last executing test programs: 23m50.785361753s ago: executing program 32 (id=12): ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x3d) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) 23m47.027515398s ago: executing program 33 (id=18): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10000) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000003580)=0xf2c17809, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={'macvlan1\x00', {0x2, 0x4e23, @broadcast}}) r7 = socket(0x10, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000084"], 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 23m31.243655269s ago: executing program 34 (id=26): fspick(0xffffffffffffff9c, 0x0, 0x1) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/150, 0x96) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20600, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$session_to_parent(0x12) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x0, 0x9], [0x8200], 0x1}}}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) prlimit64(0x0, 0x7, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 22m24.406222078s ago: executing program 35 (id=96): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f00000002c0), 0xd, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x80001, @local, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xd8) 20m59.316476456s ago: executing program 36 (id=154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000060000000000000803000000000000000100000408000000030000000100000000000000000000000000000d00000000000000"], 0x0, 0x50, 0x0, 0x1}, 0x28) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x218600, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000680)="a8ae83b781864ddd5a3249e1c4e414948d88fbd1380a96ad5ed50a934dd19cfc4fb13aa89a96bdb0ac01f9495c3ae81e60896482bcc82e48b3776986e7d568de3722548fe90cfc74951376296694ef1e175a3b1ba7a998a00204d6b7d7933d47abf51f91abab4de29d9a9a22e7a52613e3ce00bdfbcb28c47d3d7a65128b27c64b744d0763c31c577a96f9f9e004339cf9bba6e662b3778b038f44daa8d71f6e0ab84f2344fd59e0773c52c8311464b21eaa71f0d4bb40527c66a1e29183f52060e228a20bc5545c2d474ae8e6916f0fdc38", 0xd2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000020000008500000028000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000104b66d050f6f748a688819111fd000000000000b7050000080000008500"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000500)={r4, 0x3, {0x0, 0x0, 0x0, 0x4, 0x835, 0x0, 0x5, 0x1d, 0x19, "8c0a46c31fbcd5b39c20ed07508c4215a7d4253b34a5bd11a59968edadacb9b2ccb8bf89356bb802cf581abeafa41223760a924e968041013a3898a426bd6d29", "c6a4b2b1c838b819c423666b964c8e80cc33a2f0731363f808c19d95af50af321d9d9833092e5bb1cbdf1351356a9fae6f1e2fd944e85cdfdf70022296700784", "888f7cff71a5cd513cb78555e5b605f309cd3d4f799d89100821556a82437ca5", [0x0, 0x8]}}) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/19, 0x13}}], 0x1, 0x45833af92e4b38ff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x2, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_opts(r9, 0x29, 0x1, 0x0, 0x20) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000040)={{0xe}, {0x1, 0x52d}, 0x7, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17m27.958186104s ago: executing program 37 (id=459): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 14m30.56411066s ago: executing program 38 (id=747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_io_uring_setup(0x890, &(0x7f00000010c0)={0x0, 0xc941, 0x400, 0x2, 0x2cb}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) 14m28.877032105s ago: executing program 39 (id=748): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000280)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 13m16.763462485s ago: executing program 40 (id=818): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000000c0), 0x4c, 0x24000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef) 10m25.356971385s ago: executing program 41 (id=958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r2) 9m6.044158569s ago: executing program 42 (id=1035): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 8m54.957200008s ago: executing program 43 (id=1057): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m46.693674595s ago: executing program 44 (id=1069): socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m48.157334541s ago: executing program 45 (id=1283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x260400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005800000000042f9078ac1414bbe0000001248086dd0000000010000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x404c081}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 6m36.736823365s ago: executing program 46 (id=1309): socket$unix(0x1, 0x1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @empty}, 0x2a0}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x2}, 0x50) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) 6m24.199928506s ago: executing program 47 (id=1331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x912b, 0x9, 0x8a4, 0x2, 0x402, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x9, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x8001, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x6, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x1, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x9, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40004, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x5, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7e, 0x2, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0x9a2, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m25.400520313s ago: executing program 48 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x165e, 0x800, 0x1, 0x146}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') fchmod(0xffffffffffffffff, 0xc6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) r6 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') readlinkat(r7, 0x0, &(0x7f00000002c0)=""/204, 0xcc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) 5m15.580189591s ago: executing program 49 (id=1451): syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1586dd60001a1000183afffe8000000000000000000002000000bbfe8800000000000000000000000000010000907800090501fe800000000000"], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @multicast2}, 0x287, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x9, 0xdf9e}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f0000000080), 0x80001, 0x4400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, 0x0, 0x0) 5m14.989661224s ago: executing program 50 (id=1452): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$inet6(0xa, 0x3, 0x26) socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/cpu_byteorder', 0x80, 0xd) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="14000000290001001fbd7000fbdbdf250300"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) socket$netlink(0x10, 0x3, 0x0) 4m12.938064486s ago: executing program 4 (id=1584): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0xa) flock(r2, 0x2) getgroups(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x28, 0x0, 0x20, 0xfd, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0x6, 0x2, 0xd, 0x1}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 4m11.813604337s ago: executing program 4 (id=1589): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setgroups(0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) 4m10.896251284s ago: executing program 4 (id=1591): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0}) 4m10.009597791s ago: executing program 4 (id=1593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4m8.458215265s ago: executing program 4 (id=1595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)="88", 0x1, 0x20000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m7.822564496s ago: executing program 1 (id=1596): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$inet6(0xa, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) 4m7.207438958s ago: executing program 4 (id=1597): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x321a00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) read(r3, &(0x7f0000000080)=""/116, 0xfffffeb2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x7f, 0xab, 0x7, 0x7fe, 0x8, 0x40009, 0x6, 0x4, 0x2c, 0x1f}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109025f00030100000409040000000101"], 0x0) 4m5.188375208s ago: executing program 1 (id=1599): creat(0x0, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 4m3.241346304s ago: executing program 1 (id=1603): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0}) 4m2.18260877s ago: executing program 1 (id=1605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4m1.010809306s ago: executing program 1 (id=1608): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 3m59.623702036s ago: executing program 1 (id=1611): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3m57.287046865s ago: executing program 51 (id=1585): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = fsopen(0x0, 0x1) close(r3) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f000905e702100000fa00090582"], 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) eventfd(0x80000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) 3m55.589795779s ago: executing program 7 (id=1619): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001240)) 3m53.947708247s ago: executing program 7 (id=1621): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) unshare(0x24020400) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 3m52.624890247s ago: executing program 7 (id=1624): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010038bd7001ffdbdf251700000008000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x8841}, 0x4000844) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)={0x58, 0x12, 0x200, 0x70bd2b, 0x25dfdbfd, {0x27, 0xe, 0x6, 0xe, {0x4e22, 0x4e21, [0x1000, 0x10, 0x0, 0x400], [0x6, 0x0, 0x3ff, 0xfffffff9], 0x0, [0x6, 0xfffffffb]}, 0x5f, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) socketpair(0x15, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000300)="68aef8630cc9b744f999287834c7937df94d7b5404937b1633d45708077f48f18077dc027fbab2d3c85e775db333b4792f7800529e5c97f809d28adc26b853fc61e4877269f9502c085ddabee2651dba91abfc513edd44cf60c0a855ca4fe667bec50fcf469901d3d35408881a1dd2d1f2c4e44ce8c8b23c12e9c2cb5734e19baad2289b00df633281f73563a044991c2d38d25ac08217817a2396d7806167a4187b23b0a0965b55de41c8a383453666ffab4546e611661f8527845186042240856b1a0a12a462a6638260f5f014dfd4b7ffa22bf752038f1f7be7ef99802e372304416de66eadebf87175bdb3", 0xed}, {&(0x7f0000000040)="0802f4f486f4536401e0162146820ab5fa07bbe04916cb0fe5cdb5cb11b4586e26ccc444c9", 0x25}, {&(0x7f0000000400)="479e1b7ace8ce41921b0e0868271145ab1b5ab8bdcf6de3a1635521c52546565a232cad3bfbaeaa96c5dd161f0c7628ee12a1f84af1e734f2111a237d427552952dec69ba6897cb02d5d2dca345edfae4f003c789c4f28562bcc0d4c45bf2aded252215f2f3847307905abb754da31c6ef28a69c0100539d1b28be9cb6711bf1f65c4f87776784100c21dc58d65ff066dac7c399309d36e9540f451392c45ebe51f1854378eed5e78f383a49a748ff43eb9a8b6d2e23b95d877f699add951c4681e16c09f707f87cc1b0b768e5cea434551106dcd4f65c7e763eae2578a6e0d0f6774d6e81b92c1099a4a58cefded42f", 0xf0}, {&(0x7f0000000580)="e1b3343765837a36bf78f73fcd10516dcbbb03e9a4268ee656afafa9dce2158096f04adc39670afdfc157b8bee9453d10de9bd04cdb0cfba05fa803002da91ddd9fa8e645da84ef3e7699e4eb145ba7ce5484e0bdbfd1975af008b6c4ec27b56fa63390775fea8b2325eaf751383a60944f7e441a8ce07cf8d06f792f33d4ab0d592e3b176a87a574913ecd23b987905cc5554fcb482a39a2896079e234fd01b31ed952215bb09731b351a2e5126831d8ee81704f4af63df8bad939731125a79a0604bbfc8ab738422115985112dad66e2a110bf632faf1a697a40c79d3db6450d4d912325b4940a77ebfc4f1e57", 0xee}], 0x5) 3m51.542605831s ago: executing program 52 (id=1597): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x321a00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) read(r3, &(0x7f0000000080)=""/116, 0xfffffeb2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x7f, 0xab, 0x7, 0x7fe, 0x8, 0x40009, 0x6, 0x4, 0x2c, 0x1f}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109025f00030100000409040000000101"], 0x0) 3m51.287843799s ago: executing program 7 (id=1627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) syz_emit_ethernet(0x94, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa81003c0086dd60000000005a06fffe80", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 3m49.808010216s ago: executing program 7 (id=1629): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$isdn(0x22, 0x2, 0x3) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) 3m48.634161275s ago: executing program 7 (id=1631): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) 3m43.569534814s ago: executing program 53 (id=1611): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3m33.225883968s ago: executing program 54 (id=1631): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) 2m47.543553858s ago: executing program 6 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff04, 0x0) 2m45.928434247s ago: executing program 6 (id=1685): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) 2m45.030220707s ago: executing program 6 (id=1686): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x59}, {&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) 2m44.088745148s ago: executing program 6 (id=1689): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x9, 0x5, 0x180, 0x4, 0x10, 0xf1, 0x51, 0x7ffffffff7ffe, 0x5, 0x0, 0x40000000000009, 0xc4, 0x8, 0x0, 0xbdb], 0xffff1001, 0x162382}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000180)={0x4, 0xa91, 0x0, &(0x7f0000000280)="3b004519ac01049a4d1130590dd5a1fd90981b11c3037b54e1280b9fb1117a762188097f7d8ecdcb0289674f6dd50d7926885e7c3c642ba7d6ffb5113f5e4ab3529a5ef872cbeee269b59ea2a1f659bd51b59755d97f056fcd6251d23d752fd2c0cb1cf1efbaa521b26debb1f01d1d731419ace946c1acd0112378417531e42007bfc142653faa074ee55d67f38957e2bb5d73a0fd6c3b90e1fa87c12a946b3966a4e8ef96fe08e7225a108d79db121aee2fab3e23539b577f489b9284f58ca66fcde2f345ba78c4c0c527c401844bf974351ba8fae25830c9ee", 0x0, 0xda}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x2}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) 2m30.384344676s ago: executing program 6 (id=1722): syz_io_uring_setup(0x24f9, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x80000000}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r1 = memfd_secret(0x0) ftruncate(r1, 0x5) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) syz_io_uring_submit(r2, r0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1f}}) 2m29.420023062s ago: executing program 6 (id=1727): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x83f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/35}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc000000010902", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x1b) writev(r4, &(0x7f0000001500)=[{}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 2m24.875985886s ago: executing program 9 (id=1737): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 2m23.641555221s ago: executing program 9 (id=1741): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 2m22.691379145s ago: executing program 9 (id=1743): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2m20.779593003s ago: executing program 9 (id=1747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000080)}], 0x2) 2m18.96976811s ago: executing program 9 (id=1753): unshare(0x2a020480) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 2m17.885450862s ago: executing program 9 (id=1756): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x163eb1b24d6be96d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/vmcoreinfo', 0x0, 0x44) r4 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 2m13.817253969s ago: executing program 55 (id=1727): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x83f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/35}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc000000010902", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x1b) writev(r4, &(0x7f0000001500)=[{}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 2m2.000532131s ago: executing program 56 (id=1756): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x163eb1b24d6be96d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/vmcoreinfo', 0x0, 0x44) r4 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1m0.324517534s ago: executing program 0 (id=1870): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee", 0x9}], 0x1}}], 0x1, 0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 59.276741035s ago: executing program 0 (id=1875): socket$can_bcm(0x1d, 0x2, 0x2) accept$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00 \x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendto$packet(r4, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 57.806665984s ago: executing program 0 (id=1879): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) 56.876448315s ago: executing program 0 (id=1881): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 55.899684448s ago: executing program 0 (id=1884): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x401, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee", 0x9}], 0x1}}], 0x1, 0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 54.903020795s ago: executing program 0 (id=1888): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000580)={0x0, 0x88af, 0x800, 0x2, 