last executing test programs: 15.387230777s ago: executing program 2 (id=50): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_clone(0x400000f5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) dup(r5) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@nat={'nat\x00', 0x19, 0x2, 0x234, [0x800004c0, 0x0, 0x0, 0x800005fe, 0x8000062e], 0x0, &(0x7f0000000100), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x64, 0x6005, 'erspan0\x00', 'wlan0\x00', 'ip6tnl0\x00', 'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0x0, 0xff], @random="f6724b463c90", [0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0xde, 0x10e, [@time={{'time\x00', 0x0, 0x18}, {{0x200, 0x3, 0x119c9, 0xadb9, 0x8, 0x2, 0x3}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x8, 0x7, 0x200, 0x1}}}], [], @common=@dnat={'dnat\x00', 0xc, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x11, 0x0, 0x9100, 'erspan0\x00', 'veth0_to_hsr\x00', 'wlan0\x00', 'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0xff, 0xff], @random="11119b5abe37", [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x96, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x5}}}}]}]}, 0x284) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x20040040) shutdown(r0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 11.527301532s ago: executing program 1 (id=58): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7ff, r0, &(0x7f0000000240)="e598d88c93eacd52a14c409346c6af59fa63c40774d367c51167294ca3ffc0be2733c434dff90c2de405afd11a732967b969552ccafe6e069630c7643f75e1915c5eed3e5ea02d58c5db0e1a2927f0677ac6daefd48350b3c4c41581ba226b7af95e54ac0e113f2c42cdc68bbc0a68c5676721b44e497137b359ed1202d4d1a1488e189c79dd0620f1d13984ae8306f8e79468d79cd79d28ffb4c791410dd1ba9a07a90887afaa52c6cc77c9c0b1605ed7394edf64cb140da68ea53f21ff57c31bde72586d", 0xc5, 0x4, 0x0, 0x3}]) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000f80)={0x53, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000ec0)="440afccbacc9", 0x0, 0x5, 0x22, 0x2, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) creat(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x99}}, @fadd={0x58, 0x114, 0x6, {{0x6}, 0x0, 0x0, 0x7ff, 0x3, 0x1, 0x5d78ddf2, 0x1, 0x5}}], 0x84}, 0x1) 11.192009901s ago: executing program 2 (id=59): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) io_pgetevents(r5, 0x2, 0x0, 0x0, 0x0, 0x0) 10.836396581s ago: executing program 3 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000061c0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001940)="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", 0x1031}, {&(0x7f0000001400)="77d0cc85fa1bb34b9831b4f3d03d62eba04d2eda9b7e8ccfab7332e2210a931d2a764a79fd61f9a5391c5a574279a676d0a838c1cce598e48429058560a83d5210d9c97b09e7c911e61b3e98c2cb1ebe343123691088517ca93d9c7b834464b99befb823bbb1682f350f33ec5cef622d38b0428ff8fddbdbefd7609ac48bcfe8b1386cd86426152d4e1c75327c247a587973471535719beabdc1", 0x9a}, {&(0x7f00000014c0)="368ff856e7c76a1ece48c27b4d32912c2feb5dcb3aa951e9a0e4e19e323138199223f6ee861742b43e3b4dbdad30ec0787bf54d943dd186615c59de77a58dd3ef019a3eee8fe109f4002e269f261e472380274f13369d705644a93d6f9d189f58f441aa27a1c164f87c26e8214f96782bd8565f25ce03dd8a52d35d2da94675f96a65108f4fb108a72d12f0fead1d1de8ee17cc4de967338d5dcb0247285d76bd499c8f24eef7a4be666a79ea06747b9d4d13e0506f5c1b5c0e633a0c77476b69b82d728dc8eb4ca4401241fd97d8ba9d97b94d2ec95f35d23fcb10b785b737502302531", 0xe4}, {&(0x7f00000015c0)="b95eb1de119d0f83b923d9f7b35447f0d39fbd1a7682a8e38ec47cb2fa76dcae842f", 0x22}, {&(0x7f0000001600)="7e3b7d8ac49ee59857288fa5b157979f101f51dce3a90c2193059d9d96cc61a6e8983df6722c42fd652e598c8f78ebbd7f8a60599b3d982c183b2bb7b72a720ad3da6906a7eb2652d9a057903cefc2e37753238f67c057d15c51cb7a23c6a8c4cc2efce82f061dd798249385977743ef5722db567c39a57053b7f3e8d700483936b9903d5dd3aac8990d08d3b92a82c468ab44048afeadafefbc299be5234a", 0x9f}, {&(0x7f00000016c0)="ec79542ce536442bdcca2d4b776ee932cd91544ca10a8b011174005818e79397b2d9a13ccf0503770d4199f0745701fb881ec604f2df4be9f7ec035c180b62bbd419ebd3d95df37f04bb9de2dae397feb8c10b33b2c02e5d2ebae486d8580f4573024cf9aed56386640001d81ccc1a017fe2435f8e9ebb12d9f8d5e767ca8b6d0fb40a1b5a4eb18b", 0x88}, {&(0x7f0000001780)="85a4c241ac230cde2464afd6c9556fb9dd9461f0fcafdbb114b0e0414dadc6a175ec3562c2bf9f969f410e1a43be25d8ff6b0f150980527ac58b917bad3a6b5e0464daf605488e0c26f5a3eedad8d1c0e534f11f43296315d113e94d6b1e08ad74e8c29114f7805601c293c7aaad", 0x6e}, {&(0x7f0000001800)="c7c18de678f944e1147d7bbd6ece60535a7b638d9bcd8c6850", 0x19}], 0x8, &(0x7f0000001900)=ANY=[@ANYBLOB="2c004938b9b6ef13eea01726a0cc8600000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2], 0x2c, 0x22008880}}, {{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000500)="6f62ab0b38541c2abbded209e7bba9958d680b6dd76315aef2b78d9f5b06ef13c20c137cb37ad598eb0a522938f83599b46aad17700cd83454c4bac7641347b9ffba387f5f9d4b53292502715aeb99777cfaf1d2c4715d50b87e632b9a73590c91549afb18cde5be8c408d718fe245043a2e3f8986717a999705172581817c052c635d7dd5d76c063972ad21f0d3b4c29e2f6cf0c290e4cc1af3ab0fa1bf56e43a2ae83e1cf07f56d598ab9a91c456dc82ebf99640dadf1ffefb2328b72045df0d93b12b5c4fd9508e3f79d13fc44b1f55e17e5b9ab13ead8b6ee0f24413eaa4a69515489c564bc8f04a", 0xea}, {&(0x7f0000000600)="a0e9b86832cbbb6c09d4787e34415eb7a0f90fc2ab69d8a7bc01d8a678fdd4e65f25a0ac0177a38c8f55debe83897f53bc573d0ab3b529e9df61048f0b7e4f2c417ee958a32191f870e9a4f93e64ce8c", 0x50}, {&(0x7f0000000680)="251dbb", 0x3}], 0x4, &(0x7f0000000e40)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}], 0x80, 0x20000000}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f40)="1ff08d069e4d6fecdee7e562eea4bdfbdbf856904bcf318c06f9c2c5a3882b8b40cd4b3c79dd7498fd3509073d8d055d5afeb65021ee", 0x36}, {&(0x7f0000000f80)="33a5c0b85c2a8d259d58f528e52812e345e7d346f558d46136061c71aaa189e567dee3fb83c67a7ba744aa48bcaac59abc7931767a8ea614d83fdc9195597a8c21855adb410ad63152a337282eb1064073c6f99f0838fcdaf020cd087661aa6f576429e387c7a84d918b5b2dd2ac3d69e93d237cd47b13e7701513eb1ee911fdee77bf194ca07f2c7f9e4e5f57f8c918233eb8a9a3c0b21b336142def29194f883daab321e06ca1652391b03e8319370b8ce53c6bdd74127d4", 0xb9}, {&(0x7f0000001040)="88f4fc144f61b1a4ee2005fe8ee40f8cccb0ae652217ffbd4f1a6c54d8fa3a6e28ad94467508ad5c0c14e11bc29415e5b1b0a8a9ec5c76c4b989588845f888bd15529659fc2072e929a8793730a5d1ccd552139741de74dc7fe38f772d50220af324afdf6dcec925897a518bb5becb37b44ce20253d73a46d01b311fcde66706369ece5df267dfeb3f13a9bc", 0x8c}, {&(0x7f0000001100)="75aa2b98f496a4cb0ef7d6b0b38c70d1120617c24c6e5bcbf9ab1560e2280339bf557a123dd0271362b59d951650ed30085be1", 0x33}, {&(0x7f0000001180)="56705b60486a302a00ea19c9947f442f5c9c2925fb28e137b86ca5324453390a5ebee01320e64fe5dd44c507ab3ba955551f205d16069860394e15905344ffcb674d66fa88ac795132f8284283242c775c6244f9306ddb8fdd650c2fd009d6eaf854d684d8b65d1abc07b896ebce0e45d48aa0d38a89b42880a1eafa9c6ab61e5672eeafecedd85e86fc8dcc144fc9d5ed9cb3b5037f0434ef7079df0297c5cfbc6ee3845649e1", 0xa7}], 0x5, &(0x7f0000001380)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x18}}], 0x60, 0x40000}}], 0x3, 0x24040801) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101502) r4 = dup2(r3, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x10000]}}) syz_open_procfs(0xffffffffffffffff, 0x0) mlock(&(0x7f0000db9000/0x2000)=nil, 0x2000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x2}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000000000000070000000000000000000000fc8010410280"], 0x1c}}, 0x4010) read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x2) syz_open_dev$media(0x0, 0x2ec4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000020301040000000000000000000000000800010001000000080005400000000a08000440000000061f9d60dfffe72f8981a8d1df205e56a7d72e805a513350c43771cc554746a13ffe2c4c72cefc99f047a5198b5e85d2cb889617656668d798961cc7c25c7db338bf5e39569fb61385d51522e7142e0f3be3d84db3af21c0dbecc2854351088ce1ad3bef154eca639ac74af9840d24a5e612885001db1a45986a09fa7c46533da3e1724d3942"], 0x2c}}, 0x0) socket$kcm(0x2, 0xa, 0x2) 9.73101184s ago: executing program 1 (id=62): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x10) 9.541494963s ago: executing program 2 (id=63): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$urandom(0xffffff9c, &(0x7f0000000500), 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000ac0), 0x0, 0x24008014) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) io_setup(0x800, &(0x7f0000000440)) getpid() r4 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc29c2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/105) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0xf00) 9.459900193s ago: executing program 4 (id=64): socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x1}]}) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000240), &(0x7f0000000280)=0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/189, 0xbd}], 0x1) socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x29, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write(r5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3, @private}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001000001000000c0c9036225e904415f132b16b3961d680cf1572fd197965a3601df955c7075732bc92fef2a974c71f3e71e9c6b9cd19cc4e4e68e0b4ccde54e68fbe2f5854a0b6f6bbd"], 0x10}, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) 9.359843797s ago: executing program 0 (id=65): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a000000", @ANYRES32], 0x1c}}, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x4200, 0x0) fsopen(0x0, 0x0) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x800) unshare(0x22020600) 8.836017262s ago: executing program 0 (id=66): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0xfffffffc}) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, 0x0) syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e0408090502010002"], 0x0) 8.515438663s ago: executing program 4 (id=67): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xb, 0x0, "42a75f925d0cb3c6a1b7ace54de26c1e6fdbbb0d4c7a0552a40ac76501493b11d4e58eb7eb418bea74d11fac7b9f0ca03694870021f0fef375bedb092b98a7923886c1fc1fb5db89b780a270c038c113"}, 0xd8) shutdown(r5, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 7.506327773s ago: executing program 3 (id=68): socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) openat$uinput(0xffffffffffffff9c, &(0x7f0000003780), 0x802, 0x0) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fe0f00000700000000000000", @ANYRES32, @ANYBLOB="0100000088d7ad9400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 7.484643377s ago: executing program 1 (id=69): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xb, 0x0, "42a75f925d0cb3c6a1b7ace54de26c1e6fdbbb0d4c7a0552a40ac76501493b11d4e58eb7eb418bea74d11fac7b9f0ca03694870021f0fef375bedb092b98a7923886c1fc1fb5db89b780a270c038c113"}, 0xd8) shutdown(r5, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 6.145811151s ago: executing program 3 (id=70): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x4200, 0x0) fsopen(0x0, 0x0) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x800) unshare(0x22020600) 5.917870446s ago: executing program 4 (id=71): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7ff, r0, &(0x7f0000000240)="e598d88c93eacd52a14c409346c6af59fa63c40774d367c51167294ca3ffc0be2733c434dff90c2de405afd11a732967b969552ccafe6e069630c7643f75e1915c5eed3e5ea02d58c5db0e1a2927f0677ac6daefd48350b3c4c41581ba226b7af95e54ac0e113f2c42cdc68bbc0a68c5676721b44e497137b359ed1202d4d1a1488e189c79dd0620f1d13984ae8306f8e79468d79cd79d28ffb4c791410dd1ba9a07a90887afaa52c6cc77c9c0b1605ed7394edf64cb140da68ea53f21ff57c31bde72586d", 0xc5, 0x4, 0x0, 0x3}]) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000f80)={0x53, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000ec0)="440afccbacc9", 0x0, 0x5, 0x22, 0x2, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) creat(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_emit_ethernet(0xa8, &(0x7f0000000240)={@multicast, @random="000803006600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x72, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x1f, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2202"}, {0x0, 0x1, "000000050000000026000400"}, {0x1}]}}}}}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x99}}, @fadd={0x58, 0x114, 0x6, {{0x6}, 0x0, 0x0, 0x7ff, 0x3, 0x1, 0x5d78ddf2, 0x1, 0x5}}], 0x84}, 0x1) 5.869910568s ago: executing program 3 (id=72): socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) openat$uinput(0xffffffffffffff9c, &(0x7f0000003780), 0x802, 0x0) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fe0f00000700000000000000", @ANYRES32, @ANYBLOB="0100000088d7ad9400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 5.765707268s ago: executing program 0 (id=73): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xb, 0x0, "42a75f925d0cb3c6a1b7ace54de26c1e6fdbbb0d4c7a0552a40ac76501493b11d4e58eb7eb418bea74d11fac7b9f0ca03694870021f0fef375bedb092b98a7923886c1fc1fb5db89b780a270c038c113"}, 0xd8) shutdown(r5, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 5.080861944s ago: executing program 1 (id=74): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$urandom(0xffffff9c, &(0x7f0000000500), 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000ac0), 0x0, 0x24008014) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) io_setup(0x800, &(0x7f0000000440)) getpid() r4 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc29c2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/105) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0xf00) 4.444045198s ago: executing program 2 (id=75): socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001000)={0x2000200e}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000a72000/0x1000)=nil, 0x1000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$can_bcm(r7, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYRES32=r8, @ANYRESHEX=r0, @ANYBLOB="0000004001"], 0x80}}, 0x0) 4.032955024s ago: executing program 3 (id=76): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$urandom(0xffffff9c, &(0x7f0000000500), 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000ac0), 0x0, 0x24008014) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) io_setup(0x800, &(0x7f0000000440)) getpid() r4 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc29c2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/105) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0xf00) 3.807738172s ago: executing program 2 (id=77): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="20000600"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.408202449s ago: executing program 4 (id=78): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xb, 0x0, "42a75f925d0cb3c6a1b7ace54de26c1e6fdbbb0d4c7a0552a40ac76501493b11d4e58eb7eb418bea74d11fac7b9f0ca03694870021f0fef375bedb092b98a7923886c1fc1fb5db89b780a270c038c113"}, 0xd8) shutdown(r5, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 2.580955633s ago: executing program 0 (id=79): socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001000)={0x2000200e}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000a72000/0x1000)=nil, 0x1000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$can_bcm(r7, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYRES32=r8, @ANYRESHEX=r0, @ANYBLOB="0000004001"], 0x80}}, 0x0) 1.764433991s ago: executing program 0 (id=80): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x3}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 1.151247158s ago: executing program 1 (id=81): socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x1}]}) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000240), &(0x7f0000000280)=0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/189, 0xbd}], 0x1) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x29, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 947.073693ms ago: executing program 4 (id=82): socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) openat$uinput(0xffffffffffffff9c, &(0x7f0000003780), 0x802, 0x0) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fe0f00000700000000000000", @ANYRES32, @ANYBLOB="0100000088d7ad9400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x34325258, 0x0, 0x0, [{0x0, 0x93}, {}, {}, {}, {}, {}, {0xb}, {0x81}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shutdown(r2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x20, 0x10000, 0x0, {0x81}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r8 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 494.970315ms ago: executing program 2 (id=83): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x1f4, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1b0, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x194, 0x1, [@m_sample={0x190, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x0, 0x6, 0xa}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x674, 0x20000000, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0xe, &(0x7f0000d14ffc)="02", 0x1) listen(r1, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100160bb41082e0c00073be1010203010902240001a200000009046103ff0308400409058503"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = openat$vimc0(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x20, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x104}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x4, 0xe45, 0x8001, 0x1ff}, &(0x7f00000000c0)=0x14) ioctl$VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000540)={0x9, @pix_mp={0x101, 0xc, 0x3147504d, 0x8, 0xb, [{0xba, 0x7fffffff}, {0x7ffff7ff, 0x1}, {0x0, 0x2202}, {0x46b, 0x40004}, {0x6, 0xd5d}, {0x3c, 0xe43}, {0x7, 0x2}, {0x2, 0x2}], 0xc, 0xbf, 0x6, 0x0, 0x97be6e47811f337}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff000000000c0000000c00038008000200ff7f0000180001801400020076657468305f746f5f626f6e64000000"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 404.36014ms ago: executing program 1 (id=84): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d0000000409021200"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x7, 0x6, 0x4, '\x00', 0x3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000080)={0x3, 0x9}) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 372.936034ms ago: executing program 4 (id=85): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x3}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 258.459197ms ago: executing program 3 (id=86): r0 = userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$urandom(0xffffff9c, &(0x7f0000000500), 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="ab5b54bc53a488d71456dc99e20f8d115a7037da9b9ad279a4daf32fdaa4ad34982952d3d778ef2e1640276ef434c79bb42ae8d2e4decc6145e7ac9d3b72fdb9ec63845ca659f03ea0144e93d54a9b05d9e8f550b9cd37540e273354a3e89bded1b4aad4cbdff11c3fc9a9504068068d793760d017804f0b7b600c9f049bc3733f554f75e12fe6c2407c", 0x8a}, {&(0x7f0000000200)="1a678ba73091b44246ff90b83eb8656d880bfc2f99dbb425cc92a3ded645b13816df10a59ee479ba9b1343b405208f1afcd2", 0x32}, {&(0x7f0000000340)="003090aa77", 0x5}, {&(0x7f0000000380)="881f127b751c26ba1368785a49fd4a1a7bdb3103763324a6a7910434317c350b932c7a6b9a9733014c81711241c69222c3152f2a4482004b1b334ddb5a0c2cbee4297b9b1ec3414760dcf0292740d1705dd5f702ba3af697f69703cd003d8e93789959476aaae31b519faffa9c65675d2ec926fac1ad8cdae35cc2bc6244941bb1f90d40e7fc51d07c00b47b06c29787fe5a6afe6fa8af5af21e9e0c54df833298091da191118db5f3", 0xa9}, {&(0x7f0000000440)="7aa5dbf2e64ee34a7336ff2893ef005891a14cb6f4307ccdd42a60a5", 0x1c}, {&(0x7f0000000480)="ffc6e51902ed7e", 0x7}, {&(0x7f0000000580)="70c079ef26fcaafc99bbac77603e4a0e7e92774a2a9dc533b9bf71a57a7d1c4c9bb4100f4be3a5edc932099823257ec24fd6227b2af1c3c4c1f677417a40e5a76b84b2e00e55630f0cdf3356515a69362741a473746834c6bdf8c0b50e095f3d35709922a8195de43a51f8a0efe50b80f240e54ac3112f59631711a043b70bf90609", 