last executing test programs: 7m51.077215889s ago: executing program 3 (id=568): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, 0x0, 0x4008015) r3 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 7m48.709990718s ago: executing program 4 (id=571): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) timer_create(0x3, 0x0, &(0x7f0000002340)=0x0) timer_settime(r0, 0x0, &(0x7f0000002380)={{0x77359400}}, 0x0) io_setup(0x6dc5, &(0x7f0000003800)) eventfd(0xffffffff) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b25090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b35070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d8160f94e35f2d2d12913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516259e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1943cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="08010000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040110000000000000002000000000000ae36b8d100000000000000000000000000000c0015005d0735000000000031000800"], 0x108}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 7m48.430405921s ago: executing program 3 (id=574): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd27, 0x20, {0x2, 0x18, 0x20, 0x0, 0xff, 0x3, 0xfd, 0x0, 0x100}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 7m41.208583296s ago: executing program 3 (id=579): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a26817", 0xcc, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f6", 0x4e, 0x5, 0x6}], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1e}, {0xe, 0xa}, {0xb, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4048010) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb0993", 0x41}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea949", 0x97}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m39.090554221s ago: executing program 4 (id=581): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) openat$kvm(0xffffffffffffff9c, 0x0, 0x480000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x30, 0xffffffffffffffff, 0x0) 7m36.415560925s ago: executing program 4 (id=584): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, 0x0, 0x4008015) r3 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 7m36.03808754s ago: executing program 3 (id=586): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000500)={0x0, 0x9, [{0x6, 0x0, 0x401}, {0xfffffff6, 0x0, 0x4}, {0x8, 0x0, 0x8}, {0xfffffffb, 0x0, 0x8000}, {0x13}, {0x7f, 0x0, 0xd}, {0x3ad, 0x0, 0x2}, {0x0, 0x0, 0x3}, {0x7, 0x0, 0xfffffffffffffffc}, {0x80, 0x0, 0xffffffffffffffff}, {0xed4, 0x0, 0xa9e7}, {0x7, 0x0, 0x10}, {0x7, 0x0, 0x3}, {0x3, 0x0, 0x2}, {0x5, 0x0, 0xfd4}, {0x4, 0x0, 0x9}]}) 7m33.321720909s ago: executing program 3 (id=588): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}}, 0x4000050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x6, 0x20000000, 0xa52, 0x12, 0xb, 0x10, 0x0, 0x0, 0x40, 0x7fff}}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x6430, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x20048851) 7m31.98028728s ago: executing program 4 (id=589): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x2000000000000013, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000fc0)={0x0, 0x80000001, 0x1, [0xa93, 0x8000, 0x6, 0x7, 0x5], [0x3, 0x5, 0xf, 0x7, 0xf4, 0x2, 0x5af6c199, 0x6a, 0x1, 0x17, 0x8000000000000000, 0x1, 0x1, 0xfff, 0x12, 0x7, 0x6ab, 0x93b7, 0x4, 0x5, 0x1, 0x9, 0x4, 0x2, 0x3, 0x1, 0x800000, 0xfff, 0x4, 0x10, 0x5000000000000, 0x9, 0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x7, 0x66, 0x411ac8ab, 0x0, 0x0, 0x93, 0x8001, 0x2, 0x3, 0x8000000000000001, 0x3, 0x5, 0x10000, 0x2, 0x3, 0x4, 0x9, 0x10001, 0x1, 0x9, 0xfffffffffffffff9, 0x9, 0x3ec0, 0xb1ec, 0x8, 0x75, 0x4, 0x7, 0x6, 0x4, 0x9, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0xfffffffffffff801, 0x7, 0x9, 0x92, 0x5, 0x6, 0xfffffffffffffffc, 0x76c900, 0x8, 0x0, 0x1000, 0x5, 0x9, 0x5, 0x40269a, 0x8, 0x5, 0x81, 0x4, 0x4, 0x7f, 0x100000000000000, 0xf3, 0xd53e, 0x2, 0x5000000, 0x8000000000000001, 0x0, 0x0, 0x9b4, 0x7, 0x10001, 0xfffffffffffff522, 0x7c, 0xe, 0xffffffffffffffff, 0x6, 0x1000000400, 0xfc8000000000, 0xf82b, 0x8000000000000000, 0x7fffffff, 0x80000, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x6, 0x2, 0xfffffffffffffffa, 0x8000, 0x8001]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000003000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000183d000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x10, 0xa5e, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, r2], 0x0, 0x10, 0x8}, 0x94) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) 7m30.37845969s ago: executing program 3 (id=592): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m30.335010842s ago: executing program 4 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) 7m26.530547466s ago: executing program 4 (id=595): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x40, 0x110, 0x15}, 0x18) openat$drirender128(0xffffff9c, 0x0, 0x410000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) 7m4.316121367s ago: executing program 32 (id=594): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) openat$kvm(0xffffffffffffff9c, 0x0, 0x480000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x30, 0xffffffffffffffff, 0x0) 7m3.870176985s ago: executing program 33 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) gettid() setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 7m3.682669409s ago: executing program 34 (id=590): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000600)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffdf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40), 0x0, 0x0) 7m3.485004356s ago: executing program 35 (id=592): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m3.343061036s ago: executing program 36 (id=595): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x40, 0x110, 0x15}, 0x18) openat$drirender128(0xffffff9c, 0x0, 0x410000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) 5m0.338970383s ago: executing program 9 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000287f526daf72"], 0x40}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) 4m58.010867485s ago: executing program 9 (id=763): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747c76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}]}}}}}}}, 0x0) 4m57.472895596s ago: executing program 9 (id=765): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, 0x0, 0x4008015) r3 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 4m56.975775154s ago: executing program 9 (id=769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, 0x0, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}], 0x4}, 0x1000}], 0x3, 0x8042, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 4m55.938957376s ago: executing program 9 (id=774): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffff7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f00000004c0)="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", 0x507}], 0x2}}], 0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 4m54.186382237s ago: executing program 9 (id=778): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 4m39.052735526s ago: executing program 37 (id=778): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 3m24.929428871s ago: executing program 6 (id=974): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) socket$inet6(0xa, 0x3, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3m24.561204838s ago: executing program 6 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 3m22.835284326s ago: executing program 6 (id=984): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x253, 0x4, 0x5, 0x8000000000000100, 0x6}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x1) read$FUSE(r5, &(0x7f0000004100)={0x2020, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r5, 0x4000, r5}, 0x18) sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYBLOB, @ANYRESHEX=r1], 0x40}, 0x1, 0x0, 0x0, 0x24002010}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000380), 0x0, 0x0, 0x400000000000000b}) 3m11.90449906s ago: executing program 6 (id=1006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000540)=""/110, 0x6e}], 0x2}, 0x2103) 3m11.363190835s ago: executing program 6 (id=1009): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000540)=""/110, 0x6e}], 0x2}, 0x2103) 3m10.818601963s ago: executing program 6 (id=1011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 2m53.638289686s ago: executing program 38 (id=1011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 2m11.659988916s ago: executing program 7 (id=1091): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r9, 0x1) getsockopt$bt_hci(r9, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) getsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) 2m10.881911962s ago: executing program 7 (id=1095): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f000053e000/0x4000)=nil, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) openat$cgroup_type(r4, &(0x7f0000000340), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 2m4.781042665s ago: executing program 7 (id=1099): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 2m3.336774598s ago: executing program 7 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) 2m2.738945005s ago: executing program 7 (id=1104): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff030000000905820208"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 2m1.132606757s ago: executing program 7 (id=1109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000fc0)={0x0, 0x80000001, 0x1, [0xa93, 0x8000, 0x6, 0x7, 0x5], [0x3, 0x5, 0xf, 0x7, 0xf4, 0x2, 0x5af6c199, 0x6a, 0x1, 0x17, 0x8000000000000000, 0x1, 0x1, 0xfff, 0x12, 0x7, 0x6ab, 0x93b7, 0x4, 0x5, 0x1, 0x9, 0x4, 0x2, 0x3, 0x1, 0x800000, 0xfff, 0x4, 0x10, 0x5000000000000, 0x9, 0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x7, 0x66, 0x411ac8ab, 0x0, 0x0, 0x93, 0x8001, 0x2, 0x3, 0x8000000000000001, 0x3, 0x5, 0x10000, 0x2, 0x3, 0x4, 0x9, 0x10001, 0x1, 0x9, 0xfffffffffffffff9, 0x9, 0x3ec0, 0xb1ec, 0x8, 0x75, 0x4, 0x7, 0x6, 0x4, 0x9, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0xfffffffffffff801, 0x7, 0x9, 0x92, 0x5, 0x6, 0xfffffffffffffffc, 0x76c900, 0x8, 0x0, 0x1000, 0x5, 0x9, 0x5, 0x40269a, 0x8, 0x5, 0x81, 0x4, 0x4, 0x7f, 0x100000000000000, 0xf3, 0xd53e, 0x2, 0x5000000, 0x8000000000000001, 0x0, 0x0, 0x9b4, 0x7, 0x10001, 0xfffffffffffff522, 0x7c, 0xe, 0xffffffffffffffff, 0x6, 0x1000000400, 0xfc8000000000, 0xf82b, 0x8000000000000000, 0x7fffffff, 0x80000, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x6, 0x2, 0xfffffffffffffffa, 0x8000, 0x8001]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000003000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000183d000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x10, 0xa5e, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, r1], 0x0, 0x10, 0x8}, 0x94) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) 1m45.948277531s ago: executing program 39 (id=1109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000fc0)={0x0, 0x80000001, 0x1, [0xa93, 0x8000, 0x6, 0x7, 0x5], [0x3, 0x5, 0xf, 0x7, 0xf4, 0x2, 0x5af6c199, 0x6a, 0x1, 0x17, 0x8000000000000000, 0x1, 0x1, 0xfff, 0x12, 0x7, 0x6ab, 0x93b7, 0x4, 0x5, 0x1, 0x9, 0x4, 0x2, 0x3, 0x1, 0x800000, 0xfff, 0x4, 0x10, 0x5000000000000, 0x9, 0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x7, 0x66, 0x411ac8ab, 0x0, 0x0, 0x93, 0x8001, 0x2, 0x3, 0x8000000000000001, 0x3, 0x5, 0x10000, 0x2, 0x3, 0x4, 0x9, 0x10001, 0x1, 0x9, 0xfffffffffffffff9, 0x9, 0x3ec0, 0xb1ec, 0x8, 0x75, 0x4, 0x7, 0x6, 0x4, 0x9, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0xfffffffffffff801, 0x7, 0x9, 0x92, 0x5, 0x6, 0xfffffffffffffffc, 0x76c900, 0x8, 0x0, 0x1000, 0x5, 0x9, 0x5, 0x40269a, 0x8, 0x5, 0x81, 0x4, 0x4, 0x7f, 0x100000000000000, 0xf3, 0xd53e, 0x2, 0x5000000, 0x8000000000000001, 0x0, 0x0, 0x9b4, 0x7, 0x10001, 0xfffffffffffff522, 0x7c, 0xe, 0xffffffffffffffff, 0x6, 0x1000000400, 0xfc8000000000, 0xf82b, 0x8000000000000000, 0x7fffffff, 0x80000, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x6, 0x2, 0xfffffffffffffffa, 0x8000, 0x8001]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000003000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000183d000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x10, 0xa5e, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, r1], 0x0, 0x10, 0x8}, 0x94) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) 23.226968936s ago: executing program 1 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000140)="aa", 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x400020b1) unshare(0x6e000000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) keyctl$revoke(0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300"], 0x28}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000), 0x0, 0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000880)={0x1, 0x1, 0x13, 0x1a, 0x115, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0200", @ANYRES16=r3, @ANYRES64=r2], 0x21c}}, 0x8000) 19.340765591s ago: executing program 1 (id=1271): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r0, &(0x7f0000000ac0)="a9", 0x1) syz_genetlink_get_family_id$team(0x0, r0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000240)={0xc53, 0xfffffff9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000002c0)={0x2, 0x2, 0x7, 0x3, 0x3}) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16.340682247s ago: executing program 2 (id=1280): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) eventfd(0xffffffff) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 15.132427352s ago: executing program 2 (id=1282): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) timer_create(0x3, 0x0, &(0x7f0000002340)=0x0) timer_settime(r0, 0x0, &(0x7f0000002380)={{0x77359400}}, 0x0) io_setup(0x6dc5, &(0x7f0000003800)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev}, 'vcan0\x00'}) eventfd(0xffffffff) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="08010000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040110000000000000002000000000000ae36b8d100000000000000000000000000000c0015005d0735000000000031000800"], 0x108}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 13.491686803s ago: executing program 1 (id=1285): r0 = socket(0x2, 0x3, 0xff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08360001ce61fcb7e067b20800000000000000d964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163c", 0x51}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11.545397178s ago: executing program 1 (id=1288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="60000000020601020000000000000000030000000200020073797a30000000000900020073797a3000000000f8ff04000700000010000300686173683a6e65742c69666163650000000001000700000005000400000000005db8a1be4c95a8c879f836b735b20638374ae5416ae036c3df851d9f65be0b262b197ad05ef756c7b3adb5b80d4fad6871abe0bc5708435b013a49a354fd2ab04cd1ca73543de5d458"], 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}], 0x4}, 0x1000}], 0x3, 0x8042, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) 10.604697139s ago: executing program 5 (id=1290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b501"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, 0x0, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}], 0x4}, 0x1000}], 0x3, 0x8042, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 9.129190615s ago: executing program 5 (id=1292): openat$full(0xffffffffffffff9c, 0x0, 0x2800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x56, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 9.003339039s ago: executing program 0 (id=1293): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 8.818920819s ago: executing program 8 (id=1294): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="2ace3a9d129db99f2964f6c544d9d549499fdb9723306ef3d320e89deeaa9d7f5ca2d7aea5d324563a75fc9843e2f525d53a141d11b62d7dded7da2b601e2245f358e1", @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 8.718301096s ago: executing program 1 (id=1295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) syz_emit_ethernet(0x124, &(0x7f0000000180)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x17, 0x4, 0x1, 0x3, 0x112, 0x65, 0x0, 0x3, 0x2, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x9, [{@private=0xa010101, 0x25}, {@loopback, 0xa31}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0xf1, 0x3, 0x5, [{@empty, 0xffffffff}, {@multicast2, 0x6}, {@loopback, 0xa}, {@empty, 0x1}, {@empty, 0xff}]}]}}, {0x15, 0xf8, 0x0, @remote, "e9bbb266df9457ff7f59256412011365ccbdbe59f3ca1c05b49f4b1a65645cbc929a9b23363650181ee11d722ffec9cec792f0fe9cc70d4c4a48c836df340b65bf3c1e7431a2dc78e84d9940a2582c425dc833fb1d2e2f3fbeb5a08d256b5f48bd9e2709899b18c9a45360b1b242f14aacc8d08f02b3e64f5ae221f54b1cf240c5802ef593cce467f937b4c6d61d8682b58a81d6720b642f09048d3b72a3238706f0c200e04a047c23f32f882a9c"}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26d, 0x0, 0x9800000002000000}]}) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) 8.564123383s ago: executing program 0 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000287f526daf72"], 0x40}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) 8.55698736s ago: executing program 2 (id=1297): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0)=0x4, 0x4) 8.530351794s ago: executing program 8 (id=1298): r0 = socket(0x2, 0x3, 0xff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08360001ce61fcb7e067b20800000000000000d964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163c", 