last executing test programs: 11m6.408474728s ago: executing program 32 (id=51): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1b3, 0x2) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000340)=0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 10m38.835897793s ago: executing program 33 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x6b4eddb}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0xc0044dff, &(0x7f0000004000)) r7 = semget$private(0x0, 0x1, 0x201) semtimedop(r7, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0) semop(r7, &(0x7f0000000000)=[{0x0, 0xfffd}, {0x0, 0xe2a, 0x800}], 0x2) semctl$IPC_RMID(r7, 0x0, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0xfe, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0xa8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9m31.536660577s ago: executing program 2 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 9m30.655877877s ago: executing program 2 (id=259): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x1000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000380), 0x0, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) memfd_create(&(0x7f0000001dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xbd\n/\xb2\'\x16X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\x007\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x1000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000380), 0x0, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) memfd_create(&(0x7f0000001dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xbd\n/\xb2\'\x16X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\x007\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) 9m2.568311542s ago: executing program 36 (id=282): syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000001d040000000000001c000000000000007504000001ed0a0064000000170000000c040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29fa9ec35866a96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x761, &(0x7f0000000080)={0x0, 0x3f9, 0x40, 0x1, 0x2d8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_op], 0x1) 8m52.597683041s ago: executing program 37 (id=291): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x9) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x400, 0x3, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) 6m58.426828349s ago: executing program 38 (id=363): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101102, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$cgroup_int(r4, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x7fff, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x88) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup(0x5, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 6m48.495644555s ago: executing program 39 (id=379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m45.913011329s ago: executing program 40 (id=388): syz_open_dev$sg(0x0, 0x0, 0x8002) setitimer(0x2, &(0x7f0000000580)={{0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r3, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x2400c080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0x1, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5d, 0xff, 0x87}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x5, 0xa}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x6, 0xfb, 0xc, 0x8, 0x8}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44d}}, {0xc4, &(0x7f0000000480)=@string={0xc4, 0x3, "7d2c3cebe2ca769dcba40778bb9ac034472dee56cdc7f56998f02b5cfd6164898ac0d0c5067903c3515779705a8ad52317e0186d15c2d2539f6f30ddcecb5636566d5091e60867dc20f9a57bb11dd44ed53c106eb0a8f8ae00b751c9752670cd96e15c392a49736405bc56a5775144a9a65f7c940a1a7730ee74d58bae7c22fc31542b0e50c97ca2b3fa80f78588f94035209025da125815e8c021ad90deffe898d46c891b06899ddd9d3ff1662a75f12cd2b5e7655b4d74a1e4f6fe98bf65d5084e"}}, {0xc8, &(0x7f00000005c0)=@string={0xc8, 0x3, "e50630ced257bad94b929f8a4031414cda9885f4e74fa71f8fbf1dbb94fe9e7994cfe9df1bdc117c527ef600a16952922ee6019e482f972d127eacff5036e7805159dec98cc56871fe2a9f5c0f74e96ab328fdd83c11a72e2010fa97463f4f58c3dabb73597aa4ff7770d760b2d473d5f1f92652408cfbbe8a3d310d31c1a389dedf899812ee38e7b98b62cca87fdeec61c65d492703895605e2544ba87a1a11a8f613c442b5af9f605c762e0ba74ac7bb8c6be8ea1f13332800e76323fed73b45c14435ac74"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xc0, &(0x7f0000000700)=@string={0xc0, 0x3, "b7cf14dcd4c618930f2e35fb38ddb618f07b8fbfb44db2e64c48f14f4f35225e1f8ed0257d10e0a2921e0bbc6d0d80d1b76d39f004b0109003da35e34e9333303217d73e123f273b7fcb9514a545c665ca1c326e8baca4523f4660b8c9160485e9b14590635a1012ae3f2fdb1fa137a819c6b400b819020d7764db60237549fe3b4617d0eff60fa6c57c7f0b7005ff837ec57bee3d2d25fc795f10839d74fbc7b1f964ebd0b7c726d3e69cfaf251ba9faa7d32ef248404b7a7491b7be124"}}]}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x1b, {0x9, 0x21, 0x101, 0x2e, 0x1, {0x22, 0x9cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x4c, 0x13, 0x3, 0xff, 0x5}, 0x38, &(0x7f0000000900)={0x5, 0xf, 0x38, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x7, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0xfa, 0x2, 0x8, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6f, 0xfe, 0xfff9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x7, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x0, 0x7}]}, 0x4, [{0x4d, &(0x7f0000000940)=@string={0x4d, 0x3, "a08e71cca40441d8c299dea9a3b5df0ae7acf0e4cf98ca17e968c7325e650c7aea66a391a90181e010a75a9c083e6546693e337f747d1649161c6fae0b644d04113c5f84aa1c8de02bd1b1"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x44c}}, {0xcb, &(0x7f0000000a00)=@string={0xcb, 0x3, "1bc81701b5d981ca9484fab4858577bff6b428665f7e25940261535ba9eaba6e6633b1ed1229ffb47c3a6dd0cf7a945cf1eb1741b095edb53f8ee223dfa08f8b910b284cdd164c2ab5ab7e100071e08419fb20b1e1b1d370f34e1fbd9c7cde5bf11f95a3b73ecd46c500c9fed0aef2e491ea928a0feb8c6706482baeb103c16cdb6463f61322abb53be138763ab0fc2b79edbd24259cf37cf721799b0d5fb7854caea6a7842d9a6756487f7b885f0ee63f08bdc7ab60b1bf15c9b5969d179121844d48c79961276930"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x1407}}]}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6m40.662640137s ago: executing program 41 (id=393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x10000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="449067578ed280c5b23964d4484fece516316a50fbe8e53ece36cb8145e5af72", 0x20}], 0x1}, 0x2008010) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x200004, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) unshare(0x20400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba80102030109022702"], 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) 5m32.006141973s ago: executing program 8 (id=445): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5m31.087336608s ago: executing program 8 (id=446): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x5, 0x30000000, 0x3) syz_clone(0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8}]}, 0x24}}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000180)) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m28.241380686s ago: executing program 8 (id=447): socket(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000040)=0x3) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) r5 = syz_open_dev$sg(0x0, 0xf9ba, 0x14b082) ioctl$SG_IO(r5, 0x2285, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4) r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000040)={@remote, @multicast1, @loopback}, &(0x7f00000000c0)=0xc) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 5m27.708580522s ago: executing program 8 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) 5m26.977254049s ago: executing program 8 (id=449): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "00200000a9e8fb67"}}}, 0x11) 5m26.497833779s ago: executing program 8 (id=450): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x1e010000, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0xfffffffffbfffffe, 0x242) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00'}) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008010) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) read(r3, 0x0, 0x0) close(r3) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r9 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "d86f58f2f4fb5108c32e79f08a8db3a88cf06d4aefcc5448a88ae13260ae6450e87c2d5a0a50fff80ba4f6ceeb5482fd10f905a6fb76476a4d576a04b20b49d5", 0x3a}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, r9, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) 5m10.862285991s ago: executing program 42 (id=450): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x1e010000, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0xfffffffffbfffffe, 0x242) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00'}) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008010) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) read(r3, 0x0, 0x0) close(r3) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r9 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "d86f58f2f4fb5108c32e79f08a8db3a88cf06d4aefcc5448a88ae13260ae6450e87c2d5a0a50fff80ba4f6ceeb5482fd10f905a6fb76476a4d576a04b20b49d5", 0x3a}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, r9, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) 4m0.720262694s ago: executing program 2 (id=396): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) madvise(&(0x7f0000e3b000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000c5b000/0x3000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x20400, 0x0) preadv(r6, 0x0, 0x0, 0x9, 0xd1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000cc0)=ANY=[@ANYRESDEC], 0x64}}, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000140)=[0x1], &(0x7f0000000000), 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2500, 0x0) dup(r7) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa249}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3425}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd76c}]}]}]}, 0x108}}, 0x20008000) 3m57.777590541s ago: executing program 2 (id=484): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3m56.834545061s ago: executing program 2 (id=486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 3m55.663160392s ago: executing program 2 (id=491): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000280)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xf}}, 0xfffffff7, 0x200, 0x0, 0x126, 0xbc0}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={r5, 0x2, 0x2, 0x40, 0x4, 0x4}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000440)={r6, 0x9}, 0x8) syz_open_dev$media(&(0x7f0000000240), 0x2, 0x60c580) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r5, 0xc1e}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000600)={r10, 0x9, 0xfffb, 0x7, 0x0, 0xfff}, &(0x7f0000000640)=0x14) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 3m45.482093276s ago: executing program 5 (id=513): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x20, &(0x7f00000012c0)="150200", 0x3) 3m44.360023696s ago: executing program 5 (id=517): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r1 = syz_io_uring_setup(0x6, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x31a}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x5, &(0x7f0000000040)=[{0x0}], 0x1, 0x1a, 0x1}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3m43.111186026s ago: executing program 5 (id=518): syz_open_dev$swradio(&(0x7f00000003c0), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000380)={0x3, 0x20980900}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x4, @value=0x1b13}) 3m42.291814599s ago: executing program 5 (id=521): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x2, 0x1}, {0x60, 0x2}, @period={0x58, 0x96, 0x6, 0x1, 0x8001, {0x5, 0x10, 0x0, 0x5}, 0x0, 0x0}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r3, 0x1, 0xffffffff, 0x25dfdbf9, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "7dc5e6", 0x2}}}, 0xd) 3m40.722149021s ago: executing program 5 (id=524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 3m40.305587307s ago: executing program 43 (id=491): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000280)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xf}}, 0xfffffff7, 0x200, 0x0, 0x126, 0xbc0}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={r5, 0x2, 0x2, 0x40, 0x4, 0x4}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000440)={r6, 0x9}, 0x8) syz_open_dev$media(&(0x7f0000000240), 0x2, 0x60c580) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r5, 0xc1e}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000600)={r10, 0x9, 0xfffb, 0x7, 0x0, 0xfff}, &(0x7f0000000640)=0x14) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 3m39.278216765s ago: executing program 3 (id=528): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r1 = syz_io_uring_setup(0x6, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x31a}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x5, &(0x7f0000000040)=[{0x0}], 0x1, 0x1a, 0x1}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3m39.169844927s ago: executing program 5 (id=530): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c80)={r3, 0x0, &(0x7f00000027c0)=""/161}, 0x20) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000111401000000"], 0x28}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) syz_emit_ethernet(0x37, &(0x7f0000000280)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @igmp={{0x8, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x7, 0xe8, [@private=0xa010101]}, @ssrr={0x89, 0x3, 0x9}]}}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) write$binfmt_register(r5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x466c, 0x0, &(0x7f0000001340), 0x0) 3m38.466609574s ago: executing program 3 (id=532): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0xff, 0xff, 0x5, 0x2, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="f2f5a7d4561b", {[0xff, 0x0, 0xff]}}, 0x1, 0x3, 0x9, 0x200, 0x3, 0x7ff, 'veth1_to_hsr\x00', 'wg0\x00', {}, {}, 0x0, 0x198}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@rand_addr=0x64010100, @loopback, 0x0, 0xffffffff, 0xf, 0x6, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x8, 0x5, 0x5, 0xf800, 0x9, 0x6, 'netdevsim0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x123}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x1}}}, {{@arp={@local, @multicast2, 0xff, 0xffffff00, 0xf, 0x0, {@empty, {[0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, 0x101, 0x6, 0x200, 0x4, 0x7, 0x9, 'hsr0\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x48}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_io_uring_setup(0x4e2f, 0x0, 0x0, 0x0) 3m36.670611921s ago: executing program 3 (id=535): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2}, 0x0) 3m34.990379664s ago: executing program 3 (id=538): memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6) syz_open_dev$sndpcmp(0x0, 0x3, 0x800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m33.784481697s ago: executing program 3 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m32.239233252s ago: executing program 3 (id=545): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) close_range(r7, 0xffffffffffffffff, 0x0) 3m29.466263778s ago: executing program 4 (id=550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) 3m28.144519967s ago: executing program 4 (id=552): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 3m26.500733454s ago: executing program 4 (id=554): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000080d}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m24.426753902s ago: executing program 4 (id=555): r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m23.719461653s ago: executing program 44 (id=530): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c80)={r3, 0x0, &(0x7f00000027c0)=""/161}, 0x20) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000111401000000"], 0x28}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) syz_emit_ethernet(0x37, &(0x7f0000000280)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @igmp={{0x8, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x7, 0xe8, [@private=0xa010101]}, @ssrr={0x89, 0x3, 0x9}]}}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) write$binfmt_register(r5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000000730a00fe000000007704000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673de"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x466c, 0x0, &(0x7f0000001340), 0x0) 3m23.557536452s ago: executing program 4 (id=558): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a1f0600"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x3c}}, 0x0) 3m20.419936153s ago: executing program 4 (id=561): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x1e010000, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0xfffffffffbfffffe, 0x242) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00'}) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x24, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008010) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) read(r3, 0x0, 0x0) close(r3) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r9 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "d86f58f2f4fb5108c32e79f08a8db3a88cf06d4aefcc5448a88ae13260ae6450e87c2d5a0a50fff80ba4f6ceeb5482fd10f905a6fb76476a4d576a04b20b49d5", 