0x82}], 0x7, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r2, r2, r4]}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0x28}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000700)="bd79b106e93b66a4120b99f5ca9258a68dcfa53c521a187321e06af810c918e7348eb97185f9ba766272adcad62a3be089ca1aaf4a91e60361db83aae62760e8fa78cdccbad788f9542fa37987c08de4028c8df73e66f96795c2c93ee35b58b5c9a9f334ff0ac0ee011b49d929df323d4b16098fe1728269c1e6e383a9c5d214e026cc33b0682a3ea89dbee8f202a426985c5ad785053e8a157394a7704e9b1667235455f4c74b9899c4da666566c01c599841fad8a5943e71ee25e970e2d45413dc442ca198407187baecb7fea1f84016da6e8873240c9f31b3", 0xda}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000100000001000000365df6734e129ff253a038aa1738d3096c2a329ae8969a87b706b182d2f7347371e691342f97cd5cae9e75de41b138c91735", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2], 0x18, 0x4004880}}], 0x2, 0x24008014) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) io_setup(0x800, &(0x7f0000000440)) eventfd(0x0) getpid() r7 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902"], 0x0) pidfd_getfd(r8, 0xffffffffffffffff, 0x0) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/105) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0xf00) 0s ago: executing program 0 (id=87): socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001000)={0x2000200e}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000a72000/0x1000)=nil, 0x1000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$can_bcm(r7, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYRES32=r8, @ANYRESHEX=r0, @ANYBLOB="0000004001"], 0x80}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 84.069776][ T5828] cgroup: Unknown subsys name 'net' [ 84.243003][ T5828] cgroup: Unknown subsys name 'cpuset' [ 84.252297][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.907512][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.934655][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.951076][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.981286][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.989954][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.998345][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.998614][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.008937][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.020168][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.021032][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.034916][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.035620][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.050904][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.051735][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.065845][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.066065][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.081407][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.090017][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.098559][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.119364][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.138362][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.158181][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.166874][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.171197][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.184885][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.201989][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.880859][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 90.970303][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 91.033747][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 91.093672][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 91.195874][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 91.265552][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.273687][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.281281][ T5857] bridge_slave_0: entered allmulticast mode [ 91.289098][ T5857] bridge_slave_0: entered promiscuous mode [ 91.298406][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.305607][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.313202][ T5857] bridge_slave_1: entered allmulticast mode [ 91.321153][ T5857] bridge_slave_1: entered promiscuous mode [ 91.446745][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.456924][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.464484][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.472572][ T5855] bridge_slave_0: entered allmulticast mode [ 91.480679][ T5855] bridge_slave_0: entered promiscuous mode [ 91.522891][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.532697][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.540866][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.548332][ T5855] bridge_slave_1: entered allmulticast mode [ 91.555713][ T5855] bridge_slave_1: entered promiscuous mode [ 91.576511][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.583780][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.591699][ T5853] bridge_slave_0: entered allmulticast mode [ 91.599132][ T5853] bridge_slave_0: entered promiscuous mode [ 91.660526][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.667709][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.675427][ T5853] bridge_slave_1: entered allmulticast mode [ 91.683142][ T5853] bridge_slave_1: entered promiscuous mode [ 91.732287][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.739545][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.746709][ T5854] bridge_slave_0: entered allmulticast mode [ 91.755019][ T5854] bridge_slave_0: entered promiscuous mode [ 91.776479][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.785222][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.792823][ T5856] bridge_slave_0: entered allmulticast mode [ 91.800655][ T5856] bridge_slave_0: entered promiscuous mode [ 91.812733][ T5857] team0: Port device team_slave_0 added [ 91.824577][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.834547][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.841915][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.849510][ T5854] bridge_slave_1: entered allmulticast mode [ 91.856788][ T5854] bridge_slave_1: entered promiscuous mode [ 91.876841][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.884438][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.891767][ T5856] bridge_slave_1: entered allmulticast mode [ 91.899889][ T5856] bridge_slave_1: entered promiscuous mode [ 91.909141][ T5857] team0: Port device team_slave_1 added [ 91.917081][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.955471][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.971238][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.971947][ T52] cfg80211: failed to load regulatory.db [ 92.032067][ T5855] team0: Port device team_slave_0 added [ 92.100838][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.129223][ T5843] Bluetooth: hci2: command tx timeout [ 92.131735][ T5855] team0: Port device team_slave_1 added [ 92.146526][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.160592][ T5853] team0: Port device team_slave_0 added [ 92.170119][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.195067][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.202516][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.229541][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.240257][ T5843] Bluetooth: hci1: command tx timeout [ 92.246023][ T5843] Bluetooth: hci3: command tx timeout [ 92.251612][ T5153] Bluetooth: hci0: command tx timeout [ 92.275016][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.286000][ T5853] team0: Port device team_slave_1 added [ 92.297980][ T5843] Bluetooth: hci4: command tx timeout [ 92.309853][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.316833][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.343348][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.415423][ T5856] team0: Port device team_slave_0 added [ 92.431694][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.439334][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.466343][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.481046][ T5854] team0: Port device team_slave_0 added [ 92.488294][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.495283][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.521762][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.548740][ T5856] team0: Port device team_slave_1 added [ 92.572725][ T5854] team0: Port device team_slave_1 added [ 92.604081][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.611231][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.637791][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.689823][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.696887][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.723622][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.750945][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.758128][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.784752][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.802787][ T5857] hsr_slave_0: entered promiscuous mode [ 92.809877][ T5857] hsr_slave_1: entered promiscuous mode [ 92.818245][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.825437][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.851612][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.871353][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.878750][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.905583][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.967279][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.974938][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.002453][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.034349][ T5855] hsr_slave_0: entered promiscuous mode [ 93.040785][ T5855] hsr_slave_1: entered promiscuous mode [ 93.047042][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.055346][ T5855] Cannot create hsr debugfs directory [ 93.205097][ T5853] hsr_slave_0: entered promiscuous mode [ 93.212316][ T5853] hsr_slave_1: entered promiscuous mode [ 93.219511][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.227201][ T5853] Cannot create hsr debugfs directory [ 93.253734][ T5856] hsr_slave_0: entered promiscuous mode [ 93.260653][ T5856] hsr_slave_1: entered promiscuous mode [ 93.267619][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.275751][ T5856] Cannot create hsr debugfs directory [ 93.300593][ T5854] hsr_slave_0: entered promiscuous mode [ 93.309300][ T5854] hsr_slave_1: entered promiscuous mode [ 93.315651][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.323619][ T5854] Cannot create hsr debugfs directory [ 93.855762][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.869398][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.896190][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.917239][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.975956][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.986738][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.000664][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.014432][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.095180][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.106488][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.132173][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.175991][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.208432][ T5843] Bluetooth: hci2: command tx timeout [ 94.249321][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.263713][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.274986][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.288382][ T5843] Bluetooth: hci3: command tx timeout [ 94.288415][ T5153] Bluetooth: hci0: command tx timeout [ 94.293822][ T5843] Bluetooth: hci1: command tx timeout [ 94.323031][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.367968][ T5843] Bluetooth: hci4: command tx timeout [ 94.434665][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.467634][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.479124][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.491623][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.521573][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.566215][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.610443][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.674730][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.682176][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.694129][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.701844][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.715280][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.739805][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.747130][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.775988][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.783303][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.806594][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.914068][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.947767][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.982988][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.990293][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.031831][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.039035][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.055618][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.105814][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.146000][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.165359][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.185546][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.203096][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.210428][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.256439][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.263616][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.290813][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.324027][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.331625][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.389662][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.396933][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.414030][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.483054][ T5854] veth0_vlan: entered promiscuous mode [ 95.495753][ T5857] veth0_vlan: entered promiscuous mode [ 95.537107][ T5856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.549581][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.566184][ T5854] veth1_vlan: entered promiscuous mode [ 95.586924][ T5857] veth1_vlan: entered promiscuous mode [ 95.661369][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.687382][ T5855] veth0_vlan: entered promiscuous mode [ 95.712442][ T5854] veth0_macvtap: entered promiscuous mode [ 95.727495][ T5855] veth1_vlan: entered promiscuous mode [ 95.753705][ T5854] veth1_macvtap: entered promiscuous mode [ 95.780643][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.803323][ T5857] veth0_macvtap: entered promiscuous mode [ 95.827337][ T5857] veth1_macvtap: entered promiscuous mode [ 95.862439][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.879604][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.893639][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.907591][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.919731][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.936926][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.946080][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.955988][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.964940][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.016643][ T5855] veth0_macvtap: entered promiscuous mode [ 96.025035][ T5853] veth0_vlan: entered promiscuous mode [ 96.036598][ T5855] veth1_macvtap: entered promiscuous mode [ 96.052245][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.062844][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.075136][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.095997][ T5853] veth1_vlan: entered promiscuous mode [ 96.114915][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.124906][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.134767][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.143810][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.174645][ T5856] veth0_vlan: entered promiscuous mode [ 96.244677][ T5856] veth1_vlan: entered promiscuous mode [ 96.288806][ T5843] Bluetooth: hci2: command tx timeout [ 96.299081][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.313887][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.323863][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.334380][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.346063][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.369367][ T5842] Bluetooth: hci3: command tx timeout [ 96.369464][ T5153] Bluetooth: hci1: command tx timeout [ 96.374953][ T5843] Bluetooth: hci0: command tx timeout [ 96.382826][ T5853] veth0_macvtap: entered promiscuous mode [ 96.429573][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.442956][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.453719][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.461772][ T5843] Bluetooth: hci4: command tx timeout [ 96.467747][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.494142][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.510736][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.521679][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.532845][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.544411][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.555317][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.565435][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.574353][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.583215][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.601287][ T5853] veth1_macvtap: entered promiscuous mode [ 96.630432][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.642585][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.696454][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.714806][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.724972][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.736891][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.746916][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.757489][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.771458][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.798497][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.802356][ T5856] veth0_macvtap: entered promiscuous mode [ 96.806352][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.835355][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.847227][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.857978][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.869149][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.879798][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.891501][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.902976][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.923006][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.932206][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.941005][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.949828][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.969285][ T5856] veth1_macvtap: entered promiscuous mode [ 