last executing test programs: 13.801768419s ago: executing program 1 (id=108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11.548894865s ago: executing program 3 (id=109): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c034ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000c0ff00001d440000000000007a0a00fe00ffffffc3030000a1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 11.452037327s ago: executing program 2 (id=110): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000000140)="010000", 0x3, 0x2a21}]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaaaa080045190014006400000111909e1d2d8a115c7864010102e0"], 0x32) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d4b64e6295701000f2ddb265547112c800000006e8072f654261b02c6b3c5a0", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRES8, @ANYBLOB="0e"]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000240), 0x22040, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000005c0)=ANY=[], 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x9, 0x1000000, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) 11.267007319s ago: executing program 1 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x800, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB='c '], 0x3d) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$netlink(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) 9.470392448s ago: executing program 2 (id=113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r2, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@x25={0x9, @remote}, 0x0, 0x80800) getrlimit(0xd, &(0x7f0000000100)) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4099, 0x1003, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x240) 8.6986519s ago: executing program 3 (id=115): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) 8.557637953s ago: executing program 3 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 7.934475073s ago: executing program 3 (id=118): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffff9c, &(0x7f0000000340), 0x101000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000871640fcf6ae374100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x8008000) 7.798452605s ago: executing program 0 (id=119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.636405108s ago: executing program 1 (id=120): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) 7.537012949s ago: executing program 0 (id=121): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r4, &(0x7f0000000140)="01000000", 0x4, 0x2a21}]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaaaa080045190014006400000111909e1d2d8a115c7864010102e00000014f224e1f00"], 0x32) syz_usbip_server_init(0x3) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0, 0x28e3d70485aa2b31, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB='huge=within_size,mode=00000000000000000000011,nr_blocks=06,gid=', @ANYRESHEX=r6, @ANYBLOB="2c75737271750500000069743d301e2d7035391b2c7573", @ANYRESDEC=r7, @ANYBLOB=',obj_type=/dev/snd/midiC#D#\x00,smackfsdef=/dev/snd/pcmC#D#c\x00,fsuuid=fd4a8e0a-db7a-S552-6bbd-4c2648d8,dont_appraise,fsmagic=0x0000000000000003,fsmagic=0x0000000000000008,smackfsfloor=/dev/net/tun\x00,\x00']) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d4b64e6295701000f2ddb265547112c800000006e8072f654261b02c6b3c5a05a1db5a33d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRES8, @ANYBLOB="0e00"]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000240), 0x22040, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000005c0)=ANY=[], 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x9, 0x1000000, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) 5.478384752s ago: executing program 0 (id=122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000400000000000000000000000000500030005000000100004006c6f616458616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5.135163388s ago: executing program 2 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x33, 0x64, 0x35, 0x66, 0x52, 0x33, 0x36, 0x32, 0x36, 0x32, 0x39, 0x63, 0x32, 0x32, 0x61, 0x37]}, &(0x7f0000000340)={0x0, "2907f1eb10073cbdd05ab17650428918388787e1d288a81fe9ecec20ebc39595565371de17246d3db51789ab50c549dab92c04c66a5f3af51ee0899b01ed9bee", 0x38}, 0x48, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r6}, 0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={'rmd256\x00'}}) socket$inet6_sctp(0xa, 0x1, 0x84) 4.516268047s ago: executing program 1 (id=124): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 4.36131247s ago: executing program 0 (id=125): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) 3.548184864s ago: executing program 0 (id=126): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x40008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000300)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000014400050020010000000000000000000000000001000000022b0000000a00020000000000000000000000000000000000000000000400"/176], 0xfc}}, 0x0) r6 = socket(0x2, 0x3, 0x6) bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r6, 0x0, 0xebff, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 3.438226275s ago: executing program 2 (id=127): socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x86) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 3.076368331s ago: executing program 3 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000030009000000000600150004000000140016"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="841cd4be3d6a46c7492c9fa54c883c9c5668d86f5434c84d10aaefaefa407f5531dd393db0d47cdd00f26c3d8dc0bf91f921df67e731fce7ddc7dfc374d8d47bb27d14d37f46402fb236a41be40f575238992014e87029de3ff7c827e9699928ddf65f8609db51e42be6de0a9b02106277c5d6f97bcdd70dd3cff268866b67b4e9f61359fd8c8e34a2743a4accbf392c14052b28c8e6532d828bbe7ff66d9b12ad72d0dc78bd1cecb7603ce78ad73ef605b4b6a7e5c5a9ed80d2aca618aab60de625dcecbf3c42d655337227a6f7947614a69d799eca58074cfdbe95ee81025658a92d65ac9c11", 0xe7, 0xfffffffffffffffb) r7 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="600e506459232e3a59a268c62a9a694c120ba82e5e94437096a28b37d4209c079ec448fa92717e0cd060291a4a97fb7d072f1dc04f2748e5488ae7d27b7261913e320d5a8efe0e6a2734c0ff698cbf42f69fdf25543ace454f45521d91f027c01b88db46694a75d3bee3f6856d590af3358837ed54e2ed8b6a855dfd16d5b03e6adb9a0c50e4211e", 0x88, 0xfffffffffffffff9) r8 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x33, 0x64, 0x35, 0x66, 0x52, 0x33, 0x36, 0x32, 0x36, 0x32, 0x39, 0x63, 0x32, 0x32, 0x61, 0x37]}, &(0x7f0000000340)={0x0, "2907f1eb10073cbdd05ab17650428918388787e1d288a81fe9ecec20ebc39595565371de17246d3db51789ab50c549dab92c04c66a5f3af51ee0899b01ed9bee", 