0x3a}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, r9, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) 3m16.680037938s ago: executing program 45 (id=545): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) close_range(r7, 0xffffffffffffffff, 0x0) 3m4.20952525s ago: executing program 46 (id=561): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x1e010000, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0xfffffffffbfffffe, 0x242) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00'}) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x24, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008010) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) read(r3, 0x0, 0x0) close(r3) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r9 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "d86f58f2f4fb5108c32e79f08a8db3a88cf06d4aefcc5448a88ae13260ae6450e87c2d5a0a50fff80ba4f6ceeb5482fd10f905a6fb76476a4d576a04b20b49d5", 0x3a}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, r9, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) 1m16.611752197s ago: executing program 6 (id=729): socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r1) syz_usb_connect(0x0, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002f638d408f01002204ddc010203010902"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1m13.165288869s ago: executing program 6 (id=736): recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}, 0x80000000}], 0x1, 0x8060, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x8804, &(0x7f000005ffe4)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m11.905726995s ago: executing program 6 (id=740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_script(r2, &(0x7f0000003300)={'#! ', './bus'}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x1, 0x40002120, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) 1m10.325443907s ago: executing program 6 (id=745): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002d40)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf90, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xe, '\x00', @remote, [{0x1f, 0x1ef, "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"}]}}}}}, 0xfc6) 1m9.198837566s ago: executing program 6 (id=750): recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}, 0x80000000}], 0x1, 0x8060, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x8804, &(0x7f000005ffe4)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m7.979356817s ago: executing program 6 (id=755): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xda70, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x14}}, 0x0) mknod(&(0x7f0000000180)='.\x00', 0x100, 0x4) 50.17753946s ago: executing program 47 (id=755): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xda70, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x14}}, 0x0) mknod(&(0x7f0000000180)='.\x00', 0x100, 0x4) 17.269896699s ago: executing program 9 (id=825): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0xff, 0x5a4, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0xfb, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0x4ad}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x25, 0x8, 0xea}}}}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x3f, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 16.561418407s ago: executing program 1 (id=826): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 14.020147728s ago: executing program 0 (id=827): syz_mount_image$btrfs(&(0x7f00000003c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@clear_cache}, {@user_subvol_rm}, {@nodatacow}, {@noautodefrag}, {@space_cache_v1}, {@nodiscard}, {@max_inline={'max_inline', 0x3d, [0x35, 0x32, 0x37, 0x2d, 0x32, 0x25, 0x32, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) 13.10727843s ago: executing program 9 (id=829): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4421, &(0x7f0000008940)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x34000811) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) close(r0) 10.737046703s ago: executing program 1 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000004000000000000000000000180100002020700300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x38, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd28, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x1, 0x80802, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0xc0000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a801800048014000680"], 0x3c}}, 0x0) sendto$inet6(r8, &(0x7f0000000100)="df743f2845a10307f33e05e0716173202b3c5c0033a006fcc2ebfda57ab70d1859188bf8a66b65e0f0fe4c0c97ae59a5676d37c7f778625f30955ee8a969d4d7e8892691697f956472082a2594c62c00266d7c35efdd4043507d025800a8fa8f53d6a62b0b1c64355cd3d0d71f7b08d15b35978b97bf5f31a2e8292c1b636b24675745ca8ce39b7a5e156bfa4195df31836a611c6b1771b27eb93d0c10c92bd6481ecafb6ac4ef92f24b63509cfa99c3c61ac1db91537a", 0xb7, 0x40000, &(0x7f00000001c0)={0xa, 0x4e24, 0x55, @private1, 0x1000}, 0x1c) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r12, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) 9.104100401s ago: executing program 0 (id=834): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 8.931815071s ago: executing program 1 (id=835): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x101000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 8.240433604s ago: executing program 9 (id=836): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x9b}}, {@nobarrier}]}, 0x3, 0x7b9, &(0x7f00000007c0)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 8.159228567s ago: executing program 7 (id=837): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 7.97656192s ago: executing program 1 (id=838): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0xff, 0x5a4, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0xfb, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0x4ad}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x25, 0x8, 0xea}}}}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x3f, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 7.693525672s ago: executing program 0 (id=839): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c9006af7b8004d6455cd16c2fae39f700043a94729e295724df6c87fe4cc5ae7806a2751d77de26f8f037dc6224a64bff9c4490df000000000000000803f7ecdfe1f5143201c50475c4cbc55ceec088e79f9c5504e59dd3cb1d7a443bf4f4bd83350dc17"], 0x6e) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000880)={0x2, 0x102, 0x2, {0xd, 0x749, 0x2, 0x978}}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20802, &(0x7f0000000300)={[], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x7fff}}}}, 0xf) fsopen(0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10084, &(0x7f00000000c0)={[{@minixdf}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nomblk_io_submit}, {@lazytime}, {@jqfmt_vfsold}]}, 0x1, 0x401, &(0x7f0000000540)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) 6.983095733s ago: executing program 7 (id=840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0x2ac}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000fc000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 5.404588111s ago: executing program 1 (id=841): write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x86, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x89d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x10, 0x3}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 5.35681241s ago: executing program 9 (id=842): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x4, 0x573, &(0x7f0000000140)="$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") open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000062000000000000000000000002"], 0x0) 4.067497433s ago: executing program 0 (id=843): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x1, 0xa7a, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000a00)={@desc={0x1, 0x0, @desc4}}) 3.692537514s ago: executing program 7 (id=844): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000580)={[], 0xf000}, 0x0) 2.801125154s ago: executing program 7 (id=845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) 1.715872625s ago: executing program 0 (id=846): recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xc8, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0xbb36588a02a803df}, {0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x77a1, 0x2, 0x0, 0x43}, {0x5, 0x3, 0x3, 0xbe}, {0x8, 0x7, 0x4, 0x3b40b934}, {0x36c, 0xff, 0x9, 0xb}, {0x6, 0x6, 0x70, 0x10001}, {0x9ba, 0x0, 0x8, 0x401}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x30, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa71}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.374581499s ago: executing program 1 (id=847): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="200d01000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x3, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1.154092053s ago: executing program 9 (id=848): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioprio_get$pid(0x1, 0x0) 1.151037001s ago: executing program 7 (id=849): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002640)={0x0, 0x2}, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)='$\x00', 0x2) 105.095196ms ago: executing program 7 (id=850): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) 104.615335ms ago: executing program 0 (id=851): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x40, 0x1, 0x4, "a38fb778"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x40, 0x5, 0x4, "360306e0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 9 (id=852): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x7}, &(0x7f0000000180)=0x8) kernel console output (not intermixed with test programs): slave_1 [ 691.251878][ T4253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.372919][ T4253] veth1_macvtap: left promiscuous mode [ 691.383414][ T4253] veth0_macvtap: left promiscuous mode [ 691.389960][ T4253] veth1_vlan: left promiscuous mode [ 691.395696][ T4253] veth0_vlan: left promiscuous mode [ 691.823056][ T53] Bluetooth: hci2: command tx timeout [ 692.194556][ T4253] team0 (unregistering): Port device team_slave_1 removed [ 692.235424][ T4253] team0 (unregistering): Port device team_slave_0 removed [ 692.657572][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.772805][ T8234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.783135][ T8234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.792686][ T8234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.802012][ T8234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.676658][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.688516][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.696639][ T8446] bridge_slave_0: entered allmulticast mode [ 693.709352][ T8446] bridge_slave_0: entered promiscuous mode [ 693.901667][ T53] Bluetooth: hci2: command tx timeout [ 693.940503][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.950354][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.958921][ T8446] bridge_slave_1: entered allmulticast mode [ 693.969241][ T8446] bridge_slave_1: entered promiscuous mode [ 694.050262][ T8367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.606901][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.753293][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.111879][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 695.126574][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 695.136659][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 695.152617][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 695.166514][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 695.256586][ T8446] team0: Port device team_slave_0 added [ 695.370669][ T8446] team0: Port device team_slave_1 added [ 695.706948][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.714582][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.741567][ T8446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.967618][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.976435][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.004588][ T8446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.357206][ T8446] hsr_slave_0: entered promiscuous mode [ 696.373206][ T8446] hsr_slave_1: entered promiscuous mode [ 697.271967][ T53] Bluetooth: hci1: command tx timeout [ 697.876265][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 698.114492][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 698.140823][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 698.150766][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 698.165060][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 698.211891][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 698.670414][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.678697][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.756868][ T8367] veth0_vlan: entered promiscuous mode [ 698.971310][ T3699] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.114341][ T8367] veth1_vlan: entered promiscuous mode [ 699.225854][ T3699] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.303504][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.312337][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.339130][ T5808] Bluetooth: hci1: command tx timeout [ 699.610540][ T3699] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.724333][ T8446] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 699.845500][ T3699] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.998237][ T8446] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 700.154847][ T8446] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 700.194112][ T8446] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 700.301283][ T5808] Bluetooth: hci6: command tx timeout [ 700.393313][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.404991][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.413312][ T8522] bridge_slave_0: entered allmulticast mode [ 700.423972][ T8522] bridge_slave_0: entered promiscuous mode [ 700.819170][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.827172][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.837656][ T8522] bridge_slave_1: entered allmulticast mode [ 700.849448][ T8522] bridge_slave_1: entered promiscuous mode [ 701.095698][ T3699] bridge_slave_1: left allmulticast mode [ 701.102359][ T3699] bridge_slave_1: left promiscuous mode [ 701.110836][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.221031][ T3699] bridge_slave_0: left allmulticast mode [ 701.227101][ T3699] bridge_slave_0: left promiscuous mode [ 701.234160][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.419358][ T5808] Bluetooth: hci1: command tx timeout [ 701.859930][ T3699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.890344][ T3699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.924582][ T3699] bond0 (unregistering): Released all slaves [ 702.063613][ T8367] veth0_macvtap: entered promiscuous mode [ 702.378065][ T5808] Bluetooth: hci6: command tx timeout [ 702.490672][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.623468][ T3699] hsr_slave_0: left promiscuous mode [ 702.656876][ T3699] hsr_slave_1: left promiscuous mode [ 702.666320][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.674340][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.739535][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.747519][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.879606][ T3699] veth1_macvtap: left promiscuous mode [ 702.885518][ T3699] veth0_macvtap: left promiscuous mode [ 702.891812][ T3699] veth1_vlan: left promiscuous mode [ 702.897434][ T3699] veth0_vlan: left promiscuous mode [ 703.502192][ T5808] Bluetooth: hci1: command tx timeout [ 704.035519][ T3699] team0 (unregistering): Port device team_slave_1 removed [ 704.242251][ T3699] team0 (unregistering): Port device team_slave_0 removed [ 704.458676][ T5808] Bluetooth: hci6: command tx timeout [ 704.555183][ T8367] veth1_macvtap: entered promiscuous mode [ 704.676239][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.789776][ T8547] chnl_net:caif_netlink_parms(): no params data found [ 705.099387][ T8367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.304735][ T8522] team0: Port device team_slave_0 added [ 705.383918][ T8522] team0: Port device team_slave_1 added [ 705.405029][ T8367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.910845][ T8367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.921820][ T8367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.932302][ T8367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.941655][ T8367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.019530][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.027090][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.054995][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.085980][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.386930][ T3699] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.457139][ T8446] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.490656][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.498128][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.525610][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.568807][ T5808] Bluetooth: hci6: command