0x67}, &(0x7f0000000240)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) close(0xffffffffffffffff) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) socketpair(0xa, 0x800, 0x7, &(0x7f0000001140)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000005240)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="9dc93995974f2ef1", 0x8}], 0x2, &(0x7f0000000600)}}, {{0x0, 0x0, &(0x7f0000000b00)}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)="a64af732b094e03eff367b2e0037188c33b963ae6c82179ca094e2f425f71f42888fbd5b587a64ac1e2ed1d93467138e2b7b50a8d061bebf131782a7bfaab31008", 0x41}, {&(0x7f0000000540)="05a88cf1aeae77d024", 0x9}, {&(0x7f0000000c00)="f2b4166a562bfb16a14af357df01d0ef03b617a41e296b60e707e9977e6d5cb060c03988deb1c89c7b64c90fc7593e1b041eacae44e1f099667a4d046ee384853595272320aeedcd1c7844d7850c735ffced8f30efcb", 0x56}, {&(0x7f0000000c80)}, {&(0x7f0000000d00)="a4ef588a27b889e6358f48fe7b48c90d32218439b7f8f9d437ca8bb97cb9876ffa0d", 0x22}, {0x0}, {&(0x7f0000000e40)="40cfef28a9c1930b04e4aa9649e64cd9281af2e5c203cd27fcb2a54410c129b865e4ebfa2db9f14053e41610b73a5a739a3f12f32607abc69d2397ba216b897c830905a022ed5f5be83452ca4f5a01639771beab88774c8a85be63dd85bbb31c90b18f7d21255380f4135a3a5eb73ad5e00e84a63e0a57ae072c035fec7ff62b07916a55234dbd1244bc93b9ab0ac26d550d309556d0580530e549ccdb48a2caeffc2f9afcd1c8ede0efb756d240e087b900c350e3d415bf54b1ec7ad1632d0f8391c6b00f235aa666259317f387fce2403ed563ac088ba4f5d27ad407bfff0ac794fca9cfcc2e48c55fe7de0ce4", 0xee}], 0x7, &(0x7f0000001480)=[{0xc0, 0x10c, 0x7, "0c817ed203a251fc62906903a6d7eeafb7c33e72e78c409f58ef5c007c82fc9f6e9c06221bbc9361d1c306dbe4e3456e355672da4ef2adba2816a41f0c4768491a4bbae7e1ad7fc30979715e068f03dc49b77dc2a5e42b441145ea82a1be39ffdea200dedf3accddaafb85427db8371450466c984938fe772fc8a3b6c7cb5e19a45242d04701d2ee563cf82e25aeda0574dd0811652bc8f723dd770061edbee9356ccdd871692b913885b6"}, {0x90, 0x11, 0x3, "a58bbda9e8b15d567d49edcebfe996f0c85e9bb62534e6822859be2526335eacc1e7a2fb458cafc40f683b0f82ccad718f2e56c26e2cea00a1dee162d2decf08fe0a06d02316d81d73dae9e1812c77aba5684e8e6a2d256fa5aa6a7f495848be4bd037109882e3e29f2ecc8e4f1bfd09af8c93cfe718d276655b6232"}, {0xb8, 0x103, 0x0, "8b2faaf8ae7e71de60d6f238f84db1ce8dedd71d49ce2d3807204cb8cb1ad1c5fdcfabd1f737e8c2c8f93e08ab51844466b8686f1b87cdd783997417ec82e23b28da991dd91cc5dfd0458ff0601116054eb5567ec6ab532b3d18eb98033f971cf2a2ddc30a740d2bdca9b16baa5a34d936bc64f3b5461664fe7953addcaa1a938a25e8d78c42cbfbe9a173d1924e133ed4aa138f8da9617995a0b336b3a8e6ba8ab7db2e8aa36f"}, {0x28, 0x1, 0x3, "af32360d8d9796d325fb7719410f74981ffea7"}, {0x10, 0x118, 0x7ff}, {0x50, 0x108, 0x8, "394c1ff2ee8b2ec8a9f57d82cd0b3380e8bf150cfe60139147b2681f99e82246f3627369bb47c5fd5f3ffcf71836e08ae480ca1315a764e9313fac9af7e81ec7"}, {0xd0, 0x115, 0x7f, "0ca0ae52f45964d5832e227e450f2fa071ac77d4860648a87733a56e959bee4af63f7f359b6f8838faebb9d5a18f7754950ef2bab8196060d4c71bfe3afecb91c1ea904edf8cf8fec8918b774e36e31ad4384e6310c0a64105b32a864706e604d706a2ca6b54660bea7e55eff706cfd7ca014724c598c6682cc5380fcf6ff4cb79123c255041cab41d9e3d32d20e49798eab3b1e0fec24884c022a30115cdeb87f001aadc5fe7bbde13d945e6278be4f9810f2cdf7f27b5c502310218ec979"}], 0x360}}, {{&(0x7f0000000fc0)=@ethernet={0x306, @local}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)="5d3185ac867fa1a578dec06fb5bb6c58adf08cb5291ffa7b14bbf6fbc43192fc2c6abe56e9d22d1b99c398b88948a950bc2658df4c4c2539dffdd43355436a0b569c0b605978e768c9af6dddaece46c6561b71b61c7bf48f2f1995", 0x5b}, {&(0x7f00000010c0)="88bac665c95dad7533f221b98649c15f061b267a1baa954edbe79d01e5823949298ccc78b69f7045f0f33adbf43a0a3ba1518e8cd0332c", 0x37}], 0x2}}, {{&(0x7f0000001180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x40000004, 0x3, 0x0, 0x3, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000001200)="62ae18ddac9f515c25e76b84b426555eb58a60b82c67663530e54117b11693e9cb9b570cbff7cadeeed99814471f661dc4e7d77d0ab688c25dd41eb5d30335c40ab7359bba89fb591c2d6b5363cb33ffbd635d7c2ca121eb43965e6ef93749b0e44a326a07e84e6f1f0817eb95608e8575be5e1c3d71e37ca0fd0e283eec4188770a1dad13a4d4c99841c926d77e89c679ed8a80394cb23798e8622dfb79eb70eed889ddee7e13254e55cda4e83601b13022d7d9c729", 0xb6}, {&(0x7f00000012c0)="843500039268820fadca87716e4b7aa243c15a315cab08f9751c8ce6af50e8393a4421d6270b635e54763202cb268939b4a534a4264fd6666243a8054f7743973ff9fd13511d246307475b273b405e18f174d2f6fb563224d28eabd99ca7f752530c6e5e838c4439bb0780da46abbb4062627740bbae5426c70d453e13d3d90c64f8377ab1bbcf8dce975849bd47c34a4477f56c966836b9428407129a16c09dee9bc7ed62070eb9cf5e4b08f1205d1091039dafafc00bf33385d02a68861dab93db26f024a51bcf8a33641dd8fa5807621fe9d87208f710eb", 0xd9}, {&(0x7f0000002940)="8c348388275bf705ab2d5db6723d818628f4e93928d456e55fb1c85b84d151ee84ae1b17fe791551f83a41818a465b3bb3d04f2461a09a19d3cc6bab01eb20641c2f2f8c1172d3d0989f60d8860dc5c94a4009e6d456c495bc261407d04f3f13b3b7913576b4a0adedd6e7f0c476ed6838b7039e7cc75007", 0x78}, {&(0x7f00000029c0)="4706f83e9a8e8cb4102316aa7b3e79c10721197a701bdeb6eb69de82a23e78d4b18d2a2f2fe6e944fa13b387ecf0a8db8ccbdb5d750f388645d8019a8cbe8d80", 0x40}, {&(0x7f0000002a00)}, {0x0}, {&(0x7f0000002b00)="8e69ace5082ef7d27d48062647723723", 0x10}], 0x8, &(0x7f0000002bc0)=[{0xd0, 0x11, 0xffffff01, "2cfa556f22f89f4858ad3bc60f3ed073e0adec52d0c53ed615eba9e3f188b0ecb703cad62c9e7eeb5710d67f719c737df9cd4d5a488fb476d1d37b88fa78a09a62d15f2a68b3a5c9ea706297c052b4907d589cce52d9ef7b23d40126cf389a0051fb6269e69ba41b84895444f156334c98a69b3583404dbb6821cb4864ba205ff75b430525c98336467d4d3a03c9985f1a40c05b9f60ff54da331bfb4d3a3345c45bc77837d46d1b62528f526c2fc7c4278cfabd6eefcc4d3df57fb8158c8c"}], 0xd0}}], 0x5, 0x204c041) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r9, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r10, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r10, 0x7a4, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 39.205276167s ago: executing program 57 (id=1888): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000580)={0x0, 0x88af, 0x800, 0x2, 0x67}, &(0x7f0000000240)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) close(0xffffffffffffffff) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) socketpair(0xa, 0x800, 0x7, &(0x7f0000001140)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000005240)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="9dc93995974f2ef1", 0x8}], 0x2, &(0x7f0000000600)}}, {{0x0, 0x0, &(0x7f0000000b00)}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)="a64af732b094e03eff367b2e0037188c33b963ae6c82179ca094e2f425f71f42888fbd5b587a64ac1e2ed1d93467138e2b7b50a8d061bebf131782a7bfaab31008", 0x41}, {&(0x7f0000000540)="05a88cf1aeae77d024", 0x9}, {&(0x7f0000000c00)="f2b4166a562bfb16a14af357df01d0ef03b617a41e296b60e707e9977e6d5cb060c03988deb1c89c7b64c90fc7593e1b041eacae44e1f099667a4d046ee384853595272320aeedcd1c7844d7850c735ffced8f30efcb", 0x56}, {&(0x7f0000000c80)}, {&(0x7f0000000d00)="a4ef588a27b889e6358f48fe7b48c90d32218439b7f8f9d437ca8bb97cb9876ffa0d", 0x22}, {0x0}, {&(0x7f0000000e40)="40cfef28a9c1930b04e4aa9649e64cd9281af2e5c203cd27fcb2a54410c129b865e4ebfa2db9f14053e41610b73a5a739a3f12f32607abc69d2397ba216b897c830905a022ed5f5be83452ca4f5a01639771beab88774c8a85be63dd85bbb31c90b18f7d21255380f4135a3a5eb73ad5e00e84a63e0a57ae072c035fec7ff62b07916a55234dbd1244bc93b9ab0ac26d550d309556d0580530e549ccdb48a2caeffc2f9afcd1c8ede0efb756d240e087b900c350e3d415bf54b1ec7ad1632d0f8391c6b00f235aa666259317f387fce2403ed563ac088ba4f5d27ad407bfff0ac794fca9cfcc2e48c55fe7de0ce4", 0xee}], 0x7, &(0x7f0000001480)=[{0xc0, 0x10c, 0x7, "0c817ed203a251fc62906903a6d7eeafb7c33e72e78c409f58ef5c007c82fc9f6e9c06221bbc9361d1c306dbe4e3456e355672da4ef2adba2816a41f0c4768491a4bbae7e1ad7fc30979715e068f03dc49b77dc2a5e42b441145ea82a1be39ffdea200dedf3accddaafb85427db8371450466c984938fe772fc8a3b6c7cb5e19a45242d04701d2ee563cf82e25aeda0574dd0811652bc8f723dd770061edbee9356ccdd871692b913885b6"}, {0x90, 0x11, 0x3, "a58bbda9e8b15d567d49edcebfe996f0c85e9bb62534e6822859be2526335eacc1e7a2fb458cafc40f683b0f82ccad718f2e56c26e2cea00a1dee162d2decf08fe0a06d02316d81d73dae9e1812c77aba5684e8e6a2d256fa5aa6a7f495848be4bd037109882e3e29f2ecc8e4f1bfd09af8c93cfe718d276655b6232"}, {0xb8, 0x103, 0x0, "8b2faaf8ae7e71de60d6f238f84db1ce8dedd71d49ce2d3807204cb8cb1ad1c5fdcfabd1f737e8c2c8f93e08ab51844466b8686f1b87cdd783997417ec82e23b28da991dd91cc5dfd0458ff0601116054eb5567ec6ab532b3d18eb98033f971cf2a2ddc30a740d2bdca9b16baa5a34d936bc64f3b5461664fe7953addcaa1a938a25e8d78c42cbfbe9a173d1924e133ed4aa138f8da9617995a0b336b3a8e6ba8ab7db2e8aa36f"}, {0x28, 0x1, 0x3, "af32360d8d9796d325fb7719410f74981ffea7"}, {0x10, 0x118, 0x7ff}, {0x50, 0x108, 0x8, "394c1ff2ee8b2ec8a9f57d82cd0b3380e8bf150cfe60139147b2681f99e82246f3627369bb47c5fd5f3ffcf71836e08ae480ca1315a764e9313fac9af7e81ec7"}, {0xd0, 0x115, 0x7f, "0ca0ae52f45964d5832e227e450f2fa071ac77d4860648a87733a56e959bee4af63f7f359b6f8838faebb9d5a18f7754950ef2bab8196060d4c71bfe3afecb91c1ea904edf8cf8fec8918b774e36e31ad4384e6310c0a64105b32a864706e604d706a2ca6b54660bea7e55eff706cfd7ca014724c598c6682cc5380fcf6ff4cb79123c255041cab41d9e3d32d20e49798eab3b1e0fec24884c022a30115cdeb87f001aadc5fe7bbde13d945e6278be4f9810f2cdf7f27b5c502310218ec979"}], 0x360}}, {{&(0x7f0000000fc0)=@ethernet={0x306, @local}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)="5d3185ac867fa1a578dec06fb5bb6c58adf08cb5291ffa7b14bbf6fbc43192fc2c6abe56e9d22d1b99c398b88948a950bc2658df4c4c2539dffdd43355436a0b569c0b605978e768c9af6dddaece46c6561b71b61c7bf48f2f1995", 0x5b}, {&(0x7f00000010c0)="88bac665c95dad7533f221b98649c15f061b267a1baa954edbe79d01e5823949298ccc78b69f7045f0f33adbf43a0a3ba1518e8cd0332c", 0x37}], 0x2}}, {{&(0x7f0000001180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x40000004, 0x3, 0x0, 0x3, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000001200)="62ae18ddac9f515c25e76b84b426555eb58a60b82c67663530e54117b11693e9cb9b570cbff7cadeeed99814471f661dc4e7d77d0ab688c25dd41eb5d30335c40ab7359bba89fb591c2d6b5363cb33ffbd635d7c2ca121eb43965e6ef93749b0e44a326a07e84e6f1f0817eb95608e8575be5e1c3d71e37ca0fd0e283eec4188770a1dad13a4d4c99841c926d77e89c679ed8a80394cb23798e8622dfb79eb70eed889ddee7e13254e55cda4e83601b13022d7d9c729", 0xb6}, {&(0x7f00000012c0)="843500039268820fadca87716e4b7aa243c15a315cab08f9751c8ce6af50e8393a4421d6270b635e54763202cb268939b4a534a4264fd6666243a8054f7743973ff9fd13511d246307475b273b405e18f174d2f6fb563224d28eabd99ca7f752530c6e5e838c4439bb0780da46abbb4062627740bbae5426c70d453e13d3d90c64f8377ab1bbcf8dce975849bd47c34a4477f56c966836b9428407129a16c09dee9bc7ed62070eb9cf5e4b08f1205d1091039dafafc00bf33385d02a68861dab93db26f024a51bcf8a33641dd8fa5807621fe9d87208f710eb", 0xd9}, {&(0x7f0000002940)="8c348388275bf705ab2d5db6723d818628f4e93928d456e55fb1c85b84d151ee84ae1b17fe791551f83a41818a465b3bb3d04f2461a09a19d3cc6bab01eb20641c2f2f8c1172d3d0989f60d8860dc5c94a4009e6d456c495bc261407d04f3f13b3b7913576b4a0adedd6e7f0c476ed6838b7039e7cc75007", 0x78}, {&(0x7f00000029c0)="4706f83e9a8e8cb4102316aa7b3e79c10721197a701bdeb6eb69de82a23e78d4b18d2a2f2fe6e944fa13b387ecf0a8db8ccbdb5d750f388645d8019a8cbe8d80", 0x40}, {&(0x7f0000002a00)}, {0x0}, {&(0x7f0000002b00)="8e69ace5082ef7d27d48062647723723", 0x10}], 0x8, &(0x7f0000002bc0)=[{0xd0, 0x11, 0xffffff01, "2cfa556f22f89f4858ad3bc60f3ed073e0adec52d0c53ed615eba9e3f188b0ecb703cad62c9e7eeb5710d67f719c737df9cd4d5a488fb476d1d37b88fa78a09a62d15f2a68b3a5c9ea706297c052b4907d589cce52d9ef7b23d40126cf389a0051fb6269e69ba41b84895444f156334c98a69b3583404dbb6821cb4864ba205ff75b430525c98336467d4d3a03c9985f1a40c05b9f60ff54da331bfb4d3a3345c45bc77837d46d1b62528f526c2fc7c4278cfabd6eefcc4d3df57fb8158c8c"}], 0xd0}}], 0x5, 0x204c041) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r9, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r10, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r10, 0x7a4, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 23.74965184s ago: executing program 2 (id=1932): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x5, 0x8, &(0x7f0000000240)={0xb, "a52422ffd60775c221c4031d467d6648a97569b7d49cc47882d49a00000000ff00"}}) 20.818143014s ago: executing program 2 (id=1934): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000580)={0x0, 0x88af, 0x800, 0x2, 0x67}, &(0x7f0000000240)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 20.768817617s ago: executing program 8 (id=1935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = fsopen(0x0, 0x0) fcntl$lock(r2, 0x5, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x42, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000005140500000000000000000008003d0000000000080003000000000008003d00000000000800030000"], 0x50}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980), 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e000000013"], 0xe0}}, 0x0) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="10000000000000d2ac25030000000900030073797a30000000000900010073797a30000000000900010073797a3000004000"], 0x38}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 19.971522303s ago: executing program 2 (id=1937): unshare(0x22020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) shutdown(r0, 0x1) 18.908997782s ago: executing program 2 (id=1939): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x36003) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x10001) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17.624725304s ago: executing program 2 (id=1941): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000600)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 16.036043932s ago: executing program 2 (id=1944): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fremovexattr(r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x3, 0x1, 0xe0e, 0x4, 0xf, 0xfffffffffffffffa, 0x7f5d3dc9, 0x0, 0x2, 0x9, 0x9, 0x0, 0x2, 0x8, 0x2b48], 0xd5dd0000, 0x181204}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x4, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat(r7, &(0x7f0000000180)='./file0\x00', 0xd40, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) 12.877661478s ago: executing program 5 (id=1946): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000580)={0x0, 0x88af, 0x800, 0x2, 0x67}, &(0x7f0000000240)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11.70550099s ago: executing program 5 (id=1947): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 10.390658934s ago: executing program 5 (id=1948): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x17d}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x21, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.353397935s ago: executing program 5 (id=1950): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x80c, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x80800}) listen(r1, 0x5) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.465553465s ago: executing program 3 (id=1952): socket$can_bcm(0x1d, 0x2, 0x2) accept$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendto$packet(r4, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6.854138423s ago: executing program 8 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYBLOB="0008000007500500580012800b000100627269646765000048000280"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.20355628s ago: executing program 3 (id=1954): socket$vsock_stream(0x28, 0x1, 0x0) socket(0x1d, 0x2, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r1], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 6.0935053s ago: executing program 8 (id=1955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) 3.685275354s ago: executing program 8 (id=1956): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000580)={0x0, 0x88af, 0x800, 0x2, 0x67}, &(0x7f0000000240)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.390693881s ago: executing program 3 (id=1957): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.876342052s ago: executing program 5 (id=1958): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.498603062s ago: executing program 8 (id=1959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x4000800) 2.304719429s ago: executing program 3 (id=1960): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) 1.325656515s ago: executing program 3 (id=1961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.220761374s ago: executing program 8 (id=1962): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x4, &(0x7f0000000100)={0x17, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04db517b5452b3b94bce47509d"}}) 144.677021ms ago: executing program 58 (id=1944): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fremovexattr(r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x3, 0x1, 0xe0e, 0x4, 0xf, 0xfffffffffffffffa, 0x7f5d3dc9, 0x0, 0x2, 0x9, 0x9, 0x0, 0x2, 0x8, 0x2b48], 0xd5dd0000, 0x181204}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x4, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat(r7, &(0x7f0000000180)='./file0\x00', 0xd40, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) 39.100122ms ago: executing program 3 (id=1964): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x487, 0x0, 0x8000000000000001}]}) 0s ago: executing program 5 (id=1965): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) landlock_restrict_self(r0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) kernel console output (not intermixed with test programs): [ 1388.152754][ T7285] usb 6-1: USB disconnect, device number 28 [ 1388.467197][T11224] udevd[11224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1388.558354][T11478] team0 (unregistering): Port device team_slave_1 removed [ 1388.617204][T11478] team0 (unregistering): Port device team_slave_0 removed [ 