96.992207][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.006738][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.027242][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.038100][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.048671][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.058671][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.069502][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.079633][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.090664][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.103986][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.132505][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.143864][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.158589][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.171111][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.181953][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.192660][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.202635][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.213329][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.225642][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.285061][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.314273][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.341935][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.350989][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.360316][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.369208][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.502905][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.528957][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.597745][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.616350][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.782651][ T30] audit: type=1326 audit(1745564695.525:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 97.851791][ T30] audit: type=1326 audit(1745564695.535:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 97.873706][ T30] audit: type=1326 audit(1745564695.535:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 97.915965][ T30] audit: type=1326 audit(1745564695.535:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 97.940584][ T30] audit: type=1326 audit(1745564695.565:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 98.015379][ T30] audit: type=1326 audit(1745564695.565:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 98.037711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.048567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.067228][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.086490][ T30] audit: type=1326 audit(1745564695.575:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 98.113688][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.187423][ T30] audit: type=1326 audit(1745564695.575:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 98.211831][ T30] audit: type=1326 audit(1745564695.575:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 98.240268][ T5833] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.331292][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.349606][ T30] audit: type=1326 audit(1745564695.575:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 98.372623][ T5843] Bluetooth: hci2: command tx timeout [ 98.432130][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.440736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.449745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.451391][ T5843] Bluetooth: hci1: command tx timeout [ 98.459188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 98.463607][ T5153] Bluetooth: hci0: command tx timeout [ 98.473063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.477404][ T5843] Bluetooth: hci3: command tx timeout [ 98.486143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.532626][ T5842] Bluetooth: hci4: command tx timeout [ 98.565246][ T5833] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.638589][ T5833] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.658008][ T5914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.668783][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 98.713050][ T5833] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.760363][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.778254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.844288][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.884065][ T5903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.902428][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.913071][ T5833] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.568337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.577477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 99.913148][ T5925] ptrace attach of ""[5934] was attempted by "./syz-executor exec"[5925] [ 99.922028][ T5893] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 100.109095][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.156273][ T5893] usb 4-1: not running at top speed; connect to a high speed hub [ 100.181287][ T5939] Zero length message leads to an empty skb [ 100.192455][ T5939] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.380654][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.421612][ T5893] usb 4-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 100.482132][ T5893] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.515249][ T5943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.847781][ T5943] binfmt_misc: register: failed to install interpreter file ./file0 [ 100.898400][ T5893] usb 4-1: config 1 has no interface number 1 [ 100.909594][ T5893] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 100.965128][ T5893] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 100.976450][ T5894] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.003935][ T5894] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.025282][ T5893] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 101.045984][ T5894] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.070967][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.126545][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.136919][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.291640][ T5893] usb 4-1: Product: syz [ 101.295852][ T5893] usb 4-1: Manufacturer: syz [ 101.388053][ T5893] usb 4-1: SerialNumber: syz [ 101.403723][ T5833] usb 5-1: USB disconnect, device number 2 [ 101.413607][ T5925] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 101.434735][ T5894] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.697781][ T5893] hub 4-1:1.0: Invalid hub with more than one config or interface [ 101.756214][ T5893] hub 4-1:1.0: probe with driver hub failed with error -22 [ 101.998261][ T5893] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 102.116915][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.220385][ T5893] usb 4-1: USB disconnect, device number 2 [ 102.489049][ T5889] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.709578][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.873817][ T5889] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.957328][ T5889] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.010809][ T5889] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.051214][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.112603][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 103.112620][ T30] audit: type=1326 audit(1745564700.915:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 103.173501][ T5953] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 103.212949][ T30] audit: type=1326 audit(1745564700.915:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 103.257101][ T5889] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.440738][ T5962] ptrace attach of ""[5966] was attempted by "./syz-executor exec"[5962] [ 103.612391][ T30] audit: type=1326 audit(1745564700.915:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 103.708043][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.969137][ T30] audit: type=1326 audit(1745564700.925:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 104.038004][ T5893] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 104.093487][ T30] audit: type=1326 audit(1745564701.085:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 104.204860][ T5893] usb 3-1: not running at top speed; connect to a high speed hub [ 104.218748][ T5893] usb 3-1: config 9 has an invalid interface number: 184 but max is 1 [ 104.227254][ T5893] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 104.258314][ T5893] usb 3-1: config 9 has an invalid interface number: 181 but max is 1 [ 104.296025][ T5893] usb 3-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 104.438401][ T5893] usb 3-1: config 9 has no interface number 0 [ 104.456116][ T5890] usb 2-1: USB disconnect, device number 2 [ 104.521650][ T5893] usb 3-1: config 9 has no interface number 1 [ 104.561011][ T5893] usb 3-1: config 9 interface 184 altsetting 69 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 104.582274][ T30] audit: type=1326 audit(1745564701.085:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 104.604316][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.641942][ T5833] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.682795][ T5893] usb 3-1: config 9 interface 184 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 104.715076][ T5833] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.754034][ T5833] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.801098][ T5893] usb 3-1: config 9 interface 184 altsetting 69 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 104.812276][ T5893] usb 3-1: config 9 interface 184 altsetting 69 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 104.858035][ T5893] usb 3-1: config 9 interface 184 altsetting 69 