tx timeout [ 706.635001][ T3699] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.684725][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.693130][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.797180][ T3699] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.012966][ T3699] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.125224][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.133122][ T7088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.636778][ T8522] hsr_slave_0: entered promiscuous mode [ 707.647983][ T8522] hsr_slave_1: entered promiscuous mode [ 707.656294][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.665595][ T8522] Cannot create hsr debugfs directory [ 707.797387][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.808703][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.816816][ T8547] bridge_slave_0: entered allmulticast mode [ 707.827371][ T8547] bridge_slave_0: entered promiscuous mode [ 708.044929][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.053009][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.061216][ T8547] bridge_slave_1: entered allmulticast mode [ 708.070545][ T8547] bridge_slave_1: entered promiscuous mode [ 708.575215][ T3699] bridge_slave_1: left allmulticast mode [ 708.581989][ T3699] bridge_slave_1: left promiscuous mode [ 708.589164][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.693914][ T3699] bridge_slave_0: left allmulticast mode [ 708.700222][ T3699] bridge_slave_0: left promiscuous mode [ 708.706889][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.729736][ T3699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.747678][ T3699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.774646][ T3699] bond0 (unregistering): Released all slaves [ 709.880353][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.964792][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.180391][ T3699] hsr_slave_0: left promiscuous mode [ 710.218912][ T3699] hsr_slave_1: left promiscuous mode [ 710.226779][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.235728][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.321075][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.330198][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.489795][ T3699] veth1_macvtap: left promiscuous mode [ 710.495975][ T3699] veth0_macvtap: left promiscuous mode [ 710.503796][ T3699] veth1_vlan: left promiscuous mode [ 710.509968][ T3699] veth0_vlan: left promiscuous mode [ 712.258703][ T3699] team0 (unregistering): Port device team_slave_1 removed [ 712.288334][ T3699] team0 (unregistering): Port device team_slave_0 removed [ 713.067218][ T8547] team0: Port device team_slave_0 added [ 713.330634][ T8547] team0: Port device team_slave_1 added [ 713.352241][ T8624] warning: `syz.0.455' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 713.901957][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.909560][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.938719][ T8547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.411769][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.419325][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.447053][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.161894][ T8547] hsr_slave_0: entered promiscuous mode [ 715.174687][ T8547] hsr_slave_1: entered promiscuous mode [ 715.184164][ T8547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.192214][ T8547] Cannot create hsr debugfs directory [ 715.721010][ T8522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 715.748286][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'. [ 715.823865][ T8522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 715.921847][ T8522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 716.076882][ T8522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 716.185095][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.041616][ T8446] veth0_vlan: entered promiscuous mode [ 717.257077][ T8446] veth1_vlan: entered promiscuous mode [ 718.161038][ T8547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 718.250143][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.277661][ T8446] veth0_macvtap: entered promiscuous mode [ 718.309178][ T8547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 718.411611][ T8446] veth1_macvtap: entered promiscuous mode [ 718.475109][ T8547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 718.640416][ T8547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 718.696314][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.816604][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.824319][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.874999][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.946890][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.954735][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.111995][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.312521][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.317014][ T8446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.321230][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.338862][ T8446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.349612][ T8446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.360055][ T8446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.702400][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.711916][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.837130][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.058150][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.064986][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.149168][ T8681] loop4: detected capacity change from 0 to 512 [ 721.195600][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.200240][ T8681] EXT4-fs: inline encryption not supported [ 721.326172][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.334262][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.367107][ T8681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 721.470076][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.477918][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.553476][ T8681] EXT4-fs (loop4): 1 truncate cleaned up [ 721.562662][ T8681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.841246][ T8681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.417368][ T8681] blktrace: Concurrent blktraces are not allowed on loop8 [ 722.605810][ T8687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 723.532095][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.038020][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 724.253401][ T8522] veth0_vlan: entered promiscuous mode [ 724.311878][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 724.325883][ T11] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 724.335477][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.439201][ T8522] veth1_vlan: entered promiscuous mode [ 724.515017][ T11] usb 5-1: config 0 descriptor?? [ 724.600946][ T11] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 724.981012][ T8522] veth0_macvtap: entered promiscuous mode [ 725.051624][ T8522] veth1_macvtap: entered promiscuous mode [ 725.337228][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.489998][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.633406][ T8522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.644360][ T8522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.653816][ T8522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.663304][ T8522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.688983][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.518883][ T1600] usb 5-1: USB disconnect, device number 4 [ 729.910901][ T8547] veth0_vlan: entered promiscuous mode [ 730.190917][ T8547] veth1_vlan: entered promiscuous mode [ 730.684155][ T8547] veth0_macvtap: entered promiscuous mode [ 730.763990][ T8547] veth1_macvtap: entered promiscuous mode [ 730.852823][ T30] audit: type=1400 audit(2000000317.250:2): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8734 comm="syz.4.465" [ 731.140461][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.556035][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.626241][ T8547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.638951][ T8547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.648793][ T8547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.658257][ T8547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.229464][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.238327][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.586443][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.594994][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.401516][ T8794] syz.0.473 uses obsolete (PF_INET,SOCK_PACKET) [ 738.588070][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.599614][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.053585][ T7088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.062123][ T7088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.694889][ T5808] Bluetooth: hci2: adv larger than maximum supported [ 744.798786][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.807066][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.229754][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.238440][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.588098][ T1600] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 751.863785][ T1600] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 751.873098][ T1600] usb 5-1: config 0 has no interface number 0 [ 751.879876][ T1600] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 751.891500][ T1600] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 751.902983][ T1600] usb 5-1: config 0 interface 230 has no altsetting 0 [ 752.292173][ T1600] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 752.302041][ T1600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.310630][ T1600] usb 5-1: Product: syz [ 752.316928][ T1600] usb 5-1: Manufacturer: syz [ 752.322588][ T1600] usb 5-1: SerialNumber: syz [ 752.464403][ T1600] usb 5-1: config 0 descriptor?? [ 752.477447][ T8931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 752.489081][ T8931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 752.753029][ T1600] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 753.219258][ T1600] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 753.483267][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 753.670700][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 753.719465][ T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 753.796417][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 753.806309][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.814994][ T46] usb 4-1: Product: syz [ 753.819688][ T46] usb 4-1: Manufacturer: syz [ 753.824552][ T46] usb 4-1: SerialNumber: syz [ 753.993352][ T46] usb 4-1: config 0 descriptor?? [ 754.094722][ T46] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 755.377513][ T1600] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 755.648649][ T1600] usb 5-1: USB disconnect, device number 5 [ 757.299757][ T46] gspca_zc3xx: reg_r err -71 [ 757.305114][ T46] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 757.402109][ T46] usb 4-1: USB disconnect, device number 3 [ 758.796730][ T5808] Bluetooth: hci6: connection err: -111 [ 760.612037][ T9004] netlink: 'syz.4.526': attribute type 49 has an invalid length. [ 762.301686][ T46] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 762.370719][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.380926][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.392028][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.433203][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.545093][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 763.311186][ T46] usb 6-1: config 0 has no interfaces? [ 763.753112][ T46] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 763.762786][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.771421][ T46] usb 6-1: Product: syz [ 763.775899][ T46] usb 6-1: Manufacturer: syz [ 763.781369][ T46] usb 6-1: SerialNumber: syz [ 764.141676][ T46] usb 6-1: config 0 descriptor?? [ 764.663696][ T53] Bluetooth: hci3: command tx timeout [ 764.890833][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.530'. [ 765.666067][ T9020] chnl_net:caif_netlink_parms(): no params data found [ 766.699977][ T53] Bluetooth: hci3: command tx timeout [ 768.788779][ T5808] Bluetooth: hci3: command tx timeout [ 769.141414][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.153281][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.162847][ T9020] bridge_slave_0: entered allmulticast mode [ 769.173902][ T9020] bridge_slave_0: entered promiscuous mode [ 769.197501][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 769.208524][ T1600] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 769.401849][ T7088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.646682][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.655076][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.664483][ T9020] bridge_slave_1: entered allmulticast mode [ 769.674851][ T9020] bridge_slave_1: entered promiscuous mode [ 769.942475][ T7088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.417468][ T7088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.872607][ T53] Bluetooth: hci3: command tx timeout [ 771.023989][ T7088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.181803][ T9020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.344518][ T9020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.407430][ T7088] bridge_slave_1: left allmulticast mode [ 772.414877][ T7088] bridge_slave_1: left promiscuous mode [ 772.422219][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.569219][ T7088] bridge_slave_0: left allmulticast mode [ 772.575327][ T7088] bridge_slave_0: left promiscuous mode [ 772.582451][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.478026][ T1600] usb 4-1: device descriptor read/64, error -110 [ 774.738275][ T1600] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 774.949714][ T1600] usb 4-1: device descriptor read/64, error -32 [ 775.065408][ T1600] usb usb4-port1: attempt power cycle [ 775.089785][ T7088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.183767][ T7088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.230830][ T7088] bond0 (unregistering): Released all slaves [ 775.405214][ T9020] team0: Port device team_slave_0 added [ 775.518148][ T1600] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 775.545137][ T9020] team0: Port device team_slave_1 added [ 775.599587][ T1600] usb 4-1: device descriptor read/8, error -32 [ 775.728460][ T1600] raw-gadget.1 gadget.3: failed to queue suspend event [ 775.788758][ T1600] raw-gadget.1 gadget.3: failed to queue reset event [ 775.898590][ T1600] raw-gadget.1 gadget.3: failed to queue resume event [ 776.029061][ T1600] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 776.128684][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 776.136585][ T1600] usb 4-1: device descriptor read/8, error -32 [ 776.256263][ T1600] usb usb4-port1: unable to enumerate USB device [ 776.520325][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.527651][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.557492][ T9020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.895699][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.904493][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.931574][ T9020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.169406][ T7088] hsr_slave_0: left promiscuous mode [ 777.223193][ T7088] hsr_slave_1: left promiscuous mode [ 777.231972][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.240019][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.361470][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.369700][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.474632][ T7088] veth1_macvtap: left promiscuous mode [ 777.480850][ T7088] veth0_macvtap: left promiscuous mode [ 777.486949][ T7088] veth1_vlan: left promiscuous mode [ 777.492950][ T7088] veth0_vlan: left promiscuous mode [ 778.756489][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.774663][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.804921][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.835049][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.856798][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.048903][ T7088] team0 (unregistering): Port device team_slave_1 removed [ 779.201514][ T7088] team0 (unregistering): Port device team_slave_0 removed [ 780.607083][ T9020] hsr_slave_0: entered promiscuous mode [ 780.621540][ T9020] hsr_slave_1: entered promiscuous mode [ 780.632377][ T9020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.640522][ T9020] Cannot create hsr debugfs directory [ 780.970617][ T53] Bluetooth: hci1: command tx timeout [ 781.007337][ T5857] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 782.511127][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.518677][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.935980][ T9130] chnl_net:caif_netlink_parms(): no params data found [ 782.939186][ T5857] usb 5-1: config 0 has no