1389.362067][T13304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.369255][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.396071][T13304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.421985][T13306] team0: Port device team_slave_0 added [ 1389.581483][T13306] team0: Port device team_slave_1 added [ 1390.099682][T13306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.107047][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.135812][T13306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.221472][T13304] hsr_slave_0: entered promiscuous mode [ 1390.232472][T13304] hsr_slave_1: entered promiscuous mode [ 1390.243420][T13304] debugfs: 'hsr0' already exists in 'hsr' [ 1390.249387][T13304] Cannot create hsr debugfs directory [ 1390.260690][T13247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1390.306174][T13306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.313642][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.340589][T13306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.353539][T13247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1390.510819][T13247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1390.585670][T11478] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.744949][T13247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1390.876587][T11478] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.010733][ T30] audit: type=1800 audit(1766694523.815:11): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1492" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1391.244639][T11478] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.349725][T13306] hsr_slave_0: entered promiscuous mode [ 1391.360609][T13306] hsr_slave_1: entered promiscuous mode [ 1391.369611][T13306] debugfs: 'hsr0' already exists in 'hsr' [ 1391.375732][T13306] Cannot create hsr debugfs directory [ 1391.479226][T11478] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.721904][T11478] bridge_slave_1: left allmulticast mode [ 1392.736243][T11478] bridge_slave_1: left promiscuous mode [ 1392.743637][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.794143][T11478] bridge_slave_0: left allmulticast mode [ 1392.800294][T11478] bridge_slave_0: left promiscuous mode [ 1392.806946][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.173299][T13423] netlink: 'syz.5.1498': attribute type 10 has an invalid length. [ 1393.357516][T11478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.376807][T11478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.395342][T11478] bond0 (unregistering): Released all slaves [ 1393.572415][T13423] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.588780][T13423] bond0: (slave team0): Enslaving as an active interface with an up link [ 1394.583062][T13304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1394.748416][T11478] hsr_slave_0: left promiscuous mode [ 1394.778582][T11478] hsr_slave_1: left promiscuous mode [ 1394.787321][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.795250][T11478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.839442][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.847513][T11478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.883435][T11478] veth1_macvtap: left promiscuous mode [ 1394.889525][T11478] veth0_macvtap: left promiscuous mode [ 1394.895628][T11478] veth1_vlan: left promiscuous mode [ 1394.901306][T11478] veth0_vlan: left promiscuous mode [ 1395.703867][T11478] team0 (unregistering): Port device team_slave_1 removed [ 1395.761795][T11478] team0 (unregistering): Port device team_slave_0 removed [ 1396.357051][T13304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1396.507264][T13304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1396.678342][T13304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1396.778204][T13247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.040639][T13247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.253859][T13448] netlink: 'syz.1.1507': attribute type 10 has an invalid length. [ 1397.289497][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.297164][T11476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.354399][T13448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.370644][T13448] bond0: (slave team0): Enslaving as an active interface with an up link [ 1397.460252][ T5858] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1397.524970][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.532632][T11476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.575539][T13306] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1397.620151][ T5858] usb 6-1: device descriptor read/64, error -71 [ 1397.663348][T13306] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1397.714487][T13306] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1397.825343][T13306] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1397.895331][ T5858] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1398.085871][ T5858] usb 6-1: device descriptor read/64, error -71 [ 1398.230520][ T5858] usb usb6-port1: attempt power cycle [ 1398.393491][T13304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.644724][T13304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.666478][ T5858] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1398.756067][ T5858] usb 6-1: device descriptor read/8, error -71 [ 1398.791057][ T4759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.798601][ T4759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.959426][ T4759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.967136][ T4759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.030930][ T5858] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1399.103792][ T5858] usb 6-1: device descriptor read/8, error -71 [ 1399.243212][ T5858] usb usb6-port1: unable to enumerate USB device [ 1399.503512][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.819202][T13306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.939299][T11492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.947005][T11492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.077324][T11492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.085048][T11492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.784721][T13247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.682604][T13247] veth0_vlan: entered promiscuous mode [ 1401.855525][T13247] veth1_vlan: entered promiscuous mode [ 1402.253589][T13304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.272099][T13247] veth0_macvtap: entered promiscuous mode [ 1402.333824][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1402.340983][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1402.369747][T13247] veth1_macvtap: entered promiscuous mode [ 1402.647671][T13247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.792231][T13247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.927340][T11476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.011779][T11492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.063242][T11472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.097509][T13485] netlink: 'syz.5.1515': attribute type 10 has an invalid length. [ 1403.133670][T11472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.193313][T13306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.637993][T13491] batman_adv: batadv0: Adding interface: dummy0 [ 1403.645872][T13491] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.672427][T13491] batman_adv: batadv0: Interface activated: dummy0 [ 1403.877511][T13494] net_ratelimit: 30 callbacks suppressed [ 1403.877604][T13494] batadv0: mtu less than device minimum [ 1403.894121][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.907317][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.920700][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.934051][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.947238][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.960596][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.973947][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1403.987094][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1404.000480][T13494] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1405.773423][T13304] veth0_vlan: entered promiscuous mode [ 1405.944742][T13304] veth1_vlan: entered promiscuous mode [ 1406.377359][T13304] veth0_macvtap: entered promiscuous mode [ 1406.489386][T13304] veth1_macvtap: entered promiscuous mode [ 1406.811026][T13304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.902666][T13306] veth0_vlan: entered promiscuous mode [ 1406.947054][T13304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.075338][ T4154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.107149][ T4154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.178221][T13306] veth1_vlan: entered promiscuous mode [ 1407.195729][ T4154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.267588][ T4154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.659435][T13306] veth0_macvtap: entered promiscuous mode [ 1407.799045][T13306] veth1_macvtap: entered promiscuous mode [ 1408.159053][T13306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.283392][T13306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.398669][ T4154] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.474110][ T4154] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.567980][ T4154] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.646205][ T4154] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.090491][ T5858] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1411.450266][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 1411.540544][ T5858] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1411.549164][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.560025][ T5858] usb 2-1: config 0 has no interfaces? [ 1411.718375][ T5858] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1411.728926][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.738277][ T5858] usb 2-1: Product: syz [ 1411.742791][ T5858] usb 2-1: Manufacturer: syz [ 1411.747595][ T5858] usb 2-1: SerialNumber: syz [ 1411.946202][ T5858] usb 2-1: config 0 descriptor?? [ 1412.263215][T13591] binder: 13590:13591 ioctl c0306201 0 returned -14 [ 1412.980906][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.989088][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.313376][ T4043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.322521][ T4043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.014070][T11476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.025049][T11476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.288316][T11492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.296507][T11492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.436542][T11472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.445685][T11472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.950105][ T4759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.958158][ T4759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.590283][T11723] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1419.720513][ T8653] Bluetooth: hci4: command 0x0406 tx timeout [ 1419.809457][T11723] usb 3-1: device descriptor read/64, error -71 [ 1420.090291][T11723] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1420.290702][T11723] usb 3-1: device descriptor read/64, error -71 [ 1420.421784][T11723] usb usb3-port1: attempt power cycle [ 1420.855420][T11723] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1420.963335][T11723] usb 3-1: device descriptor read/8, error -71 [ 1421.148344][T11005] usb 2-1: USB disconnect, device number 15 [ 1421.240938][T11723] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1421.363398][T11723] usb 3-1: device descriptor read/8, error -71 [ 1421.550641][T11723] usb usb3-port1: unable to enumerate USB device [ 1422.928997][T13679] syz_tun: entered allmulticast mode [ 1423.080768][T13676] syz_tun: left allmulticast mode [ 1423.290335][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1423.516844][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 1423.578970][ T5858] usb 5-1: config 0 has no interfaces? [ 1423.604725][ T5858] usb 5-1: config 0 has no interfaces? [ 1423.661461][ T5858] usb 5-1: config 0 has no interfaces? [ 1423.708140][ T5858] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1423.717753][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.726482][ T5858] usb 5-1: Product: syz [ 1423.730990][ T5858] usb 5-1: Manufacturer: syz [ 1423.735799][ T5858] usb 5-1: SerialNumber: syz [ 1423.913205][ T5858] usb 5-1: config 0 descriptor?? [ 1424.152198][T11723] usb 5-1: USB disconnect, device number 2 [ 1426.159368][T11723] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1426.372265][T11723] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.382962][T11723] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1426.429363][T13716] syz_tun: entered allmulticast mode [ 1426.476588][T11723] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1426.486696][T11723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1426.495406][T11723] usb 6-1: SerialNumber: syz [ 1426.541772][T13713] syz_tun: left allmulticast mode [ 1426.770031][T13719] loop2: detected capacity change from 0 to 7 [ 1426.784567][T13719] loop2: [ 1426.787784][T13719] loop2: partition table partially beyond EOD, truncated [ 1426.857005][T11723] usb 6-1: 0:2 : does not exist [ 1427.192218][T11723] usb 6-1: USB disconnect, device number 33 [ 1427.908821][T11224] udevd[11224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1429.612725][T13754] syz_tun: entered allmulticast mode [ 1429.727638][T13752] syz_tun: left allmulticast mode [ 1429.971485][ T8653] Bluetooth: hci5: command 0x0406 tx timeout [ 1431.001773][ T5858] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1431.012748][T13771] bridge0: port 3(gretap0) entered blocking state [ 1431.019732][T13771] bridge0: port 3(gretap0) entered disabled state [ 1431.033061][T13771] gretap0: entered allmulticast mode [ 1431.042243][T13771] gretap0: entered promiscuous mode [ 1431.049467][T13771] bridge0: port 3(gretap0) entered blocking state [ 1431.056336][T13771] bridge0: port 3(gretap0) entered forwarding state [ 1431.281070][ T5858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.291970][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1431.411247][ T5858] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1431.421631][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1431.430119][ T5858] usb 6-1: SerialNumber: syz [ 1431.884871][ T5858] usb 6-1: 0:2 : does not exist [ 1432.168063][ T5858] usb 6-1: USB disconnect, device number 34 [ 1432.939473][T11224] udevd[11224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.170560][T13799] syz_tun: entered allmulticast mode [ 1434.328201][T13798] syz_tun: left allmulticast mode [ 1436.580254][T11723] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1436.928494][T11723] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1436.937746][T11723] usb 6-1: config 0 has no interface number 0 [ 1436.944239][T11723] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1436.956461][T11723] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1436.970287][T11723] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1437.660203][T11005] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1438.016391][T11005] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.027205][T11005] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1438.199278][T11005] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1438.208901][T11005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1438.217328][T11005] usb 3-1: SerialNumber: syz [ 1438.652843][T11005] usb 3-1: 0:2 : does not exist [ 1438.982155][T11005] usb 3-1: USB disconnect, device number 22 [ 1440.153146][T11224] udevd[11224]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1442.007442][ T5858] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1442.322486][T11723] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1442.332285][T11723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.340809][T11723] usb 6-1: Product: syz [ 1442.454627][T11723] usb 6-1: config 0 descriptor?? [ 1442.528519][T11723] usb 6-1: can't set config #0, error -32 [ 1442.815613][ T5858] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.826040][ T5858] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1444.474232][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1604'. [ 1446.287966][T13881] syz_tun: entered allmulticast mode [ 1446.393774][T13880] syz_tun: left allmulticast mode [ 1447.926506][ T5858] usb 5-1: string descriptor 0 read error: -32 [ 1447.933949][ T5858] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1447.943498][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.337768][ T5858] usb 5-1: can't set config #1, error -32 [ 1450.408117][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 1450.417585][T13915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1616'. [ 1451.715899][ T8653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1451.725375][ T8653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1451.741215][ T8653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1451.755176][ T8653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1451.771232][ T8653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1453.672398][T13926] chnl_net:caif_netlink_parms(): no params data found [ 1453.810981][ T8653] Bluetooth: hci1: command tx timeout [ 1455.900198][ T8653] Bluetooth: hci1: command tx timeout [ 1455.982655][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1627'. [ 1455.992693][T13955] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1627'. [ 1456.747962][T13926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.755862][T13926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.764226][T13926] bridge_slave_0: entered allmulticast mode [ 1456.773579][T13926] bridge_slave_0: entered promiscuous mode [ 1456.792777][T13926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.800773][T13926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.808524][T13926] bridge_slave_1: entered allmulticast mode [ 1456.819419][T13926] bridge_slave_1: entered promiscuous mode [ 1457.601938][T13926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.918571][T13926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.980465][ T5858] usb 6-1: USB disconnect, device number 35 [ 1457.990885][ T8653] Bluetooth: hci1: command tx timeout [ 1458.395483][T13307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1458.407315][T13307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1458.421538][T13307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1458.435826][T13307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1458.447673][T13307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1458.494782][ T4759] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.527346][T13926] team0: Port device team_slave_0 added [ 1458.633684][ T4759] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.792640][ T4759] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.925351][T13926] team0: Port device team_slave_1 added [ 1459.095881][ T4759] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.110518][ T30] audit: type=1326 audit(1766694591.905:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.133779][ T30] audit: type=1326 audit(1766694591.905:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.520065][ T30] audit: type=1326 audit(1766694592.055:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.543155][ T30] audit: type=1326 audit(1766694592.055:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.566691][ T30] audit: type=1326 audit(1766694592.055:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.589563][ T30] audit: type=1326 audit(1766694592.095:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.616416][ T30] audit: type=1326 audit(1766694592.105:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.640827][ T30] audit: type=1326 audit(1766694592.105:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.664108][ T30] audit: type=1326 audit(1766694592.105:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1459.687286][ T30] audit: type=1326 audit(1766694592.125:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9532d8ec29 code=0x7ffc0000 [ 1460.120644][T13307] Bluetooth: hci1: command tx timeout [ 1460.179418][T13926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.186723][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.218431][T13926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.560248][ T8653] Bluetooth: hci3: command tx timeout [ 1460.631632][T13926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.638891][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.665523][T13926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.990687][ T4759] bridge_slave_1: left allmulticast mode [ 1461.996581][ T4759] bridge_slave_1: left promiscuous mode [ 1462.005334][ T4759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.176696][ T4759] bridge_slave_0: left allmulticast mode [ 1462.182872][ T4759] bridge_slave_0: left promiscuous mode [ 1462.189541][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.720175][T13307] Bluetooth: hci3: command tx timeout [ 1462.804499][ T4759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.828033][ T4759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.878695][ T4759] bond0 (unregistering): (slave team0): Releasing backup interface [ 1462.901866][ T4759] bond0 (unregistering): Released all slaves [ 1462.967442][T13926] hsr_slave_0: entered promiscuous mode [ 1462.987788][T13926] hsr_slave_1: entered promiscuous mode [ 1462.997117][T13926] debugfs: 'hsr0' already exists in 'hsr' [ 1463.003877][T13926] Cannot create hsr debugfs directory [ 1463.226124][T13966] chnl_net:caif_netlink_parms(): no params data found [ 1463.762516][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.769643][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1464.760672][T13307] Bluetooth: hci3: command tx timeout [ 1465.150477][ T4759] hsr_slave_0: left promiscuous mode [ 1465.203588][ T4759] hsr_slave_1: left promiscuous mode [ 1465.211977][ T4759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.219675][ T4759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.437720][ T4759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.445660][ T4759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.620593][ T4759] veth1_macvtap: left promiscuous mode [ 1465.626454][ T4759] veth0_macvtap: left promiscuous mode [ 1465.639361][ T4759] veth1_vlan: left promiscuous mode [ 1465.648237][ T4759] veth0_vlan: left promiscuous mode [ 1465.801748][ T8653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1465.812196][ T8653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1465.822247][ T8653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1465.840485][ T8653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1465.853629][ T8653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1466.814125][ T4759] team0 (unregistering): Port device team_slave_1 removed [ 1466.850219][T13307] Bluetooth: hci3: command tx timeout [ 1466.892557][ T4759] team0 (unregistering): Port device team_slave_0 removed [ 1468.125160][T13307] Bluetooth: hci2: command tx timeout [ 1468.271626][ T5858] usb 5-1: USB disconnect, device number 3 [ 1468.834816][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 1468.849323][T14020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1637'. [ 1469.072315][ T4759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.581813][ T4759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.853846][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.861452][T13966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.869088][T13966] bridge_slave_0: entered allmulticast mode [ 1469.877951][T13966] bridge_slave_0: entered promiscuous mode [ 1470.202905][T13307] Bluetooth: hci2: command tx timeout [ 1470.221015][ T4759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.331348][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.338840][T13966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.355697][T13966] bridge_slave_1: entered allmulticast mode [ 1470.364539][T13966] bridge_slave_1: entered promiscuous mode [ 1470.557899][ T4759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.825908][T13966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.853352][T13966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.361105][T13926] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1471.582684][T13966] team0: Port device team_slave_0 added [ 1471.624811][T13926] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1471.774624][T13966] team0: Port device team_slave_1 added [ 1471.787286][ T4759] gretap0: left allmulticast mode [ 1471.793535][ T4759] gretap0: left promiscuous mode [ 1471.799315][ T4759] bridge0: port 3(gretap0) entered disabled state [ 1471.887670][ T4759] bridge_slave_1: left allmulticast mode [ 1471.893719][ T4759] bridge_slave_1: left promiscuous mode [ 1471.900460][ T4759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.955241][ T4759] bridge_slave_0: left allmulticast mode [ 1471.962990][ T4759] bridge_slave_0: left promiscuous mode [ 1471.969579][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.335483][T13307] Bluetooth: hci2: command tx timeout [ 1472.606634][ T4759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.638931][ T4759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.656075][ T4759] bond0 (unregistering): Released all slaves [ 1472.678605][T13926] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1472.978915][T13966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.986467][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.017539][T13966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.037298][T13926] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1473.119343][T14004] chnl_net:caif_netlink_parms(): no params data found [ 1473.297575][T13966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.305009][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.336991][T13966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.895406][ T4759] hsr_slave_0: left promiscuous mode [ 1473.921398][ T4759] hsr_slave_1: left promiscuous mode [ 1473.935106][ T4759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.944451][ T4759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.013114][ T4759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.022573][ T4759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.161667][ T4759] veth1_macvtap: left promiscuous mode [ 1474.167450][ T4759] veth0_macvtap: left promiscuous mode [ 1474.173868][ T4759] veth1_vlan: left promiscuous mode [ 1474.179434][ T4759] veth0_vlan: left promiscuous mode [ 1474.421012][T13307] Bluetooth: hci2: command tx timeout [ 1474.830620][ T8653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1474.874725][ T8653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1474.892320][ T8653] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1474.931277][ T8653] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1474.977488][ T8653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1475.389232][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 1475.398650][T14057] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1645'. [ 1475.518741][ T4759] team0 (unregistering): Port device team_slave_1 removed [ 1475.677270][ T4759] team0 (unregistering): Port device team_slave_0 removed [ 1476.801713][T13966] hsr_slave_0: entered promiscuous mode [ 1476.812448][T13966] hsr_slave_1: entered promiscuous mode [ 1476.821488][T13966] debugfs: 'hsr0' already exists in 'hsr' [ 1476.827517][T13966] Cannot create hsr debugfs directory [ 1477.080654][T13307] Bluetooth: hci4: command tx timeout [ 1477.390262][T11478] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.742059][T11478] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.004916][T14004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.014588][T14004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.026688][T14004] bridge_slave_0: entered allmulticast mode [ 1478.037848][T14004] bridge_slave_0: entered promiscuous mode [ 1478.085869][T11478] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.172156][T14004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.179735][T14004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.187789][T14004] bridge_slave_1: entered allmulticast mode [ 1478.198097][T14004] bridge_slave_1: entered promiscuous mode [ 1478.447314][T11478] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.697985][T14004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.794854][T14004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.161617][T13307] Bluetooth: hci4: command tx timeout [ 1479.298655][T13926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.312789][T14050] chnl_net:caif_netlink_parms(): no params data found [ 1479.344227][T14004] team0: Port device team_slave_0 added [ 1479.480385][T14004] team0: Port device team_slave_1 added [ 1479.777659][T11478] bridge_slave_1: left allmulticast mode [ 1479.785835][T11478] bridge_slave_1: left promiscuous mode [ 1479.795640][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.855455][T11478] bridge_slave_0: left allmulticast mode [ 1479.862984][T11478] bridge_slave_0: left promiscuous mode [ 1479.874882][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.512168][T11478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.590862][T11478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.637876][T11478] bond0 (unregistering): Released all slaves [ 1480.968718][T14004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.976029][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.006814][T14004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.220191][T13926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.241324][T13307] Bluetooth: hci4: command tx timeout [ 1481.357295][T14004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.364727][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.392346][T14004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.659961][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.667520][T11476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.772831][T11478] hsr_slave_0: left promiscuous mode [ 1481.807095][T11478] hsr_slave_1: left promiscuous mode [ 1481.820904][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.828522][T11478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.868943][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.876906][T11478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.971506][T11478] veth1_macvtap: left promiscuous mode [ 1481.977442][T11478] veth0_macvtap: left promiscuous mode [ 1481.983567][T11478] veth1_vlan: left promiscuous mode [ 1481.989138][T11478] veth0_vlan: left promiscuous mode [ 1483.012458][T11478] team0 (unregistering): Port device team_slave_1 removed [ 1483.045483][T11478] team0 (unregistering): Port device team_slave_0 removed [ 1483.346198][T13307] Bluetooth: hci4: command tx timeout [ 1483.410187][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.417757][T11476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.885117][T14004] hsr_slave_0: entered promiscuous mode [ 1483.895660][T14004] hsr_slave_1: entered promiscuous mode [ 1483.905042][T14004] debugfs: 'hsr0' already exists in 'hsr' [ 1483.911267][T14004] Cannot create hsr debugfs directory [ 1484.325866][T13966] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1484.518562][T13966] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1484.637168][T14050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.645322][T14050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.653442][T14050] bridge_slave_0: entered allmulticast mode [ 1484.663404][T14050] bridge_slave_0: entered promiscuous mode [ 1484.794408][T13966] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1484.845428][T14050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.853155][T14050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.861265][T14050] bridge_slave_1: entered allmulticast mode [ 1484.871175][T14050] bridge_slave_1: entered promiscuous mode [ 1484.931819][T13966] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1485.371327][T14050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.492084][T14050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.189184][T14050] team0: Port device team_slave_0 added [ 1486.282561][ T8653] Bluetooth: hci0: command 0x0406 tx timeout [ 1486.298157][T14050] team0: Port device team_slave_1 added [ 1486.907305][T14050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.914629][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.944111][T14050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.159567][T14050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.167841][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1487.195483][T14050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.281172][T12824] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1487.362715][T13926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.464918][T12824] usb 3-1: Using ep0 maxpacket: 8 [ 1487.707651][T12824] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 1487.719249][T12824] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1487.731052][T12824] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.741241][T12824] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1487.757187][T12824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1487.765131][T12824] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1487.774721][T12824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.851772][T14004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1487.914444][T12824] usb 3-1: config 0 descriptor?? [ 1488.067473][T14004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1488.160791][T14050] hsr_slave_0: entered promiscuous mode [ 1488.178578][T14050] hsr_slave_1: entered promiscuous mode [ 1488.191738][T14050] debugfs: 'hsr0' already exists in 'hsr' [ 1488.197848][T14050] Cannot create hsr debugfs directory [ 1488.237117][T14004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1488.328880][T13966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.386311][T14004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1488.800093][T13966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.031761][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.039314][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.172703][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.180356][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.441982][T12824] usbhid 3-1:0.0: can't add hid device: -71 [ 1489.448666][T12824] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1489.586325][T12824] usb 