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 104.869465][ T5893] usb 3-1: config 9 interface 184 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 104.881138][ T5893] usb 3-1: config 9 interface 184 altsetting 69 has a duplicate endpoint with address 0xA, skipping [ 104.892894][ T5893] usb 3-1: config 9 interface 181 altsetting 160 has a duplicate endpoint with address 0x7, skipping [ 104.904927][ T5893] usb 3-1: config 9 interface 181 altsetting 160 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 104.916367][ T5893] usb 3-1: config 9 interface 181 altsetting 160 has a duplicate endpoint with address 0xE, skipping [ 104.959274][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.979046][ T30] audit: type=1326 audit(1745564701.255:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 105.000766][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.070900][ T5962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 105.089603][ T5893] usb 3-1: config 9 interface 181 altsetting 160 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 105.163924][ T5833] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.217619][ T30] audit: type=1326 audit(1745564701.255:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 105.245981][ T5893] usb 3-1: config 9 interface 184 has no altsetting 0 [ 105.269262][ T5893] usb 3-1: config 9 interface 181 has no altsetting 0 [ 105.361398][ T30] audit: type=1326 audit(1745564701.255:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 105.514527][ T5893] usb 3-1: string descriptor 0 read error: -71 [ 105.559516][ T5893] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=70.18 [ 105.599509][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.714317][ T5893] usb 3-1: can't set config #9, error -71 [ 105.715715][ T30] audit: type=1326 audit(1745564701.255:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 106.322562][ T5893] usb 3-1: USB disconnect, device number 2 [ 106.651459][ T5978] fuse: Bad value for 'fd' [ 106.691480][ T5893] usb 5-1: USB disconnect, device number 3 [ 106.915227][ T52] usb 4-1: USB disconnect, device number 3 [ 107.683262][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.921857][ T5833] usb 3-1: device descriptor read/64, error -71 [ 108.289743][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 108.289764][ T30] audit: type=1326 audit(1745564706.095:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 108.317870][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.326137][ T5833] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.354672][ T30] audit: type=1326 audit(1745564706.165:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 108.388147][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.400382][ T30] audit: type=1326 audit(1745564706.215:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 108.495347][ T5833] usb 3-1: device descriptor read/64, error -71 [ 108.658473][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 108.704366][ T30] audit: type=1326 audit(1745564706.255:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 108.782240][ T5833] usb usb3-port1: attempt power cycle [ 108.817966][ T30] audit: type=1326 audit(1745564706.295:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 108.865219][ T30] audit: type=1326 audit(1745564706.385:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 108.887080][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.982622][ T30] audit: type=1326 audit(1745564706.785:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 109.004287][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.156108][ T5888] usb 5-1: config 0 has no interfaces? [ 109.164522][ T5888] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 109.178457][ T5833] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.188373][ T30] audit: type=1326 audit(1745564706.785:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 109.224168][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.253173][ T5833] usb 3-1: device descriptor read/8, error -71 [ 109.263249][ T5888] usb 5-1: config 0 descriptor?? [ 109.278178][ T30] audit: type=1326 audit(1745564706.795:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 109.426142][ T30] audit: type=1326 audit(1745564706.795:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 109.568058][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.598760][ T5833] usb 3-1: device descriptor read/8, error -71 [ 109.660147][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 109.748737][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.759821][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.795035][ T5833] usb usb3-port1: unable to enumerate USB device [ 109.842621][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 110.503706][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 111.212676][ T5890] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.400628][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 111.412702][ T5890] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 111.496087][ T5890] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 111.528024][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.540265][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 111.580496][ T5890] usb 1-1: config 1 has no interface number 0 [ 111.586776][ T5890] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.607296][ T5890] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 111.623538][ T5890] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 111.728203][ T5890] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 111.750573][ T5893] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.767507][ T5893] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.829277][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.845445][ T5893] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.884885][ T6033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.926066][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.940508][ T5890] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 111.990090][ T6037] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 112.046499][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.134965][ T6033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.169204][ T5890] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 112.769673][ T5833] usb 5-1: USB disconnect, device number 4 [ 112.924589][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.023154][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.249287][ T5890] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 114.078499][ T3406] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.114961][ T5893] usb 1-1: USB disconnect, device number 2 [ 114.140416][ T5893] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 114.249679][ T3406] usb 2-1: Using ep0 maxpacket: 16 [ 114.303173][ T3406] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 114.554728][ T5833] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.572602][ T3406] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 114.599237][ T5893] usb 4-1: USB disconnect, device number 4 [ 114.605753][ T3406] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.617271][ T3406] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.628674][ T3406] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.654630][ T3406] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.680322][ T3406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.733809][ T3406] usb 2-1: Product: syz [ 114.754666][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 114.761160][ T3406] usb 2-1: Manufacturer: syz [ 114.778923][ T3406] usb 2-1: SerialNumber: syz [ 114.788511][ T5833] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 114.824885][ T5833] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 114.863182][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 114.893871][ T5833] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.972221][ T5833] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.166212][ T5833] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.218192][ T5833] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.229956][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.261429][ T5833] usb 5-1: Product: syz [ 115.265831][ T5833] usb 5-1: Manufacturer: syz [ 115.275884][ T5833] usb 5-1: SerialNumber: syz [ 115.507508][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.542012][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.027168][ T3406] usb 2-1: USB disconnect, device number 3 [ 116.125945][ T5833] usb 5-1: USB disconnect, device number 5 [ 116.341987][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.430305][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 117.118060][ T5890] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.338246][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 117.361140][ T5890] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 117.376559][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.404380][ T5890] usb 2-1: config 0 has no interface number 0 [ 117.479818][ T5890] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 117.552717][ T5890] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 117.637716][ T5890] usb 2-1: config 0 interface 8 has no altsetting 0 [ 117.918678][ T5890] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 118.048096][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.072116][ T5890] usb 2-1: Product: syz [ 118.076446][ T5890] usb 2-1: Manufacturer: syz [ 118.113162][ T5890] usb 2-1: SerialNumber: syz [ 118.145944][ T6118] fuse: Bad value for 'fd' [ 118.152617][ T5890] usb 2-1: config 0 descriptor?? [ 118.251178][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 118.251195][ T30] audit: type=1326 audit(1745564716.065:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 