interfaces? [ 783.047597][ T53] Bluetooth: hci1: command tx timeout [ 785.099563][ T53] Bluetooth: hci1: command tx timeout [ 785.208629][ T9020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 785.286426][ T5880] usb 6-1: USB disconnect, device number 2 [ 785.386478][ T9020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 785.594156][ T4296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.944085][ T4296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.134597][ T9020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 786.344071][ T4296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.439759][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 786.477251][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 786.489740][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 786.523033][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 786.535148][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 786.552697][ T9020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 786.754737][ T4296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.179667][ T5808] Bluetooth: hci1: command tx timeout [ 787.478645][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.486804][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.495963][ T9130] bridge_slave_0: entered allmulticast mode [ 787.506191][ T9130] bridge_slave_0: entered promiscuous mode [ 787.912074][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.920328][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.929035][ T9130] bridge_slave_1: entered allmulticast mode [ 787.941504][ T9130] bridge_slave_1: entered promiscuous mode [ 788.194164][ T5857] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 788.203800][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.212721][ T5857] usb 5-1: Product: syz [ 788.217241][ T5857] usb 5-1: Manufacturer: syz [ 788.275238][ T4296] bridge_slave_1: left allmulticast mode [ 788.281915][ T4296] bridge_slave_1: left promiscuous mode [ 788.288839][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.338387][ T5857] usb 5-1: config 0 descriptor?? [ 788.382282][ T5857] usb 5-1: can't set config #0, error -32 [ 788.471120][ T4296] bridge_slave_0: left allmulticast mode [ 788.477114][ T4296] bridge_slave_0: left promiscuous mode [ 788.484381][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.618436][ T5808] Bluetooth: hci4: command tx timeout [ 789.748447][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.767012][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.791360][ T4296] bond0 (unregistering): Released all slaves [ 790.159478][ T9130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.480932][ T9130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.686008][ T4296] hsr_slave_0: left promiscuous mode [ 790.698779][ T5808] Bluetooth: hci4: command tx timeout [ 790.706051][ T4296] hsr_slave_1: left promiscuous mode [ 790.723770][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.731821][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.351484][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.360346][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.435817][ T4296] veth1_macvtap: left promiscuous mode [ 791.442452][ T4296] veth0_macvtap: left promiscuous mode [ 791.448744][ T4296] veth1_vlan: left promiscuous mode [ 791.454484][ T4296] veth0_vlan: left promiscuous mode [ 792.779398][ T53] Bluetooth: hci4: command tx timeout [ 793.156901][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 793.311260][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 794.064263][ T9130] team0: Port device team_slave_0 added [ 794.136783][ T9130] team0: Port device team_slave_1 added [ 794.321963][ T9081] raw-gadget.1 gadget.3: failed to queue disconnect event [ 794.751694][ T4296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.782070][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 794.792084][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.799663][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.829862][ T9130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.858288][ T5808] Bluetooth: hci4: command tx timeout [ 794.994815][ T4296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.080112][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.087359][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.114326][ T9130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.219586][ T4296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.503728][ T4296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.764229][ T9020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.774885][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 795.815225][ T9130] hsr_slave_0: entered promiscuous mode [ 795.826129][ T9130] hsr_slave_1: entered promiscuous mode [ 795.839715][ T9130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 795.848591][ T9130] Cannot create hsr debugfs directory [ 796.156645][ T4296] bridge_slave_1: left allmulticast mode [ 796.163120][ T4296] bridge_slave_1: left promiscuous mode [ 796.170266][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.185246][ T4296] bridge_slave_0: left allmulticast mode [ 796.191726][ T4296] bridge_slave_0: left promiscuous mode [ 796.198622][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.031667][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.090156][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.134678][ T4296] bond0 (unregistering): Released all slaves [ 797.696505][ T9020] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.839196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.846996][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.924680][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 797.934923][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 797.969680][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 798.007111][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 798.032824][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 798.729255][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.737129][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.988509][ T4296] hsr_slave_0: left promiscuous mode [ 799.035598][ T4296] hsr_slave_1: left promiscuous mode [ 799.044184][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.052279][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.148667][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.156539][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.283654][ T4296] veth1_macvtap: left promiscuous mode [ 799.290238][ T4296] veth0_macvtap: left promiscuous mode [ 799.296823][ T4296] veth1_vlan: left promiscuous mode [ 799.302857][ T4296] veth0_vlan: left promiscuous mode [ 800.138282][ T53] Bluetooth: hci2: command tx timeout [ 801.368901][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 801.397086][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 802.135669][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.150801][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.159447][ T9169] bridge_slave_0: entered allmulticast mode [ 802.169621][ T9169] bridge_slave_0: entered promiscuous mode [ 802.193502][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.203358][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.211562][ T9169] bridge_slave_1: entered allmulticast mode [ 802.222170][ T9169] bridge_slave_1: entered promiscuous mode [ 802.242160][ T53] Bluetooth: hci2: command tx timeout [ 803.128378][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.201789][ T1600] usb 5-1: USB disconnect, device number 6 [ 803.432173][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.969461][ T9169] team0: Port device team_slave_0 added [ 804.016366][ T9226] chnl_net:caif_netlink_parms(): no params data found [ 804.093078][ T4296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.126798][ T9169] team0: Port device team_slave_1 added [ 804.265112][ T4296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.299693][ T53] Bluetooth: hci2: command tx timeout [ 804.445863][ T4296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.755806][ T4296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.811725][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.819900][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.848960][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.028608][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.036063][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.065055][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.176703][ T9130] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 805.263481][ T9130] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 805.406785][ T9130] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 805.490591][ T1600] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 805.752883][ T9130] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 805.815769][ T4296] bridge_slave_1: left allmulticast mode [ 805.822409][ T4296] bridge_slave_1: left promiscuous mode [ 805.829714][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.848360][ T1600] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 805.858217][ T1600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.866526][ T1600] usb 1-1: Product: syz [ 805.872905][ T1600] usb 1-1: Manufacturer: syz [ 805.878596][ T1600] usb 1-1: SerialNumber: syz [ 805.928118][ T4296] bridge_slave_0: left allmulticast mode [ 805.934071][ T4296] bridge_slave_0: left promiscuous mode [ 805.943235][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.960801][ T1600] usb 1-1: config 0 descriptor?? [ 806.419768][ T53] Bluetooth: hci2: command tx timeout [ 806.550281][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.605016][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.654543][ T4296] bond0 (unregistering): Released all slaves [ 806.708534][ T9169] hsr_slave_0: entered promiscuous mode [ 806.719347][ T9169] hsr_slave_1: entered promiscuous mode [ 807.123418][ T1600] usb 1-1: Firmware version (0.0) predates our first public release. [ 807.133409][ T1600] usb 1-1: Please update to version 0.2 or newer [ 807.374890][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.382767][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.390917][ T9226] bridge_slave_0: entered allmulticast mode [ 807.400834][ T9226] bridge_slave_0: entered promiscuous mode [ 807.442039][ T9020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.450882][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.458699][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.466535][ T9226] bridge_slave_1: entered allmulticast mode [ 807.476866][ T9226] bridge_slave_1: entered promiscuous mode [ 807.495754][ T1600] usb 1-1: USB disconnect, device number 7 [ 808.215293][ T4296] hsr_slave_0: left promiscuous mode [ 808.256085][ T4296] hsr_slave_1: left promiscuous mode [ 808.264708][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.273677][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.308978][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.316826][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.352185][ T4296] veth1_macvtap: left promiscuous mode [ 808.358726][ T4296] veth0_macvtap: left promiscuous mode [ 808.364815][ T4296] veth1_vlan: left promiscuous mode [ 808.370772][ T4296] veth0_vlan: left promiscuous mode [ 809.122058][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 809.186804][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 809.584009][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.745311][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.921154][ T1600] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 810.089039][ T9226] team0: Port device team_slave_0 added [ 810.120504][ T9226] team0: Port device team_slave_1 added [ 810.167090][ T1600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.180511][ T1600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.191914][ T1600] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 810.205667][ T1600] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.215327][ T1600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.379375][ T1600] usb 1-1: config 0 descriptor?? [ 810.715501][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.723321][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.751319][ T9226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.917405][ T9130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.949066][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.956676][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.984385][ T9226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.118419][ T1600] usbhid 1-1:0.0: can't add hid device: -71 [ 811.125254][ T1600] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 811.164013][ T1600] usb 1-1: USB disconnect, device number 8 [ 811.473521][ T9130] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.498304][ T9226] hsr_slave_0: entered promiscuous mode [ 811.510621][ T9226] hsr_slave_1: entered promiscuous mode [ 811.522050][ T9226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 811.530065][ T9226] Cannot create hsr debugfs directory [ 811.877532][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.885604][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.048073][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.055777][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.166875][ T9169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 812.215796][ T9169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 812.333753][ T9020] veth0_vlan: entered promiscuous mode [ 812.344652][ T9169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 812.384839][ T9169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 813.852903][ T9020] veth1_vlan: entered promiscuous mode [ 815.526014][ T9020] veth0_macvtap: entered promiscuous mode [ 815.707146][ T9020] veth1_macvtap: entered promiscuous mode [ 816.032786][ T9020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.286945][ T9020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.396319][ T9020] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.406750][ T9020] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.416901][ T9020] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.428455][ T9020] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.865705][ T9226] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 816.982015][ T9226] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 817.081161][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.091781][ T9226] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 817.239869][ T9226] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 817.416766][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.522922][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.530873][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.678210][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.685942][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.387644][ T9130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.418684][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 818.675506][ T46] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 818.685640][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.694224][ T46] usb 1-1: Product: syz [ 818.699436][ T46] usb 1-1: Manufacturer: syz [ 818.704496][ T46] usb 1-1: SerialNumber: syz [ 818.863087][ T46] usb 1-1: config 0 descriptor?? [ 818.928303][ T9226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.139512][ T9226] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.275490][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.283319][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.411679][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.419582][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.789661][ T9226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 819.999460][ T46] usb 1-1: Firmware version (0.0) predates our first public release. [ 820.009725][ T46] usb 1-1: Please update to version 0.2 or newer [ 820.211621][ T46] usb 1-1: USB disconnect, device number 9 [ 820.877431][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.631119][ T9169] veth0_vlan: entered promiscuous mode [ 821.780147][ T9169] veth1_vlan: entered promiscuous mode [ 822.211388][ T9130] veth0_vlan: entered promiscuous mode [ 822.280059][ T9169] veth0_macvtap: entered promiscuous mode [ 822.359838][ T9130] veth1_vlan: entered promiscuous mode [ 822.397135][ T9226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.411740][ T9169] veth1_macvtap: entered promiscuous mode [ 822.616344][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.695082][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.796105][ T9130] veth0_macvtap: entered promiscuous mode [ 822.833864][ T9169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.843129][ T9169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.852409][ T9169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.862846][ T9169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.941203][ T9130] veth1_macvtap: entered promiscuous mode [ 823.000718][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 823.037108][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 