3-1: USB disconnect, device number 23 [ 1490.651912][T14004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.008818][T14004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.159312][T14050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1491.186762][T14050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1491.216736][T14050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1491.261185][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.268828][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.286923][T14050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1491.419425][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.427132][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.717668][T13926] veth0_vlan: entered promiscuous mode [ 1491.912199][T13926] veth1_vlan: entered promiscuous mode [ 1492.070658][T14157] batman_adv: batadv0: Adding interface: dummy0 [ 1492.077167][T14157] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1492.103221][T14157] batman_adv: batadv0: Interface activated: dummy0 [ 1492.230977][T14159] net_ratelimit: 10 callbacks suppressed [ 1492.231061][T14159] batadv0: mtu less than device minimum [ 1492.245202][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.258333][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.271730][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.284766][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.297847][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.311069][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.324139][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.337367][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.350636][T14159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1492.651792][T13966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.722894][T13926] veth0_macvtap: entered promiscuous mode [ 1492.846599][T13926] veth1_macvtap: entered promiscuous mode [ 1493.119319][T13926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.258144][T13926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.427344][T14050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.479403][ T4043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.568457][ T4043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.654173][ T4043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.739336][ T4043] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.759469][T14050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.870841][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.878411][ T4078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.980309][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.987891][ T4078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.449676][T14050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1494.768483][T14004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.527045][T14004] veth0_vlan: entered promiscuous mode [ 1495.701684][T14004] veth1_vlan: entered promiscuous mode [ 1496.089081][T14004] veth0_macvtap: entered promiscuous mode [ 1496.198645][T14004] veth1_macvtap: entered promiscuous mode [ 1496.509601][T13966] veth0_vlan: entered promiscuous mode [ 1496.535069][T14004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.674879][T14004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.712248][T13966] veth1_vlan: entered promiscuous mode [ 1496.716323][ T5857] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1496.815986][ T4078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.894703][T11476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.931969][T11476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.953696][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 1496.995433][T11476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.014389][ T5857] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1497.024679][ T5857] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.036191][ T5857] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1497.131372][ T5857] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1497.141535][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.150036][ T5857] usb 3-1: Product: syz [ 1497.154438][ T5857] usb 3-1: Manufacturer: syz [ 1497.159320][ T5857] usb 3-1: SerialNumber: syz [ 1497.397082][T14050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.437728][T13966] veth0_macvtap: entered promiscuous mode [ 1497.541047][T13966] veth1_macvtap: entered promiscuous mode [ 1497.671037][ T5857] usb 3-1: 0:2 : does not exist [ 1497.874504][T13966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1498.062760][T13966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.178001][ T4759] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.264658][ T4759] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.340150][T14050] veth0_vlan: entered promiscuous mode [ 1498.347461][ T4759] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.451292][ T4759] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.512487][T14050] veth1_vlan: entered promiscuous mode [ 1499.085642][T14050] veth0_macvtap: entered promiscuous mode [ 1499.212898][T14050] veth1_macvtap: entered promiscuous mode [ 1499.595550][T14050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.794486][T14050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.977825][T11478] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.001349][ T5857] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1500.114782][T11478] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.215006][ T996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.327735][ T996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.368313][ T5857] usb 3-1: USB disconnect, device number 24 [ 1500.582665][T11224] udevd[11224]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.221199][ T5917] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1501.420927][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 1501.478846][ T5917] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 1501.494311][ T5917] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1501.507369][ T5917] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.517574][ T5917] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1501.531079][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1501.538001][ T5917] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1501.547607][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.825921][ T5917] usb 3-1: config 0 descriptor?? [ 1503.449711][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 1503.456613][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1503.552124][ T5917] usb 3-1: USB disconnect, device number 25 [ 1504.499250][ T4154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.507490][ T4154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.867597][T11492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.876226][T11492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.517967][T14288] batman_adv: batadv0: Adding interface: dummy0 [ 1506.525437][T14288] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.551250][T14288] batman_adv: batadv0: Interface activated: dummy0 [ 1506.704281][T14288] net_ratelimit: 10 callbacks suppressed [ 1506.704373][T14288] batadv0: mtu less than device minimum [ 1506.718655][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1506.731844][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1506.744944][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1506.758028][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1506.771359][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1506.784513][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1506.797738][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1506.811559][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1506.824074][T14288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1507.453288][T11462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.461579][T11462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.853262][T11472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.861727][T11472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.494243][T14301] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 1508.552559][ T4759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.560868][ T4759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.965266][T11476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.973654][T11476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.600430][ T4759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.608462][ T4759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.119139][ T4759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.128290][ T4759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.020481][ T5857] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1514.135942][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1673'. [ 1514.335314][ T5857] usb 7-1: Using ep0 maxpacket: 8 [ 1514.430820][ T5857] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 1514.442098][ T5857] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1514.453669][ T5857] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.463866][ T5857] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1514.484010][ T5857] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1514.493818][ T5857] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1514.503238][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.072971][ T5857] usb 7-1: config 0 descriptor?? [ 1515.540801][ T5857] usb 7-1: can't set config #0, error -71 [ 1515.655443][ T5857] usb 7-1: USB disconnect, device number 9 [ 1518.320539][ T5857] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1518.550298][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 1518.609156][ T5857] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1518.618714][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.812123][ T5857] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1518.819391][ T5857] pvrusb2: ********** [ 1518.823820][ T5857] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1518.834139][ T5857] pvrusb2: Important functionality might not be entirely working. [ 1518.842205][ T5857] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1518.854045][ T5857] pvrusb2: ********** [ 1519.206492][ T5857] usb 3-1: USB disconnect, device number 26 [ 1519.222649][ T5857] pvrusb2: Device being rendered inoperable [ 1519.662929][T14373] fuse: Unknown parameter 'grou00000000000000000000' [ 1524.880336][T11723] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1525.182307][T11723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.192991][T11723] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1525.218944][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.226849][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1525.304736][T11723] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1525.314731][T11723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1525.323223][T11723] usb 1-1: SerialNumber: syz [ 1525.752620][T11723] usb 1-1: cannot find UAC_HEADER [ 1525.967622][T11723] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1526.112145][T11723] usb 1-1: USB disconnect, device number 26 [ 1526.592544][T11224] udevd[11224]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1531.250198][ T5857] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1531.554173][ T5857] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.565139][ T5857] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1531.652506][ T5857] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1531.662408][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1531.670794][ T5857] usb 1-1: SerialNumber: syz [ 1532.029213][ T5857] usb 1-1: 0:2 : does not exist [ 1532.324223][ T5857] usb 1-1: USB disconnect, device number 27 [ 1533.062348][T11224] udevd[11224]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.182632][T14481] tipc: Started in network mode [ 1533.187858][T14481] tipc: Node identity da457cf60fa3, cluster identity 4711 [ 1533.202929][T14481] tipc: Enabled bearer , priority 0 [ 1533.355783][T14481] syzkaller0: entered promiscuous mode [ 1533.363375][T14481] syzkaller0: entered allmulticast mode [ 1533.542511][T14480] tipc: Resetting bearer [ 1533.624951][T14480] tipc: Disabling bearer [ 1533.744183][T14488] net_ratelimit: 10 callbacks suppressed [ 1533.744247][T14488] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1538.042765][T14534] syzkaller0: entered promiscuous mode [ 1538.048626][T14534] syzkaller0: entered allmulticast mode [ 1538.710111][ T5858] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1539.052195][ T5858] usb 7-1: config index 0 descriptor too short (expected 65535, got 27) [ 1539.067798][ T5858] usb 7-1: config 56 has too many interfaces: 49, using maximum allowed: 32 [ 1539.079334][ T5858] usb 7-1: config 56 has an invalid descriptor of length 55, skipping remainder of the config [ 1539.090225][ T5858] usb 7-1: config 56 has 0 interfaces, different from the descriptor's value: 49 [ 1539.099637][ T5858] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1539.109058][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.538408][ T5858] usb 7-1: string descriptor 0 read error: -71 [ 1539.598343][ T5858] usb 7-1: USB disconnect, device number 10 [ 1542.392982][T14571] syz_tun: entered allmulticast mode [ 1542.502295][T14570] syz_tun: left allmulticast mode [ 1546.810445][T14609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1547.943651][T14615] tipc: Started in network mode [ 1547.949102][T14615] tipc: Node identity a6381d6bd024, cluster identity 4711 [ 1547.969909][T14615] tipc: Enabled bearer , priority 0 [ 1548.036034][T14619] syz_tun: entered allmulticast mode [ 1548.108195][T14616] syz_tun: left allmulticast mode [ 1548.132391][T14615] syzkaller0: entered promiscuous mode [ 1548.138162][T14615] syzkaller0: entered allmulticast mode [ 1548.318940][T14618] tipc: Resetting bearer [ 1548.486674][T14613] tipc: Resetting bearer [ 1548.593037][T14613] tipc: Disabling bearer [ 1550.153331][T14637] syzkaller0: entered promiscuous mode [ 1550.159047][T14637] syzkaller0: entered allmulticast mode [ 1552.441434][T14654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1553.878496][T14662] syz_tun: entered allmulticast mode [ 1554.051726][T14661] syz_tun: left allmulticast mode [ 1555.057060][ T8653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1555.081212][ T8653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1555.111353][ T8653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1555.161616][ T8653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1555.201488][ T8653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1557.027154][T11476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.351990][ T8653] Bluetooth: hci5: command tx timeout [ 1557.404672][T11476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.514228][T14680] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551522) [ 1557.525081][T14680] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1557.727122][T11476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.843453][T14684] syzkaller0: entered promiscuous mode [ 1557.849258][T14684] syzkaller0: entered allmulticast mode [ 1557.994527][T11476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.413903][ T8653] Bluetooth: hci5: command tx timeout [ 1559.496459][T11476] bridge_slave_1: left allmulticast mode [ 1559.502706][T11476] bridge_slave_1: left promiscuous mode [ 1559.509364][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.718531][T11476] bridge_slave_0: left allmulticast mode [ 1559.728055][T11476] bridge_slave_0: left promiscuous mode [ 1559.734935][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.506882][ T8653] Bluetooth: hci5: command tx timeout [ 1561.571575][T11476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.628813][T11476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.645865][T14713] fuse: Bad value for 'fd' [ 1561.701937][T11476] bond0 (unregistering): (slave team0): Releasing backup interface [ 1561.772066][T11476] bond0 (unregistering): Released all slaves [ 1563.620148][ T8653] Bluetooth: hci5: command tx timeout [ 1563.713747][T14670] chnl_net:caif_netlink_parms(): no params data found [ 1564.011596][T11476] hsr_slave_0: left promiscuous mode [ 1564.032475][T11476] hsr_slave_1: left promiscuous mode [ 1564.048943][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.056748][T11476] batadv0: mtu less than device minimum [ 1564.064188][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.076339][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.088538][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.100928][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.113150][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.125366][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.137585][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.150052][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.162473][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1564.194302][T11476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.283544][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.329908][T11476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.374081][T11476] batman_adv: batadv0: Interface deactivated: dummy0 [ 1564.381278][T11476] batman_adv: batadv0: Removing interface: dummy0 [ 1564.539570][T11476] veth1_macvtap: left promiscuous mode [ 1564.545585][T11476] veth0_macvtap: left promiscuous mode [ 1564.557885][T11476] veth1_vlan: left promiscuous mode [ 1564.563806][T11476] veth0_vlan: left promiscuous mode [ 1566.323118][T13307] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1566.347248][T13307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1566.403336][T13307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1566.432179][T13307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1566.456853][T13307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1566.590481][T11476] team0 (unregistering): Port device team_slave_1 removed [ 1566.746525][T11476] team0 (unregistering): Port device team_slave_0 removed [ 1568.161294][ T5858] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1568.440703][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 1568.489122][ T5858] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1568.497683][ T5858] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1568.509153][ T5858] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1568.521231][ T5858] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1568.534772][ T5858] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1568.636499][ T8653] Bluetooth: hci1: command tx timeout [ 1568.665679][T11476] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.935714][ T5858] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1568.945251][ T5858] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1568.961798][ T5858] usb 1-1: Product: syz [ 1568.966280][ T5858] usb 1-1: Manufacturer: syz [ 1568.971188][ T5858] usb 1-1: SerialNumber: syz [ 1569.070782][T11476] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.122740][ T5858] usb 1-1: config 0 descriptor?? [ 1569.228006][ T5858] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1569.382158][ T5858] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1569.415542][T11476] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.298735][T11476] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.891490][ T8653] Bluetooth: hci1: command tx timeout [ 1571.521611][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 1571.532435][ T5917] usb 1-1: USB disconnect, device number 28 [ 1571.593298][ T5917] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1572.118248][T11476] bridge_slave_1: left allmulticast mode [ 1572.125002][T11476] bridge_slave_1: left promiscuous mode [ 1572.140633][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.188609][T11476] bridge_slave_0: left allmulticast mode [ 1572.194976][T11476] bridge_slave_0: left promiscuous mode [ 1572.202390][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.970150][ T8653] Bluetooth: hci1: command tx timeout [ 1573.077345][T11476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1573.232142][T11476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1573.305052][T11476] bond0 (unregistering): Released all slaves [ 1573.671442][T14740] chnl_net:caif_netlink_parms(): no params data found [ 1573.708621][T14670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.716342][T14670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.724338][T14670] bridge_slave_0: entered allmulticast mode [ 1573.734302][T14670] bridge_slave_0: entered promiscuous mode [ 1574.209442][T14670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.217452][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.225518][T14670] bridge_slave_1: entered allmulticast mode [ 1574.235383][T14670] bridge_slave_1: entered promiscuous mode [ 1574.936943][T11476] hsr_slave_0: left promiscuous mode [ 1574.976137][T11476] hsr_slave_1: left promiscuous mode [ 1574.985690][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1574.993733][T11476] net_ratelimit: 30 callbacks suppressed [ 1574.993819][T11476] batadv0: mtu less than device minimum [ 1575.014365][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.027508][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.038705][ T8653] Bluetooth: hci1: command tx timeout [ 1575.041106][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.057270][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.070462][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.083708][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.096773][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.109955][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.123006][T11476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1575.167975][T11476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.618500][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.674274][T11476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.773283][T11476] batman_adv: batadv0: Interface deactivated: dummy0 [ 1575.780392][T11476] batman_adv: batadv0: Removing interface: dummy0 [ 1575.910891][T11476] veth1_macvtap: left promiscuous mode [ 1575.923554][T11476] veth0_macvtap: left promiscuous mode [ 1575.929527][T11476] veth1_vlan: left promiscuous mode [ 1575.935406][T11476] veth0_vlan: left promiscuous mode [ 1575.966985][T14778] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1576.583126][T14778] usb 1-1: Using ep0 maxpacket: 32 [ 1576.644222][T14778] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1576.653068][T14778] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1576.664461][T14778] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1576.675919][T14778] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1576.689599][T14778] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1576.817561][T14778] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1576.827288][T14778] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1576.836473][T14778] usb 1-1: Product: syz [ 1576.845290][T14778] usb 1-1: Manufacturer: syz [ 1576.851564][T14778] usb 1-1: SerialNumber: syz [ 1576.967212][T14778] usb 1-1: config 0 descriptor?? [ 1577.104798][T14778] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1577.298536][T14778] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1577.378708][T14778] usb 1-1: USB disconnect, device number 29 [ 1577.438206][T14778] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1577.973232][T11476] team0 (unregistering): Port device team_slave_1 removed [ 1578.137836][T11476] team0 (unregistering): Port device team_slave_0 removed [ 1578.696304][T14670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.932124][T14670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.334996][T14670] team0: Port device team_slave_0 added [ 1579.441002][T14670] team0: Port device team_slave_1 added [ 1580.018363][T11476] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.281776][T14670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1580.295686][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.326798][T14670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.416015][T11476] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.718254][T14670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1580.725646][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.755603][T14670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.854250][T11476] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.902290][T14832] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1580.986817][T14740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.994713][T14740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.002789][T14740] bridge_slave_0: entered allmulticast mode [ 1581.012698][T14740] bridge_slave_0: entered promiscuous mode [ 1581.161377][T11476] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.230591][T14832] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1581.240257][T14832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.253009][T14832] usb 4-1: Product: syz [ 1581.257394][T14832] usb 4-1: Manufacturer: syz [ 1581.263439][T14832] usb 4-1: SerialNumber: syz [ 1581.325212][T14740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.333369][T14740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.341462][T14740] bridge_slave_1: entered allmulticast mode [ 1581.358038][T14740] bridge_slave_1: entered promiscuous mode [ 1581.374348][T14832] usb 4-1: config 0 descriptor?? [ 1582.272707][T13458] usb 4-1: USB disconnect, device number 20 [ 1582.448485][T12470] udevd[12470]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1582.787252][T14670] hsr_slave_0: entered promiscuous mode [ 1582.796396][T14670] hsr_slave_1: entered promiscuous mode [ 1582.804597][T14670] debugfs: 'hsr0' already exists in 'hsr' [ 1582.810556][T14670] Cannot create hsr debugfs directory [ 1582.853948][T14740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.311547][T14740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.015044][T14832] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1584.070402][T14740] team0: Port device team_slave_0 added [ 1584.079028][T11476] bridge_slave_1: left allmulticast mode [ 1584.085196][T11476] bridge_slave_1: left promiscuous mode [ 1584.092117][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.210228][T11476] bridge_slave_0: left allmulticast mode [ 1584.222366][T11476] bridge_slave_0: left promiscuous mode [ 1584.229099][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.231165][T14832] usb 4-1: Using ep0 maxpacket: 32 [ 1584.267630][T14832] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1584.276334][T14832] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1584.289010][T14832] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1584.300817][T14832] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1584.318753][T14832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1584.439160][T14832] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1584.448744][T14832] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1584.457620][T14832] usb 4-1: Product: syz [ 1584.462131][T14832] usb 4-1: Manufacturer: syz [ 1584.466863][T14832] usb 4-1: SerialNumber: syz [ 1584.628806][T14832] usb 4-1: config 0 descriptor?? [ 1584.651440][T14832] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1584.701983][T14832] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1585.061398][T14778] usb 4-1: USB disconnect, device number 21 [ 1585.427897][T14778] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1585.661242][T11476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.782202][T11476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.823475][T11476] bond0 (unregistering): Released all slaves [ 1586.327821][T14740] team0: Port device team_slave_1 added [ 1586.649575][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.656559][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1586.834947][T14740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.842497][T14740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.869976][T14740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.188312][T14740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.200178][T14740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.226792][T14740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.711560][T11476] hsr_slave_0: left promiscuous mode [ 1587.760431][T11476] hsr_slave_1: left promiscuous mode [ 1587.768052][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1587.776069][T11476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1587.888723][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 1588.012957][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1588.020819][T11476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1588.204486][T11476] veth1_macvtap: left promiscuous mode [ 1588.215455][T11476] veth0_macvtap: left promiscuous mode [ 1588.221707][T11476] veth1_vlan: left promiscuous mode [ 1588.227230][T11476] veth0_vlan: left promiscuous mode [ 1588.760668][ T8653] Bluetooth: hci2: command 0x0406 tx timeout [ 1588.855923][T11005] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1589.244125][T11005] usb 4-1: Using ep0 maxpacket: 8 [ 1589.296161][T11005] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1589.304840][T11005] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1589.315243][T11005] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1589.325287][T11005] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1589.337887][T11005] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1589.352041][T11005] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1589.361871][T11005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.936114][T11005] usb 4-1: usb_control_msg returned -32 [ 1589.942662][T11005] usbtmc 4-1:16.0: can't read capabilities [ 1590.622287][T11005] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1590.698350][T11476] team0 (unregistering): Port device team_slave_1 removed [ 1590.795443][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 1590.805406][T14898] netlink: 'syz.3.1817': attribute type 5 has an invalid length. [ 1590.813751][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1817'. [ 1590.828832][T11476] team0 (unregistering): Port device team_slave_0 removed [ 1591.015611][T14897] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1591.060706][T11005] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.072837][T11005] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1591.091561][T11005] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1591.103397][T11005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.304362][T11005] usb 3-1: config 0 descriptor?? [ 1591.452637][T11005] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1591.513035][T14898] geneve2: entered promiscuous mode [ 1591.518497][T14898] geneve2: entered allmulticast mode [ 1591.558196][T14740] hsr_slave_0: entered promiscuous mode [ 1591.573727][T14740] hsr_slave_1: entered promiscuous mode [ 1591.583241][T14740] debugfs: 'hsr0' already exists in 'hsr' [ 1591.593607][T14740] Cannot create hsr debugfs directory [ 1591.692224][T11478] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1591.710338][T11478] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1591.818238][T11478] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1592.012175][T11478] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1593.484869][T14670] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1593.626212][T14670] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1593.777378][T14778] usb 3-1: USB disconnect, device number 27 [ 1593.803005][T14670] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1593.959483][T14670] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1595.059120][T14740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1595.242403][T14740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1595.424841][T14740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1595.571822][T14740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1596.214478][T14670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.260485][T13458] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1596.452635][T14670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.535082][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.542794][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.617809][T13458] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1596.627352][T13458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.636975][T13458] usb 3-1: Product: syz [ 1596.641451][T13458] usb 3-1: Manufacturer: syz [ 1596.646277][T13458] usb 3-1: SerialNumber: syz [ 1596.700523][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.708128][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.816588][T13458] usb 3-1: config 0 descriptor?? [ 1597.145217][T14670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1597.156165][T14670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1597.315910][T13458] usb 3-1: USB disconnect, device number 28 [ 1597.519355][T11316] udevd[11316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1597.789260][T14740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.061439][T14740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.176791][T11472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.184452][T11472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.361830][T11472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.369427][T11472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.610114][ T5858] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1598.776961][T14740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1598.787867][T14740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1598.917096][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 1598.926226][ T8653] Bluetooth: hci4: command 0x0406 tx timeout [ 1598.941405][ T5858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1599.036837][ T5858] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1599.046563][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1599.055432][ T5858] usb 1-1: Product: syz [ 1599.063676][ T5858] usb 1-1: Manufacturer: syz [ 1599.068514][ T5858] usb 1-1: SerialNumber: syz [ 1599.304404][ T5858] usb 1-1: config 0 descriptor?? [ 1599.312348][T14937] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1599.398312][ T5858] hub 1-1:0.0: bad descriptor, ignoring hub [ 1599.406443][ T5858] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1599.761090][T14937] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1600.053975][T11005] usb 