] ? __lock_acquire+0x6b5/0x2cf0 [ 408.220727][ T8562] ? rt_spin_lock+0x31c/0x400 [ 408.220754][ T8562] report_bug+0x16a/0x220 [ 408.220788][ T8562] ? rt_spin_lock+0x31c/0x400 [ 408.220821][ T8562] ? rt_spin_lock+0x31e/0x400 [ 408.220847][ T8562] handle_bug+0x9c/0x200 [ 408.220872][ T8562] exc_invalid_op+0x1a/0x50 [ 408.220895][ T8562] asm_exc_invalid_op+0x1a/0x20 [ 408.220917][ T8562] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 408.220945][ T8562] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3a 93 fb f5 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 1e 93 fb f5 [ 408.220964][ T8562] RSP: 0018:ffffc9000ad075a0 EFLAGS: 00010282 [ 408.220983][ T8562] RAX: 1ffff11005af1167 RBX: 1ffff920015a0eb8 RCX: 0000000000000046 [ 408.221000][ T8562] RDX: 0000000000000000 RSI: ffffffff8d8b06a7 RDI: ffffffff8ba83ce0 [ 408.221016][ T8562] RBP: ffffc9000ad07660 R08: ffffffff822370d4 R09: ffff88801a046758 [ 408.221034][ T8562] R10: dffffc0000000000 R11: fffffbfff1f1a23f R12: ffff88802d788b38 [ 408.221051][ T8562] R13: dffffc0000000000 R14: ffff88801a046700 R15: ffffc9000ad075e0 [ 408.221077][ T8562] ? get_from_partial_node+0x54/0x480 [ 408.221118][ T8562] ? __pfx_rt_spin_lock+0x10/0x10 [ 408.221147][ T8562] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 408.221182][ T8562] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.221216][ T8562] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 408.221254][ T8562] ? fill_pool+0x156/0x580 [ 408.221284][ T8562] get_from_partial_node+0x54/0x480 [ 408.221314][ T8562] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 408.221352][ T8562] ? fill_pool+0x156/0x580 [ 408.221384][ T8562] ___slab_alloc+0xb2/0x670 [ 408.221422][ T8562] kmem_cache_alloc_noprof+0xea/0x680 [ 408.221454][ T8562] ? fill_pool+0x156/0x580 [ 408.221491][ T8562] fill_pool+0x156/0x580 [ 408.221530][ T8562] ? __pfx_fill_pool+0x10/0x10 [ 408.221570][ T8562] ? debug_objects_fill_pool+0x6f/0xd0 [ 408.221601][ T8562] ? debug_objects_fill_pool+0x6f/0xd0 [ 408.221636][ T8562] debug_objects_fill_pool+0x97/0xd0 [ 408.221668][ T8562] debug_object_assert_init+0x34/0x340 [ 408.221708][ T8562] hrtimer_start_range_ns+0x3f/0xef0 [ 408.221742][ T8562] ? preempt_schedule_thunk+0x16/0x30 [ 408.221779][ T8562] ? preempt_schedule_common+0x82/0xd0 [ 408.221832][ T8562] futex_lock_pi+0x8df/0xb10 [ 408.221870][ T8562] ? __pfx_futex_lock_pi+0x10/0x10 [ 408.221900][ T8562] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 408.221925][ T8562] ? __lock_acquire+0x6b5/0x2cf0 [ 408.221979][ T8562] ? __pfx_futex_wake_mark+0x10/0x10 [ 408.222031][ T8562] do_futex+0x292/0x420 [ 408.222073][ T8562] ? __pfx_do_futex+0x10/0x10 [ 408.222117][ T8562] __se_sys_futex+0x3a8/0x450 [ 408.222159][ T8562] ? __pfx___se_sys_futex+0x10/0x10 [ 408.222195][ T8562] ? __task_pid_nr_ns+0x28/0x470 [ 408.222232][ T8562] ? __x64_sys_futex+0x21/0xf0 [ 408.222268][ T8562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.222293][ T8562] do_syscall_64+0x15f/0xf80 [ 408.222328][ T8562] ? clear_bhb_loop+0x40/0x90 [ 408.222357][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.222381][ T8562] RIP: 0033:0x7fbb49dbc819 [ 408.222401][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.222420][ T8562] RSP: 002b:00007fbb4800e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 408.222442][ T8562] RAX: ffffffffffffffda RBX: 00007fbb4a035fa0 RCX: 00007fbb49dbc819 [ 408.222460][ T8562] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000000 [ 408.222475][ T8562] RBP: 00007fbb49e52c91 R08: 0000000000000000 R09: 0000000000000001 [ 408.222489][ T8562] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 408.222505][ T8562] R13: 00007fbb4a036038 R14: 00007fbb4a035fa0 R15: 00007ffc95a49008 [ 408.222541][ T8562] [ 408.222710][ T8562] Kernel Offset: disabled