823.056253][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 823.150143][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 823.192355][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 823.276472][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.530263][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.721730][ T9130] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.731182][ T9130] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.741000][ T9130] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.750317][ T9130] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.259056][ T5808] Bluetooth: hci5: command tx timeout [ 825.760136][ T9402] chnl_net:caif_netlink_parms(): no params data found [ 825.829503][ T5808] Bluetooth: hci0: Malformed LE Event: 0x1b [ 826.519781][ T3501] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.712313][ T3501] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.918897][ T3501] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.094216][ T3501] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.324536][ T9226] veth0_vlan: entered promiscuous mode [ 827.348948][ T5808] Bluetooth: hci5: command tx timeout [ 827.717088][ T9226] veth1_vlan: entered promiscuous mode [ 828.047081][ T3501] bridge_slave_1: left allmulticast mode [ 828.053380][ T3501] bridge_slave_1: left promiscuous mode [ 828.060680][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.147567][ T3501] bridge_slave_0: left allmulticast mode [ 828.150182][ T5852] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 828.154286][ T3501] bridge_slave_0: left promiscuous mode [ 828.155236][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.400144][ T5852] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 828.409883][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.418494][ T5852] usb 1-1: Product: syz [ 828.423030][ T5852] usb 1-1: Manufacturer: syz [ 828.428025][ T5852] usb 1-1: SerialNumber: syz [ 828.499636][ T5852] usb 1-1: config 0 descriptor?? [ 828.770374][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.805759][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.835173][ T3501] bond0 (unregistering): Released all slaves [ 829.011423][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.021637][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.030740][ T9402] bridge_slave_0: entered allmulticast mode [ 829.043512][ T9402] bridge_slave_0: entered promiscuous mode [ 829.159737][ T3501] hsr_slave_0: left promiscuous mode [ 829.208472][ T3501] hsr_slave_1: left promiscuous mode [ 829.220650][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.229853][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.286121][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.296111][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.343341][ T3501] veth1_macvtap: left promiscuous mode [ 829.349966][ T3501] veth0_macvtap: left promiscuous mode [ 829.356487][ T3501] veth1_vlan: left promiscuous mode [ 829.362852][ T3501] veth0_vlan: left promiscuous mode [ 829.418733][ T5808] Bluetooth: hci5: command tx timeout [ 829.904853][ T5852] usb 1-1: Firmware version (0.0) predates our first public release. [ 829.913705][ T5852] usb 1-1: Please update to version 0.2 or newer [ 830.291195][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 830.360335][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 830.749607][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.761149][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.771228][ T9402] bridge_slave_1: entered allmulticast mode [ 830.783284][ T9402] bridge_slave_1: entered promiscuous mode [ 831.045749][ T5852] usb 1-1: USB disconnect, device number 10 [ 831.480395][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.498556][ T5808] Bluetooth: hci5: command tx timeout [ 831.653367][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.674025][ T9226] veth0_macvtap: entered promiscuous mode [ 831.734449][ T9226] veth1_macvtap: entered promiscuous mode [ 832.060483][ T9402] team0: Port device team_slave_0 added [ 832.121091][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.192080][ T9402] team0: Port device team_slave_1 added [ 832.247212][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.542788][ T9226] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.552246][ T9226] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.561771][ T9226] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.571033][ T9226] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.611721][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.619200][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.647113][ T9402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.795412][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.803855][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.831366][ T9402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.471345][ T9402] hsr_slave_0: entered promiscuous mode [ 833.482334][ T9402] hsr_slave_1: entered promiscuous mode [ 833.491849][ T9402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.500192][ T9402] Cannot create hsr debugfs directory [ 833.918075][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.926376][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.367547][ T1794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.376767][ T1794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.092194][ T9526] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 835.101605][ T9526] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 835.539344][ T5857] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 835.768443][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 835.829763][ T5857] usb 2-1: config 0 has no interfaces? [ 835.864002][ T5857] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 835.876345][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.886089][ T5857] usb 2-1: Product: syz [ 835.890812][ T5857] usb 2-1: Manufacturer: syz [ 835.895697][ T5857] usb 2-1: SerialNumber: syz [ 836.057019][ T5857] usb 2-1: config 0 descriptor?? [ 836.213576][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.228761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.357222][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.369554][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.570696][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.579349][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.603028][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 836.662055][ T9402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 836.723404][ T1600] usb 2-1: USB disconnect, device number 8 [ 836.736269][ T9402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 836.831083][ T9402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 836.952179][ T9402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 838.244223][ T1600] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 838.580332][ T1600] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 838.591194][ T1600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.600486][ T1600] usb 1-1: Product: syz [ 838.604931][ T1600] usb 1-1: Manufacturer: syz [ 838.610047][ T1600] usb 1-1: SerialNumber: syz [ 838.783814][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 838.797554][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.805364][ T1600] usb 1-1: config 0 descriptor?? [ 838.832498][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 838.867038][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 838.905458][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 838.918902][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 839.370459][ T9402] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.576455][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.584209][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.741558][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.749465][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.034480][ T1600] usb 1-1: Firmware version (0.0) predates our first public release. [ 840.044432][ T1600] usb 1-1: Please update to version 0.2 or newer [ 840.170995][ T1600] usb 1-1: USB disconnect, device number 11 [ 841.027288][ T53] Bluetooth: hci3: command tx timeout [ 841.351594][ T9588] loop0: detected capacity change from 0 to 512 [ 841.591259][ T9588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.604763][ T9588] ext4 filesystem being mounted at /85/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.782535][ T9564] chnl_net:caif_netlink_parms(): no params data found [ 841.896208][ T30] audit: type=1800 audit(2000000428.300:3): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.606" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 842.362643][ T8263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.884512][ T7088] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.074128][ T7088] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.100726][ T53] Bluetooth: hci3: command tx timeout [ 843.238011][ T7088] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.413547][ T7088] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.729516][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.924642][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 843.932080][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.162349][ T9613] tipc: Started in network mode [ 844.169026][ T9613] tipc: Node identity ac1414aa, cluster identity 4711 [ 844.178308][ T9613] tipc: Enabled bearer , priority 10 [ 844.949804][ T3699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.958590][ T3699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.061846][ T7088] bridge_slave_1: left allmulticast mode [ 845.068406][ T7088] bridge_slave_1: left promiscuous mode [ 845.075702][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.203893][ T7088] bridge_slave_0: left allmulticast mode [ 845.210003][ T7088] bridge_slave_0: left promiscuous mode [ 845.217130][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.223054][ T53] Bluetooth: hci3: command tx timeout [ 845.288495][ T11] tipc: Node number set to 2886997162 [ 845.398161][ T5852] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 845.648504][ T5852] usb 1-1: Using ep0 maxpacket: 8 [ 845.675533][ T5852] usb 1-1: config 0 has no interfaces? [ 845.752453][ T5852] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 845.762254][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.770970][ T5852] usb 1-1: Product: syz [ 845.775401][ T5852] usb 1-1: Manufacturer: syz [ 845.780354][ T5852] usb 1-1: SerialNumber: syz [ 845.913160][ T5852] usb 1-1: config 0 descriptor?? [ 846.090077][ T7088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.156051][ T7088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.172260][ T7088] bond0 (unregistering): Released all slaves [ 846.222794][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.235115][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.246093][ T9564] bridge_slave_0: entered allmulticast mode [ 846.261514][ T9564] bridge_slave_0: entered promiscuous mode [ 846.264147][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.278481][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.445385][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.456481][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.475846][ T9564] bridge_slave_1: entered allmulticast mode [ 846.485978][ T9564] bridge_slave_1: entered promiscuous mode [ 846.521996][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 846.579616][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.588352][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.651765][ T5857] usb 1-1: USB disconnect, device number 12 [ 847.124168][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.262249][ T53] Bluetooth: hci3: command tx timeout [ 847.334490][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.556384][ T7088] hsr_slave_0: left promiscuous mode [ 847.618687][ T7088] hsr_slave_1: left promiscuous mode [ 847.627035][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.635223][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.688950][ T1600] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 847.779827][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.788283][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.920185][ T1600] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 847.929947][ T1600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.938517][ T1600] usb 2-1: Product: syz [ 847.943020][ T1600] usb 2-1: Manufacturer: syz [ 847.948081][ T1600] usb 2-1: SerialNumber: syz [ 847.955138][ T7088] veth1_macvtap: left promiscuous mode [ 847.965798][ T7088] veth0_macvtap: left promiscuous mode [ 847.972376][ T7088] veth1_vlan: left promiscuous mode [ 847.978244][ T7088] veth0_vlan: left promiscuous mode [ 848.014927][ T9648] netlink: 'syz.0.614': attribute type 1 has an invalid length. [ 848.049496][ T1600] usb 2-1: config 0 descriptor?? [ 848.168842][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'. [ 849.237132][ T7088] team0 (unregistering): Port device team_slave_1 removed [ 849.266681][ T7088] team0 (unregistering): Port device team_slave_0 removed [ 849.269579][ T1600] usb 2-1: Firmware version (0.0) predates our first public release. [ 849.283582][ T1600] usb 2-1: Please update to version 0.2 or newer [ 849.846173][ T9648] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 849.863105][ T9650] geneve2: entered allmulticast mode [ 850.076898][ T9564] team0: Port device team_slave_0 added [ 850.179441][ T1600] usb 2-1: USB disconnect, device number 9 [ 850.188176][ T9564] team0: Port device team_slave_1 added [ 850.683415][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.691495][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.718423][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.116012][ T9402] veth0_vlan: entered promiscuous mode [ 851.155113][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.162931][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.189898][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.208511][ T1600] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 851.298028][ T9402] veth1_vlan: entered promiscuous mode [ 851.428587][ T1600] usb 10-1: Using ep0 maxpacket: 8 [ 851.448549][ T1600] usb 10-1: no configurations [ 851.453698][ T1600] usb 10-1: can't read configurations, error -22 [ 851.648098][ T1600] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 851.908895][ T1600] usb 10-1: Using ep0 maxpacket: 8 [ 851.917101][ T1600] usb 10-1: no configurations [ 851.923240][ T1600] usb 10-1: can't read configurations, error -22 [ 851.978900][ T1600] usb usb10-port1: attempt power cycle [ 852.125082][ T9564] hsr_slave_0: entered promiscuous mode [ 852.135966][ T9564] hsr_slave_1: entered promiscuous mode [ 852.145215][ T9564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.153222][ T9564] Cannot create hsr debugfs directory [ 852.361187][ T1600] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 852.430395][ T1600] usb 10-1: Using ep0 maxpacket: 8 [ 852.442026][ T1600] usb 10-1: no configurations [ 852.447021][ T1600] usb 10-1: can't read configurations, error -22 [ 852.468953][ T9402] veth0_macvtap: entered promiscuous mode [ 852.620252][ T1600] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 852.636377][ T9402] veth1_macvtap: entered promiscuous mode [ 852.670001][ T1600] usb 10-1: Using ep0 maxpacket: 8 [ 852.687850][ T1600] usb 10-1: no configurations [ 852.693182][ T1600] usb 10-1: can't read configurations, error -22 [ 852.748038][ T1600] usb usb10-port1: unable to enumerate USB device [ 852.806129][ T5857] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 853.008823][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 853.050319][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.099646][ T5857] usb 1-1: config 0 has no interfaces? [ 853.152570][ T5857] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 853.162430][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.171110][ T5857] usb 1-1: Product: syz [ 853.175549][ T5857] usb 1-1: Manufacturer: syz [ 853.184196][ T5857] usb 1-1: SerialNumber: syz [ 853.332938][ T5857] usb 1-1: config 0 descriptor?? [ 853.566419][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.577660][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.656819][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.816901][ T9402] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.824944][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 853.826305][ T9402] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.845419][ T9402] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.854990][ T9402] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.946033][ T5857] usb 1-1: USB disconnect, device number 13 [ 854.828223][ T5857] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 855.065273][ T5857] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 855.076931][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.085586][ T5857] usb 10-1: Product: syz [ 855.090384][ T5857] usb 10-1: Manufacturer: syz [ 855.095330][ T5857] usb 10-1: SerialNumber: syz [ 855.193756][ T9564] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 855.212258][ T5857] usb 10-1: config 0 descriptor?? [ 855.339966][ T9564] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 855.462172][ T9714] bridge0: port 3(syz_tun) entered blocking state [ 855.469316][ T9714] bridge0: port 3(syz_tun) entered disabled state [ 855.476522][ T9714] syz_tun: entered allmulticast mode [ 855.485501][ T9714] syz_tun: entered promiscuous mode [ 855.493489][ T9714] bridge0: port 3(syz_tun) entered blocking state [ 855.501303][ T9714] bridge0: port 3(syz_tun) entered forwarding state [ 855.554336][ T9564] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 855.679741][ T9564] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 856.375090][ T5857] usb 10-1: Firmware version (0.0) predates our first public release. [ 856.384383][ T5857] usb 10-1: Please update to version 0.2 or newer [ 856.644907][ T5857] usb 10-1: USB disconnect, device number 7 [ 857.484445][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.700724][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.067919][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.075720][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.277321][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.285186][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.441057][ T9759] ip6_vti0: entered promiscuous mode [ 862.403807][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.190346][ T1600] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 863.471599][ T1600] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 863.481303][ T1600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.490026][ T1600] usb 2-1: Product: syz [ 863.494495][ T1600] usb 2-1: Manufacturer: syz [ 863.499682][ T1600] usb 2-1: SerialNumber: syz [ 863.590688][ T1600] usb 2-1: config 0 descriptor?? [ 864.728085][ T1600] usb 2-1: Firmware version (0.0) predates our first public release. [ 864.736628][ T1600] usb 2-1: Please update to version 0.2 or newer [ 865.119387][ T1600] usb 2-1: USB disconnect, device number 10 [ 865.195050][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.203684][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.484244][ T9646] udevd[9646]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory [ 865.581798][ T9646] udevd[9646]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory [ 865.634099][ T7088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.642593][ T7088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.214436][ T9564] veth0_vlan: entered promiscuous mode [ 866.654010][ T9564] veth1_vlan: entered promiscuous mode [ 867.595099][ T9564] veth0_macvtap: entered promiscuous mode [ 867.738091][ T9564] veth1_macvtap: entered promiscuous mode [ 868.100372][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.198869][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.301695][ T9564] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.312104][ T9564] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.323374][ T9564] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.336895][ T9564] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.205629][ T9866] loop1: detected capacity change from 0 to 512 [ 871.400242][ T9866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.418746][ T9866] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.093220][ T9169] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.313328][ T7088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.321833][ T7088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.547302][ T7088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.556067][ T7088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.672840][ T9947] netlink: 104 bytes leftover after parsing attributes in process `syz.6.675'. [ 881.878311][ T7993] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 882.088451][ T7993] usb 8-1: Using ep0 maxpacket: 8 [ 882.163319][ T7993] usb 8-1: config 0 has no interfaces? [ 882.210568][ T7993] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 882.220263][ T7993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.229111][ T7993] usb 8-1: Product: syz [ 882.233547][ T7993] usb 8-1: Manufacturer: syz [ 882.238941][ T7993] usb 8-1: SerialNumber: syz [ 882.361340][ T7993] usb 8-1: config 0 descriptor?? [ 882.518683][ T9977] bridge0: port 3(syz_tun) entered blocking state [ 882.525599][ T9977] bridge0: port 3(syz_tun) entered disabled state [ 882.533054][ T9977] syz_tun: entered allmulticast mode [ 882.541078][ T9977] syz_tun: entered promiscuous mode [ 882.548359][ T9977] bridge0: port 3(syz_tun) entered blocking state [ 882.555313][ T9977] bridge0: port 3(syz_tun) entered forwarding state [ 882.652443][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.7.682'. [ 883.119760][ T7993] usb 8-1: USB disconnect, device number 2 [ 884.023125][ T9988] netlink: 104 bytes leftover after parsing attributes in process `syz.9.686'. [ 884.802532][ T9993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.688'. [ 884.812189][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.6.688'. [ 884.826516][ T9993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.688'. [ 884.838137][ T9993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.688'. [ 886.080130][T10011] hub 1-0:1.0: USB hub found [ 886.088300][T10011] hub 1-0:1.0: 1 port detected [ 888.068468][ T5855] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 888.267352][T10030] loop6: detected capacity change from 0 to 32768 [ 888.288871][T10030] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.698 (10030) [ 888.301328][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 888.320938][ T5855] usb 2-1: config 0 has no interfaces? [ 888.375145][T10030] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 888.386252][T10030] BTRFS info (device loop6): using sha256 (sha256-generic) checksum algorithm [ 888.398376][T10030] BTRFS info (device loop6): using free-space-tree [ 888.411829][ T5855] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 888.421807][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.430498][ T5855] usb 2-1: Product: syz [ 888.434972][ T5855] usb 2-1: Manufacturer: syz [ 888.440142][ T5855] usb 2-1: SerialNumber: syz [ 888.575194][ T5855] usb 2-1: config 0 descriptor?? [ 888.780589][T10030] BTRFS info (device loop6): rebuilding free space tree [ 888.799042][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 888.932162][ T30] audit: type=1800 audit(2000000475.350:4): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.698" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 889.037532][ T30] audit: type=1800 audit(2000000475.450:5): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.698" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 889.198726][ T30] audit: type=1804 audit(2000000475.520:6): pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.698" name="/newroot/16/bus/file1" dev="loop6" ino=260 res=1 errno=0 [ 889.300290][T10056] BTRFS info (device loop6): balance: start -d -m [ 890.116166][T10056] BTRFS info (device loop6): relocating block group 6881280 flags data|metadata [ 890.835484][T10056] BTRFS info (device loop6): balance: canceled [ 891.515539][ T7993] usb 2-1: USB disconnect, device number 11 [ 891.730844][T10068] netlink: 'syz.7.701': attribute type 10 has an invalid length. [ 891.739171][T10068] netlink: 40 bytes leftover after parsing attributes in process `syz.7.701'. [ 891.748786][T10068] batadv0: entered promiscuous mode [ 891.754290][T10068] batadv0: entered allmulticast mode [ 891.764428][T10068] bridge0: port 3(batadv0) entered blocking state [ 891.772253][T10068] bridge0: port 3(batadv0) entered disabled state [ 891.795802][T10068] bridge0: port 3(batadv0) entered blocking state [ 891.803014][T10068] bridge0: port 3(batadv0) entered forwarding state [ 892.086805][ T4012] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 892.100120][ T4012] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 893.453020][T10081] vimc link validate: Sensor B:src:256x16 (0x33424752, 9, 0, 4, 8) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 893.922222][T10087] tipc: Enabling of bearer rejected, already enabled [ 895.441696][T10101] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 895.515275][ T9402] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 896.512164][ T5855] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 896.768060][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 896.832530][ T5855] usb 2-1: config 0 has no interfaces? [ 896.928807][ T5855] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 896.938616][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.939336][T10116] loop0: detected capacity change from 0 to 2048 [ 896.946828][ T5855] usb 2-1: Product: syz [ 896.946940][ T5855] usb 2-1: Manufacturer: syz [ 896.947041][ T5855] usb 2-1: SerialNumber: syz [ 897.498044][ T7993] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 897.991114][ T7993] usb 8-1: Using ep0 maxpacket: 32 [ 898.121410][ T5855] usb 2-1: config 0 descriptor?? [ 898.189443][ T7993] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 898.200235][ T7993] usb 8-1: config 0 has no interface number 0 [ 898.281737][T10116] Alternate GPT is invalid, using primary GPT. [ 898.292339][T10116] loop0: p1 p2 p3 [ 898.466367][ T7993] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 898.476458][ T7993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.485077][ T7993] usb 8-1: Product: syz [ 898.490176][ T7993] usb 8-1: Manufacturer: syz [ 898.495081][ T7993] usb 8-1: SerialNumber: syz [ 898.763939][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 899.078097][ T5880] usb 2-1: USB disconnect, device number 12 [ 899.402291][ T7993] usb 8-1: config 0 descriptor?? [ 900.404630][ T7993] radio-si470x 8-1:0.35: this is not a si470x device. [ 900.471601][ T7993] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 901.083665][ T5855] usb 8-1: USB disconnect, device number 3 [ 902.346742][T10149] loop6: detected capacity change from 0 to 256 [ 902.592980][T10149] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xc0d18ace, utbl_chksum : 0xe619d30d) [ 902.972664][T10156] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 903.131251][ T30] audit: type=1800 audit(2000000489.540:7): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.721" name="file1" dev="loop6" ino=1048665 res=0 errno=0 [ 903.492733][T10162] netlink: 'syz.1.726': attribute type 10 has an invalid length. [ 903.501970][T10162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.726'. [ 903.511611][T10162] batadv0: entered promiscuous mode [ 903.517332][T10162] batadv0: entered allmulticast mode [ 903.527201][T10162] bridge0: port 3(batadv0) entered blocking state [ 903.534690][T10162] bridge0: port 3(batadv0) entered disabled state [ 903.548942][T10162] bridge0: port 3(batadv0) entered blocking state [ 903.556047][T10162] bridge0: port 3(batadv0) entered forwarding state [ 903.638943][ T7993] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 903.726986][T10065] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 903.737163][T10065] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 903.930511][ T7993] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 903.940166][ T7993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.949543][ T7993] usb 8-1: Product: syz [ 903.954004][ T7993] usb 8-1: Manufacturer: syz [ 903.959101][ T7993] usb 8-1: SerialNumber: syz [ 903.988710][ T5855] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 904.100543][T10171] capability: warning: `syz.0.727' uses deprecated v2 capabilities in a way that may be insecure [ 904.203555][ T7993] usb 8-1: config 0 descriptor?? [ 904.281343][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 904.339779][T10172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.491068][T10162] batman_adv: batadv0: Adding interface: dummy0 [ 904.498220][T10162] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.525714][T10162] batman_adv: batadv0: Interface activated: dummy0 [ 904.561309][T10168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.645076][T10164] batadv0: mtu less than device minimum [ 904.654081][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 904.667565][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 904.681292][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 904.694732][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 904.708205][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 904.721993][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 904.735549][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 904.749653][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 904.763970][T10164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.073053][ T5855] usb 2-1: unable to get BOS descriptor or descriptor too short [ 905.138526][ T5852] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 905.201897][ T5855] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 905.210556][ T5855] usb 2-1: can't read configurations, error -71 [ 905.367364][ T5852] usb 7-1: Using ep0 maxpacket: 8 [ 905.368486][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.379666][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.390352][ T5852] usb 7-1: config 0 has no interfaces? [ 905.442867][ T7993] usb 8-1: Firmware version (0.0) predates our first public release. [ 905.451434][ T7993] usb 8-1: Please update to version 0.2 or newer [ 905.475486][ T5852] usb 7-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 905.486122][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.495984][ T5852] usb 7-1: Product: syz [ 905.503574][ T5852] usb 7-1: Manufacturer: syz [ 905.511866][ T5852] usb 7-1: SerialNumber: syz [ 905.632048][ T5852] usb 7-1: config 0 descriptor?? [ 905.740037][T10186] netlink: 104 bytes leftover after parsing attributes in process `syz.0.730'. [ 905.758691][ T7993] usb 8-1: USB disconnect, device number 4 [ 905.893751][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.729'. [ 905.906676][T10174] ipvlan0: entered promiscuous mode [ 905.912770][T10174] ipvlan0: entered allmulticast mode [ 905.922318][T10174] veth0_vlan: entered allmulticast mode [ 906.133725][ T5852] usb 7-1: USB disconnect, device number 7 [ 906.660380][ T7993] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 906.668657][T10197] loop7: detected capacity change from 0 to 512 [ 906.834604][T10197] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.734: casefold flag without casefold feature [ 906.928278][ T7993] usb 10-1: Using ep0 maxpacket: 8 [ 907.016884][ T7993] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 907.026787][ T7993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.029192][T10197] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.734: couldn't read orphan inode 15 (err -117) [ 907.035611][ T7993] usb 10-1: Product: syz [ 907.056234][ T7993] usb 10-1: Manufacturer: syz [ 907.062882][ T7993] usb 10-1: SerialNumber: syz [ 907.174841][T10197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.362693][ T7993] usb 10-1: config 0 descriptor?? [ 907.439910][ T7993] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 908.359498][ T9564] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.927210][T10229] netlink: 104 bytes leftover after parsing attributes in process `syz.7.742'. [ 910.613362][ T5880] usb 10-1: USB disconnect, device number 8 [ 911.170005][ T5852] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 911.423403][ T5852] usb 8-1: Using ep0 maxpacket: 8 [ 911.509289][ T5852] usb 8-1: config 0 has no interfaces? [ 911.566036][ T5852] usb 8-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 911.577947][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.586273][ T5852] usb 8-1: Product: syz [ 911.591006][ T5852] usb 8-1: Manufacturer: syz [ 911.595890][ T5852] usb 8-1: SerialNumber: syz [ 911.717505][ T5852] usb 8-1: config 0 descriptor?? [ 911.847476][T10256] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 911.966003][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.746'. [ 911.976410][T10244] veth1_virt_wifi: entered promiscuous mode [ 911.984041][T10244] veth1_virt_wifi: entered allmulticast mode [ 912.155412][ T5855] usb 8-1: USB disconnect, device number 5 [ 912.539120][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 912.641374][T10268] netlink: 104 bytes leftover after parsing attributes in process `syz.9.756'. [ 913.095239][T10272] netlink: 32 bytes leftover after parsing attributes in process `syz.6.755'. [ 913.142998][ T5880] IPVS: starting estimator thread 0... [ 913.240780][T10273] IPVS: using max 240 ests per chain, 12000 per kthread [ 914.159515][ T5880] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 914.458474][ T5880] usb 10-1: Using ep0 maxpacket: 8 [ 914.566100][ T5880] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 914.576817][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.585593][ T5880] usb 10-1: Product: syz [ 914.590389][ T5880] usb 10-1: Manufacturer: syz [ 914.595368][ T5880] usb 10-1: SerialNumber: syz [ 914.790005][ T5880] usb 10-1: config 0 descriptor?? [ 914.909708][ T5880] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 916.498198][ T5880] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 916.709377][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 916.788335][ T5880] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 