0x51}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.606069515s ago: executing program 8 (id=1299): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 5.605581615s ago: executing program 5 (id=1300): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 5.422099901s ago: executing program 2 (id=1301): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x34000, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a73797a2030303030303030303030303030303030303230330035c38d85e2c2df79003ae7955d89ff1ac43e44934876e2fa0f5bc1135fc7779fdf08a5228b3e183b2c30a547f395996990c5c40900727750607503416010b032206c17b6f5f5990efd021d4836e5349c5e81c812f76be353851effc67d727ee59641be3e0911df1b1ccb3079327280143bf3d5af55662e07b6e806a19e670a4bdf59ee6f4d7ec83e50ca7436"], 0x44, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\x06\x02\x00\xc3\x8c0x0) timer_settime(r0, 0x0, &(0x7f0000002380)={{0x77359400}}, 0x0) io_setup(0x6dc5, &(0x7f0000003800)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev}, 'vcan0\x00'}) eventfd(0xffffffff) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="08010000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040110000000000000002000000000000ae36b8d100000000000000000000000000000c0015005d0735000000000031000800"], 0x108}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3.862648239s ago: executing program 8 (id=1303): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) writev(0xffffffffffffffff, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000240)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x4000844) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x24044810}, 0x8880) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400", 0x2}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) 3.834538856s ago: executing program 5 (id=1304): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, 0x0, 0x4008015) r3 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 2.699565423s ago: executing program 2 (id=1305): socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xe1b4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r1, r4, 0xf3a, 0x4) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r5 = msgget(0x0, 0x206) msgrcv(r5, &(0x7f0000000000)={0x0, ""/54}, 0x3e, 0x2, 0x0) 2.393040616s ago: executing program 5 (id=1306): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000004040)={0x2020}, 0x2020) timer_create(0x1, &(0x7f0000000280)={0x0, 0x6, 0x2, @thr={&(0x7f0000000600)="1a5da98cc11644ae6b104a1a304003e093f935d03f9fa1456dfeec4c3120cad01df05b8db2057f8e8512a4e1c85a5292cb4fd0b119339366ddf11fc04b48f509d605f9a8386371eaaa595d4998b11cb55da1f48bd5d70d32e9e91a6ace3f1fda59af34ec6b43d65a0cb8f1920bc893b74ea61f4be6bf5a93cca7616cb4df26862e9f0b404859e86c948c6d32af5ee7d3125ed9b8e4e62a1121997ccc07ab99827f94ffe5cee2d72d0399c3b0a92024296bf61c749e1e2e8cc9b38e64f518835a179f1e9e68ff2a83af5a3d35191a7d0c", 0x0}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ptrace(0x4207, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0)={0xa}, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x12c, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r5, 0x30b, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x4, 0x94bf, 0x7, 0x0, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000060400"], 0x0, 0x26}, 0x28) 1.614055187s ago: executing program 0 (id=1307): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.256697331s ago: executing program 2 (id=1308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) syz_emit_ethernet(0x124, &(0x7f0000000180)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x17, 0x4, 0x1, 0x3, 0x112, 0x65, 0x0, 0x3, 0x2, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x9, [{@private=0xa010101, 0x25}, {@loopback, 0xa31}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0xf1, 0x3, 0x5, [{@empty, 0xffffffff}, {@multicast2, 0x6}, {@loopback, 0xa}, {@empty, 0x1}, {@empty, 0xff}]}]}}, {0x15, 0xf8, 0x0, @remote, "e9bbb266df9457ff7f59256412011365ccbdbe59f3ca1c05b49f4b1a65645cbc929a9b23363650181ee11d722ffec9cec792f0fe9cc70d4c4a48c836df340b65bf3c1e7431a2dc78e84d9940a2582c425dc833fb1d2e2f3fbeb5a08d256b5f48bd9e2709899b18c9a45360b1b242f14aacc8d08f02b3e64f5ae221f54b1cf240c5802ef593cce467f937b4c6d61d8682b58a81d6720b642f09048d3b72a3238706f0c200e04a047c23f32f882a9c"}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26d, 0x0, 0x9800000002000000}]}) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) 1.251549191s ago: executing program 1 (id=1309): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540823e00b95ad2790ee2"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.245347624s ago: executing program 0 (id=1310): r0 = socket(0x2, 0x3, 0xff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08360001ce61fcb7e067b20800000000000000d964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163c", 0x51}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.187959867s ago: executing program 8 (id=1311): r0 = socket$inet(0x2, 0x800, 0xffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000080)=0xfffffffb, 0x2dbd995001e3ca0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb000905040210"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) unshare(0x22020600) epoll_create(0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000340)={r7, 0x1, 0x6, @broadcast}, 0x10) socket$kcm(0x1e, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000), 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, 0x0) 862.556669ms ago: executing program 0 (id=1312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, 0x0) 408.956187ms ago: executing program 5 (id=1313): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x8, 0xc9}}}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x406, r0) syz_usb_connect(0x0, 0x2d, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x2, &(0x7f0000000040)=[{0xf0, 0x0, 0xfffffff4}, {0x6, 0x0, 0x7f}]}, 0x1, 0x8, 0x7, 0x1, 0x0, 0x5e99, 0x100000000, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000180)) listns(&(0x7f0000000340)={0x20, 0x0, 0x1000, 0xf4240, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) openat$panthor(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001"], 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140), 0x0, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) ptrace$setregs(0x2, 0x0, 0x5, &(0x7f0000000480)="d0a2ae1e4991194dede3fde6e2cedc987b200068aded79d640de58eb5858ad0dae629e9dd9546ff17328e199be1aba279bbe32b54b71346fee3d2b3a833df9439ec35764c7c40100a386221b030be2bfcc13a5cde60cf3fbd6d5521f465723d09907dc39dfcdbebd7715278888fa0a92aebbffb0d8a7212ee8f3983fb925dfdf2a6e1ab2321939b1460be1fc95d1f067d9dee73d3a48dc478a1e335722e4b3a74f1d84392bf0f2bd33645183098dc4b84875b0300d09ba7606171c27ffe5282367f23d1f") 0s ago: executing program 8 (id=1314): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) kernel console output (not intermixed with test programs): T5589] usb 34-1: SetAddress Request (2) to port 0 [ 122.840467][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.273290][ T5735] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 123.273355][ T5735] usb 2-1: config 1 has no interface number 0 [ 123.306914][ T5735] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 123.306961][ T5735] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 123.306990][ T5735] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.613587][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 123.774519][ T5735] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 123.774562][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.774630][ T5735] usb 2-1: Product: syz [ 123.774646][ T5735] usb 2-1: Manufacturer: syz [ 123.774661][ T5735] usb 2-1: SerialNumber: syz [ 123.841975][ T5750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.842006][ T5750] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.127132][ T5589] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 124.190623][ T5801] vhci_hcd vhci_hcd.0: disconnect device [ 124.361639][ T5589] usb 34-1: enqueue for inactive port 0 [ 126.341999][ T5735] usb 2-1: can't set config #1, error -71 [ 126.698256][ T5750] usb 4-1: string descriptor 0 read error: -71 [ 126.698383][ T5750] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.698419][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.791313][ T5735] usb 2-1: USB disconnect, device number 2 [ 126.956331][ T5750] usb 4-1: can't set config #1, error -71 [ 127.020044][ T5589] usb usb34-port1: attempt power cycle [ 127.077863][ T5750] usb 4-1: USB disconnect, device number 4 [ 127.200569][ T5869] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 127.631574][ T5589] usb usb34-port1: unable to enumerate USB device [ 127.737114][ T5879] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 128.795619][ T10] usb 3-1: device descriptor read/64, error -71 [ 128.957363][ T10] usb usb3-port1: attempt power cycle [ 129.719581][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.260892][ T10] usb 3-1: device descriptor read/8, error -71 [ 133.820605][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.820709][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.661331][ T5915] fuse: Bad value for 'fd' [ 145.273591][ T5589] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.380234][ T5750] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.787487][ T5589] usb 3-1: device descriptor read/all, error -71 [ 146.825970][ T5750] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 146.826000][ T5750] usb 1-1: config 1 has no interface number 0 [ 146.826063][ T5750] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 146.826092][ T5750] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 146.826120][ T5750] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.829195][ T5750] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 146.829225][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.829248][ T5750] usb 1-1: Product: syz [ 146.829263][ T5750] usb 1-1: Manufacturer: syz [ 146.829279][ T5750] usb 1-1: SerialNumber: syz [ 146.937862][ T5932] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.492552][ T5750] usb 1-1: Error in usbnet_get_endpoints (-71) [ 147.544928][ T5750] usb 1-1: USB disconnect, device number 2 [ 150.693584][ T5735] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.771709][ T5957] fuse: Bad value for 'fd' [ 150.892036][ T5735] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 150.892057][ T5735] usb 4-1: config 1 has no interface number 0 [ 150.892087][ T5735] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 150.892107][ T5735] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 150.892126][ T5735] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.900904][ T5735] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 150.900925][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.900940][ T5735] usb 4-1: Product: syz [ 150.900950][ T5735] usb 4-1: Manufacturer: syz [ 150.900961][ T5735] usb 4-1: SerialNumber: syz [ 151.081605][ T1143] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.099029][ T5952] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.250245][ T1143] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 151.250266][ T1143] usb 1-1: config 1 has no interface number 0 [ 151.250297][ T1143] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 151.250315][ T1143] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 151.250436][ T1143] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.253314][ T1143] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 151.253343][ T1143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.253357][ T1143] usb 1-1: Product: syz [ 151.254076][ T1143] usb 1-1: Manufacturer: syz [ 151.254126][ T1143] usb 1-1: SerialNumber: syz [ 151.457396][ T5959] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 156.401429][ T5735] usb 4-1: Error in usbnet_get_endpoints (-110) [ 156.583980][ T5973] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.584329][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 156.646381][ T1143] usb 1-1: Error in usbnet_get_endpoints (-71) [ 156.723990][ T5973] usb 3-1: device descriptor read/64, error -32 [ 156.831639][ T5735] usb 4-1: USB disconnect, device number 5 [ 156.853033][ T1143] usb 1-1: USB disconnect, device number 3 [ 175.273552][ T5973] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 175.435937][ T5973] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 175.435967][ T5973] usb 1-1: config 0 has no interface number 0 [ 175.436012][ T5973] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.439271][ T5973] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 175.439300][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.439380][ T5973] usb 1-1: Product: syz [ 175.439396][ T5973] usb 1-1: Manufacturer: syz [ 175.439417][ T5973] usb 1-1: SerialNumber: syz [ 175.498441][ T1143] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 175.507107][ T5750] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 175.545337][ T5973] usb 1-1: config 0 descriptor?? [ 175.656030][ T5750] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 175.656066][ T5750] usb 2-1: config 0 has no interface number 0 [ 175.656137][ T5750] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.658786][ T1143] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 175.658810][ T1143] usb 5-1: config 0 has no interface number 0 [ 175.661566][ T5750] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 175.661591][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.661610][ T5750] usb 2-1: Product: syz [ 175.661625][ T5750] usb 2-1: Manufacturer: syz [ 175.661638][ T5750] usb 2-1: SerialNumber: syz [ 175.689603][ T1143] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.785221][ T1143] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 175.785256][ T1143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.785336][ T1143] usb 5-1: Product: syz [ 175.785353][ T1143] usb 5-1: Manufacturer: syz [ 175.785369][ T1143] usb 5-1: SerialNumber: syz [ 176.056811][ T5750] usb 2-1: config 0 descriptor?? [ 176.136512][ T5973] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 176.136768][ T6040] ntfs3(loop0): try to read out of volume at offset 0x0 [ 176.176410][ T1143] usb 5-1: config 0 descriptor?? [ 176.374040][ T5750] yurex 2-1:0.50: USB YUREX device now attached to Yurex #1 [ 176.420641][ T1143] yurex 5-1:0.50: USB YUREX device now attached to Yurex #2 [ 176.564951][ T6047] ntfs3(loop4): try to read out of volume at offset 0x0 [ 176.629983][ T6040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.716412][ T6054] ntfs3(loop1): try to read out of volume at offset 0x0 [ 176.721364][ T6040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.832009][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.842253][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.956978][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.958745][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.392586][ T1143] usb 1-1: USB disconnect, device number 4 [ 177.497926][ T5750] usb 5-1: USB disconnect, device number 2 [ 177.555086][ T1143] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 177.772383][ T5750] yurex 5-1:0.50: USB YUREX #2 now disconnected [ 177.784523][ T5589] usb 2-1: USB disconnect, device number 3 [ 178.017929][ T5589] yurex 2-1:0.50: USB YUREX #1 now disconnected [ 194.325437][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.325509][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.492643][ T6144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 198.492674][ T6144] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.493982][ T6144] vhci_hcd vhci_hcd.0: Device attached [ 198.503302][ T6146] vhci_hcd: connection closed [ 198.538248][ T5801] vhci_hcd vhci_hcd.3: stop threads [ 198.538275][ T5801] vhci_hcd vhci_hcd.3: release socket [ 198.538321][ T5801] vhci_hcd vhci_hcd.3: disconnect device [ 205.600215][ T6166] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 205.600246][ T6166] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.600321][ T6166] vhci_hcd vhci_hcd.0: Device attached [ 205.628134][ T6168] vhci_hcd: connection closed [ 205.641939][ T5844] vhci_hcd vhci_hcd.3: stop threads [ 205.641967][ T5844] vhci_hcd vhci_hcd.3: release socket [ 205.641998][ T5844] vhci_hcd vhci_hcd.3: disconnect device [ 213.626381][ T6218] Zero length message leads to an empty skb [ 218.047579][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 218.047837][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 218.237322][ T6225] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.107'. [ 221.027367][ T6237] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 221.027396][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 221.034030][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 221.313005][ T6238] vhci_hcd: connection closed [ 221.313751][ T66] vhci_hcd vhci_hcd.4: stop threads [ 221.313776][ T66] vhci_hcd vhci_hcd.4: release socket [ 221.313853][ T66] vhci_hcd vhci_hcd.4: disconnect device [ 221.353624][ T5722] usb 42-1: enqueue for inactive port 0 [ 222.762366][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 222.762407][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 222.969268][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 223.163682][ T5722] usb usb42-port1: attempt power cycle [ 226.610580][ T5722] usb usb42-port1: unable to enumerate USB device [ 227.965096][ T6264] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 227.965125][ T6264] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.965188][ T6264] vhci_hcd vhci_hcd.0: Device attached [ 227.965550][ T6266] vhci_hcd: connection closed [ 227.973258][ T1125] vhci_hcd vhci_hcd.4: stop threads [ 227.973286][ T1125] vhci_hcd vhci_hcd.4: release socket [ 227.973323][ T1125] vhci_hcd vhci_hcd.4: disconnect device [ 234.110511][ T6285] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.121'. [ 237.051608][ T6314] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 237.051675][ T6314] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 237.051743][ T6314] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 237.200042][ T6314] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 237.362736][ T6314] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 257.698949][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.699020][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.769432][ T6385] siw: device registration error -23 [ 261.733938][ T5618] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 275.840486][ T6419] siw: device registration error -23 [ 280.267578][ T5618] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 280.774950][ T6452] siw: device registration error -23 [ 303.804370][ T6535] siw: device registration error -23 [ 309.000267][ T6552] overlayfs: failed to resolve './file0': -2 [ 316.300838][ T6581] siw: device registration error -23 [ 317.317529][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.317582][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.785383][ T5618] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 322.042430][ T6608] siw: device registration error -23 [ 327.473860][ T5618] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 327.474057][ T5618] Bluetooth: hci2: Injecting HCI hardware error event [ 327.476908][ T5618] Bluetooth: hci2: hardware error 0x00 [ 330.997325][ T5618] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 332.221725][ T6636] siw: device registration error -23 [ 340.367040][ T6662] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 340.367064][ T6662] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 340.367194][ T6662] vhci_hcd vhci_hcd.0: Device attached [ 340.367913][ T6664] vhci_hcd: connection closed [ 340.370493][ T1125] vhci_hcd vhci_hcd.3: stop threads [ 340.370519][ T1125] vhci_hcd vhci_hcd.3: release socket [ 340.459748][ T1125] vhci_hcd vhci_hcd.3: disconnect device [ 346.213482][ T1143] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 346.963473][ T1143] usb 1-1: Using ep0 maxpacket: 32 [ 347.005885][ T1143] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 347.005918][ T1143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.005939][ T1143] usb 1-1: Product: syz [ 347.005954][ T1143] usb 1-1: Manufacturer: syz [ 347.005970][ T1143] usb 1-1: SerialNumber: syz [ 347.017277][ T1143] usb 1-1: config 0 descriptor?? [ 347.150487][ T1143] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 348.325330][ T1143] gspca_topro: reg_w err -71 [ 348.363776][ T1143] gspca_topro: Sensor soi763a [ 348.634425][ T1143] usb 1-1: USB disconnect, device number 5 [ 350.399223][ T6707] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 350.399252][ T6707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 350.399360][ T6707] vhci_hcd vhci_hcd.0: Device attached [ 350.406032][ T6709] vhci_hcd: connection closed [ 350.407183][ T13] vhci_hcd vhci_hcd.2: stop threads [ 350.407251][ T13] vhci_hcd vhci_hcd.2: release socket [ 350.407345][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 353.383580][ T5819] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 354.553397][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 354.649333][ T5819] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 354.649366][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.649388][ T5819] usb 5-1: Product: syz [ 354.649403][ T5819] usb 5-1: Manufacturer: syz [ 354.649418][ T5819] usb 5-1: SerialNumber: syz [ 354.695578][ T5819] usb 5-1: config 0 descriptor?? [ 354.714160][ T5819] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 356.026968][ T5819] gspca_topro: reg_w err -71 [ 356.054660][ T5819] gspca_topro: Sensor soi763a [ 356.509916][ T6741] siw: device registration error -23 [ 357.449752][ T5819] usb 5-1: USB disconnect, device number 3 [ 364.333474][ T5986] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 365.440009][ T6771] siw: device registration error -23 [ 365.744471][ T6768] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 365.744500][ T6768] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 365.744612][ T6768] vhci_hcd vhci_hcd.0: Device attached [ 365.744970][ T6773] vhci_hcd: connection closed [ 366.237905][ T13] vhci_hcd vhci_hcd.0: stop threads [ 366.237937][ T13] vhci_hcd vhci_hcd.0: release socket [ 366.237977][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 367.838092][ T5618] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 370.804863][ T6803] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 370.804892][ T6803] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 370.804985][ T6803] vhci_hcd vhci_hcd.0: Device attached [ 370.812858][ T6805] vhci_hcd: connection closed [ 370.817650][ T1073] vhci_hcd vhci_hcd.2: stop threads [ 370.817680][ T1073] vhci_hcd vhci_hcd.2: release socket [ 370.817722][ T1073] vhci_hcd vhci_hcd.2: disconnect device [ 376.253667][ T6824] siw: device registration error -23 [ 376.728841][ T6829] trusted_key: encrypted_key: keylen parameter is missing [ 376.760418][ T6829] netlink: 'syz.1.262': attribute type 40 has an invalid length. [ 380.296374][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.296445][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.061484][ T6844] siw: device registration error -23 [ 390.224880][ T6880] process 'syz.0.276' launched './file2' with NULL argv: empty string added [ 392.704311][ T6896] trusted_key: encrypted_key: keylen parameter is missing [ 392.725503][ T6896] netlink: 'syz.2.279': attribute type 40 has an invalid length. [ 394.551913][ T6902] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 394.551942][ T6902] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 394.552034][ T6902] vhci_hcd vhci_hcd.0: Device attached [ 394.552457][ T6904] vhci_hcd: connection closed [ 394.609069][ T5801] vhci_hcd vhci_hcd.3: stop threads [ 394.609098][ T5801] vhci_hcd vhci_hcd.3: release socket [ 394.609139][ T5801] vhci_hcd vhci_hcd.3: disconnect device [ 395.398329][ T6914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.284'. [ 397.020609][ T6916] binder: BINDER_SET_CONTEXT_MGR already set [ 397.020627][ T6916] binder: 6909:6916 ioctl 4018620d 200000004a80 returned -16 [ 405.866271][ T6953] siw: device registration error -23 [ 411.284140][ T6973] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 411.284161][ T6973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 411.284280][ T6973] vhci_hcd vhci_hcd.0: Device attached [ 411.288197][ T6975] vhci_hcd: connection closed [ 411.291750][ T55] vhci_hcd vhci_hcd.4: stop threads [ 411.291777][ T55] vhci_hcd vhci_hcd.4: release socket [ 411.291815][ T55] vhci_hcd vhci_hcd.4: disconnect device [ 415.923675][ T5618] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 416.221750][ T7010] siw: device registration error -23 [ 419.582659][ T7015] siw: device registration error -23 [ 422.445624][ T7022] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 422.445645][ T7022] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 422.445757][ T7022] vhci_hcd vhci_hcd.0: Device attached [ 422.450854][ T7024] vhci_hcd: connection closed [ 422.493795][ T13] vhci_hcd vhci_hcd.3: stop threads [ 422.493816][ T13] vhci_hcd vhci_hcd.3: release socket [ 422.493844][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 432.484352][ T7089] netlink: 80 bytes leftover after parsing attributes in process `syz.2.331'. [ 438.163591][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 440.011927][ T37] audit: type=1804 audit(1780117342.237:2): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.338" name="/newroot/63/file0" dev="tmpfs" ino=367 res=1 errno=0 [ 442.517925][ T7121] siw: device registration error -23 [ 443.529649][ T7131] netlink: 60 bytes leftover after parsing attributes in process `syz.3.342'. [ 445.393913][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.393986][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.691129][ T7146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 448.691161][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 448.691227][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 448.717552][ T7148] vhci_hcd: connection closed [ 448.744001][ T1073] vhci_hcd vhci_hcd.3: stop threads [ 448.744031][ T1073] vhci_hcd vhci_hcd.3: release socket [ 448.744073][ T1073] vhci_hcd vhci_hcd.3: disconnect device [ 452.757661][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 452.832896][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 453.428818][ T7180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.352'. [ 460.261457][ T7209] netlink: 80 bytes leftover after parsing attributes in process `syz.2.363'. [ 461.695427][ T7223] trusted_key: encrypted_key: insufficient parameters specified [ 461.713555][ T7223] netlink: 'syz.0.367': attribute type 40 has an invalid length. [ 464.014451][ T7236] trusted_key: encrypted_key: keylen parameter is missing [ 464.020789][ T7236] netlink: 'syz.0.369': attribute type 40 has an invalid length. [ 468.486580][ T7244] trusted_key: encrypted_key: keylen parameter is missing [ 468.488580][ T7243] netlink: 'syz.1.372': attribute type 40 has an invalid length. [ 470.000390][ T7246] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 470.000420][ T7246] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 470.000536][ T7246] vhci_hcd vhci_hcd.0: Device attached [ 470.353829][ T7249] vhci_hcd: connection closed [ 470.395442][ T5840] vhci_hcd vhci_hcd.4: stop threads [ 470.395472][ T5840] vhci_hcd vhci_hcd.4: release socket [ 470.395514][ T5840] vhci_hcd vhci_hcd.4: disconnect device [ 472.179801][ T7261] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 472.179836][ T7261] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 472.179960][ T7261] vhci_hcd vhci_hcd.0: Device attached [ 472.196325][ T7263] vhci_hcd: connection closed [ 472.218205][ T5840] vhci_hcd vhci_hcd.2: stop threads [ 472.218235][ T5840] vhci_hcd vhci_hcd.2: release socket [ 472.218283][ T5840] vhci_hcd vhci_hcd.2: disconnect device [ 472.780982][ T7270] trusted_key: encrypted_key: keylen parameter is missing [ 472.797838][ T7270] netlink: 'syz.0.378': attribute type 40 has an invalid length. [ 475.965201][ T7281] netlink: 80 bytes leftover after parsing attributes in process `syz.2.382'. [ 483.309975][ T7290] netlink: 80 bytes leftover after parsing attributes in process `syz.1.384'. [ 485.663694][ T7316] siw: device registration error -23 [ 487.642771][ T7320] netlink: 60 bytes leftover after parsing attributes in process `syz.0.391'. [ 490.769332][ T7324] netlink: 80 bytes leftover after parsing attributes in process `syz.2.393'. [ 494.069901][ T7340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.399'. [ 495.820112][ T7344] netlink: 80 bytes leftover after parsing attributes in process `syz.1.400'. [ 498.542259][ T7362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.404'. [ 502.895883][ T7367] netlink: 80 bytes leftover after parsing attributes in process `syz.0.406'. [ 506.154107][ T7370] netlink: 80 bytes leftover after parsing attributes in process `syz.3.407'. [ 506.838917][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.838990][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.341539][ T7393] netlink: 80 bytes leftover after parsing attributes in process `syz.2.414'. [ 512.043192][ T5618] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 512.932039][ T7395] netlink: 80 bytes leftover after parsing attributes in process `syz.0.416'. [ 514.960119][ T7421] binder: 7420:7421 ioctl c0306201 0 returned -14 [ 520.000675][ T7455] trusted_key: encrypted_key: keylen parameter is missing [ 520.099810][ T7455] netlink: 'syz.3.430': attribute type 40 has an invalid length. [ 521.195217][ T7457] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 521.195238][ T7457] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 521.202061][ T7457] vhci_hcd vhci_hcd.0: Device attached [ 521.203983][ T7459] vhci_hcd: connection closed [ 521.205487][ T55] vhci_hcd vhci_hcd.4: stop threads [ 521.205532][ T55] vhci_hcd vhci_hcd.4: release socket [ 521.205569][ T55] vhci_hcd vhci_hcd.4: disconnect device [ 523.628301][ T7472] trusted_key: encrypted_key: keylen parameter is missing [ 523.630179][ T7472] netlink: 'syz.3.434': attribute type 40 has an invalid length. [ 531.435919][ T7501] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 531.435948][ T7501] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 531.713499][ T7501] vhci_hcd vhci_hcd.0: Device attached [ 532.739569][ T7511] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 532.739599][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 532.739695][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 532.741396][ T7513] vhci_hcd: connection closed [ 532.771577][ T66] vhci_hcd vhci_hcd.1: stop threads [ 532.771605][ T66] vhci_hcd vhci_hcd.1: release socket [ 532.771644][ T66] vhci_hcd vhci_hcd.1: disconnect device [ 534.394282][ T5986] usb 38-1: SetAddress Request (2) to port 0 [ 534.395013][ T5986] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 538.571835][ T7535] binder: 7534:7535 ioctl 4018620d 0 returned -22 [ 539.380209][ T7502] vhci_hcd: connection reset by peer [ 539.389261][ T1125] vhci_hcd vhci_hcd.2: stop threads [ 539.389281][ T1125] vhci_hcd vhci_hcd.2: release socket [ 539.406340][ T1125] vhci_hcd vhci_hcd.2: disconnect device [ 539.704614][ T5986] usb 38-1: device descriptor read/8, error -110 [ 539.848047][ T7543] binder: 7542:7543 ioctl c0306201 0 returned -14 [ 539.959248][ T7544] netlink: 80 bytes leftover after parsing attributes in process `syz.1.454'. [ 540.149030][ T5986] usb usb38-port1: attempt power cycle [ 540.891574][ T5986] usb usb38-port1: unable to enumerate USB device [ 544.005247][ T5986] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 544.183573][ T5986] usb 5-1: Using ep0 maxpacket: 16 [ 544.190792][ T5986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.190819][ T5986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.226394][ T5986] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 544.226426][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.226448][ T5986] usb 5-1: Product: syz [ 544.226464][ T5986] usb 5-1: Manufacturer: syz [ 544.226479][ T5986] usb 5-1: SerialNumber: syz [ 544.461003][ T5986] usb 5-1: 0:2 : does not exist [ 545.111072][ T5986] usb 5-1: USB disconnect, device number 6 [ 547.895621][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.278251][ T7587] trusted_key: encrypted_key: keylen parameter is missing [ 548.291416][ T7587] netlink: 'syz.1.468': attribute type 40 has an invalid length. [ 551.222386][ T7600] trusted_key: encrypted_key: keylen parameter is missing [ 551.227580][ T7600] netlink: 'syz.3.471': attribute type 40 has an invalid length. [ 554.457177][ T7613] netlink: 80 bytes leftover after parsing attributes in process `syz.0.473'. [ 554.871007][ T7614] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 554.871035][ T7614] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 554.872059][ T7614] vhci_hcd vhci_hcd.0: Device attached [ 556.927178][ T5866] usb 36-1: SetAddress Request (2) to port 0 [ 556.927266][ T5866] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 556.933680][ T7625] netlink: 80 bytes leftover after parsing attributes in process `syz.3.476'. [ 558.441906][ T7633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.480'. [ 560.019267][ T7637] siw: device registration error -23 [ 562.351958][ T7617] vhci_hcd: connection reset by peer [ 562.365724][ T67] vhci_hcd vhci_hcd.1: stop threads [ 562.365753][ T67] vhci_hcd vhci_hcd.1: release socket [ 562.411255][ T5866] usb 36-1: device descriptor read/8, error -110 [ 562.411624][ T67] vhci_hcd vhci_hcd.1: disconnect device [ 562.881475][ T5866] usb usb36-port1: attempt power cycle [ 563.900983][ T7641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 563.901010][ T7641] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 563.901135][ T7641] vhci_hcd vhci_hcd.0: Device attached [ 563.901944][ T7643] vhci_hcd: connection closed [ 563.933746][ T67] vhci_hcd vhci_hcd.2: stop threads [ 563.933783][ T67] vhci_hcd vhci_hcd.2: release socket [ 563.984376][ T67] vhci_hcd vhci_hcd.2: disconnect device [ 564.911671][ T5866] usb usb36-port1: unable to enumerate USB device [ 567.970490][ T7650] netlink: 80 bytes leftover after parsing attributes in process `syz.1.484'. [ 568.167458][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.167533][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.268033][ T7658] syzkaller0: entered promiscuous mode [ 568.268053][ T7658] syzkaller0: entered allmulticast mode [ 572.360849][ T7676] netlink: 80 bytes leftover after parsing attributes in process `syz.2.491'. [ 572.647232][ T7681] netlink: 80 bytes leftover after parsing attributes in process `syz.0.493'. [ 575.163908][ T7698] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 575.163940][ T7698] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 575.164396][ T7698] vhci_hcd vhci_hcd.0: Device attached [ 575.169780][ T7700] vhci_hcd: connection closed [ 575.173740][ T67] vhci_hcd vhci_hcd.2: stop threads [ 575.173770][ T67] vhci_hcd vhci_hcd.2: release socket [ 575.173809][ T67] vhci_hcd vhci_hcd.2: disconnect device [ 577.690264][ T7720] siw: device registration error -23 [ 580.908831][ T7735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.503'. [ 584.380196][ C0] Unknown status report in ack skb [ 589.134971][ T7773] binder: 7772:7773 ioctl c0306201 0 returned -14 [ 591.983528][ T7780] siw: device registration error -23 [ 596.625279][ T7784] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 596.625306][ T7784] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 596.625425][ T7784] vhci_hcd vhci_hcd.0: Device attached [ 596.632458][ T7786] vhci_hcd: connection closed [ 596.633086][ T55] vhci_hcd vhci_hcd.2: stop threads [ 596.633104][ T55] vhci_hcd vhci_hcd.2: release socket [ 596.633131][ T55] vhci_hcd vhci_hcd.2: disconnect device [ 596.806662][ T7793] netlink: 116 bytes leftover after parsing attributes in process `syz.1.521'. [ 597.513318][ T5750] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 597.663453][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 597.665971][ T5750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.666004][ T5750] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.671152][ T5750] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.671182][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.671204][ T5750] usb 4-1: Product: syz [ 597.671220][ T5750] usb 4-1: Manufacturer: syz [ 597.671235][ T5750] usb 4-1: SerialNumber: syz [ 597.811316][ T5750] usb 4-1: 0:2 : does not exist [ 598.024116][ T5750] usb 4-1: USB disconnect, device number 6 [ 599.456690][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.934639][ T5618] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 603.073141][ T7835] netlink: 116 bytes leftover after parsing attributes in process `syz.2.533'. [ 607.197814][ T7855] netlink: 80 bytes leftover after parsing attributes in process `syz.3.539'. [ 607.783626][ T5750] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 607.979356][ T5750] usb 1-1: Using ep0 maxpacket: 16 [ 608.011610][ T5750] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.011665][ T5750] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.095053][ T5750] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.095086][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.095108][ T5750] usb 1-1: Product: syz [ 608.095123][ T5750] usb 1-1: Manufacturer: syz [ 608.095138][ T5750] usb 1-1: SerialNumber: syz [ 608.176227][ T5750] usb 1-1: 0:2 : does not exist [ 608.436955][ T5750] usb 1-1: USB disconnect, device number 6 [ 608.729480][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.259858][ T7873] tipc: Started in network mode [ 609.259888][ T7873] tipc: Node identity 4, cluster identity 4711 [ 609.259906][ T7873] tipc: Node number set to 4 [ 613.048118][ T7885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 613.048140][ T7885] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 613.048256][ T7885] vhci_hcd vhci_hcd.0: Device attached [ 613.057694][ T7887] vhci_hcd: connection closed [ 613.094811][ T67] vhci_hcd vhci_hcd.0: stop threads [ 613.094841][ T67] vhci_hcd vhci_hcd.0: release socket [ 613.094869][ T67] vhci_hcd vhci_hcd.0: disconnect device [ 613.168514][ T7884] netlink: 116 bytes leftover after parsing attributes in process `syz.2.547'. [ 615.563095][ T7897] netlink: 80 bytes leftover after parsing attributes in process `syz.1.549'. [ 621.111842][ T7931] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 621.111872][ T7931] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 621.111985][ T7931] vhci_hcd vhci_hcd.0: Device attached [ 621.136325][ T7933] vhci_hcd: connection closed [ 621.151061][ T13] vhci_hcd vhci_hcd.4: stop threads [ 621.151089][ T13] vhci_hcd vhci_hcd.4: release socket [ 621.151130][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 621.876332][ T7941] overlayfs: failed to resolve './file0': -2 [ 630.430060][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.430220][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.703320][ T7978] netlink: 80 bytes leftover after parsing attributes in process `syz.4.571'. [ 633.818301][ T7992] siw: device registration error -23 [ 640.990134][ T8026] tipc: Started in network mode [ 640.990170][ T8026] tipc: Node identity 4, cluster identity 4711 [ 640.990184][ T8026] tipc: Node number set to 4 [ 641.216314][ T5618] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 641.609444][ T8039] siw: device registration error -23 [ 648.181828][ T5618] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 673.264496][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 673.306422][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 673.308144][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 673.330993][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 673.363475][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 674.140795][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 674.187354][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 674.191696][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 674.202413][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 674.213593][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 674.540553][ T8083] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 674.593269][ T8083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 674.598921][ T8083] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 674.602043][ T8083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 674.617185][ T8083] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 675.076125][ T8083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 675.127002][ T8083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 675.181739][ T8083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 675.204029][ T8083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 675.205761][ T8083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 675.397100][ T8083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 675.633017][ T8073] Bluetooth: hci5: command tx timeout [ 675.675273][ T8083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 675.787712][ T8083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 675.809854][ T8083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 675.813371][ T8083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 676.563433][ T5618] Bluetooth: hci6: command tx timeout [ 676.883436][ T5618] Bluetooth: hci7: command tx timeout [ 677.145273][ T1073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.363315][ T5618] Bluetooth: hci1: command tx timeout [ 677.537512][ T1073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.683280][ T5618] Bluetooth: hci5: command tx timeout [ 677.923695][ T5618] Bluetooth: hci2: command tx timeout [ 677.988747][ T1073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.409617][ T1073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.644390][ T5618] Bluetooth: hci6: command tx timeout [ 678.971817][ T5618] Bluetooth: hci7: command tx timeout [ 679.443343][ T5618] Bluetooth: hci1: command tx timeout [ 679.694099][ T1073] bridge_slave_1: left allmulticast mode [ 679.694286][ T1073] bridge_slave_1: left promiscuous mode [ 679.706105][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.763372][ T5618] Bluetooth: hci5: command tx timeout [ 679.829020][ T1073] bridge_slave_0: left allmulticast mode [ 679.829050][ T1073] bridge_slave_0: left promiscuous mode [ 679.829419][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.003603][ T5618] Bluetooth: hci2: command tx timeout [ 680.726118][ T5618] Bluetooth: hci6: command tx timeout [ 680.908342][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.985128][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.005773][ T1073] bond0 (unregistering): Released all slaves [ 681.043471][ T5618] Bluetooth: hci7: command tx timeout [ 681.316470][ T1073] tipc: Left network mode [ 681.524107][ T5618] Bluetooth: hci1: command tx timeout [ 681.843434][ T5618] Bluetooth: hci5: command tx timeout [ 682.093428][ T5618] Bluetooth: hci2: command tx timeout [ 682.803473][ T5618] Bluetooth: hci6: command tx timeout [ 682.847618][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.847750][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.848018][ T8082] bridge_slave_0: entered allmulticast mode [ 682.850777][ T8082] bridge_slave_0: entered promiscuous mode [ 683.001896][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.002040][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.002207][ T8082] bridge_slave_1: entered allmulticast mode [ 683.022060][ T8082] bridge_slave_1: entered promiscuous mode [ 683.071411][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 683.123611][ T5618] Bluetooth: hci7: command tx timeout [ 683.228712][ T8072] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.228829][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.228980][ T8072] bridge_slave_0: entered allmulticast mode [ 683.230852][ T8072] bridge_slave_0: entered promiscuous mode [ 683.335567][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.335658][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.335908][ T8072] bridge_slave_1: entered allmulticast mode [ 683.337940][ T8072] bridge_slave_1: entered promiscuous mode [ 683.403119][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.467188][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.467311][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.467516][ T8079] bridge_slave_0: entered allmulticast mode [ 683.469675][ T8079] bridge_slave_0: entered promiscuous mode [ 683.506096][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.603524][ T5618] Bluetooth: hci1: command tx timeout [ 683.663493][ T1073] hsr_slave_0: left promiscuous mode [ 683.683616][ T1073] hsr_slave_1: left promiscuous mode [ 683.684624][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.684702][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.745296][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.745326][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.828201][ T1073] veth1_macvtap: left promiscuous mode [ 683.828455][ T1073] veth0_macvtap: left promiscuous mode [ 683.828762][ T1073] veth1_vlan: left promiscuous mode [ 683.829024][ T1073] veth0_vlan: left promiscuous mode [ 684.164208][ T5618] Bluetooth: hci2: command tx timeout [ 684.658893][ T1142] smbdirect: ib_dev[syz0] removed [ 684.834120][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 684.904030][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 685.127589][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.127756][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.128034][ T8089] bridge_slave_0: entered allmulticast mode [ 685.130470][ T8089] bridge_slave_0: entered promiscuous mode [ 685.169816][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.169966][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.170144][ T8079] bridge_slave_1: entered allmulticast mode [ 685.195771][ T8079] bridge_slave_1: entered promiscuous mode [ 685.261950][ T8072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.280192][ T5589] infiniband syz0: ib_query_port failed (-19) [ 685.280353][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.280458][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.280699][ T8089] bridge_slave_1: entered allmulticast mode [ 685.282720][ T8089] bridge_slave_1: entered promiscuous mode [ 685.355180][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.355291][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.355477][ T8088] bridge_slave_0: entered allmulticast mode [ 685.358875][ T8088] bridge_slave_0: entered promiscuous mode [ 685.393794][ T8072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.443477][ T8082] team0: Port device team_slave_0 added [ 685.444719][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.444802][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.444979][ T8088] bridge_slave_1: entered allmulticast mode [ 685.446935][ T8088] bridge_slave_1: entered promiscuous mode [ 685.520404][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.534062][ T8082] team0: Port device team_slave_1 added [ 685.621899][ T8089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.635250][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.721427][ T8072] team0: Port device team_slave_0 added [ 685.730556][ T8089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.806839][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.809668][ T8072] team0: Port device team_slave_1 added [ 685.855678][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.855696][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.855724][ T8082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.861010][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.955098][ T8079] team0: Port device team_slave_0 added [ 685.956056][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.956071][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.956100][ T8082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.104299][ T8089] team0: Port device team_slave_0 added [ 686.108091][ T8079] team0: Port device team_slave_1 added [ 686.203865][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.203881][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.203904][ T8072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.206516][ T8089] team0: Port device team_slave_1 added [ 686.338516][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.338533][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.338562][ T8072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.342251][ T8088] team0: Port device team_slave_0 added [ 686.999348][ T8088] team0: Port device team_slave_1 added [ 687.000154][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.000165][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.000184][ T8079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.070280][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 687.072415][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.072428][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.072448][ T8089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.139457][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.139503][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.139533][ T8079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.211974][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.211987][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.212007][ T8089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.331654][ T8082] hsr_slave_0: entered promiscuous mode [ 687.332682][ T8082] hsr_slave_1: entered promiscuous mode [ 687.345255][ T8082] debugfs: 'hsr0' already exists in 'hsr' [ 687.345282][ T8082] Cannot create hsr debugfs directory [ 687.347370][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.347381][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.347401][ T8088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.447620][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.447636][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.447659][ T8088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.479611][ T8072] hsr_slave_0: entered promiscuous mode [ 687.483677][ T8072] hsr_slave_1: entered promiscuous mode [ 687.488052][ T8072] debugfs: 'hsr0' already exists in 'hsr' [ 687.488123][ T8072] Cannot create hsr debugfs directory [ 687.714559][ T8079] hsr_slave_0: entered promiscuous mode [ 687.718505][ T8079] hsr_slave_1: entered promiscuous mode [ 687.719287][ T8079] debugfs: 'hsr0' already exists in 'hsr' [ 687.719305][ T8079] Cannot create hsr debugfs directory [ 687.862168][ T8089] hsr_slave_0: entered promiscuous mode [ 687.871435][ T8089] hsr_slave_1: entered promiscuous mode [ 687.872166][ T8089] debugfs: 'hsr0' already exists in 'hsr' [ 687.872191][ T8089] Cannot create hsr debugfs directory [ 687.980188][ T8088] hsr_slave_0: entered promiscuous mode [ 687.981143][ T8088] hsr_slave_1: entered promiscuous mode [ 687.981839][ T8088] debugfs: 'hsr0' already exists in 'hsr' [ 687.981856][ T8088] Cannot create hsr debugfs directory [ 688.242639][ T1073] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.118092][ T1073] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.214298][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 689.449700][ T1073] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.779795][ T1073] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.331899][ T8082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 690.374383][ T8082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.399081][ T8082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 690.531196][ T8082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.614086][ T8082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 690.662066][ T8082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.742554][ T8082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 690.801988][ T8082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.967167][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.967236][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.970191][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 691.121676][ T8079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 691.148047][ T8079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.362792][ T1073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.418887][ T8079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 691.459701][ T8079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.485033][ T8079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 691.595099][ T8079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.615242][ T8079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 691.640791][ T8079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.827916][ T1073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.285872][ T1073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.363078][ T8072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 692.444187][ T8072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.491774][ T8072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 692.558044][ T8072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.573582][ T8072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 692.610799][ T8072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.818935][ T1073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.877811][ T8072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 692.900804][ T8072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.921384][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 693.278362][ T8089] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 693.326446][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.348417][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.368871][ T8089] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 693.398147][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.415556][ T8089] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 693.465973][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.569883][ T8089] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 693.619235][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.101788][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.257083][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.257231][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.331423][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.332956][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.359166][ T8088] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 694.395628][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.602039][ T1073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.658418][ T8088] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 694.682599][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.706805][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 694.710739][ T8088] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 694.782596][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.802879][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.818388][ T8088] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 694.862724][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.020761][ T1073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.192111][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.410750][ T1073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.509545][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.509752][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.579912][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.626813][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.627023][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.059840][ T1073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.149995][ T8072] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.221773][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.221990][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.266137][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.293890][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.299368][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.458159][ T8089] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.622343][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 696.691497][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.691714][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.883966][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.884108][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.037505][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.280216][ T8088] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.532101][ T1073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.636929][ T8082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.654566][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.654788][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.738475][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.738599][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.977856][ T1073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.652015][ T1073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.776811][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.317415][ T1073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.371799][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 699.459013][ T8072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.661052][ T8082] veth0_vlan: entered promiscuous mode [ 699.728297][ T8082] veth1_vlan: entered promiscuous mode [ 700.045631][ T8082] veth0_macvtap: entered promiscuous mode [ 700.147708][ T8082] veth1_macvtap: entered promiscuous mode [ 700.858241][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.965218][ T8089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.985477][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.373807][ T1073] bridge_slave_1: left allmulticast mode [ 701.373835][ T1073] bridge_slave_1: left promiscuous mode [ 701.374532][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.474578][ T1073] bridge_slave_0: left allmulticast mode [ 701.474606][ T1073] bridge_slave_0: left promiscuous mode [ 701.474809][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.883650][ T1073] bridge_slave_1: left allmulticast mode [ 701.883677][ T1073] bridge_slave_1: left promiscuous mode [ 701.883861][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.984603][ T1073] bridge_slave_0: left allmulticast mode [ 701.984631][ T1073] bridge_slave_0: left promiscuous mode [ 701.987030][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.433722][ T1073] bridge_slave_1: left allmulticast mode [ 702.433767][ T1073] bridge_slave_1: left promiscuous mode [ 702.434044][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.564938][ T1073] bridge_slave_0: left allmulticast mode [ 702.564966][ T1073] bridge_slave_0: left promiscuous mode [ 702.565166][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.953738][ T1073] bridge_slave_1: left allmulticast mode [ 702.953766][ T1073] bridge_slave_1: left promiscuous mode [ 702.953977][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.055116][ T1073] bridge_slave_0: left allmulticast mode [ 703.055152][ T1073] bridge_slave_0: left promiscuous mode [ 703.055391][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.774198][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.854329][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.876680][ T1073] bond0 (unregistering): Released all slaves [ 705.474122][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.547157][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.569310][ T1073] bond0 (unregistering): Released all slaves [ 706.144067][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.214046][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.256883][ T1073] bond0 (unregistering): Released all slaves [ 706.944652][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.004208][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.027342][ T1073] bond0 (unregistering): Released all slaves [ 707.082725][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.097186][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 707.099004][ T8079] veth0_vlan: entered promiscuous mode [ 707.197705][ T5844] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.200921][ T5844] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.212661][ T5844] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.344545][ T5844] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.439247][ T8079] veth1_vlan: entered promiscuous mode [ 708.328576][ T8072] veth0_vlan: entered promiscuous mode [ 708.726821][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.726843][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.772942][ T8072] veth1_vlan: entered promiscuous mode [ 708.831841][ T1073] tipc: Left network mode [ 708.899411][ T8079] veth0_macvtap: entered promiscuous mode [ 708.915827][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.915848][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.982579][ T8079] veth1_macvtap: entered promiscuous mode [ 709.166530][ T8089] veth0_vlan: entered promiscuous mode [ 709.231368][ T8088] veth0_vlan: entered promiscuous mode [ 709.543653][ T8089] veth1_vlan: entered promiscuous mode [ 709.549184][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.549803][ T8072] veth0_macvtap: entered promiscuous mode [ 709.572970][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 709.749564][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.751679][ T8088] veth1_vlan: entered promiscuous mode [ 709.769444][ T8072] veth1_macvtap: entered promiscuous mode [ 709.821571][ T1142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.889688][ T1142] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.025562][ T1142] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.265790][ T1142] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.296020][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.759970][ T37] audit: type=1804 audit(1780117613.747:3): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.601" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 711.624181][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.391530][ T8089] veth0_macvtap: entered promiscuous mode [ 713.031364][ T5840] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.599682][ T5840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.740604][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 714.741472][ T5840] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.763090][ T8089] veth1_macvtap: entered promiscuous mode [ 714.795408][ T8088] veth0_macvtap: entered promiscuous mode [ 714.798285][ T5840] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.975545][ T8088] veth1_macvtap: entered promiscuous mode [ 715.291716][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.291736][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.971121][ T8089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.026318][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.026338][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.031583][ T8089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.062597][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.145519][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.209617][ T1142] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.218287][ T1142] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.221294][ T1142] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.223086][ T1142] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.310904][ T1142] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.313111][ T1142] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.363654][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.568249][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.999505][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.999526][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.692716][ T8476] netlink: 80 bytes leftover after parsing attributes in process `syz.7.598'. [ 721.078271][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.078293][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.371086][ T5262] 8021q: adding VLAN 0 to HW filter on device eth12 [ 723.452775][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.452797][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.751487][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.751509][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.061165][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.061184][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.293313][ T1073] hsr_slave_0: left promiscuous mode [ 724.357542][ T1073] hsr_slave_1: left promiscuous mode [ 724.358678][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.358705][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.439544][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.439572][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.690712][ T1073] hsr_slave_0: left promiscuous mode [ 724.729621][ T1073] hsr_slave_1: left promiscuous mode [ 724.730594][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.730619][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.774695][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.774717][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.685224][ T1073] hsr_slave_0: left promiscuous mode [ 725.724920][ T1073] hsr_slave_1: left promiscuous mode [ 725.725793][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.725810][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.764621][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.764649][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.991689][ T1073] hsr_slave_0: left promiscuous mode [ 726.023443][ T1073] hsr_slave_1: left promiscuous mode [ 726.024560][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.024586][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.076050][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.076079][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.265099][ T1073] veth1_macvtap: left promiscuous mode [ 726.265171][ T1073] veth0_macvtap: left promiscuous mode [ 726.265331][ T1073] veth1_vlan: left promiscuous mode [ 726.267706][ T1073] veth0_vlan: left promiscuous mode [ 726.433553][ T1073] veth1_macvtap: left promiscuous mode [ 726.433620][ T1073] veth0_macvtap: left promiscuous mode [ 726.433777][ T1073] veth1_vlan: left promiscuous mode [ 726.433893][ T1073] veth0_vlan: left promiscuous mode [ 726.614352][ T1073] veth1_macvtap: left promiscuous mode [ 726.629837][ T1073] veth0_macvtap: left promiscuous mode [ 726.630093][ T1073] veth1_vlan: left promiscuous mode [ 726.630264][ T1073] veth0_vlan: left promiscuous mode [ 726.773887][ T1073] veth1_macvtap: left promiscuous mode [ 726.773989][ T1073] veth0_macvtap: left promiscuous mode [ 726.776768][ T1073] veth1_vlan: left promiscuous mode [ 726.776973][ T1073] veth0_vlan: left promiscuous mode [ 728.683861][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 728.757307][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 729.495061][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 729.557887][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 730.224172][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 730.284576][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 730.927106][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 731.014030][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 731.328505][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.328536][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.941073][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 747.589495][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 749.074765][ T8760] netlink: 76 bytes leftover after parsing attributes in process `syz.9.659'. [ 749.373588][ T5820] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 749.528779][ T5820] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 749.528810][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.528829][ T5820] usb 10-1: Product: syz [ 749.528843][ T5820] usb 10-1: Manufacturer: syz [ 749.528857][ T5820] usb 10-1: SerialNumber: syz [ 749.609453][ T5820] usb 10-1: config 0 descriptor?? [ 749.651963][ T5820] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 750.281651][ T5820] input: sonixb as /devices/platform/dummy_hcd.9/usb10/10-1/input/input5 [ 750.304391][ T8768] netdevsim netdevsim9: Firmware load for '../file0/file0' refused, path contains '..' component [ 750.760632][ T5262] 8021q: adding VLAN 0 to HW filter on device eth15 [ 750.989336][ T1143] usb 10-1: USB disconnect, device number 2 [ 751.400395][ T8587] udevd[8587]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 751.536443][ T8785] netlink: 76 bytes leftover after parsing attributes in process `syz.7.665'. [ 751.655343][ T8790] netdevsim netdevsim7: Firmware load for '../file0/file0' refused, path contains '..' component [ 752.547302][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.547378][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.420303][ T8819] netlink: 76 bytes leftover after parsing attributes in process `syz.9.674'. [ 755.508186][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 755.584078][ T8824] netlink: 76 bytes leftover after parsing attributes in process `syz.6.675'. [ 755.753602][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 755.883288][ T5820] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 755.936795][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 755.936827][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.936848][ T9] usb 10-1: Product: syz [ 755.936862][ T9] usb 10-1: Manufacturer: syz [ 755.936877][ T9] usb 10-1: SerialNumber: syz [ 756.007958][ T9] usb 10-1: config 0 descriptor?? [ 756.090385][ T9] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 756.127776][ T5820] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 756.127798][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.127813][ T5820] usb 7-1: Product: syz [ 756.127823][ T5820] usb 7-1: Manufacturer: syz [ 756.127834][ T5820] usb 7-1: SerialNumber: syz [ 756.359236][ T5820] usb 7-1: config 0 descriptor?? [ 756.391457][ T5820] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 756.452403][ T8819] netdevsim netdevsim9: Firmware load for '../file0/file0' refused, path contains '..' component [ 756.467691][ T9] sonixb 10-1:0.0: Error writing register 01: -71 [ 756.467805][ T9] sonixb 10-1:0.0: probe with driver sonixb failed with error -71 [ 756.618096][ T9] usb 10-1: USB disconnect, device number 3 [ 756.941328][ T5262] 8021q: adding VLAN 0 to HW filter on device eth16 [ 757.123952][ T8837] netdevsim netdevsim6: Firmware load for '../file0/file0' refused, path contains '..' component [ 757.224731][ T5820] input: sonixb as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 757.926245][ T5820] usb 7-1: USB disconnect, device number 2 [ 759.390227][ T5262] 8021q: adding VLAN 0 to HW filter on device eth17 [ 760.180425][ T8883] binder: 8881:8883 ioctl c0306201 0 returned -14 [ 762.633633][ T8905] fuse: fd is not a fuse device [ 763.316845][ T5262] 8021q: adding VLAN 0 to HW filter on device eth18 [ 763.791678][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.9.692'. [ 766.356209][ T8953] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 766.356241][ T8953] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 766.356374][ T8953] vhci_hcd vhci_hcd.0: Device attached [ 766.358323][ T8955] vhci_hcd: connection closed [ 766.402610][ T42] vhci_hcd vhci_hcd.9: stop threads [ 766.402637][ T42] vhci_hcd vhci_hcd.9: release socket [ 766.402672][ T42] vhci_hcd vhci_hcd.9: disconnect device [ 767.556116][ T5262] 8021q: adding VLAN 0 to HW filter on device eth19 [ 767.584297][ T8966] netlink: 'syz.6.698': attribute type 1 has an invalid length. [ 768.820365][ T8966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.069602][ T8974] netlink: 'syz.7.701': attribute type 1 has an invalid length. [ 769.176453][ T8976] netlink: 14 bytes leftover after parsing attributes in process `syz.7.701'. [ 769.239324][ T8968] bond1: (slave veth3): Enslaving as an active interface with a down link [ 769.313649][ T8969] bond1: (slave dummy0): making interface the new active one [ 769.319796][ T8969] dummy0: entered promiscuous mode [ 769.320451][ T8969] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 769.484453][ T8974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.657066][ T8975] bond1: (slave veth3): Enslaving as an active interface with a down link [ 772.699033][ T5262] 8021q: adding VLAN 0 to HW filter on device eth20 [ 773.045649][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.709'. [ 775.017162][ T9019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.503728][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.8.719'. [ 784.515121][ T9109] bond1: (slave dummy0): Releasing active interface [ 784.515278][ T9109] dummy0: left promiscuous mode [ 788.699886][ T9171] fuse: fd is not a fuse device [ 791.443596][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 794.323872][ T9223] netlink: 'syz.9.747': attribute type 1 has an invalid length. [ 794.680579][ T9226] fuse: fd is not a fuse device [ 795.110576][ T9235] netlink: 76 bytes leftover after parsing attributes in process `syz.8.751'. [ 795.151093][ T9235] netdevsim netdevsim8: Firmware load for '../file0/file0' refused, path contains '..' component [ 796.145605][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.756'. [ 796.329311][ T9266] netlink: 'syz.6.756': attribute type 10 has an invalid length. [ 796.329334][ T9266] netlink: 40 bytes leftover after parsing attributes in process `syz.6.756'. [ 796.480625][ T9263] bridge1: port 1(dummy0) entered blocking state [ 796.480761][ T9263] bridge1: port 1(dummy0) entered disabled state [ 796.480994][ T9263] dummy0: entered allmulticast mode [ 796.569646][ T9263] dummy0: entered promiscuous mode [ 796.821174][ T9266] bridge1: port 1(dummy0) entered blocking state [ 796.821390][ T9266] bridge1: port 1(dummy0) entered forwarding state [ 796.950134][ T9266] dummy0: left allmulticast mode [ 796.950611][ T9266] bridge1: port 1(dummy0) entered disabled state [ 799.007563][ T9290] netlink: 76 bytes leftover after parsing attributes in process `syz.7.761'. [ 799.043499][ T9290] netdevsim netdevsim7: Firmware load for '../file0/file0' refused, path contains '..' component [ 800.021483][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.7.766'. [ 800.297446][ T9331] netlink: 76 bytes leftover after parsing attributes in process `syz.9.769'. [ 800.416124][ T9333] netdevsim netdevsim9: Firmware load for '../file0/file0' refused, path contains '..' component [ 800.480932][ T9336] netlink: 76 bytes leftover after parsing attributes in process `syz.6.770'. [ 800.643357][ T9282] Bluetooth: hci7: command 0x0406 tx timeout [ 800.643499][ T9282] Bluetooth: hci1: command 0x0406 tx timeout [ 800.646688][ T9281] Bluetooth: hci6: command 0x0406 tx timeout [ 800.646723][ T9281] Bluetooth: hci5: command 0x0406 tx timeout [ 803.784039][ T9385] fuse: Bad value for 'fd' [ 804.788102][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.785'. [ 805.918576][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.7.786'. [ 810.635903][ T9455] netlink: 76 bytes leftover after parsing attributes in process `syz.5.793'. [ 810.944959][ T6887] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 811.144315][ T6887] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 811.144343][ T6887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.144379][ T6887] usb 6-1: Product: syz [ 811.144393][ T6887] usb 6-1: Manufacturer: syz [ 811.144406][ T6887] usb 6-1: SerialNumber: syz [ 811.201637][ T6887] usb 6-1: config 0 descriptor?? [ 811.313601][ T6887] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 811.717518][ T9455] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 811.785961][ T6887] sonixb 6-1:0.0: Error writing register 01: -71 [ 811.786059][ T6887] sonixb 6-1:0.0: probe with driver sonixb failed with error -71 [ 811.809241][ T6887] usb 6-1: USB disconnect, device number 2 [ 814.888675][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.888755][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.601043][ T9541] warning: `syz.8.809' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 818.525417][ T8083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 818.604125][ T8083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 818.640057][ T8083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 818.659558][ T8083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 818.660407][ T8083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 819.684117][ T9574] C: renamed from veth1_to_team (while UP) [ 820.291134][ T9574] netlink: 'syz.8.816': attribute type 1 has an invalid length. [ 820.291156][ T9574] netlink: 152 bytes leftover after parsing attributes in process `syz.8.816'. [ 820.308868][ T9574] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 820.803332][ T8073] Bluetooth: hci0: command tx timeout [ 821.682198][ T9599] C: renamed from veth1_to_team (while UP) [ 821.757266][ T9599] netlink: 'syz.7.819': attribute type 1 has an invalid length. [ 821.757289][ T9599] netlink: 152 bytes leftover after parsing attributes in process `syz.7.819'. [ 821.776661][ T9599] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 822.883268][ T8073] Bluetooth: hci0: command tx timeout [ 822.929512][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.929631][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.929848][ T9564] bridge_slave_0: entered allmulticast mode [ 822.955385][ T9564] bridge_slave_0: entered promiscuous mode [ 822.969659][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.969752][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.969971][ T9564] bridge_slave_1: entered allmulticast mode [ 822.994667][ T9564] bridge_slave_1: entered promiscuous mode [ 823.049700][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.063544][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.657153][ T9564] team0: Port device team_slave_0 added [ 823.684840][ T9564] team0: Port device team_slave_1 added [ 824.686108][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.686127][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.686156][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.801566][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.801582][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.801608][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.973379][ T8073] Bluetooth: hci0: command tx timeout [ 825.237811][ T9564] hsr_slave_0: entered promiscuous mode [ 825.266145][ T9564] hsr_slave_1: entered promiscuous mode [ 827.043304][ T8073] Bluetooth: hci0: command tx timeout [ 827.228375][ T1073] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.323629][ T5750] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 828.677522][ T5750] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 828.677561][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.677579][ T5750] usb 6-1: Product: syz [ 828.677593][ T5750] usb 6-1: Manufacturer: syz [ 828.677607][ T5750] usb 6-1: SerialNumber: syz [ 828.888755][ T5750] usb 6-1: config 0 descriptor?? [ 828.921950][ T5750] hub 6-1:0.0: bad descriptor, ignoring hub [ 828.921977][ T5750] hub 6-1:0.0: probe with driver hub failed with error -5 [ 829.179355][ T5750] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 829.566569][ T5750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 829.598099][ T5750] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 829.598166][ T5750] usb 6-1: media controller created [ 829.860785][ T5750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 830.440737][ T1073] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.532744][ T5750] DVB: Unable to find symbol dib7000p_attach() [ 830.532756][ T5750] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 830.685490][ T5750] rc_core: IR keymap rc-dib0700-rc5 not found [ 830.685512][ T5750] Registered IR keymap rc-empty [ 830.692417][ T5750] dvb-usb: could not initialize remote control. [ 830.692427][ T5750] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 830.998103][ T9684] netlink: 'syz.7.831': attribute type 3 has an invalid length. [ 832.481946][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.836'. [ 833.010875][ T1073] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.251648][ T5750] usb 6-1: USB disconnect, device number 3 [ 834.936265][ T1073] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.268898][ T5750] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 836.656867][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.843'. [ 838.408575][ T9755] C: renamed from veth1_to_team (while UP) [ 838.505299][ T9755] netlink: 'syz.5.847': attribute type 1 has an invalid length. [ 838.505323][ T9755] netlink: 152 bytes leftover after parsing attributes in process `syz.5.847'. [ 838.505892][ T9755] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 840.292489][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.852'. [ 840.358346][ T1073] bridge_slave_1: left allmulticast mode [ 840.358371][ T1073] bridge_slave_1: left promiscuous mode [ 840.358553][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.923739][ T1073] bridge_slave_0: left allmulticast mode [ 840.923766][ T1073] bridge_slave_0: left promiscuous mode [ 840.923953][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.335544][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.394291][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.419636][ T1073] bond0 (unregistering): Released all slaves [ 843.949562][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.8.859'. [ 844.579438][ T9564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 844.634244][ T9564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.755001][ T9564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 844.846486][ T9564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.863793][ T9564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 845.066218][ T9564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.620930][ T9564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 845.657088][ T9564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.056589][ T1073] hsr_slave_0: left promiscuous mode [ 846.093447][ T1073] hsr_slave_1: left promiscuous mode [ 846.094637][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.094663][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.155524][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.155552][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.256632][ T1073] veth1_macvtap: left promiscuous mode [ 846.256735][ T1073] veth0_macvtap: left promiscuous mode [ 846.256983][ T1073] veth1_vlan: left promiscuous mode [ 846.257166][ T1073] veth0_vlan: left promiscuous mode [ 846.382235][ T9879] netlink: 76 bytes leftover after parsing attributes in process `syz.7.868'. [ 846.650649][ T8083] Bluetooth: hci2: command 0x0406 tx timeout [ 847.597063][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 847.641715][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 847.676236][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 848.288719][ T9912] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.324088][ T9912] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.750053][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.852863][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.929609][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.929872][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.027021][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.027136][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.336543][ T9962] netlink: 76 bytes leftover after parsing attributes in process `syz.8.881'. [ 851.527027][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.988788][ T9564] veth0_vlan: entered promiscuous mode [ 852.110127][ T9564] veth1_vlan: entered promiscuous mode [ 852.438198][ T9564] veth0_macvtap: entered promiscuous mode [ 852.551099][ T9564] veth1_macvtap: entered promiscuous mode [ 852.710694][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.824364][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.902665][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.904923][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.910188][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.942205][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.115211][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.115232][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.776550][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.776573][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.968508][T10041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 856.341568][T10043] bond2: (slave veth5): Enslaving as an active interface with an up link [ 856.398318][ T6368] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 856.778301][ T6368] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 856.778333][ T6368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.778354][ T6368] usb 1-1: Product: syz [ 856.778369][ T6368] usb 1-1: Manufacturer: syz [ 856.778384][ T6368] usb 1-1: SerialNumber: syz [ 856.862575][ T6368] usb 1-1: config 0 descriptor?? [ 857.040530][ T6368] hub 1-1:0.0: bad descriptor, ignoring hub [ 857.040570][ T6368] hub 1-1:0.0: probe with driver hub failed with error -5 [ 857.337838][ T6368] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 857.378258][ T6368] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 857.388414][ T6368] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 857.388472][ T6368] usb 1-1: media controller created [ 857.486200][ T6368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 858.029274][ T6368] DVB: Unable to find symbol dib7000p_attach() [ 858.029293][ T6368] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 858.334839][ T6368] rc_core: IR keymap rc-dib0700-rc5 not found [ 858.334854][ T6368] Registered IR keymap rc-empty [ 858.335052][ T6368] dvb-usb: could not initialize remote control. [ 858.335058][ T6368] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 861.343706][ T5820] usb 1-1: USB disconnect, device number 7 [ 861.774327][ T5820] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 862.238105][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.917'. [ 863.203457][ T8083] Bluetooth: hci5: command 0x0406 tx timeout [ 868.237933][T10215] netlink: 'syz.5.927': attribute type 1 has an invalid length. [ 868.279528][T10215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.682994][T10215] bond1: (slave veth3): Enslaving as an active interface with an up link [ 868.774459][T10219] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 868.818477][T10223] netlink: 'syz.8.932': attribute type 1 has an invalid length. [ 868.818500][T10223] netlink: 152 bytes leftover after parsing attributes in process `syz.8.932'. [ 