118.327004][ T30] audit: type=1326 audit(1745564716.065:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 118.406926][ T6123] ptrace attach of "./syz-executor exec"[6124] was attempted by "./syz-executor exec"[6123] [ 118.444838][ T5890] ath6kl: Failed to submit usb control message: -71 [ 118.454002][ T5890] ath6kl: unable to send the bmi data to the device: -71 [ 118.494268][ T30] audit: type=1326 audit(1745564716.065:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 118.535072][ T30] audit: type=1326 audit(1745564716.065:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 118.566405][ T5890] ath6kl: Unable to send get target info: -71 [ 118.663950][ T5890] ath6kl: Failed to init ath6kl core: -71 [ 118.673246][ T30] audit: type=1326 audit(1745564716.375:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 118.695349][ T5894] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.725234][ T5890] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 118.760951][ T5890] usb 2-1: USB disconnect, device number 4 [ 118.767010][ T30] audit: type=1326 audit(1745564716.375:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 118.888203][ T5833] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.898238][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 118.916819][ T5894] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 118.935447][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.997005][ T5894] usb 1-1: config 0 has no interface number 0 [ 119.029927][ T5894] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 119.048409][ T5833] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.092693][ T5833] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.131231][ T5894] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 119.143515][ T5833] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.206060][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.228057][ T5894] usb 1-1: config 0 interface 8 has no altsetting 0 [ 119.246178][ T6128] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 119.272376][ T5833] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.280269][ T5894] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 119.334901][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.449311][ T30] audit: type=1326 audit(1745564717.215:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 119.471098][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.477383][ T3406] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.500201][ T5894] usb 1-1: Product: syz [ 119.513668][ T5894] usb 1-1: Manufacturer: syz [ 119.529583][ T5894] usb 1-1: SerialNumber: syz [ 119.648048][ T30] audit: type=1326 audit(1745564717.215:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 119.669804][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.672430][ T5894] usb 1-1: config 0 descriptor?? [ 119.756158][ T3406] usb 4-1: Using ep0 maxpacket: 8 [ 119.778424][ T3406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.802515][ T30] audit: type=1326 audit(1745564717.215:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 119.841184][ T3406] usb 4-1: config 0 has no interfaces? [ 119.907249][ T3406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.939907][ T3406] usb 4-1: config 0 has no interfaces? [ 119.956681][ T30] audit: type=1326 audit(1745564717.215:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 119.984778][ T3406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.000257][ T5894] ath6kl: Failed to submit usb control message: -71 [ 120.005369][ T3406] usb 4-1: config 0 has no interfaces? [ 120.024568][ T5894] ath6kl: unable to send the bmi data to the device: -71 [ 120.033803][ T3406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.044223][ T5894] ath6kl: Unable to send get target info: -71 [ 120.050478][ T5893] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.069988][ T5894] ath6kl: Failed to init ath6kl core: -71 [ 120.084869][ T3406] usb 4-1: config 0 has no interfaces? [ 120.084955][ T5894] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 120.111003][ T3406] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 120.189566][ T5894] usb 1-1: USB disconnect, device number 3 [ 120.247202][ T3406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.258305][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 120.270661][ T5893] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 120.296521][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.318263][ T5890] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.352463][ T5893] usb 5-1: config 0 has no interface number 0 [ 120.366512][ T3406] usb 4-1: config 0 descriptor?? [ 120.403324][ T5893] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 120.511224][ T5893] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 120.538337][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 120.557989][ T5890] usb 2-1: config 0 has no interfaces? [ 120.578439][ T5890] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 120.636024][ T5893] usb 5-1: config 0 interface 8 has no altsetting 0 [ 120.644341][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.680522][ T5893] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 120.703656][ T5890] usb 2-1: config 0 descriptor?? [ 120.710626][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.735676][ T5893] usb 5-1: Product: syz [ 120.747135][ T5893] usb 5-1: Manufacturer: syz [ 120.764755][ T5893] usb 5-1: SerialNumber: syz [ 120.809212][ T5893] usb 5-1: config 0 descriptor?? [ 121.055076][ T5893] ath6kl: Failed to submit usb control message: -71 [ 121.063027][ T5893] ath6kl: unable to send the bmi data to the device: -71 [ 121.070553][ T5893] ath6kl: Unable to send get target info: -71 [ 121.077736][ T5893] ath6kl: Failed to init ath6kl core: -71 [ 121.086466][ T5893] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 121.099576][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.119987][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.467917][ T5893] usb 5-1: USB disconnect, device number 6 [ 122.163138][ T3406] usb 3-1: USB disconnect, device number 7 [ 122.858493][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 122.972473][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 123.115639][ T3406] usb 2-1: USB disconnect, device number 5 [ 123.581756][ T3406] usb 4-1: USB disconnect, device number 5 [ 124.985084][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 125.913477][ T6244] fuse: Unknown parameter '0x0000000000000004' [ 129.160446][ T6283] ptrace attach of ""[6297] was attempted by "./syz-executor exec"[6283] [ 129.576441][ T5888] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.584316][ T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.744735][ T5888] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.759472][ T6293] syz.3.60 uses obsolete (PF_INET,SOCK_PACKET) [ 129.897522][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 129.980154][ T5888] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.011524][ T52] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 130.048257][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.218193][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.227299][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.235554][ T52] usb 1-1: config 0 has no interface number 0 [ 130.262323][ T52] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 130.563833][ T52] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 130.657700][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 130.667293][ T52] usb 1-1: config 0 interface 8 has no altsetting 0 [ 130.698804][ T6283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.711735][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.719075][ T52] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 130.737935][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.759541][ T52] usb 1-1: Product: syz [ 130.775159][ T52] usb 1-1: Manufacturer: syz [ 130.807904][ T52] usb 1-1: SerialNumber: syz [ 130.949159][ T52] usb 1-1: config 0 descriptor?? [ 131.240344][ T52] ath6kl: Failed to submit usb control message: -71 [ 131.308205][ T52] ath6kl: unable to send the bmi data to the device: -71 [ 131.320261][ T52] ath6kl: Unable to send get target info: -71 [ 131.330580][ T52] ath6kl: Failed to init ath6kl core: -71 [ 131.342945][ T52] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 131.356975][ T52] usb 1-1: USB disconnect, device number 4 [ 133.066326][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.072995][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.163377][ T5893] usb 3-1: USB disconnect, device number 8 [ 133.684588][ T6337] fuse: Bad value for 'user_id' [ 133.698447][ T6337] fuse: Bad value for 'user_id' [ 133.764428][ T6338] ptrace attach of "./syz-executor exec"[6340] was attempted by "./syz-executor exec"[6338] [ 134.085273][ T5833] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.508104][ T52] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 134.628726][ T5833] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.777902][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.814439][ T5833] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.870635][ T5833] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.973782][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 134.980605][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.994860][ T52] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 135.006331][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.020269][ T6338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.030760][ T52] usb 3-1: Product: syz [ 135.037033][ T5833] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.044764][ T52] usb 3-1: Manufacturer: syz [ 135.050464][ T52] usb 3-1: SerialNumber: syz [ 135.064578][ T5888] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.103042][ T5888] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.121498][ T52] usb 3-1: config 0 descriptor?? [ 135.151672][ T5888] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.185588][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.310429][ T6345] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 135.342441][ T5888] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.371208][ T6356] fuse: Unknown parameter '0x0000000000000006' [ 135.385973][ T52] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 136.432779][ T5893] usb 2-1: USB disconnect, device number 6 [ 136.689045][ T52] usb write operation failed. (-71) [ 136.700779][ T52] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 136.792533][ T52] dvbdev: DVB: registering new adapter (Terratec H7) [ 136.880091][ T52] usb 3-1: media controller created [ 136.904166][ T52] usb read operation failed. (-71) [ 136.916321][ T52] usb write operation failed. (-71) [ 136.952600][ T52] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 136.988545][ T52] usb 3-1: USB disconnect, device number 9 [ 137.346808][ T5888] usb 4-1: USB disconnect, device number 6 [ 137.470653][ T52] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.640013][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 137.670496][ T52] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 137.693370][ T52] usb 3-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 137.708484][ T1203] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.724049][ T52] usb 3-1: config 162 has no interface number 0 [ 137.737368][ T52] usb 3-1: too many endpoints for config 162 interface 97 altsetting 3: 255, using maximum allowed: 30 [ 137.804725][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 137.804745][ T30] audit: type=1326 audit(1745564735.595:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 137.816480][ T52] usb 3-1: config 162 interface 97 altsetting 3 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 137.832743][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.854915][ T30] audit: type=1326 audit(1745564735.595:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 137.907652][ T52] usb 3-1: config 162 interface 97 altsetting 3 endpoint 0x85 has invalid wMaxPacketSize 0 [ 137.922722][ T52] usb 3-1: config 162 interface 97 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 137.936198][ T52] usb 3-1: config 162 interface 97 has no altsetting 0 [ 137.948575][ T1203] usb 2-1: Using ep0 maxpacket: 8 [ 137.953751][ T30] audit: type=1326 audit(1745564735.595:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 137.956154][ T1203] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.976702][ T30] audit: type=1326 audit(1745564735.595:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 137.977437][ T52] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 138.019692][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.027750][ T52] usb 3-1: Product: syz [ 138.032223][ T52] usb 3-1: Manufacturer: syz [ 138.036851][ T52] usb 3-1: SerialNumber: syz [ 138.110310][ T30] audit: type=1326 audit(1745564735.925:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 138.112142][ T6384] fuse: Unknown parameter 'group_id00000000000000000000' [ 138.132521][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.157919][ T1203] usb 2-1: config 0 has no interfaces? [ 138.163697][ T30] audit: type=1326 audit(1745564735.925:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 138.177588][ T1203] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.197120][ T1203] usb 2-1: config 0 has no interfaces? [ 138.205092][ T1203] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.218016][ T1203] usb 2-1: config 0 has no interfaces? [ 138.231477][ T1203] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.246881][ T1203] usb 2-1: config 0 has no interfaces? [ 138.257641][ T1203] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 138.267174][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.315162][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 138.330061][ T1203] usb 2-1: config 0 descriptor?? [ 138.337620][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 138.347978][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 138.402627][ T6370] netlink: 'syz.2.83': attribute type 11 has an invalid length. [ 138.457097][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 138.491754][ T6375] BUG: sleeping function called from invalid context at mm/util.c:743 [ 138.495522][ T52] metro_usb 3-1:162.97: interrupt-out endpoint missing [ 138.500875][ T6375] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6375, name: syz.4.85 [ 138.516238][ T52] usb 3-1: USB disconnect, device number 10 [ 138.517027][ T6375] preempt_count: 1, expected: 0 [ 138.528238][ T6375] RCU nest depth: 0, expected: 0 [ 138.533252][ T6375] 1 lock held by syz.4.85/6375: [ 138.538253][ T6375] #0: ffff888148d4da48 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x240/0x620 [ 138.549708][ T6375] Preemption disabled at: [ 138.549724][ T6375] [<0000000000000000>] 0x0 [ 138.553615][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 138.554102][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.4.85 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 138.554131][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.554153][ T6375] Call Trace: [ 138.554164][ T6375] [ 138.554176][ T6375] dump_stack_lvl+0x189/0x250 [ 138.554225][ T6375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.554259][ T6375] ? __pfx__printk+0x10/0x10 [ 138.554286][ T6375] ? print_lock_name+0xde/0x100 [ 138.554315][ T6375] __might_resched+0x495/0x610 [ 138.554346][ T6375] ? __pfx___might_resched+0x10/0x10 [ 138.554372][ T6375] ? __lock_acquire+0xaac/0xd20 [ 138.554417][ T6375] folio_mc_copy+0x141/0x1d0 [ 138.554448][ T6375] filemap_migrate_folio+0xba/0x4c0 [ 138.554490][ T6375] __buffer_migrate_folio+0x430/0x620 [ 138.554527][ T6375] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 138.554563][ T6375] move_to_new_folio+0x2df/0xb10 [ 138.554591][ T6375] ? __pfx_move_to_new_folio+0x10/0x10 [ 138.554612][ T6375] ? __pfx_flush_tlb_func+0x10/0x10 [ 138.554642][ T6375] ? smp_call_function_many_cond+0xefe/0x11c0 [ 138.554677][ T6375] ? __pfx___might_resched+0x10/0x10 [ 138.554699][ T6375] ? __pfx_should_flush_tlb+0x10/0x10 [ 138.554735][ T6375] ? __pfx_flush_tlb_func+0x10/0x10 [ 138.554770][ T6375] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 138.554803][ T6375] ? __up_read+0x280/0x680 [ 138.554843][ T6375] ? on_each_cpu_cond_mask+0x62/0x80 [ 138.554888][ T6375] ? arch_tlbbatch_flush+0x3ec/0x570 [ 138.554908][ T6375] ? __pfx___might_resched+0x10/0x10 [ 138.554930][ T6375] ? __pfx_arch_tlbbatch_flush+0x10/0x10 [ 138.554963][ T6375] ? __pfx_folio_not_mapped+0x10/0x10 [ 138.554983][ T6375] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 138.555019][ T6375] ? alloc_migration_target_by_mpol+0x307/0x520 [ 138.555053][ T6375] migrate_pages_batch+0x1c34/0x2830 [ 138.555116][ T6375] ? __pfx_migrate_pages_batch+0x10/0x10 [ 138.555157][ T6375] ? kasan_save_track+0x4f/0x80 [ 138.555181][ T6375] ? kasan_save_track+0x3e/0x80 [ 138.555203][ T6375] ? __kasan_slab_alloc+0x6c/0x80 [ 138.555229][ T6375] ? mbind_range+0x3c8/0x800 [ 138.555261][ T6375] ? __se_sys_mbind+0x730/0xc30 [ 138.555286][ T6375] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.555324][ T6375] migrate_pages+0x1b3b/0x2850 [ 138.555372][ T6375] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 138.555404][ T6375] ? __pfx_migrate_pages+0x10/0x10 [ 138.555445][ T6375] ? current_cpuset_is_being_rebound+0x1d/0x310 [ 138.555480][ T6375] ? current_cpuset_is_being_rebound+0x1d/0x310 [ 138.555511][ T6375] ? current_cpuset_is_being_rebound+0x1d/0x310 [ 138.555573][ T6375] ? up_write+0x1c4/0x420 [ 138.555603][ T6375] __se_sys_mbind+0xa3e/0xc30 [ 138.555630][ T6375] ? fput+0xa0/0xd0 [ 138.555654][ T6375] ? __pfx_do_futex+0x10/0x10 [ 138.555683][ T6375] ? __pfx___se_sys_mbind+0x10/0x10 [ 138.555728][ T6375] ? rcu_is_watching+0x15/0xb0 [ 138.555756][ T6375] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 138.555785][ T6375] ? __ia32_sys_mbind+0x21/0xf0 [ 138.555817][ T6375] __do_fast_syscall_32+0xb4/0x110 [ 138.555856][ T6375] do_fast_syscall_32+0x34/0x80 [ 138.555892][ T6375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.555918][ T6375] RIP: 0023:0xf70fe539 [ 138.555938][ T6375] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 138.555955][ T6375] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 138.555978][ T6375] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 138.555994][ T6375] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.556007][ T6375] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 138.556020][ T6375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 138.556032][ T6375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.556064][ T6375] [ 139.189957][ T5888] usb 4-1: config 0 has no interfaces? [ 139.195882][ T5888] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 139.382912][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.404448][ T5888] usb 4-1: config 0 descriptor?? [ 139.770364][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.780515][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.807303][ T30] audit: type=1326 audit(1745564737.575:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 139.854622][ T30] audit: type=1326 audit(1745564737.575:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 139.891911][ T30] audit: type=1326 audit(1745564737.575:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 139.933448][ T30] audit: type=1326 audit(1745564737.575:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 141.064133][ T52] usb 4-1: USB disconnect, device number 7 [ 141.514784][ T5894] usb 2-1: USB disconnect, device number 7