916.797420][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.808841][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.009946][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.019743][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.028413][ T5880] usb 2-1: Product: syz [ 917.032900][ T5880] usb 2-1: Manufacturer: syz [ 917.038141][ T5880] usb 2-1: SerialNumber: syz [ 917.632184][ T5880] usb 2-1: 0:2 : does not exist [ 918.302013][ T5852] usb 10-1: USB disconnect, device number 9 [ 918.474143][ T5880] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 918.778912][ T5880] usb 2-1: USB disconnect, device number 15 [ 919.154853][ T9646] udevd[9646]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.292342][T10313] netlink: 104 bytes leftover after parsing attributes in process `syz.7.768'. [ 920.738502][T10323] loop7: detected capacity change from 0 to 32768 [ 920.805772][T10323] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.772 (10323) [ 920.989694][T10323] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 921.000412][T10323] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 921.010327][T10323] BTRFS info (device loop7): disk space caching is enabled [ 921.017997][T10323] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 921.138465][T10323] BTRFS info (device loop7): rebuilding free space tree [ 921.166604][T10323] BTRFS info (device loop7): disabling free space tree [ 921.177872][T10323] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 921.188010][T10323] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 921.398757][T10323] BTRFS info (device loop7): balance: start -susage=34359738372,drange=7..526336,limit=0..6 [ 921.412892][T10323] ------------[ cut here ]------------ [ 921.419016][T10323] BTRFS: Transaction aborted (error -28) [ 921.433136][T10323] WARNING: CPU: 0 PID: 10323 at fs/btrfs/block-group.c:2781 btrfs_create_pending_block_groups+0x1497/0x2700 [ 921.445365][T10323] Modules linked in: [ 921.449740][T10323] CPU: 0 UID: 0 PID: 10323 Comm: syz.7.772 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 921.460619][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 921.471254][T10323] RIP: 0010:btrfs_create_pending_block_groups+0x1497/0x2700 [ 921.484705][T10323] Code: 44 89 a0 68 09 00 00 48 c7 80 80 0c 00 00 00 00 00 00 45 85 ed 0f 85 6d 11 00 00 48 c7 c7 6e 9f dd 91 89 de e8 5a 67 d3 fb 90 <0f> 0b 90 90 e9 2c ff ff ff 8b 7d d4 e8 28 d0 45 fd 48 8b 45 b8 e9 [ 921.505151][T10323] RSP: 0018:ffff88803e9734e8 EFLAGS: 00010287 [ 921.511720][T10323] RAX: ffffffff81207f35 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 921.520185][T10323] RDX: ffffc90008405000 RSI: 0000000000004c98 RDI: 0000000000004c99 [ 921.528721][T10323] RBP: ffff88803e973698 R08: ffffea000000000f R09: 0000000000000000 [ 921.537112][T10323] R10: ffff888237b57028 R11: ffff88823f27c2b0 R12: 0000000000000000 [ 921.546187][T10323] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 921.555321][T10323] FS: 00007f37178d96c0(0000) GS:ffff8881aaab6000(0000) knlGS:0000000000000000 [ 921.565050][T10323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 921.572458][T10323] CR2: 0000001b30e14ff8 CR3: 0000000059928000 CR4: 00000000003526f0 [ 921.581087][T10323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 921.594456][T10323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 921.603073][T10323] Call Trace: [ 921.606679][T10323] [ 921.610027][T10323] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 921.616527][T10323] ? btrfs_chunk_alloc_add_chunk_item+0x156a/0x18b0 [ 921.623679][T10323] ? kmsan_report+0x290/0x2a0 [ 921.628947][T10323] ? btrfs_trans_release_metadata+0x2e6/0xa40 [ 921.635409][T10323] __btrfs_end_transaction+0x1a1/0xb40 [ 921.641494][T10323] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 921.648116][T10323] btrfs_end_transaction+0x30/0x40 [ 921.653595][T10323] btrfs_inc_block_group_ro+0xf30/0x1080 [ 921.659912][T10323] btrfs_relocate_block_group+0x589/0x1b30 [ 921.666084][T10323] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.672771][T10323] btrfs_relocate_chunk+0xe0/0x660 [ 921.678354][T10323] ? kmsan_get_metadata+0x105/0x1b0 [ 921.688311][T10323] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.694613][T10323] __btrfs_balance+0x3505/0x3a00 [ 921.701096][T10323] ? kfree+0x38f/0xea0 [ 921.705658][T10323] btrfs_balance+0x14fa/0x1e10 [ 921.710973][T10323] btrfs_ioctl_balance+0x79d/0xdd0 [ 921.716536][T10323] btrfs_ioctl+0xe6a/0x1340 [ 921.721730][T10323] ? __pfx_btrfs_ioctl+0x10/0x10 [ 921.727151][T10323] __se_sys_ioctl+0x239/0x400 [ 921.732520][T10323] __x64_sys_ioctl+0x97/0xe0 [ 921.737549][T10323] x64_sys_call+0x1ebe/0x3db0 [ 921.742830][T10323] do_syscall_64+0xd9/0x1b0 [ 921.747964][T10323] ? irqentry_exit+0x16/0x60 [ 921.752937][T10323] ? clear_bhb_loop+0x40/0x90 [ 921.758318][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.764574][T10323] RIP: 0033:0x7f371698e969 [ 921.769505][T10323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.795900][T10323] RSP: 002b:00007f37178d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.804935][T10323] RAX: ffffffffffffffda RBX: 00007f3716bb5fa0 RCX: 00007f371698e969 [ 921.813804][T10323] RDX: 0000200000000440 RSI: 00000000c4009420 RDI: 0000000000000003 [ 921.822327][T10323] RBP: 00007f3716a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 921.831288][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.839730][T10323] R13: 0000000000000000 R14: 00007f3716bb5fa0 R15: 00007ffcc9afbcd8 [ 921.848309][T10323] [ 921.851562][T10323] ---[ end trace 0000000000000000 ]--- [ 921.857300][T10323] BTRFS info (device loop7 state A): dumping space info: [ 921.864772][T10323] BTRFS info (device loop7 state A): space_info DATA+METADATA has 2240512 free, is full [ 921.875229][T10323] BTRFS info (device loop7 state A): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 921.895376][T10323] BTRFS info (device loop7 state A): space_info SYSTEM has 8253440 free, is not full [ 921.905791][T10323] BTRFS info (device loop7 state A): space_info total=12451840, used=4096, pinned=0, reserved=4096, may_use=0, readonly=4190208 zone_unusable=0 [ 921.921063][T10323] BTRFS info (device loop7 state A): global_block_rsv: size 983040 reserved 983040 [ 921.930831][T10323] BTRFS info (device loop7 state A): trans_block_rsv: size 0 reserved 0 [ 921.939729][T10323] BTRFS info (device loop7 state A): chunk_block_rsv: size 0 reserved 0 [ 921.949106][T10323] BTRFS info (device loop7 state A): delayed_block_rsv: size 0 reserved 0 [ 921.958254][T10323] BTRFS info (device loop7 state A): delayed_refs_rsv: size 196608 reserved 4096 [ 921.968057][T10323] BTRFS: error (device loop7 state A) in btrfs_create_pending_block_groups:2781: errno=-28 No space left [ 921.979969][T10323] BTRFS info (device loop7 state EA): forced readonly [ 921.987392][T10323] BTRFS: error (device loop7 state EA) in btrfs_create_pending_block_groups:2793: errno=-28 No space left [ 922.004706][T10323] BTRFS info (device loop7 state EA): balance: ended with status: -30 [ 922.778174][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 924.159865][ T9564] BTRFS info (device loop7 state EA): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 925.007408][T10354] loop0: detected capacity change from 0 to 1024 [ 925.401228][T10354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.218601][ T5852] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 926.434967][ T5852] usb 8-1: Using ep0 maxpacket: 8 [ 926.527550][ T5852] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 926.538388][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.546699][ T5852] usb 8-1: Product: syz [ 926.551234][ T5852] usb 8-1: Manufacturer: syz [ 926.555987][ T5852] usb 8-1: SerialNumber: syz [ 926.675371][ T5852] usb 8-1: config 0 descriptor?? [ 926.776908][ T5852] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 927.526382][ T5852] gspca_sonixj: reg_w1 err -110 [ 927.532884][ T5852] sonixj 8-1:0.0: probe with driver sonixj failed with error -110 [ 930.341166][ T8263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.431852][ T5852] usb 8-1: USB disconnect, device number 6 [ 930.603172][T10378] netlink: 104 bytes leftover after parsing attributes in process `syz.1.782'. [ 932.048168][ T5855] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 932.248541][ T5855] usb 2-1: device descriptor read/64, error -71 [ 932.378701][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.409802][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.434155][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.473995][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.487446][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 932.539632][ T5855] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 932.760886][ T5855] usb 2-1: device descriptor read/64, error -71 [ 932.900840][ T5855] usb usb2-port1: attempt power cycle [ 933.351305][ T5855] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 933.445148][ T5855] usb 2-1: device descriptor read/8, error -71 [ 933.758139][ T5855] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 933.841691][ T5855] usb 2-1: device descriptor read/8, error -71 [ 933.971028][ T5855] usb usb2-port1: unable to enumerate USB device [ 934.347073][T10407] sp0: Synchronizing with TNC [ 934.620801][ T53] Bluetooth: hci1: command tx timeout [ 935.559778][T10390] chnl_net:caif_netlink_parms(): no params data found [ 936.705071][ T53] Bluetooth: hci1: command tx timeout [ 937.578215][ T5880] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 937.808142][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 937.850152][ T5880] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 937.859711][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.871088][ T5880] usb 1-1: Product: syz [ 937.875592][ T5880] usb 1-1: Manufacturer: syz [ 937.881528][ T5880] usb 1-1: SerialNumber: syz [ 938.190096][ T5880] usb 1-1: config 0 descriptor?? [ 938.249479][ T5880] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 938.634291][T10429] netlink: 104 bytes leftover after parsing attributes in process `syz.1.795'. [ 938.766816][T10432] 9pnet_fd: Insufficient options for proto=fd [ 938.780103][ T53] Bluetooth: hci1: command tx timeout [ 939.110730][T10390] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.125612][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.134183][T10390] bridge_slave_0: entered allmulticast mode [ 939.144648][T10390] bridge_slave_0: entered promiscuous mode [ 939.381362][T10390] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.389736][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.397906][T10390] bridge_slave_1: entered allmulticast mode [ 939.559439][T10390] bridge_slave_1: entered promiscuous mode [ 940.162427][T10390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.335109][T10390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.203538][ C1] net_ratelimit: 10 callbacks suppressed [ 941.203601][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 941.249545][T10443] loop1: detected capacity change from 0 to 40427 [ 941.262415][ T53] Bluetooth: hci1: command tx timeout [ 941.382054][T10443] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3fffff [ 941.391225][T10443] F2FS-fs (loop1): Image doesn't support compression [ 941.398625][T10443] F2FS-fs (loop1): Image doesn't support compression [ 941.414059][T10443] F2FS-fs (loop1): invalid crc value [ 941.688291][T10443] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 944.722274][ T9169] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x12a2/0x3cd0 [ 944.739114][ T9169] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:16, node_footer[nid:16,ino:3,ofs:191623,cpver:0,blkaddr:0] [ 944.796897][T10390] team0: Port device team_slave_0 added [ 944.886367][ T9169] syz-executor: attempt to access beyond end of device [ 944.886367][ T9169] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 944.899284][T10390] team0: Port device team_slave_1 added [ 944.901508][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz-executor Tainted: G W 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 944.901764][ T9169] Tainted: [W]=WARN [ 944.901822][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.901923][ T9169] Call Trace: [ 944.901982][ T9169] [ 944.902042][ T9169] __dump_stack+0x26/0x30 [ 944.902254][ T9169] dump_stack_lvl+0x1df/0x270 [ 944.902469][ T9169] dump_stack+0x1e/0x25 [ 944.902665][ T9169] f2fs_handle_critical_error+0xa6f/0xc20 [ 944.902915][ T9169] f2fs_stop_checkpoint+0x60/0x70 [ 944.903121][ T9169] f2fs_write_end_io+0xd98/0x1e20 [ 944.903360][ T9169] ? f2fs_write_end_io+0xa61/0x1e20 [ 944.903586][ T9169] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 944.903798][ T9169] bio_endio+0xe08/0xf60 [ 944.904012][ T9169] submit_bio_noacct+0x214/0x2710 [ 944.904281][ T9169] submit_bio+0x5a9/0x5d0 [ 944.904496][ T9169] f2fs_submit_write_bio+0x92/0x250 [ 944.904701][ T9169] __submit_merged_bio+0x16f/0x6a0 [ 944.904893][ T9169] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 944.905246][ T9169] __submit_merged_write_cond+0x458/0x9a0 [ 944.905477][ T9169] f2fs_write_data_pages+0x509a/0x58e0 [ 944.905864][ T9169] ? kmsan_get_metadata+0x105/0x1b0 [ 944.906109][ T9169] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 944.906368][ T9169] ? folios_put_refs+0x1/0xb10 [ 944.906554][ T9169] ? filter_irq_stacks+0x13f/0x190 [ 944.906810][ T9169] ? kmsan_get_metadata+0x105/0x1b0 [ 944.907051][ T9169] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 944.907291][ T9169] ? kmsan_get_metadata+0x105/0x1b0 [ 944.907538][ T9169] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 944.907796][ T9169] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 944.908013][ T9169] do_writepages+0x448/0xcb0 [ 944.908242][ T9169] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 944.908491][ T9169] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 944.908780][ T9169] filemap_fdatawrite+0x207/0x260 [ 944.909150][ T9169] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 944.909434][ T9169] f2fs_write_checkpoint+0xfe2/0x2b00 [ 944.909857][ T9169] kill_f2fs_super+0x2ff/0x970 [ 944.910117][ T9169] ? __pfx_kill_f2fs_super+0x10/0x10 [ 944.910348][ T9169] deactivate_locked_super+0xcb/0x3c0 [ 944.910574][ T9169] deactivate_super+0x12f/0x140 [ 944.910781][ T9169] cleanup_mnt+0x6fb/0x780 [ 944.911005][ T9169] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 944.911253][ T9169] ? __pfx___cleanup_mnt+0x10/0x10 [ 944.911487][ T9169] __cleanup_mnt+0x22/0x30 [ 944.911742][ T9169] task_work_run+0x209/0x2b0 [ 944.911928][ T9169] resume_user_mode_work+0x105/0x160 [ 944.912117][ T9169] syscall_exit_to_user_mode+0x7b/0xb0 [ 944.912350][ T9169] do_syscall_64+0xe6/0x1b0 [ 944.912576][ T9169] ? irqentry_exit+0x16/0x60 [ 944.912786][ T9169] ? clear_bhb_loop+0x40/0x90 [ 944.912971][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.913152][ T9169] RIP: 0033:0x7fa1ef98fc97 [ 944.913292][ T9169] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 944.913424][ T9169] RSP: 002b:00007ffe65763028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 944.913569][ T9169] RAX: 0000000000000000 RBX: 00007fa1efa1089d RCX: 00007fa1ef98fc97 [ 944.913687][ T9169] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe657630e0 [ 944.913787][ T9169] RBP: 00007ffe657630e0 R08: 0000000000000000 R09: 0000000000000000 [ 944.913886][ T9169] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe65764170 [ 944.913990][ T9169] R13: 00007fa1efa1089d R14: 00000000000e61bd R15: 00007ffe657641b0 [ 944.914138][ T9169] [ 944.914480][ T9169] F2FS-fs (loop1): Remounting filesystem read-only [ 945.359469][ T5852] usb 1-1: USB disconnect, device number 14 [ 945.966220][T10390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.974549][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.001758][T10390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.330129][T10390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.337374][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.369840][T10390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.346995][T10463] PM: Enabling pm_trace changes system date and time during resume. [ 947.346995][T10463] PM: Correct system time has to be restored manually after resume. [ 948.384083][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 948.630576][T10461] loop9: detected capacity change from 0 to 4096 [ 948.944863][T10461] NILFS (loop9): invalid segment: Checksum error in segment payload [ 948.954019][T10461] NILFS (loop9): trying rollback from an earlier position [ 949.755035][T10461] NILFS (loop9): recovery complete [ 949.868400][T10461] NILFS (loop9): error -4 creating segctord thread [ 950.171016][T10473] netlink: 104 bytes leftover after parsing attributes in process `syz.0.806'. [ 950.343968][T10476] 9pnet_fd: Insufficient options for proto=fd [ 950.370467][T10390] hsr_slave_0: entered promiscuous mode [ 950.380270][T10390] hsr_slave_1: entered promiscuous mode [ 950.389096][T10390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 950.396910][T10390] Cannot create hsr debugfs directory [ 955.073822][ T46] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 955.259973][ T46] usb 10-1: device descriptor read/64, error -71 [ 955.651883][T10497] loop1: detected capacity change from 0 to 8192 [ 956.258966][ T46] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 956.557554][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 959.343240][T10508] netlink: 104 bytes leftover after parsing attributes in process `syz.7.818'. [ 959.406666][T10507] loop0: detected capacity change from 0 to 512 [ 959.445040][T10390] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 959.491138][T10507] EXT4-fs: Ignoring removed nobh option [ 959.657093][T10390] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 959.736638][T10507] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.819: invalid indirect mapped block 256 (level 2) [ 959.823921][T10390] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 959.831213][ T46] usb usb10-port1: attempt power cycle [ 959.839002][T10507] EXT4-fs (loop0): 2 truncates cleaned up [ 959.848131][T10507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.931033][T10390] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 960.049027][ T30] audit: type=1800 audit(2000000546.460:8): pid=10507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.819" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 960.324677][ T30] audit: type=1326 audit(2000000546.