0x38}, 0x48, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r6, r7, r8}, &(0x7f0000000400)=""/45, 0x2d, &(0x7f0000000540)={&(0x7f00000004c0)={'rmd256\x00'}, &(0x7f0000000500)}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}}}, &(0x7f0000000500)=0x84) 2.359119433s ago: executing program 0 (id=129): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x800, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB='c '], 0x3d) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$netlink(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) 2.353864853s ago: executing program 1 (id=130): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r4, &(0x7f0000000140)="01000000", 0x4, 0x2a21}]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaaaa080045190014006400000111909e1d2d8a115c7864010102e00000014f224e1f00"], 0x32) syz_usbip_server_init(0x3) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0, 0x28e3d70485aa2b31, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB='huge=within_size,mode=00000000000000000000011,nr_blocks=06,gid=', @ANYRESHEX=r6, @ANYBLOB="2c75737271750500000069743d301e2d7035391b2c7573", @ANYRESDEC=r7, @ANYBLOB=',obj_type=/dev/snd/midiC#D#\x00,smackfsdef=/dev/snd/pcmC#D#c\x00,fsuuid=fd4a8e0a-db7a-S552-6bbd-4c2648d8,dont_appraise,fsmagic=0x0000000000000003,fsmagic=0x0000000000000008,smackfsfloor=/dev/net/tun\x00,\x00']) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d4b64e6295701000f2ddb265547112c800000006e8072f654261b02c6b3c5a05a1db5a33d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRES8, @ANYBLOB="0e00"]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000240), 0x22040, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000005c0)=ANY=[], 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x9, 0x1000000, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) 592.311941ms ago: executing program 2 (id=131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)) 357.488834ms ago: executing program 1 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6, 0x0, r0}, 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r1, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1335f0a6) ioprio_set$pid(0x2, 0x0, 0x4007) ioprio_get$pid(0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r4, 0x26c8, 0x0, 0x1, 0x0, 0x10) 178.330918ms ago: executing program 2 (id=133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffd, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1000, 0x10043, 0x3, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)="0f0665dfe56f0e87d7168b", 0xb}], 0x1, &(0x7f0000000580)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x20000}, @assoc={0x10, 0x117, 0x4, 0xfe}], 0x40, 0x1}], 0x1, 0x20040000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x14, r4, 0x1, 0x20000000, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x5, 0x2, 0x3}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = openat$ipvs(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmsg$key(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2, 0xd, 0x2, 0x9, 0x18, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_key={0x16, 0x9, 0x530, 0x0, "475c2b2d9cc9186bd5ce1066f86edf388a8d1d2e66d66b6a8a5494e3b5c3b3abd7c6a4609621462fd68c32e266dff05ab6a03cec11c4c2592d5b217c000a1e971d4ff71cc4fae39d7fb9a611f1349b9877afedccce68efd7dbd8a0f170c6cc622c8969b8c72f2ef06176a813ae59705107117340d978ab0eabe4f0754b3c410c656db9903e08e823cd42ed21aad0784f6798458bf7a516b1c019262f169bd725a148c736d11e"}]}, 0xc0}}, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, r9, 0x0, 0x7ffffff5, 0xa, 0x1ff, 0x1}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000b00)) r10 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r10, 0x400455c8, 0x2) ioctl$TIOCSETD(r10, 0x5412, &(0x7f0000000140)=0xffffffc0) setsockopt$sock_int(r8, 0x1, 0x1d, &(0x7f0000000440)=0x80000000, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r12, @ANYBLOB="4d7e00000000000000202a00000008002f00050000000a00017770616e3000000000"], 0x28}, 0x4, 0x700000000000000}, 0x8850) syz_genetlink_get_family_id$nbd(&(0x7f0000000680), r11) ioctl$VIDIOC_G_INPUT(r10, 0x80045626, &(0x7f00000004c0)) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0xfc) 0s ago: executing program 3 (id=134): io_setup(0x4, &(0x7f0000000040)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)="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", 0x391}], 0x1}}], 0x2, 0x4048884) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private1, 0x1}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x2d, &(0x7f00000001c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. [ 65.295664][ T5773] cgroup: Unknown subsys name 'net' [ 65.425208][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.800606][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.294461][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.308265][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.328900][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.330307][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.339326][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.345030][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.358289][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.367077][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.370544][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.374880][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.383994][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.389090][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.405048][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.415905][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.425986][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.434010][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.438372][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.449156][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.458286][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.458884][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.466175][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.473504][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.480523][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.487835][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.917264][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 68.967479][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 69.094065][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 69.108961][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.116163][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.124095][ T5786] bridge_slave_0: entered allmulticast mode [ 69.131780][ T5786] bridge_slave_0: entered promiscuous mode [ 69.139857][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 69.173851][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.181333][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.188619][ T5786] bridge_slave_1: entered allmulticast mode [ 69.195286][ T5786] bridge_slave_1: entered promiscuous mode [ 69.223077][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.230308][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.237482][ T5785] bridge_slave_0: entered allmulticast mode [ 69.245009][ T5785] bridge_slave_0: entered promiscuous mode [ 69.282764][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.290323][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.297479][ T5785] bridge_slave_1: entered allmulticast mode [ 69.304908][ T5785] bridge_slave_1: entered promiscuous mode [ 69.357766][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.379445][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.391533][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.402875][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.487589][ T5785] team0: Port device team_slave_0 added [ 69.508883][ T5786] team0: Port device team_slave_0 added [ 69.527103][ T5785] team0: Port device team_slave_1 added [ 69.533546][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.541359][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.548686][ T5784] bridge_slave_0: entered allmulticast mode [ 69.555398][ T5784] bridge_slave_0: entered promiscuous mode [ 69.564352][ T5786] team0: Port device team_slave_1 added [ 69.581835][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.589243][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.596407][ T5783] bridge_slave_0: entered allmulticast mode [ 69.603555][ T5783] bridge_slave_0: entered promiscuous mode [ 69.611519][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.618748][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.625927][ T5783] bridge_slave_1: entered allmulticast mode [ 69.633179][ T5783] bridge_slave_1: entered promiscuous mode [ 69.662734][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.670088][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.677240][ T5784] bridge_slave_1: entered allmulticast mode [ 69.684981][ T5784] bridge_slave_1: entered promiscuous mode [ 69.723370][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.730546][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.756851][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.772144][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.780062][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.806133][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.830019][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.837009][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.863899][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.876567][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.883760][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.909726][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.924620][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.964209][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.988820][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.033331][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.068196][ T5786] hsr_slave_0: entered promiscuous mode [ 70.074512][ T5786] hsr_slave_1: entered promiscuous mode [ 70.089446][ T5783] team0: Port device team_slave_0 added [ 70.116015][ T5783] team0: Port device team_slave_1 added [ 70.135737][ T5784] team0: Port device team_slave_0 added [ 70.159079][ T5785] hsr_slave_0: entered promiscuous mode [ 70.165312][ T5785] hsr_slave_1: entered promiscuous mode [ 70.173051][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.181578][ T5785] Cannot create hsr debugfs directory [ 70.199809][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.206887][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.233690][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.246826][ T5784] team0: Port device team_slave_1 added [ 70.270592][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.277560][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.304147][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.366830][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.374238][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.400278][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.437398][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.444543][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.470624][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.488305][ T5790] Bluetooth: hci0: command tx timeout [ 70.494238][ T5799] Bluetooth: hci1: command tx timeout [ 70.544524][ T5783] hsr_slave_0: entered promiscuous mode [ 70.551046][ T5783] hsr_slave_1: entered promiscuous mode [ 70.557430][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.565596][ T5783] Cannot create hsr debugfs directory [ 70.566331][ T5799] Bluetooth: hci3: command tx timeout [ 70.576604][ T5790] Bluetooth: hci2: command tx timeout [ 70.622808][ T5784] hsr_slave_0: entered promiscuous mode [ 70.629697][ T5784] hsr_slave_1: entered promiscuous mode [ 70.635829][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.643666][ T5784] Cannot create hsr debugfs directory [ 70.896111][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.908785][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.923096][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.946387][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.040324][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.053680][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.063835][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.076185][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.160143][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.173057][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.183431][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.210012][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.278112][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.289538][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.311184][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.326681][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.344934][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.402261][