868.819117][T10223] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 870.690020][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.934'. [ 870.846074][T10240] netlink: 'syz.5.934': attribute type 10 has an invalid length. [ 870.846096][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz.5.934'. [ 871.028252][T10237] bond1: (slave dummy0): Releasing backup interface [ 871.077297][T10240] dummy0: entered promiscuous mode [ 873.226166][ T8073] Bluetooth: hci6: command 0x0406 tx timeout [ 875.294692][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.294742][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.087155][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 878.733407][ T6368] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 878.898782][ T6368] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.898842][ T6368] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 878.898868][ T6368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.950739][ T6368] usb 1-1: config 0 descriptor?? [ 879.013695][ T6368] pwc: Askey VC010 type 2 USB webcam detected. [ 879.184645][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 879.242524][T10334] netlink: 'syz.0.949': attribute type 10 has an invalid length. [ 879.242546][T10334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.949'. [ 879.306889][T10334] dummy0: entered promiscuous mode [ 879.369817][ T6368] pwc: send_video_command error -71 [ 879.369857][ T6368] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 879.369979][ T6368] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 879.425345][ T6368] usb 1-1: USB disconnect, device number 8 [ 879.682834][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 880.400583][T10341] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 881.100438][T10342] dummy0: left promiscuous mode [ 884.343522][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.8.958'. [ 884.396039][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 885.886764][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.8.961'. [ 885.919749][T10393] netlink: 'syz.8.961': attribute type 10 has an invalid length. [ 885.919773][T10393] netlink: 40 bytes leftover after parsing attributes in process `syz.8.961'. [ 885.920027][T10393] dummy0: entered promiscuous mode [ 888.900715][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 898.143463][ T6368] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 898.495292][T10519] dummy0: left promiscuous mode [ 898.545562][ T6368] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 898.545585][ T6368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.545600][ T6368] usb 1-1: Product: syz [ 898.545610][ T6368] usb 1-1: Manufacturer: syz [ 898.545621][ T6368] usb 1-1: SerialNumber: syz [ 898.600212][ T6368] usb 1-1: config 0 descriptor?? [ 898.668344][ T6368] hub 1-1:0.0: bad descriptor, ignoring hub [ 898.668402][ T6368] hub 1-1:0.0: probe with driver hub failed with error -5 [ 899.050143][ T6368] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 899.218173][ T6368] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 899.237801][ T6368] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 899.237864][ T6368] usb 1-1: media controller created [ 899.339468][ T6368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.647427][ T6368] DVB: Unable to find symbol dib7000p_attach() [ 899.647439][ T6368] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 899.678687][T10533] netlink: 28 bytes leftover after parsing attributes in process `syz.7.997'. [ 899.913303][ T6368] rc_core: IR keymap rc-dib0700-rc5 not found [ 899.913325][ T6368] Registered IR keymap rc-empty [ 899.913724][ T6368] dvb-usb: could not initialize remote control. [ 899.913736][ T6368] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 903.623455][T10562] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1003'. [ 905.502881][ T5750] usb 1-1: USB disconnect, device number 9 [ 905.802786][ T5750] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 906.321063][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 923.762368][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 923.812689][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 923.825459][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 923.828033][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 923.829203][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 926.004002][ T5608] Bluetooth: hci1: command tx timeout [ 926.570283][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.573007][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.588364][T10717] bridge_slave_0: entered allmulticast mode [ 926.600100][T10717] bridge_slave_0: entered promiscuous mode [ 926.634674][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.634883][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.635488][T10717] bridge_slave_1: entered allmulticast mode [ 926.669859][T10717] bridge_slave_1: entered promiscuous mode [ 926.840979][T10717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.864397][T10717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.985707][T10717] team0: Port device team_slave_0 added [ 926.989392][T10717] team0: Port device team_slave_1 added [ 927.110559][T10717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.110579][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.110611][T10717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.193407][T10717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.193426][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.193455][T10717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.083588][ T5608] Bluetooth: hci1: command tx timeout [ 928.289061][T10717] hsr_slave_0: entered promiscuous mode [ 928.291632][T10717] hsr_slave_1: entered promiscuous mode [ 928.292307][T10717] debugfs: 'hsr0' already exists in 'hsr' [ 928.292353][T10717] Cannot create hsr debugfs directory [ 929.501204][ T8657] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 929.844993][ T8657] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 929.845017][ T8657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.845034][ T8657] usb 1-1: Product: syz [ 929.845045][ T8657] usb 1-1: Manufacturer: syz [ 929.845055][ T8657] usb 1-1: SerialNumber: syz [ 929.909924][ T8657] usb 1-1: config 0 descriptor?? [ 929.931834][ T8657] hub 1-1:0.0: bad descriptor, ignoring hub [ 929.931874][ T8657] hub 1-1:0.0: probe with driver hub failed with error -5 [ 930.176884][ T5608] Bluetooth: hci1: command tx timeout [ 930.252491][ T8657] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 930.378443][ T8657] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 930.381053][ T8657] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 930.381129][ T8657] usb 1-1: media controller created [ 930.556021][ T8657] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 931.122105][ T8657] DVB: Unable to find symbol dib7000p_attach() [ 931.122118][ T8657] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 931.435121][ T8657] rc_core: IR keymap rc-dib0700-rc5 not found [ 931.435144][ T8657] Registered IR keymap rc-empty [ 931.435443][ T8657] dvb-usb: could not initialize remote control. [ 931.435453][ T8657] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 932.243627][ T5608] Bluetooth: hci1: command tx timeout [ 936.727617][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.727667][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.936982][ T5750] usb 1-1: USB disconnect, device number 10 [ 937.816602][ T5750] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 939.065011][ T1142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.425565][ T1142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.167263][T10842] input: syz0 as /devices/virtual/input/input11 [ 942.824858][ T1142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.759469][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 947.274129][ T1142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.410662][T10717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 948.474481][T10717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 948.826204][T10717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 948.892140][T10717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 948.919415][T10717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 948.994811][T10717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.010404][T10717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 949.238408][T10717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.193535][ T1142] bridge_slave_1: left allmulticast mode [ 952.193570][ T1142] bridge_slave_1: left promiscuous mode [ 952.193843][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.435169][ T1142] bridge_slave_0: left allmulticast mode [ 952.435205][ T1142] bridge_slave_0: left promiscuous mode [ 952.465723][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.865239][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.209030][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.279438][ T1142] bond0 (unregistering): Released all slaves [ 956.394845][ T1142] bond1 (unregistering): (slave veth3): Releasing active interface [ 956.587619][ T1142] bond1 (unregistering): Released all slaves [ 957.141525][T10717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.313277][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.373660][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.373797][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.417168][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.417344][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.314853][T10960] Set syz1 is full, maxelem 65536 reached [ 962.227948][ T1142] hsr_slave_0: left promiscuous mode [ 962.266035][ T1142] hsr_slave_1: left promiscuous mode [ 962.267142][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.267169][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.367157][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.367185][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.748982][ T1142] veth1_macvtap: left promiscuous mode [ 962.749059][ T1142] veth0_macvtap: left promiscuous mode [ 962.749258][ T1142] veth1_vlan: left promiscuous mode [ 962.749368][ T1142] veth0_vlan: left promiscuous mode [ 964.724094][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 964.765023][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 965.704912][T10717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.893791][T10717] veth0_vlan: entered promiscuous mode [ 966.128228][T10717] veth1_vlan: entered promiscuous mode [ 966.692750][T10717] veth0_macvtap: entered promiscuous mode [ 966.720092][T10717] veth1_macvtap: entered promiscuous mode [ 969.267012][T10717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.347314][T10717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.439163][ T7601] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.495052][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.496724][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.498749][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.672868][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.672891][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.315363][T11138] overlayfs: failed to resolve './file0': -2 [ 971.519222][ T5840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.519239][ T5840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.747419][T11150] netlink: 'syz.7.1099': attribute type 1 has an invalid length. [ 972.823572][T11150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 972.945445][T11157] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1035'. [ 973.050053][T11162] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1099'. [ 973.234055][ T6887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 973.241554][T11154] bond3: (slave veth7): Enslaving as an active interface with an up link [ 973.427038][ T6887] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 973.427061][ T6887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.427076][ T6887] usb 2-1: Product: syz [ 973.427087][ T6887] usb 2-1: Manufacturer: syz [ 973.427097][ T6887] usb 2-1: SerialNumber: syz [ 973.480729][ T6887] usb 2-1: config 0 descriptor?? [ 973.505117][ T6887] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 973.901411][ T6887] sonixb 2-1:0.0: Error writing register 01: -71 [ 973.901482][ T6887] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 973.951062][ T6887] usb 2-1: USB disconnect, device number 4 [ 975.079818][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1104'. [ 975.148735][T11186] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.152325][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.746118][ T5262] 8021q: adding VLAN 0 to HW filter on device eth17 [ 979.091864][T11250] trusted_key: encrypted_key: keylen parameter is missing [ 979.130375][T11250] netlink: 'syz.8.1116': attribute type 40 has an invalid length. [ 980.243739][ T5262] 8021q: adding VLAN 0 to HW filter on device eth18 [ 982.323546][T11286] netlink: 'syz.8.1125': attribute type 1 has an invalid length. [ 982.500327][T11286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 984.032567][ T5262] 8021q: adding VLAN 0 to HW filter on device eth19 [ 987.256436][ T5262] 8021q: adding VLAN 0 to HW filter on device eth20 [ 988.113716][T11350] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1134'. [ 990.941834][T11366] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 992.130413][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 992.151093][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 992.216578][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 992.358276][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 992.398140][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 994.217759][T11400] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1145'. [ 994.406322][ T8083] Bluetooth: hci3: command tx timeout [ 996.225961][ T5840] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.485442][ T8083] Bluetooth: hci3: command tx timeout [ 998.175193][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.175264][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.240845][ T5840] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.510495][T11419] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1149'. [ 998.563249][ T8083] Bluetooth: hci3: command tx timeout [ 998.799372][ T5840] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.320202][T11425] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1000.320289][T11425] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1000.324418][T11425] vhci_hcd vhci_hcd.0: Device attached [ 1000.473415][T11428] vhci_hcd: connection closed [ 1000.514275][ T7601] vhci_hcd vhci_hcd.1: stop threads [ 1000.514305][ T7601] vhci_hcd vhci_hcd.1: release socket [ 1000.514345][ T7601] vhci_hcd vhci_hcd.1: disconnect device [ 1000.643825][ T8083] Bluetooth: hci3: command tx timeout [ 1001.232064][ T5840] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.504648][T11444] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1155'. [ 1007.629582][T11490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1163'. [ 1008.523610][ T5840] bridge_slave_1: left allmulticast mode [ 1008.523651][ T5840] bridge_slave_1: left promiscuous mode [ 1008.523925][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.639855][ T5840] bridge_slave_0: left allmulticast mode [ 1008.639893][ T5840] bridge_slave_0: left promiscuous mode [ 1008.640156][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.538274][T11512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1167'. [ 1009.538840][T11512] unsupported nlmsg_type 40 [ 1010.084640][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.124036][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.145604][ T5840] bond0 (unregistering): Released all slaves [ 1010.175422][ T5840] bond1 (unregistering): (slave veth3): Releasing active interface [ 1010.214992][ T5840] bond1 (unregistering): Released all slaves [ 1010.244987][ T5840] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1010.286385][ T5840] bond2 (unregistering): Released all slaves [ 1010.314463][ T5840] bond3 (unregistering): (slave veth7): Releasing backup interface [ 1010.355253][ T5840] bond3 (unregistering): Released all slaves [ 1010.812414][T11373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.812539][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.812737][T11373] bridge_slave_0: entered allmulticast mode [ 1010.823537][T11373] bridge_slave_0: entered promiscuous mode [ 1010.874887][T11373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.875012][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.875270][T11373] bridge_slave_1: entered allmulticast mode [ 1010.906296][T11373] bridge_slave_1: entered promiscuous mode [ 1010.993654][T11373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.000124][T11373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.430317][T11527] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1169'. [ 1012.687245][T11373] team0: Port device team_slave_0 added [ 1012.742122][T11373] team0: Port device team_slave_1 added [ 1013.019182][T11550] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1175'. [ 1015.363568][T11556] tipc: Started in network mode [ 1015.363592][T11556] tipc: Node identity 4, cluster identity 4711 [ 1015.363608][T11556] tipc: Node number set to 4 [ 