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 960.347973][ T30] audit: type=1326 audit(2000000546.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 960.371875][ T30] audit: type=1326 audit(2000000546.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 960.397492][ T30] audit: type=1326 audit(2000000546.730:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 960.421754][ T30] audit: type=1326 audit(2000000546.730:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 960.669913][ T46] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 960.981764][T10514] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 961.178876][ T30] audit: type=1326 audit(2000000546.880:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 961.202473][ T30] audit: type=1326 audit(2000000546.920:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 961.228527][ T30] audit: type=1326 audit(2000000546.920:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 961.252549][ T30] audit: type=1326 audit(2000000546.920:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f66f8e969 code=0x7ffc0000 [ 961.290973][ T46] usb 10-1: Using ep0 maxpacket: 32 [ 961.422627][ T46] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 961.432141][ T46] usb 10-1: config 0 has no interface number 0 [ 961.438917][ T46] usb 10-1: config 0 interface 184 has no altsetting 0 [ 961.573786][ T46] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 961.584488][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.593211][ T46] usb 10-1: Product: syz [ 961.597915][ T46] usb 10-1: Manufacturer: syz [ 961.602904][ T46] usb 10-1: SerialNumber: syz [ 961.669235][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 961.791329][ T8263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.911149][T10524] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16) [ 961.918113][T10524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 961.926598][T10524] vhci_hcd vhci_hcd.0: Device attached [ 961.942783][T10523] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 961.949756][T10523] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 961.958671][T10523] vhci_hcd vhci_hcd.0: Device attached [ 961.967179][T10525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 962.066821][ T46] usb 10-1: config 0 descriptor?? [ 962.178171][ T5852] usb 47-2: new low-speed USB device number 2 using vhci_hcd [ 962.184137][ T46] smsc75xx v1.0.0 [ 962.224336][T10530] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(21) [ 962.231323][T10530] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 962.244337][T10530] vhci_hcd vhci_hcd.0: Device attached [ 962.254381][T10523] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(23) [ 962.261312][T10523] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 962.270573][T10523] vhci_hcd vhci_hcd.0: Device attached [ 962.324517][T10525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 962.334353][T10524] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(18) [ 962.341304][T10524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 962.352591][T10524] vhci_hcd vhci_hcd.0: Device attached [ 962.490860][T10537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 962.685394][T10523] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(31) [ 962.692351][T10523] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 962.702874][T10523] vhci_hcd vhci_hcd.0: Device attached [ 962.932493][T10535] vhci_hcd: connection closed [ 962.933143][T10532] vhci_hcd: connection closed [ 962.940245][T10531] vhci_hcd: connection closed [ 962.949389][T10527] vhci_hcd: connection reset by peer [ 962.950140][ T46] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 962.982401][ T46] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 962.998611][T10526] vhci_hcd: connection closed [ 963.071420][T10065] vhci_hcd: stop threads [ 963.081809][T10065] vhci_hcd: release socket [ 963.086588][T10065] vhci_hcd: disconnect device [ 963.249285][T10065] vhci_hcd: stop threads [ 963.253830][T10065] vhci_hcd: release socket [ 963.262331][T10065] vhci_hcd: disconnect device [ 963.398238][T10065] vhci_hcd: stop threads [ 963.403012][T10065] vhci_hcd: release socket [ 963.408067][T10065] vhci_hcd: disconnect device [ 963.679569][T10065] vhci_hcd: stop threads [ 963.684223][T10065] vhci_hcd: release socket [ 963.689423][T10065] vhci_hcd: disconnect device [ 963.825303][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 963.934300][T10065] vhci_hcd: stop threads [ 963.939168][T10065] vhci_hcd: release socket [ 963.943926][T10065] vhci_hcd: disconnect device [ 966.133548][ T46] usb 10-1: USB disconnect, device number 12 [ 966.733835][ T7989] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 966.814744][T10390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.821394][T10539] vhci_hcd: connection closed [ 966.849574][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 966.861891][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 966.892411][ T3501] vhci_hcd: stop threads [ 966.897088][ T3501] vhci_hcd: release socket [ 966.902721][ T3501] vhci_hcd: disconnect device [ 966.988606][ T7989] usb 2-1: device descriptor read/64, error -71 [ 967.292692][ T7989] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 967.323284][T10390] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.379062][ T5852] vhci_hcd: vhci_device speed not set [ 967.523477][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.531388][T10061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.558894][ T7989] usb 2-1: device descriptor read/64, error -71 [ 967.690356][ T7989] usb usb2-port1: attempt power cycle [ 967.843619][T10061] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.851384][T10061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.129917][ T7989] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 968.239183][ T7989] usb 2-1: device descriptor read/8, error -71 [ 968.518371][ T7989] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 968.620565][ T7989] usb 2-1: device descriptor read/8, error -71 [ 968.755224][ T7989] usb usb2-port1: unable to enumerate USB device [ 968.848403][ T5855] usb usb48-port1: attempt power cycle [ 968.913695][T10569] netlink: 104 bytes leftover after parsing attributes in process `syz.7.830'. [ 969.538265][ T5855] usb usb48-port1: unable to enumerate USB device [ 970.674267][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 971.409660][T10270] bridge0: port 3(syz_tun) entered disabled state [ 971.564421][T10270] syz_tun (unregistering): left allmulticast mode [ 971.571346][T10270] syz_tun (unregistering): left promiscuous mode [ 971.578427][T10270] bridge0: port 3(syz_tun) entered disabled state [ 971.921109][ T1794] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.182854][ T1794] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.423946][ T1794] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.714754][ T1794] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.869174][T10390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.937917][T10593] loop9: detected capacity change from 0 to 2048 [ 973.714097][T10593] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.833933][ T1794] bridge_slave_1: left allmulticast mode [ 973.841064][ T1794] bridge_slave_1: left promiscuous mode [ 973.847996][ T1794] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.281568][ T53] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 974.674758][T10603] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 974.963577][T10606] netlink: 104 bytes leftover after parsing attributes in process `syz.7.840'. [ 975.983184][ T9226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.996113][ T1794] bridge_slave_0: left allmulticast mode [ 976.002380][ T1794] bridge_slave_0: left promiscuous mode [ 976.009762][ T1794] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.850241][ T5880] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 977.057916][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 977.123369][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 977.202134][ T5880] usb 2-1: config 1 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 977.216179][ T5880] usb 2-1: config 1 interface 0 has no altsetting 0 [ 977.378994][ T5880] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 977.389070][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.402119][ T5880] usb 2-1: Product: syz [ 977.408403][ T5880] usb 2-1: Manufacturer: syz [ 977.413300][ T5880] usb 2-1: SerialNumber: syz [ 977.695644][T10617] loop0: detected capacity change from 0 to 2048 [ 977.797305][T10617] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 977.864896][T10615] loop9: detected capacity change from 0 to 4096 [ 977.995006][T10624] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 978.105584][T10615] NILFS (loop9): invalid segment: Checksum error in segment payload [ 978.119178][T10615] NILFS (loop9): trying rollback from an earlier position [ 978.230546][T10615] NILFS (loop9): recovery complete [ 978.278602][T10625] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 978.289124][ T5880] usbhid 2-1:1.0: can't add hid device: -71 [ 978.296291][ T5880] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 978.352140][ T1794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.376181][ T5880] usb 2-1: USB disconnect, device number 24 [ 978.451252][ T1794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.534219][ T1794] bond0 (unregistering): Released all slaves [ 979.736750][ T5852] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 979.978202][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 980.035959][ T1794] hsr_slave_0: left promiscuous mode [ 980.050813][ T5852] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 980.063661][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.112908][ T1794] hsr_slave_1: left promiscuous mode [ 980.121787][ T1794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.130166][ T1794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.238232][ T5852] usb 2-1: config 0 descriptor?? [ 980.365929][ T1794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.374402][ T1794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.548216][ T5852] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 980.601256][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.629637][ T1794] veth1_macvtap: left promiscuous mode [ 980.635483][ T1794] veth0_macvtap: left promiscuous mode [ 980.642217][ T1794] veth1_vlan: left promiscuous mode [ 980.648492][ T1794] veth0_vlan: left promiscuous mode [ 980.695632][ T5852] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 980.703475][ T5852] usb 2-1: media controller created [ 980.754298][T10630] ===================================================== [ 980.762375][T10630] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 980.773665][T10630] _copy_to_user+0xcc/0x120 [ 980.780403][T10630] i2cdev_ioctl_smbus+0x586/0x660 [ 980.784566][T10646] sctp: [Deprecated]: syz.9.852 (pid 10646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 980.784566][T10646] Use struct sctp_sack_info instead [ 980.785613][T10630] i2cdev_ioctl+0xa14/0xf40 [ 980.807306][T10630] __se_sys_ioctl+0x239/0x400 [ 980.812383][T10630] __x64_sys_ioctl+0x97/0xe0 [ 980.817204][T10630] x64_sys_call+0x1ebe/0x3db0 [ 980.822325][T10630] do_syscall_64+0xd9/0x1b0 [ 980.827108][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.833416][T10630] [ 980.835876][T10630] Uninit was stored to memory at: [ 980.841505][T10630] __i2c_smbus_xfer+0x254d/0x2f60 [ 980.846778][T10630] i2c_smbus_xfer+0x31d/0x4d0 [ 980.851925][T10630] i2cdev_ioctl_smbus+0x4a1/0x660 [ 980.857231][T10630] i2cdev_ioctl+0xa14/0xf40 [ 980.865566][T10630] __se_sys_ioctl+0x239/0x400 [ 980.871800][T10630] __x64_sys_ioctl+0x97/0xe0 [ 980.876645][T10630] x64_sys_call+0x1ebe/0x3db0 [ 980.885533][T10630] do_syscall_64+0xd9/0x1b0 [ 980.891723][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.898101][T10630] [ 980.900581][T10630] Local variable msgbuf1.i created at: [ 980.906239][T10630] __i2c_smbus_xfer+0x86a/0x2f60 [ 980.911602][T10630] i2c_smbus_xfer+0x31d/0x4d0 [ 980.916541][T10630] [ 980.919179][T10630] Bytes 0-1 of 2 are uninitialized [ 980.924452][T10630] Memory access of size 2 starts at ffff88811ca67d06 [ 980.931450][T10630] Data copied to user address 0000200000000100 [ 980.937988][T10630] [ 980.940500][T10630] CPU: 1 UID: 0 PID: 10630 Comm: syz.1.847 Tainted: G W 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 980.953608][T10630] Tainted: [W]=WARN [ 980.957759][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 980.968202][T10630] ===================================================== [ 980.979012][T10630] Disabling lock debugging due to kernel taint [ 980.985371][T10630] Kernel panic - not syncing: kmsan.panic set ... [ 980.992000][T10630] CPU: 1 UID: 0 PID: 10630 Comm: syz.1.847 Tainted: G B W 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 981.004178][T10630] Tainted: [B]=BAD_PAGE, [W]=WARN [ 981.009376][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 981.019742][T10630] Call Trace: [ 981.023178][T10630] [ 981.026368][T10630] __dump_stack+0x26/0x30 [ 981.030973][T10630] dump_stack_lvl+0x53/0x270 [ 981.035866][T10630] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 981.042005][T10630] dump_stack+0x1e/0x25 [ 981.046527][T10630] panic+0x4bd/0xd50 [ 981.050766][T10630] kmsan_report+0x29d/0x2a0 [ 981.055578][T10630] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 981.062202][T10630] ? kmsan_internal_check_memory+0x496/0x570 [ 981.068557][T10630] ? kmsan_copy_to_user+0xca/0xe0 [ 981.073874][T10630] ? _copy_to_user+0xcc/0x120 [ 981.078792][T10630] ? i2cdev_ioctl_smbus+0x586/0x660 [ 981.084284][T10630] ? i2cdev_ioctl+0xa14/0xf40 [ 981.089188][T10630] ? __se_sys_ioctl+0x239/0x400 [ 981.094285][T10630] ? __x64_sys_ioctl+0x97/0xe0 [ 981.099293][T10630] ? x64_sys_call+0x1ebe/0x3db0 [ 981.104418][T10630] ? do_syscall_64+0xd9/0x1b0 [ 981.109380][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.116071][T10630] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 981.121627][T10630] ? __i2c_transfer+0x11ca/0x30e0 [ 981.126910][T10630] ? kmsan_get_metadata+0x105/0x1b0 [ 981.132422][T10630] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 981.139151][T10630] ? kmsan_get_metadata+0x105/0x1b0 [ 981.144668][T10630] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 981.150808][T10630] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 981.156258][T10630] ? kmsan_get_metadata+0x105/0x1b0 [ 981.161702][T10630] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 981.167791][T10630] kmsan_internal_check_memory+0x496/0x570 [ 981.173853][T10630] kmsan_copy_to_user+0xca/0xe0 [ 981.178942][T10630] ? should_fail_usercopy+0x2e/0x40 [ 981.184394][T10630] _copy_to_user+0xcc/0x120 [ 981.189454][T10630] i2cdev_ioctl_smbus+0x586/0x660 [ 981.194803][T10630] i2cdev_ioctl+0xa14/0xf40 [ 981.199512][T10630] ? kmsan_report+0x299/0x2a0 [ 981.204877][T10630] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 981.210102][T10630] __se_sys_ioctl+0x239/0x400 [ 981.215000][T10630] __x64_sys_ioctl+0x97/0xe0 [ 981.219804][T10630] x64_sys_call+0x1ebe/0x3db0 [ 981.224718][T10630] do_syscall_64+0xd9/0x1b0 [ 981.229457][T10630] ? irqentry_exit+0x16/0x60 [ 981.234529][T10630] ? clear_bhb_loop+0x40/0x90 [ 981.239416][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.245512][T10630] RIP: 0033:0x7fa1ef98e969 [ 981.250102][T10630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.271027][T10630] RSP: 002b:00007fa1f084f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.279861][T10630] RAX: ffffffffffffffda RBX: 00007fa1efbb5fa0 RCX: 00007fa1ef98e969 [ 981.288243][T10630] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000004 [ 981.296659][T10630] RBP: 00007fa1efa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 981.304896][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.313290][T10630] R13: 0000000000000000 R14: 00007fa1efbb5fa0 R15: 00007ffe65763d98 [ 981.321471][T10630] [ 981.324985][T10630] Kernel Offset: disabled [ 981.329452][T10630] Rebooting in 86400 seconds..