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.432793][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.440174][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.482145][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.489335][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.513991][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.572685][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.615153][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.622605][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.656242][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.675800][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.683006][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.688791][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.696672][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.761075][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.804355][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.831822][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.851418][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.870318][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.877484][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.926265][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.933773][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.954862][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.962071][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.994829][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.001984][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.035690][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.227504][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.272683][ T5786] veth0_vlan: entered promiscuous mode [ 72.332969][ T5786] veth1_vlan: entered promiscuous mode [ 72.429735][ T5785] veth0_vlan: entered promiscuous mode [ 72.447313][ T5786] veth0_macvtap: entered promiscuous mode [ 72.471136][ T5786] veth1_macvtap: entered promiscuous mode [ 72.491189][ T5785] veth1_vlan: entered promiscuous mode [ 72.551667][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.559176][ T5799] Bluetooth: hci0: command tx timeout [ 72.561084][ T5790] Bluetooth: hci1: command tx timeout [ 72.576154][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.597695][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.617240][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.638395][ T5790] Bluetooth: hci2: command tx timeout [ 72.639360][ T5799] Bluetooth: hci3: command tx timeout [ 72.647350][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.658694][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.667831][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.676614][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.697756][ T5785] veth0_macvtap: entered promiscuous mode [ 72.709112][ T5785] veth1_macvtap: entered promiscuous mode [ 72.811635][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.822648][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.834803][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.882676][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.895376][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.906832][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.922408][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.933611][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.952252][ T5783] veth0_vlan: entered promiscuous mode [ 72.970587][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.982096][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.991024][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999838][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.036614][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.045606][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.073197][ T5783] veth1_vlan: entered promiscuous mode [ 73.093505][ T5784] veth0_vlan: entered promiscuous mode [ 73.107677][ T5784] veth1_vlan: entered promiscuous mode [ 73.208604][ T5783] veth0_macvtap: entered promiscuous mode [ 73.235733][ T5783] veth1_macvtap: entered promiscuous mode [ 73.257267][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.276879][ T5784] veth0_macvtap: entered promiscuous mode [ 73.290508][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.339505][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.360494][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.373011][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.383800][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.397106][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.436313][ T5784] veth1_macvtap: entered promiscuous mode [ 73.454048][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.457504][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.468049][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.484021][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.485848][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.502925][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.516959][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.542790][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.555076][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.565878][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.574699][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.626206][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.637831][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.650374][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.662330][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.672297][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.683115][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.696453][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.749514][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.772773][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.791513][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.803887][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.816002][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.826768][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.839489][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.032058][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.064429][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.111390][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.189477][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.698609][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.804258][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.882980][ T5799] Bluetooth: hci0: command tx timeout [ 74.894902][ T5799] Bluetooth: hci1: command tx timeout [ 74.903020][ T5799] Bluetooth: hci2: command tx timeout [ 74.913731][ T5799] Bluetooth: hci3: command tx timeout [ 75.560875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.597059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.605920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.658623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.918586][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.926451][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.368741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.377464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.418700][ T5899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 76.425533][ T5899] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.540286][ T5899] vhci_hcd vhci_hcd.0: Device attached [ 76.558898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.567468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.578333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.586826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.658242][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.775586][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.855378][ T27] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 76.959257][ T5790] Bluetooth: hci3: command tx timeout [ 76.959393][ T5799] Bluetooth: hci2: command tx timeout [ 76.964778][ T5790] Bluetooth: hci1: command tx timeout [ 76.970485][ T5795] Bluetooth: hci0: command tx timeout [ 77.018321][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.170423][ T5900] vhci_hcd: connection reset by peer [ 77.209847][ T42] vhci_hcd: stop threads [ 77.270222][ T42] vhci_hcd: release socket [ 77.338236][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 77.356682][ T42] vhci_hcd: disconnect device [ 77.426630][ T55] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.541848][ T55] usb 1-1: config 0 has no interface number 0 [ 77.592656][ T5897] 9pnet: Could not find request transport: Kdę)W [ 77.648460][ T55] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 77.665205][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.715010][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.739851][ T55] usb 1-1: Product: syz [ 77.759222][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.761313][ T55] usb 1-1: Manufacturer: syz [ 77.821968][ T55] usb 1-1: SerialNumber: syz [ 77.862093][ T55] usb 1-1: config 0 descriptor?? [ 77.903766][ T55] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 77.936418][ T55] usb 1-1: selecting invalid altsetting 1 [ 77.942801][ T55] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 77.960300][ T55] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 77.976239][ T55] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 77.986296][ T55] usb 1-1: media controller created [ 78.207343][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.268684][ T55] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 78.365118][ T28] audit: type=1326 audit(1753140831.273:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 78.389764][ T55] zl10353_read_register: readreg error (reg=127, ret==-71) [ 78.402232][ T55] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 78.593818][ T28] audit: type=1326 audit(1753140831.273:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 78.832030][ T28] audit: type=1326 audit(1753140831.273:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 78.936080][ T28] audit: type=1326 audit(1753140831.283:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 79.027563][ T55] usb 1-1: USB disconnect, device number 2 [ 79.047950][ T28] audit: type=1326 audit(1753140831.283:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 79.107153][ T28] audit: type=1326 audit(1753140831.283:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 79.188348][ T28] audit: type=1326 audit(1753140831.283:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 79.260119][ T28] audit: type=1326 audit(1753140831.293:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 80.541381][ T28] audit: type=1326 audit(1753140831.293:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 80.565605][ T28] audit: type=1326 audit(1753140831.293:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 82.231907][ T9] cfg80211: failed to load regulatory.db [ 82.279760][ T27] vhci_hcd: vhci_device speed not set [ 84.336184][ T5944] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 84.345400][ T5944] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 84.352579][ T5944] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 84.359895][ T5944] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 84.368747][ T5944] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 84.376169][ T5944] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 84.383170][ T5944] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 84.390191][ T5944] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 84.397256][ T5944] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 84.408327][ T5944] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 84.500279][ T5944] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 84.541524][ T5941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 84.548083][ T5941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.576811][ T5944] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 84.583872][ T5944] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 84.591930][ T5944] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 84.616394][ T5941] vhci_hcd vhci_hcd.0: Device attached [ 84.852080][ T5946] vhci_hcd: connection closed [ 84.937334][ T1130] vhci_hcd: stop threads [ 85.078479][ T27] usb 35-1: device descriptor read/64, error -110 [ 85.685602][ T1130] vhci_hcd: release socket [ 85.690169][ T1130] vhci_hcd: disconnect device [ 85.956503][ T5945] 9pnet: Could not find request transport: Kdę)W [ 86.008146][ T27] vhci_hcd: vhci_device speed not set [ 86.266271][ T5963] netlink: set zone limit has 8 unknown bytes [ 86.882324][ T5963] could not allocate digest TFM handle rmd256 [ 86.921755][ T5966] input: syz0 as /devices/virtual/input/input5 [ 89.336173][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.361291][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.715368][ T5987] fido_id[5987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.729858][ T5832] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.940646][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.982063][ T5832] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.042176][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.076030][ T5832] usb 3-1: config 0 descriptor?? [ 90.294067][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 90.319706][ T5832] usbhid: probe of 3-1:0.0 failed with error -71 [ 90.358191][ T5832] usb 3-1: USB disconnect, device number 2 [ 90.952545][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.325276][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 91.377127][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.421059][ T5832] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 91.492332][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.524735][ T5832] usb 3-1: config 0 descriptor?? [ 91.552129][ T5832] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 91.661967][ T5832] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 93.600025][ T6010] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 93.606662][ T6010] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.654385][ T6010] vhci_hcd vhci_hcd.0: Device attached [ 94.178342][ T5907] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 94.320870][ T6011] vhci_hcd: connection closed [ 94.396143][ T1124] vhci_hcd: stop threads [ 94.475181][ T1124] vhci_hcd: release socket [ 94.479872][ T1124] vhci_hcd: disconnect device [ 94.496914][ T6010] 9pnet: Could not find request transport: Kdę)W [ 94.521059][ T23] usb 3-1: USB disconnect, device number 3 [ 94.569648][ T23] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 96.810433][ T6024] sched: RT throttling activated [ 96.822610][ T5795] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 96.833063][ T5795] CPU: 0 PID: 5795 Comm: kworker/u5:4 Not tainted 6.6.99-syzkaller #0 [ 96.841243][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.851335][ T5795] Workqueue: hci2 hci_rx_work [ 96.856044][ T5795] Call Trace: [ 96.859323][ T5795] [ 96.862278][ T5795] dump_stack_lvl+0x16c/0x230 [ 96.866964][ T5795] ? show_regs_print_info+0x20/0x20 [ 96.872183][ T5795] ? load_image+0x3b0/0x3b0 [ 96.876728][ T5795] sysfs_create_dir_ns+0x256/0x280 [ 96.881915][ T5795] ? hci_rx_work+0x43a/0xd80 [ 96.886541][ T5795] ? sysfs_warn_dup+0xa0/0xa0 [ 96.891375][ T5795] ? do_raw_spin_unlock+0x121/0x230 [ 96.896619][ T5795] kobject_add_internal+0x6b8/0xc70 [ 96.901937][ T5795] kobject_add+0x156/0x220 [ 96.906396][ T5795] ? __rwlock_init+0x150/0x150 [ 96.911161][ T5795] ? kobject_init+0x1e0/0x1e0 [ 96.915843][ T5795] ? _raw_spin_unlock+0x28/0x40 [ 96.920696][ T5795] ? get_device_parent+0x366/0x390 [ 96.925816][ T5795] device_add+0x408/0xc20 [ 96.930151][ T5795] hci_conn_add_sysfs+0xd5/0x1e0 [ 96.935090][ T5795] le_conn_complete_evt+0xc37/0x1220 [ 96.940373][ T5795] ? hci_event_packet+0x4a7/0x1210 [ 96.945499][ T5795] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 96.951737][ T5795] ? __copy_skb_header+0xa7/0x550 [ 96.956767][ T5795] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 96.962430][ T5795] ? skb_pull_data+0xfb/0x200 [ 96.967128][ T5795] hci_le_conn_complete_evt+0x187/0x440 [ 96.972685][ T5795] ? hci_remote_host_features_evt+0x160/0x160 [ 96.978862][ T5795] hci_event_packet+0x795/0x1210 [ 96.983851][ T5795] ? bis_list+0x290/0x290 [ 96.988188][ T5795] ? lockdep_hardirqs_on+0x98/0x150 [ 96.993392][ T5795] ? hci_send_to_monitor+0xd7/0x4f0 [ 96.998611][ T5795] hci_rx_work+0x43a/0xd80 [ 97.003047][ T5795] ? process_scheduled_works+0x957/0x15b0 [ 97.008786][ T5795] process_scheduled_works+0xa45/0x15b0 [ 97.014465][ T5795] ? assign_work+0x400/0x400 [ 97.019075][ T5795] ? assign_work+0x39e/0x400 [ 97.023679][ T5795] worker_thread+0xa55/0xfc0 [ 97.028288][ T5795] kthread+0x2fa/0x390 [ 97.032352][ T5795] ? pr_cont_work+0x560/0x560 [ 97.037130][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 97.041837][ T5795] ret_from_fork+0x48/0x80 [ 97.046253][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 97.050833][ T5795] ret_from_fork_asm+0x11/0x20 [ 97.055601][ T5795] [ 97.068834][ T5795] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.083051][ T5795] Bluetooth: hci2: failed to register connection device [ 97.349891][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 97.349907][ T28] audit: type=1326 audit(1753140850.303:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71838e9a9 code=0x7ffc0000 [ 97.445734][ T28] audit: type=1326 audit(1753140850.313:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71838e9a9 code=0x7ffc0000 [ 97.468242][ T28] audit: type=1326 audit(1753140850.313:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb71838d310 code=0x7ffc0000 [ 97.490201][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.672460][ T6034] netlink: 224 bytes leftover after parsing attributes in process `syz.0.34'. [ 97.692468][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 97.721964][ T28] audit: type=1326 audit(1753140850.313:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb7183901d7 code=0x7ffc0000 [ 97.776865][ T6022] Process accounting resumed [ 97.799094][ T28] audit: type=1326 audit(1753140850.363:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb71838e9a9 code=0x7ffc0000 [ 98.075802][ T28] audit: type=1326 audit(1753140850.363:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb7183901d7 code=0x7ffc0000 [ 98.593875][ T28] audit: type=1326 audit(1753140850.363:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb71838d60a code=0x7ffc0000 [ 98.725694][ T28] audit: type=1326 audit(1753140850.363:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71838e9a9 code=0x7ffc0000 [ 98.748679][ T28] audit: type=1326 audit(1753140850.363:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71838e9a9 code=0x7ffc0000 [ 98.771150][ T28] audit: type=1326 audit(1753140850.623:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb71838e9a9 code=0x7ffc0000 [ 99.185336][ T6060] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.487488][ T5907] vhci_hcd: vhci_device speed not set [ 99.493390][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.806083][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.883050][ T27] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.893104][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.922342][ T27] usb 2-1: config 0 descriptor?? [ 101.186280][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 101.203421][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 101.224003][ T27] usb 2-1: USB disconnect, device number 2 [ 101.818169][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.924048][ T6075] Process accounting resumed [ 102.008151][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 102.125518][ T6092] ISOFS: Unable to identify CD-ROM format. [ 102.192232][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.255080][ T27] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 102.301346][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.403790][ T27] usb 2-1: config 0 descriptor?? [ 104.700728][ T27] usb 2-1: can't set config #0, error -71 [ 104.724705][ T27] usb 2-1: USB disconnect, device number 3 [ 105.189711][ T6103] netlink: set zone limit has 8 unknown bytes [ 105.720373][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 105.859204][ T6103] could not allocate digest TFM handle rmd256 [ 108.275650][ T6134] Process accounting resumed [ 108.287147][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 108.287161][ T28] audit: type=1400 audit(1753140861.253:77): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=6145 comm="syz.3.59" [ 108.478467][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.134061][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.167662][ T5840] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.215652][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.559596][ T5840] usb 2-1: config 0 descriptor?? [ 111.869169][ T5840] usb 2-1: can't set config #0, error -71 [ 111.879547][ T5840] usb 2-1: USB disconnect, device number 4 [ 112.477831][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 117.569227][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.781946][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.828553][ T5907] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.879281][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.896284][ T5907] usb 1-1: config 0 descriptor?? [ 118.119633][ T5907] usbhid 1-1:0.0: can't add hid device: -71 [ 118.125623][ T5907] usbhid: probe of 1-1:0.0 failed with error -71 [ 118.157161][ T5907] usb 1-1: USB disconnect, device number 3 [ 118.747365][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.872050][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 119.058245][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 119.079350][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.091017][ T5907] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 119.126117][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.145621][ T5907] usb 1-1: config 0 descriptor?? [ 119.156105][ T5907] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.204155][ T6235] netlink: set zone limit has 8 unknown bytes [ 119.212529][ T5907] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 119.483815][ T5840] usb 1-1: USB disconnect, device number 4 [ 119.563924][ T6235] could not allocate digest TFM handle rmd256 [ 119.570700][ T5840] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 119.603761][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'. [ 121.187761][ T6254] netlink: 68 bytes leftover after parsing attributes in process `syz.0.84'. [ 121.838599][ T6263] binder: 6260:6263 ioctl c018620b 0 returned -14 [ 122.579641][ T6262] overlayfs: missing 'lowerdir' [ 124.112111][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 124.278257][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.499449][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.545791][ T6285] syz.1.92 uses obsolete (PF_INET,SOCK_PACKET) [ 124.767649][ T5878] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.778201][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.789444][ T5878] usb 3-1: config 0 descriptor?? [ 124.875602][ T6285] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 124.882166][ T6285] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.890218][ T6285] vhci_hcd vhci_hcd.0: Device attached [ 124.890250][ T6288] vhci_hcd: connection closed [ 124.914901][ T1124] vhci_hcd: stop threads [ 125.729988][ T6286] 9pnet: Could not find request transport: Kdę)W [ 125.740453][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 125.746591][ T5878] usbhid: probe of 3-1:0.0 failed with error -71 [ 125.766039][ T1124] vhci_hcd: release socket [ 125.773319][ T5878] usb 3-1: USB disconnect, device number 4 [ 125.783702][ T1124] vhci_hcd: disconnect device [ 127.168293][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.93'. [ 127.296248][ T5853] Process accounting resumed [ 128.133082][ T28] audit: type=1326 audit(1753140880.633:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 128.161523][ T28] audit: type=1326 audit(1753140880.633:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 128.198232][ T28] audit: type=1326 audit(1753140880.643:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 128.233033][ T28] audit: type=1326 audit(1753140880.653:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 128.393140][ T28] audit: type=1326 audit(1753140880.653:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 128.423415][ T6311] netlink: set zone limit has 8 unknown bytes [ 128.438768][ T28] audit: type=1326 audit(1753140880.653:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 128.599091][ T28] audit: type=1326 audit(1753140880.653:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 128.632342][ T28] audit: type=1326 audit(1753140880.653:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 128.740083][ T6319] netlink: 68 bytes leftover after parsing attributes in process `syz.3.99'. [ 128.805162][ T6311] could not allocate digest TFM handle rmd256 [ 130.779905][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.104'. [ 130.788865][ T6341] ip_vti0: entered promiscuous mode [ 130.794487][ T6341] ip_vti0: entered allmulticast mode [ 132.708306][ T6353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.106'. [ 133.080839][ T6356] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 133.087411][ T6356] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.095277][ T6356] vhci_hcd vhci_hcd.0: Device attached [ 133.219260][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.234091][ T6358] vhci_hcd: connection closed [ 133.238104][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.341092][ T1124] vhci_hcd: stop threads [ 133.416688][ T1124] vhci_hcd: release socket [ 133.499543][ T1124] vhci_hcd: disconnect device [ 133.889715][ T6360] 9pnet: Could not find request transport: Kdę)W [ 133.890288][ T5853] Process accounting resumed [ 134.026879][ T6364] binder: 6363:6364 ioctl 4018620d 0 returned -22 [ 135.553660][ T6372] 9pnet: Could not find request transport: Kdę)W [ 136.402697][ T6389] 9pnet_virtio: no channels available for device syz [ 136.424829][ T6391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.933321][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.116'. [ 137.769228][ T6405] binder: 6404:6405 ioctl 4018620d 0 returned -22 [ 137.860104][ T28] audit: type=1326 audit(1753140890.823:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 137.997913][ T28] audit: type=1326 audit(1753140890.823:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 138.058204][ T28] audit: type=1326 audit(1753140890.823:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 139.386631][ T6412] 9pnet: Could not find request transport: Kdę)W [ 139.423554][ T28] audit: type=1326 audit(1753140890.823:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 139.683083][ T6419] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 139.704856][ T28] audit: type=1326 audit(1753140890.823:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 139.798137][ T28] audit: type=1326 audit(1753140890.823:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f94f678e9a9 code=0x7ffc0000 [ 139.871877][ T28] audit: type=1326 audit(1753140890.823:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f672ab89 code=0x7ffc0000 [ 139.976352][ T28] audit: type=1326 audit(1753140890.823:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f672ab89 code=0x7ffc0000 [ 140.074851][ T28] audit: type=1326 audit(1753140890.823:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f672ab89 code=0x7ffc0000 [ 140.191061][ T28] audit: type=1326 audit(1753140890.823:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f672ab89 code=0x7ffc0000 [ 140.290738][ T6422] team0: No ports can be present during mode change [ 140.777941][ T6426] netlink: set zone limit has 8 unknown bytes [ 141.364408][ T6426] could not allocate digest TFM handle rmd256 [ 142.303298][ T6440] netlink: 68 bytes leftover after parsing attributes in process `syz.0.126'. [ 142.726571][ T6449] netlink: set zone limit has 8 unknown bytes [ 143.191699][ T6449] could not allocate digest TFM handle rmd256 [ 143.373765][ T6459] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 143.380319][ T6459] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.396631][ T6459] vhci_hcd vhci_hcd.0: Device attached [ 144.549961][ T6459] 9pnet: Could not find request transport: Kdę)W [ 144.550270][ T6461] vhci_hcd: connection closed [ 144.580679][ T1124] vhci_hcd: stop threads [ 144.594016][ T1124] vhci_hcd: release socket [ 144.599006][ T1124] vhci_hcd: disconnect device [ 145.659475][ T6480] general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] PREEMPT SMP KASAN [ 145.671227][ T6480] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 145.679652][ T6480] CPU: 1 PID: 6480 Comm: syz.2.133 Not tainted 6.6.99-syzkaller #0 [ 145.687566][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.697630][ T6480] RIP: 0010:h5_recv+0x147/0x8c0 [ 145.702494][ T6480] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 1b 1d 59 fa 4d 8b 65 00 31 ff 4c 89 [ 145.722195][ T6480] RSP: 0018:ffffc90005307c60 EFLAGS: 00010202 [ 145.728340][ T6480] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 145.736392][ T6480] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 145.744369][ T6480] RBP: ffffc90005307d80 R08: ffff888025a6001f R09: 1ffff11004b4c003 [ 145.752536][ T6480] R10: dffffc0000000000 R11: ffffed1004b4c004 R12: 0000000000000001 [ 145.760609][ T6480] R13: 00000000000002f8 R14: ffff888025a60010 R15: ffffc90005307e20 [ 145.768614][ T6480] FS: 00007fa31c0086c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 145.777552][ T6480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.784227][ T6480] CR2: 00007fa31c007f98 CR3: 0000000076a94000 CR4: 00000000003526e0 [ 145.792207][ T6480] Call Trace: [ 145.795487][ T6480] [ 145.798430][ T6480] ? h5_setup+0xb0/0xb0 [ 145.802603][ T6480] ? rcu_read_lock_any_held+0xb4/0x120 [ 145.808072][ T6480] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 145.813364][ T6480] ? mutex_lock_nested+0x20/0x20 [ 145.818751][ T6480] hci_uart_tty_receive+0x188/0x210 [ 145.823961][ T6480] ? hci_uart_tty_ioctl+0x9f0/0x9f0 [ 145.829177][ T6480] tiocsti+0x23e/0x2c0 [ 145.833254][ T6480] ? signal_pending+0xa0/0xa0 [ 145.838036][ T6480] tty_ioctl+0x62e/0xdd0 [ 145.842300][ T6480] ? tty_get_icount+0xb0/0xb0 [ 145.847086][ T6480] __se_sys_ioctl+0xfd/0x170 [ 145.851703][ T6480] do_syscall_64+0x55/0xb0 [ 145.856221][ T6480] ? clear_bhb_loop+0x40/0x90 [ 145.860907][ T6480] ? clear_bhb_loop+0x40/0x90 [ 145.865588][ T6480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.871753][ T6480] RIP: 0033:0x7fa31b18e9a9 [ 145.876202][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.896001][ T6480] RSP: 002b:00007fa31c008038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.904425][ T6480] RAX: ffffffffffffffda RBX: 00007fa31b3b6080 RCX: 00007fa31b18e9a9 [ 145.912406][ T6480] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 000000000000000a [ 145.920391][ T6480] RBP: 00007fa31b210d69 R08: 0000000000000000 R09: 0000000000000000 [ 145.928465][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.936442][ T6480] R13: 0000000000000001 R14: 00007fa31b3b6080 R15: 00007fff2d342378 [ 145.944414][ T6480] [ 145.947558][ T6480] Modules linked in: [ 145.953258][ T6480] ---[ end trace 0000000000000000 ]--- [ 145.959362][ T6480] RIP: 0010:h5_recv+0x147/0x8c0 [ 145.964241][ T6480] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 1b 1d 59 fa 4d 8b 65 00 31 ff 4c 89 [ 146.013370][ T6480] RSP: 0018:ffffc90005307c60 EFLAGS: 00010202 [ 146.051897][ T28] kauditd_printk_skb: 641 callbacks suppressed [ 146.051911][ T28] audit: type=1326 audit(1753140899.013:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834a98e9a9 code=0x7ffc0000 [ 146.054018][ T6480] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 146.088877][ T6480] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 146.096925][ T6480] RBP: ffffc90005307d80 R08: ffff888025a6001f R09: 1ffff11004b4c003 [ 146.105019][ T6480] R10: dffffc0000000000 R11: ffffed1004b4c004 R12: 0000000000000001 [ 146.113134][ T6480] R13: 00000000000002f8 R14: ffff888025a60010 R15: ffffc90005307e20 [ 146.121206][ T6480] FS: 00007fa31c0086c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 146.130224][ T6480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.137146][ T6480] CR2: 0000000100000001 CR3: 0000000076a94000 CR4: 00000000003526e0 [ 146.145349][ T6480] Kernel panic - not syncing: Fatal exception [ 146.151751][ T6480] Kernel Offset: disabled [ 146.156075][ T6480] Rebooting in 86400 seconds..