1017.088195][T11373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.088213][T11373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.088244][T11373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.158765][T11373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.158779][T11373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.158799][T11373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.088932][ T5840] hsr_slave_0: left promiscuous mode [ 1018.126303][ T5840] hsr_slave_1: left promiscuous mode [ 1018.130768][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.130799][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.176715][T11581] netlink: 'syz.5.1182': attribute type 1 has an invalid length. [ 1018.198019][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.198041][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.228658][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 1018.228684][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 1018.357284][ T5840] veth1_macvtap: left promiscuous mode [ 1018.383001][ T5840] veth0_macvtap: left promiscuous mode [ 1018.391649][ T5840] veth1_vlan: left promiscuous mode [ 1018.391824][ T5840] veth0_vlan: left promiscuous mode [ 1019.003220][ T8657] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1019.173297][ T8657] usb 2-1: Using ep0 maxpacket: 32 [ 1019.175452][ T8657] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1019.175473][ T8657] usb 2-1: config 0 has no interface number 0 [ 1019.175509][ T8657] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1019.175528][ T8657] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1019.178240][ T8657] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1019.178281][ T8657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.178296][ T8657] usb 2-1: Product: syz [ 1019.178308][ T8657] usb 2-1: Manufacturer: syz [ 1019.178339][ T8657] usb 2-1: SerialNumber: syz [ 1019.277761][ T8657] usb 2-1: config 0 descriptor?? [ 1019.278566][T11590] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1019.278696][T11590] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1019.327805][ T8657] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1019.934675][ T8657] usb 2-1: USB disconnect, device number 5 [ 1021.005405][ T5840] team0 (unregistering): Port device team_slave_1 removed [ 1021.065415][ T5840] team0 (unregistering): Port device team_slave_0 removed [ 1021.126663][T11608] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1187'. [ 1021.394012][T11373] hsr_slave_0: entered promiscuous mode [ 1021.395474][T11373] hsr_slave_1: entered promiscuous mode [ 1021.396740][T11373] debugfs: 'hsr0' already exists in 'hsr' [ 1021.396767][T11373] Cannot create hsr debugfs directory [ 1021.399556][T11581] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1021.447671][T11586] dummy0: left promiscuous mode [ 1021.596467][T11610] netlink: 'syz.8.1188': attribute type 1 has an invalid length. [ 1021.596490][T11610] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1188'. [ 1021.597071][T11610] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1029.921270][T11661] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1197'. [ 1029.981299][ T5262] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1031.100488][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 1034.697681][ T5262] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1035.751278][T11373] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1035.828190][T11373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.829541][T11373] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1035.910648][T11714] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1208'. [ 1035.912978][T11373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.933204][T11373] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1035.960996][T11373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.962290][T11373] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1036.084673][T11373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1036.509683][ T5262] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1036.648553][T11730] fuse: fd is not a fuse device [ 1036.834406][T11373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.171300][T11373] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.301370][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.305525][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.418497][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.443207][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.132809][ T5262] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1040.801680][T11788] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1220'. [ 1040.909751][T11373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.155761][T11373] veth0_vlan: entered promiscuous mode [ 1041.296060][T11373] veth1_vlan: entered promiscuous mode [ 1041.398012][T11373] veth0_macvtap: entered promiscuous mode [ 1041.418171][T11373] veth1_macvtap: entered promiscuous mode [ 1041.496995][T11373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.533490][T11373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.548734][ T7601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.549005][ T7601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.549050][ T7601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.549091][ T7601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.453483][ T5840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.453506][ T5840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.705908][ T5801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.705950][ T5801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.393359][ T1143] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1046.403314][ T8083] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.721474][T11850] overlayfs: missing 'lowerdir' [ 1047.694608][ T1143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1047.694659][ T1143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1047.694687][ T1143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1047.698320][ T1143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1047.698342][ T1143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.698356][ T1143] usb 2-1: Product: syz [ 1047.698366][ T1143] usb 2-1: Manufacturer: syz [ 1047.698376][ T1143] usb 2-1: SerialNumber: syz [ 1048.154931][T11842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1048.222556][T11842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1050.116573][ T1143] cdc_ncm 2-1:1.0: bind() failure [ 1050.177355][ T1143] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1050.178257][ T1143] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1050.179981][ T1143] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1050.246791][ T1143] usb 2-1: USB disconnect, device number 6 [ 1050.687749][T11871] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 1058.196412][T11930] netlink: 'syz.8.1243': attribute type 1 has an invalid length. [ 1058.196430][T11930] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1243'. [ 1058.196854][T11930] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1059.728056][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.539686][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.579371][T11967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1249'. [ 1068.464802][T12003] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 1070.431666][T12032] overlayfs: missing 'lowerdir' [ 1070.476184][ T8083] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.491340][ T5607] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1071.664716][ T5607] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1071.664764][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.664785][ T5607] usb 3-1: Product: syz [ 1071.664800][ T5607] usb 3-1: Manufacturer: syz [ 1071.664815][ T5607] usb 3-1: SerialNumber: syz [ 1071.720047][ T5607] usb 3-1: config 0 descriptor?? [ 1071.737658][ T5607] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1072.950354][ T5607] sonixb 3-1:0.0: Error reading register 00: -110 [ 1073.348437][ T5607] usb 3-1: USB disconnect, device number 10 [ 1075.072917][T12065] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 1075.241256][T12068] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1267'. [ 1075.288505][T12065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1075.435701][T12067] bond1: (slave dummy0): making interface the new active one [ 1075.472575][T12067] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1075.708427][T12068] bond1: (slave dummy0): Releasing active interface [ 1079.097101][T12093] fuse: fd is not a fuse device [ 1080.598378][T12119] netlink: 'syz.5.1278': attribute type 1 has an invalid length. [ 1080.652847][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1278'. [ 1080.759101][T12119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1080.901484][T12125] bond2: (slave dummy0): making interface the new active one [ 1080.918811][T12125] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1080.919321][T12127] netlink: 'syz.8.1279': attribute type 1 has an invalid length. [ 1080.919336][T12127] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1279'. [ 1080.919724][T12127] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1082.359370][T12139] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1281'. [ 1085.172144][T12148] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1282'. [ 1085.838314][T12162] netlink: 'syz.8.1286': attribute type 1 has an invalid length. [ 1085.887084][T12163] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1288'. [ 1085.977500][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1286'. [ 1086.168995][T12174] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1286'. [ 1086.271360][T12162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1086.303947][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1086.448669][T12167] bond2: (slave dummy0): making interface the new active one [ 1086.467288][T12167] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1086.510934][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1086.510969][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.510991][ T9] usb 2-1: Product: syz [ 1086.511007][ T9] usb 2-1: Manufacturer: syz [ 1086.511024][ T9] usb 2-1: SerialNumber: syz [ 1086.641002][ T9] usb 2-1: config 0 descriptor?? [ 1086.666452][ T9] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1086.749506][T12174] bond2: (slave dummy0): Releasing active interface [ 1087.127168][T12163] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 1087.185407][ T9] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 1087.393115][ T9] usb 2-1: USB disconnect, device number 7 [ 1092.130968][T12225] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1299'. [ 1093.438931][T12231] trusted_key: encrypted_key: keylen parameter is missing [ 1093.463414][T12231] netlink: 'syz.2.1301': attribute type 40 has an invalid length. [ 1094.857587][T12245] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1302'. [ 1098.243290][ T5615] ------------[ cut here ]------------ [ 1098.243306][ T5615] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1098.243330][ T5615] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:4/5615 [ 1098.243396][ T5615] Modules linked in: [ 1098.243440][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1098.243465][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1098.243481][ T5615] Workqueue: events drm_fb_helper_damage_work [ 1098.243512][ T5615] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1098.243550][ T5615] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 1a 9d d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1098.243570][ T5615] RSP: 0018:ffffc90004db78c0 EFLAGS: 00010246 [ 1098.243589][ T5615] RAX: 1ffff11004bf7e00 RBX: ffffffff8f936670 RCX: 0000000000000000 [ 1098.243606][ T5615] RDX: ffffffff8bc060e0 RSI: ffffffff8bc22800 RDI: ffffffff8f936670 [ 1098.243623][ T5615] RBP: ffffc90004db79a8 R08: 0000000000000000 R09: 0000000000000000 [ 1098.243639][ T5615] R10: dffffc0000000000 R11: fffffbfff1f10b5f R12: ffffffff8bc22800 [ 1098.243657][ T5615] R13: ffff888025fbf000 R14: 0000000000000000 R15: ffffffff8bc060e0 [ 1098.243674][ T5615] FS: 0000000000000000(0000) GS:ffff888126186000(0000) knlGS:0000000000000000 [ 1098.243694][ T5615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1098.243710][ T5615] CR2: 000020000007f030 CR3: 0000000061c28000 CR4: 00000000003526f0 [ 1098.243735][ T5615] Call Trace: [ 1098.243744][ T5615] [ 1098.243760][ T5615] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1098.243797][ T5615] ? rt_spin_unlock+0x14f/0x200 [ 1098.243825][ T5615] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1098.243868][ T5615] ? rt_spin_unlock+0x160/0x200 [ 1098.243898][ T5615] ? drm_vblank_get+0x147/0x260 [ 1098.243936][ T5615] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1098.243973][ T5615] drm_fb_helper_damage_work+0x131/0x6f0 [ 1098.244000][ T5615] ? process_scheduled_works+0xa70/0x1860 [ 1098.244032][ T5615] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1098.244061][ T5615] ? process_scheduled_works+0xa70/0x1860 [ 1098.244085][ T5615] ? process_scheduled_works+0xa70/0x1860 [ 1098.244113][ T5615] process_scheduled_works+0xb5d/0x1860 [ 1098.244173][ T5615] ? __pfx_process_scheduled_works+0x10/0x10 [ 1098.244207][ T5615] ? assign_work+0x3d5/0x5e0 [ 1098.244238][ T5615] worker_thread+0xa53/0xfc0 [ 1098.244295][ T5615] kthread+0x388/0x470 [ 1098.244327][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 1098.244351][ T5615] ? __pfx_kthread+0x10/0x10 [ 1098.244383][ T5615] ret_from_fork+0x514/0xb70 [ 1098.244412][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.244439][ T5615] ? __switch_to+0xc79/0x1410 [ 1098.244477][ T5615] ? __pfx_kthread+0x10/0x10 [ 1098.244509][ T5615] ret_from_fork_asm+0x1a/0x30 [ 1098.244586][ T5615] [ 1098.244602][ T5615] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1098.244616][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1098.244638][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1098.244653][ T5615] Workqueue: events drm_fb_helper_damage_work [ 1098.244677][ T5615] Call Trace: [ 1098.244686][ T5615] [ 1098.244695][ T5615] vpanic+0x56c/0xa60 [ 1098.244729][ T5615] ? __pfx__printk+0x10/0x10 [ 1098.244768][ T5615] ? __pfx_vpanic+0x10/0x10 [ 1098.244794][ T5615] ? is_bpf_text_address+0x292/0x2b0 [ 1098.244825][ T5615] ? is_bpf_text_address+0x26/0x2b0 [ 1098.244873][ T5615] panic+0xc5/0xd0 [ 1098.244900][ T5615] ? __pfx_panic+0x10/0x10 [ 1098.244940][ T5615] ? ret_from_fork_asm+0x1a/0x30 [ 1098.244975][ T5615] __warn+0x315/0x4c0 [ 1098.245000][ T5615] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1098.245038][ T5615] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1098.245074][ T5615] __report_bug+0x29a/0x540 [ 1098.245114][ T5615] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1098.245153][ T5615] ? __pfx___report_bug+0x10/0x10 [ 1098.245209][ T5615] report_bug_entry+0x19a/0x290 [ 1098.245243][ T5615] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1098.245277][ T5615] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1098.245314][ T5615] handle_bug+0xce/0x200 [ 1098.245338][ T5615] exc_invalid_op+0x1a/0x50 [ 1098.245363][ T5615] asm_exc_invalid_op+0x1a/0x20 [ 1098.245385][ T5615] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1098.245422][ T5615] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 1a 9d d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1098.245442][ T5615] RSP: 0018:ffffc90004db78c0 EFLAGS: 00010246 [ 1098.245461][ T5615] RAX: 1ffff11004bf7e00 RBX: ffffffff8f936670 RCX: 0000000000000000 [ 1098.245478][ T5615] RDX: ffffffff8bc060e0 RSI: ffffffff8bc22800 RDI: ffffffff8f936670 [ 1098.245495][ T5615] RBP: ffffc90004db79a8 R08: 0000000000000000 R09: 0000000000000000 [ 1098.245510][ T5615] R10: dffffc0000000000 R11: fffffbfff1f10b5f R12: ffffffff8bc22800 [ 1098.245528][ T5615] R13: ffff888025fbf000 R14: 0000000000000000 R15: ffffffff8bc060e0 [ 1098.245567][ T5615] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1098.245602][ T5615] ? rt_spin_unlock+0x14f/0x200 [ 1098.245630][ T5615] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1098.245661][ T5615] ? rt_spin_unlock+0x160/0x200 [ 1098.245692][ T5615] ? drm_vblank_get+0x147/0x260 [ 1098.245730][ T5615] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1098.245765][ T5615] drm_fb_helper_damage_work+0x131/0x6f0 [ 1098.245792][ T5615] ? process_scheduled_works+0xa70/0x1860 [ 1098.245822][ T5615] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1098.245859][ T5615] ? process_scheduled_works+0xa70/0x1860 [ 1098.245883][ T5615] ? process_scheduled_works+0xa70/0x1860 [ 1098.245911][ T5615] process_scheduled_works+0xb5d/0x1860 [ 1098.245971][ T5615] ? __pfx_process_scheduled_works+0x10/0x10 [ 1098.246004][ T5615] ? assign_work+0x3d5/0x5e0 [ 1098.246035][ T5615] worker_thread+0xa53/0xfc0 [ 1098.246092][ T5615] kthread+0x388/0x470 [ 1098.246123][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 1098.246146][ T5615] ? __pfx_kthread+0x10/0x10 [ 1098.246177][ T5615] ret_from_fork+0x514/0xb70 [ 1098.246206][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.246232][ T5615] ? __switch_to+0xc79/0x1410 [ 1098.246271][ T5615] ? __pfx_kthread+0x10/0x10 [ 1098.246304][ T5615] ret_from_fork_asm+0x1a/0x30 [ 1098.246352][ T5615] [ 1098.246941][ T5615] Kernel Offset: disabled