4-1: USB disconnect, device number 22 [ 1600.273140][T11723] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1600.515952][T14670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.521514][T11723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.534027][T11723] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1600.547458][T11723] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1600.556956][T11723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.721197][T14778] usb 1-1: USB disconnect, device number 30 [ 1600.837350][T11723] usb 3-1: config 0 descriptor?? [ 1600.971398][T11723] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1601.474965][T14740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.871961][T14959] loop2: detected capacity change from 0 to 7 [ 1601.912158][T14959] loop2: [ 1601.915519][T14959] loop2: partition table partially beyond EOD, truncated [ 1603.050748][T11723] usb 3-1: USB disconnect, device number 29 [ 1603.469569][T14974] loop2: detected capacity change from 0 to 7 [ 1603.486089][T14974] Dev loop2: unable to read RDB block 7 [ 1603.493144][T14974] loop2: unable to read partition table [ 1603.547816][T14974] loop2: partition table beyond EOD, truncated [ 1603.554747][T14974] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1603.705370][T14670] veth0_vlan: entered promiscuous mode [ 1603.862306][T14670] veth1_vlan: entered promiscuous mode [ 1604.452191][T14670] veth0_macvtap: entered promiscuous mode [ 1604.561635][T14670] veth1_macvtap: entered promiscuous mode [ 1604.811892][T14670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1604.947253][T14670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1605.138770][T11462] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.237997][T11462] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.315439][T11462] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.330206][T14740] veth0_vlan: entered promiscuous mode [ 1605.341956][T14987] input: syz1 as /devices/virtual/input/input10 [ 1605.421513][ T4043] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.548780][T11723] IPVS: starting estimator thread 0... [ 1605.563504][T14740] veth1_vlan: entered promiscuous mode [ 1605.626682][T14987] net_ratelimit: 30 callbacks suppressed [ 1605.626786][T14987] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1605.670603][T14993] IPVS: using max 192 ests per chain, 9600 per kthread [ 1606.058275][T14740] veth0_macvtap: entered promiscuous mode [ 1606.289377][T14740] veth1_macvtap: entered promiscuous mode [ 1606.574544][T14740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.727972][T14740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.877608][T11462] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.055385][T11462] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.172918][T11478] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.296038][T11478] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.660462][T14778] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1610.881357][T14778] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1610.894695][T14778] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1610.904119][T14778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.017702][T14778] usb 3-1: config 0 descriptor?? [ 1611.080705][T14778] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1614.128131][T11723] usb 3-1: USB disconnect, device number 30 [ 1615.746136][T15068] loop2: detected capacity change from 0 to 7 [ 1615.826146][T15068] Dev loop2: unable to read RDB block 7 [ 1615.832520][T15068] loop2: unable to read partition table [ 1615.872449][T15068] loop2: partition table beyond EOD, truncated [ 1615.879083][T15068] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1615.960323][ T8653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1615.990898][ T8653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1616.010581][ T8653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1616.025141][ T8653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1616.037508][ T8653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1617.806962][T11472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.815217][T11472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.982371][T15069] chnl_net:caif_netlink_parms(): no params data found [ 1618.104025][ T8221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.116456][ T8221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.125090][ T8653] Bluetooth: hci3: command tx timeout [ 1618.201817][T14778] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1618.409671][T14778] usb 3-1: device descriptor read/64, error -71 [ 1618.700222][T14778] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1618.882841][T15095] syz_tun: entered allmulticast mode [ 1618.921288][T14778] usb 3-1: device descriptor read/64, error -71 [ 1619.044097][T15093] syz_tun: left allmulticast mode [ 1619.047362][T14778] usb usb3-port1: attempt power cycle [ 1619.255448][ T8221] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.430673][ T8221] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.470731][T14778] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1619.546803][T14778] usb 3-1: device descriptor read/8, error -71 [ 1619.693701][ T8221] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.795827][T14778] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1619.873895][ T8221] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.894178][T14778] usb 3-1: device descriptor read/8, error -71 [ 1620.021655][T14778] usb usb3-port1: unable to enumerate USB device [ 1620.165144][T15069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.176084][T15069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.190091][T15069] bridge_slave_0: entered allmulticast mode [ 1620.200014][T15069] bridge_slave_0: entered promiscuous mode [ 1620.213652][ T8653] Bluetooth: hci3: command tx timeout [ 1620.315169][T15069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.323085][T15069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.331396][T15069] bridge_slave_1: entered allmulticast mode [ 1620.348564][T15069] bridge_slave_1: entered promiscuous mode [ 1620.542357][ T8221] bridge_slave_1: left allmulticast mode [ 1620.549379][ T8221] bridge_slave_1: left promiscuous mode [ 1620.555989][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.615364][ T8221] bridge_slave_0: left allmulticast mode [ 1620.622027][ T8221] bridge_slave_0: left promiscuous mode [ 1620.628844][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.374948][T15109] loop2: detected capacity change from 0 to 7 [ 1621.501001][T15109] Dev loop2: unable to read RDB block 7 [ 1621.507033][T15109] loop2: unable to read partition table [ 1621.551059][T15109] loop2: partition table beyond EOD, truncated [ 1621.557726][T15109] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1621.782104][ T8221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.868490][ T8221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.931420][ T8221] bond0 (unregistering): Released all slaves [ 1622.285101][ T8653] Bluetooth: hci3: command tx timeout [ 1622.335092][T15069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.507283][ T8221] hsr_slave_0: left promiscuous mode [ 1622.588324][ T8221] hsr_slave_1: left promiscuous mode [ 1622.596898][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.605074][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.711404][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.724236][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.891520][ T8221] veth1_macvtap: left promiscuous mode [ 1622.897319][ T8221] veth0_macvtap: left promiscuous mode [ 1622.903511][ T8221] veth1_vlan: left promiscuous mode [ 1622.909098][ T8221] veth0_vlan: left promiscuous mode [ 1623.875690][ T8221] team0 (unregistering): Port device team_slave_1 removed [ 1624.011248][ T8221] team0 (unregistering): Port device team_slave_0 removed [ 1624.438864][ T8653] Bluetooth: hci3: command tx timeout [ 1624.610686][T15069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.712461][T15115] batman_adv: batadv0: Adding interface: dummy0 [ 1624.719133][T15115] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.745784][T15115] batman_adv: batadv0: Interface activated: dummy0 [ 1624.779053][T15118] batadv0: mtu less than device minimum [ 1624.787438][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1624.800827][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1624.814014][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1624.827248][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1624.840761][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1624.853970][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1624.867246][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1624.880588][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1624.893906][T15118] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1625.333488][T15069] team0: Port device team_slave_0 added [ 1625.457904][T15069] team0: Port device team_slave_1 added [ 1625.932025][T15138] syz_tun: entered allmulticast mode [ 1625.979292][T15069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.986949][T15069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.018301][T15069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.052765][T15133] syz_tun: left allmulticast mode [ 1626.261379][T15069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.268707][T15069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.295983][T15069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.767167][T15145] loop2: detected capacity change from 0 to 7 [ 1626.782970][ T5160] Dev loop2: unable to read RDB block 7 [ 1626.788880][ T5160] loop2: unable to read partition table [ 1626.809344][ T5160] loop2: partition table beyond EOD, truncated [ 1626.835804][T15145] Dev loop2: unable to read RDB block 7 [ 1626.842913][T15145] loop2: unable to read partition table [ 1626.918198][T15069] hsr_slave_0: entered promiscuous mode [ 1626.933233][T15069] hsr_slave_1: entered promiscuous mode [ 1626.942506][T15069] debugfs: 'hsr0' already exists in 'hsr' [ 1626.948450][T15069] Cannot create hsr debugfs directory [ 1626.961352][T15145] loop2: partition table beyond EOD, truncated [ 1626.967923][T15145] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1626.991449][ T5160] Dev loop2: unable to read RDB block 7 [ 1626.997506][ T5160] loop2: unable to read partition table [ 1627.051318][ T5160] loop2: partition table beyond EOD, truncated [ 1627.904188][T15155] batman_adv: batadv0: Adding interface: dummy0 [ 1627.910970][T15155] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.936484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.948537][T15155] batman_adv: batadv0: Interface activated: dummy0 [ 1628.263998][T11723] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1628.486078][T11723] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1628.500740][T11723] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1628.510990][T11723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.723768][T11723] usb 6-1: config 0 descriptor?? [ 1628.790164][T11723] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1629.509143][T15174] syz_tun: entered allmulticast mode [ 1629.553178][T15173] syz_tun: left allmulticast mode [ 1629.722316][T15069] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1629.832206][T15069] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1629.954023][T15069] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1630.067961][T15069] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1631.305575][T15069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.368467][T15196] loop2: detected capacity change from 0 to 7 [ 1631.436666][T15196] Dev loop2: unable to read RDB block 7 [ 1631.443259][T15196] loop2: unable to read partition table [ 1631.471288][T15196] loop2: partition table beyond EOD, truncated [ 1631.475898][T12824] usb 6-1: USB disconnect, device number 36 [ 1631.477943][T15196] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1631.579293][T15069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.748127][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.755964][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.901799][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.909466][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.200528][T12824] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1632.481518][T12824] usb 4-1: Using ep0 maxpacket: 16 [ 1632.570182][T12824] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 1632.578636][T12824] usb 4-1: config 0 has no interface number 0 [ 1632.585629][T12824] usb 4-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1632.837524][T12824] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 1632.848066][T12824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.860978][T12824] usb 4-1: Product: syz [ 1632.865390][T12824] usb 4-1: Manufacturer: syz [ 1632.871928][T12824] usb 4-1: SerialNumber: syz [ 1633.021085][T12824] usb 4-1: config 0 descriptor?? [ 1633.413343][T15199] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1634.280966][T15226] syz_tun: entered allmulticast mode [ 1635.765661][T15069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1636.466881][T11005] usb 4-1: USB disconnect, device number 23 [ 1638.070285][T11005] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1638.310107][T11005] usb 6-1: Using ep0 maxpacket: 16 [ 1638.311055][T12824] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1638.361429][T11005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.373024][T11005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.387425][T11005] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1638.402180][T11005] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1638.411599][T11005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.556959][T12824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.567800][T12824] usb 3-1: config 0 has no interfaces? [ 1638.573758][T12824] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1638.583505][T12824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.701566][T11005] usb 6-1: config 0 descriptor?? [ 1638.774662][T12824] usb 3-1: config 0 descriptor?? [ 1639.209307][T11005] usbhid 6-1:0.0: can't add hid device: -71 [ 1639.216247][T11005] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1639.323043][T11005] usb 6-1: USB disconnect, device number 37 [ 1639.752718][T11723] usb 3-1: USB disconnect, device number 35 [ 1640.116459][T15069] veth0_vlan: entered promiscuous mode [ 1640.285536][T15069] veth1_vlan: entered promiscuous mode [ 1640.757732][T15069] veth0_macvtap: entered promiscuous mode [ 1640.904361][T15069] veth1_macvtap: entered promiscuous mode [ 1641.262731][T15069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.431846][T15069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.587094][ T4078] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.711059][T11476] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.802821][T11476] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.841192][T11476] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.592506][T15283] loop2: detected capacity change from 0 to 7 [ 1642.647767][T15283] Dev loop2: unable to read RDB block 7 [ 1642.654312][T15283] loop2: unable to read partition table [ 1642.794317][T15283] loop2: partition table beyond EOD, truncated [ 1642.801130][T15283] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1645.086490][T15296] tipc: Started in network mode [ 1645.092114][T15296] tipc: Node identity 3a39b2551e16, cluster identity 4711 [ 1645.100600][T15296] tipc: Enabled bearer , priority 0 [ 1645.234734][T15296] syzkaller0: entered promiscuous mode [ 1645.240866][T15296] syzkaller0: entered allmulticast mode [ 1645.388655][T15300] tipc: Resetting bearer [ 1645.544004][T15294] tipc: Resetting bearer [ 1645.627801][T15294] tipc: Disabling bearer [ 1648.093311][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.100835][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1649.081404][T15321] net_ratelimit: 30 callbacks suppressed [ 1649.081491][T15321] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 1649.372302][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1649.393764][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1649.413000][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1649.429261][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1649.449107][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1650.626892][T15327] chnl_net:caif_netlink_parms(): no params data found [ 1651.442414][T11005] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1651.563778][ T8653] Bluetooth: hci5: command tx timeout [ 1651.650118][T11005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.663228][T11005] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1651.674153][T11005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.764709][T11005] usb 4-1: config 0 descriptor?? [ 1651.845158][T11005] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1653.116687][T15327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.133397][T15327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.145392][T15327] bridge_slave_0: entered allmulticast mode [ 1653.158953][T15327] bridge_slave_0: entered promiscuous mode [ 1653.220858][ T8221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.233851][ T8221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.381811][T11472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.447971][T15327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.456624][T15327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.459254][T15356] loop2: detected capacity change from 0 to 7 [ 1653.464858][T15327] bridge_slave_1: entered allmulticast mode [ 1653.481711][T15327] bridge_slave_1: entered promiscuous mode [ 1653.557673][T11472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.629947][T15356] Dev loop2: unable to read RDB block 7 [ 1653.635974][T15356] loop2: unable to read partition table [ 1653.654497][ T8653] Bluetooth: hci5: command tx timeout [ 1653.666647][T15356] loop2: partition table beyond EOD, truncated [ 1653.673454][T15356] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1653.837478][T11472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.973118][T15327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1653.992349][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.001008][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.147514][T11472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.299569][T15327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.045174][T15327] team0: Port device team_slave_0 added [ 1655.135852][T11472] bridge_slave_1: left allmulticast mode [ 1655.142456][T11472] bridge_slave_1: left promiscuous mode [ 1655.149214][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.415157][T11472] bridge_slave_0: left allmulticast mode [ 1655.421599][T11472] bridge_slave_0: left promiscuous mode [ 1655.428124][T11472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.725589][ T8653] Bluetooth: hci5: command tx timeout [ 1655.788070][ T5858] usb 4-1: USB disconnect, device number 24 [ 1655.829234][T15375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1916'. [ 1656.348789][T15372] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1916'. [ 1656.444246][T11005] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1656.631005][T11005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.641850][T11005] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1656.651847][T11005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.882159][T11005] usb 4-1: config 0 descriptor?? [ 1656.953389][T11005] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1657.070686][T11472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.114984][T11472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.139436][T11472] bond0 (unregistering): Released all slaves [ 1657.211887][T15327] team0: Port device team_slave_1 added [ 1657.278757][ T5858] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1657.510393][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 1657.570481][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.582026][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.592324][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1657.605735][ T5858] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1657.615410][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.678777][T15327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.686185][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.712825][T15327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.800724][ T8653] Bluetooth: hci5: command tx timeout [ 1657.913402][ T5858] usb 6-1: config 0 descriptor?? [ 1658.022599][T15327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.030303][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.060020][T15327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.416703][T15385] batman_adv: batadv0: Adding interface: dummy0 [ 1658.423411][T15385] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.449934][T15385] batman_adv: batadv0: Interface activated: dummy0 [ 1658.545479][T15387] batadv0: mtu less than device minimum [ 1658.553642][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.566510][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.578949][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.591655][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.604086][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.616782][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.629181][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.641711][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.654009][T15387] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1658.740779][ T5858] usbhid 6-1:0.0: can't add hid device: -71 [ 1658.747429][ T5858] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1658.848220][ T5858] usb 6-1: USB disconnect, device number 38 [ 1658.861317][T11472] hsr_slave_0: left promiscuous mode [ 1658.947894][T11472] hsr_slave_1: left promiscuous mode [ 1658.956346][T11472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.017989][T11472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.099576][T11472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.154275][T11472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.222109][T11472] batman_adv: batadv0: Interface deactivated: dummy0 [ 1659.229124][T11472] batman_adv: batadv0: Removing interface: dummy0 [ 1659.345620][T11472] veth1_macvtap: left promiscuous mode [ 1659.352230][T11472] veth0_macvtap: left promiscuous mode [ 1659.358276][T11472] veth1_vlan: left promiscuous mode [ 1659.364590][T11472] veth0_vlan: left promiscuous mode [ 1659.428251][ T5858] usb 4-1: USB disconnect, device number 25 [ 1659.903309][T15395] loop2: detected capacity change from 0 to 7 [ 1659.962413][T15395] Dev loop2: unable to read RDB block 7 [ 1659.968431][T15395] loop2: AHDI p1 p2 p3 [ 1659.973047][T15395] loop2: partition table partially beyond EOD, truncated [ 1659.981422][T15395] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1659.992154][T15395] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1660.084249][ T5160] Dev loop2: unable to read RDB block 7 [ 1660.094432][ T5160] loop2: AHDI p1 p2 p3 [ 1660.098838][ T5160] loop2: partition table partially beyond EOD, truncated [ 1660.108750][ T5160] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1660.116051][ T5160] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1661.182298][T11472] team0 (unregistering): Port device team_slave_1 removed [ 1661.343456][T11472] team0 (unregistering): Port device team_slave_0 removed [ 1661.839592][T15409] loop2: detected capacity change from 0 to 7 [ 1661.866120][T15409] loop2: [POWERTEC] p1 p2 p3 p4 [ 1662.001985][T15409] loop2: p2 start 4294967287 is beyond EOD, truncated [ 1662.009198][T15409] loop2: p3 start 1932423285 is beyond EOD, truncated [ 1662.016445][T15409] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 1662.726075][T11316] udevd[11316]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1662.789441][T11224] udevd[11224]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1662.933925][T15415] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1930'. [ 1662.985937][T15327] hsr_slave_0: entered promiscuous mode [ 1662.996942][T15327] hsr_slave_1: entered promiscuous mode [ 1663.006501][T15327] debugfs: 'hsr0' already exists in 'hsr' [ 1663.012707][T15327] Cannot create hsr debugfs directory [ 1663.097089][T11472] IPVS: stop unused estimator thread 0... [ 1663.610114][T14778] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1663.873537][T14778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.888268][T14778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.899840][T14778] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1663.909145][T14778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.073674][T14778] usb 3-1: config 0 descriptor?? [ 1664.193014][T11005] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1664.397301][T11005] usb 4-1: Using ep0 maxpacket: 16 [ 1664.518448][T11005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.530219][T11005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.540474][T11005] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1664.553915][T11005] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1664.563671][T11005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.743180][T14778] usbhid 3-1:0.0: can't add hid device: -32 [ 1664.750081][T14778] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1664.895220][T14778] usb 3-1: USB disconnect, device number 36 [ 1664.912157][T11005] usb 4-1: config 0 descriptor?? [ 1665.558239][T11005] usbhid 4-1:0.0: can't add hid device: -71 [ 1665.564938][T11005] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1665.661025][T11005] usb 4-1: USB disconnect, device number 26 [ 1666.655081][T15434] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1935'. [ 1666.674901][T15327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1666.771725][T15327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1666.894417][T15327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1667.012562][T15440] loop2: detected capacity change from 0 to 7 [ 1667.045339][T15440] Dev loop2: unable to read RDB block 7 [ 1667.051478][T15440] loop2: AHDI p1 p2 p3 [ 1667.059504][T15440] loop2: partition table partially beyond EOD, truncated [ 1667.069385][T15440] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1667.076606][T15440] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1667.111878][T15327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1668.983225][T15327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.304040][T15327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.368642][T15461] loop6: detected capacity change from 0 to 63 [ 1669.389173][T11316] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.429054][T15461] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.476505][T11472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.484164][T11472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.488570][T11316] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.527197][T15461] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.550833][T15461] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.589374][T11472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.597036][T11472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.601414][T11316] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.619342][T15461] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.695192][T11316] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.724653][T15461] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.734240][T15461] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.925337][T15463] net_ratelimit: 51 callbacks suppressed [ 1669.925429][T15463] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 1671.159848][T14778] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1671.410944][T14778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.422341][T14778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.432716][T14778] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1671.443337][T14778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.684197][T14778] usb 4-1: config 0 descriptor?? [ 1672.843435][T14778] usbhid 4-1:0.0: can't add hid device: -32 [ 1672.850500][T14778] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1672.997127][T14778] usb 4-1: USB disconnect, device number 27 [ 1673.836927][T15327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.330283][T11723] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1674.540298][T11723] usb 4-1: Using ep0 maxpacket: 16 [ 1674.563088][T11723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.574808][T11723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.585045][T11723] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1674.598246][T11723] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1674.607752][T11723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.845632][T11723] usb 4-1: config 0 descriptor?? [ 1675.476788][T15492] loop2: detected capacity change from 0 to 7 [ 1675.499580][T11723] usbhid 4-1:0.0: can't add hid device: -71 [ 1675.506487][T11723] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1675.557165][T15492] Dev loop2: unable to read RDB block 7 [ 1675.564653][T15492] loop2: AHDI p1 p2 p3 [ 1675.569147][T15492] loop2: partition table partially beyond EOD, truncated [ 1675.578517][T15492] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1675.585775][T15492] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1675.595066][T11723] usb 4-1: USB disconnect, device number 28 [ 1678.396200][T15327] veth0_vlan: entered promiscuous mode [ 1678.557147][T15327] veth1_vlan: entered promiscuous mode [ 1679.063773][T15327] veth0_macvtap: entered promiscuous mode [ 1679.196183][T15327] veth1_macvtap: entered promiscuous mode [ 1679.470012][T15327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.569628][T15327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.810821][ T4078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.860248][T15516] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 1679.971161][ T4078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.047643][ T4154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.175137][ T4043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.123610][T15523] netlink: 'syz.3.1954': attribute type 9 has an invalid length. [ 1682.131866][T15523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1954'. [ 1683.687394][T15536] loop2: detected capacity change from 0 to 7 [ 1683.770923][T15536] Dev loop2: unable to read RDB block 7 [ 1683.776808][T15536] loop2: AHDI p1 p2 p3 [ 1683.781520][T15536] loop2: partition table partially beyond EOD, truncated [ 1683.790006][T15536] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1683.797382][T15536] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1684.400180][T11723] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1684.620302][T11723] usb 6-1: Using ep0 maxpacket: 16 [ 1684.700943][T11723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.712639][T11723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.722861][T11723] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1684.736337][T11723] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1684.745813][T11723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.946933][T11723] usb 6-1: config 0 descriptor?? [ 1685.672376][T11723] usbhid 6-1:0.0: can't add hid device: -71 [ 1685.678998][T11723] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1685.806391][T11723] usb 6-1: USB disconnect, device number 39 [ 1686.020671][T11005] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1686.361293][T11005] usb 9-1: Using ep0 maxpacket: 32 [ 1686.403699][T11005] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1686.418425][T11005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.494048][T11005] usb 9-1: config 0 descriptor?? [ 1686.780399][T11005] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1686.858190][T11005] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1686.986263][T11005] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1686.994580][T11005] usb 9-1: media controller created [ 1687.004463][T15556] ===================================================== [ 1687.012017][T15556] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x23e7/0x2f60 [ 1687.019959][T15556] __i2c_smbus_xfer+0x23e7/0x2f60 [ 1687.028851][T15556] i2c_smbus_xfer+0x31d/0x4d0 [ 1687.035094][T15556] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1687.040820][T15556] i2cdev_ioctl+0xa14/0xf40 [ 1687.045654][T15556] __se_sys_ioctl+0x239/0x400 [ 1687.050855][T15556] __x64_sys_ioctl+0x97/0xe0 [ 1687.055870][T15556] x64_sys_call+0x1cbc/0x3e20 [ 1687.061001][T15556] do_syscall_64+0xd9/0x210 [ 1687.065808][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.072698][T15556] [ 1687.075138][T15556] Local variable msgbuf1.i created at: [ 1687.081776][T15556] __i2c_smbus_xfer+0x86a/0x2f60 [ 1687.086966][T15556] i2c_smbus_xfer+0x31d/0x4d0 [ 1687.092034][T15556] [ 1687.094500][T15556] CPU: 1 UID: 0 PID: 15556 Comm: syz.8.1962 Tainted: G W syzkaller #0 PREEMPT(none) [ 1687.106964][T15556] Tainted: [W]=WARN [ 1687.111074][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1687.121520][T15556] ===================================================== [ 1687.132233][T15556] Disabling lock debugging due to kernel taint [ 1687.139993][T15556] Kernel panic - not syncing: kmsan.panic set ... [ 1687.146597][T15556] CPU: 1 UID: 0 PID: 15556 Comm: syz.8.1962 Tainted: G B W syzkaller #0 PREEMPT(none) [ 1687.157756][T15556] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1687.162878][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1687.173147][T15556] Call Trace: [ 1687.176524][T15556] [ 1687.179555][T15556] __dump_stack+0x26/0x30 [ 1687.184094][T15556] dump_stack_lvl+0x53/0x270 [ 1687.188875][T15556] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1687.194900][T15556] dump_stack+0x1e/0x25 [ 1687.199276][T15556] vpanic+0x361/0xc50 [ 1687.203499][T15556] panic+0x15d/0x160 [ 1687.207707][T15556] kmsan_report+0x31c/0x320 [ 1687.212425][T15556] ? __msan_warning+0x1b/0x30 [ 1687.217375][T15556] ? __i2c_smbus_xfer+0x23e7/0x2f60 [ 1687.222888][T15556] ? i2c_smbus_xfer+0x31d/0x4d0 [ 1687.228011][T15556] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 1687.233441][T15556] ? i2cdev_ioctl+0xa14/0xf40 [ 1687.238312][T15556] ? __se_sys_ioctl+0x239/0x400 [ 1687.243336][T15556] ? __x64_sys_ioctl+0x97/0xe0 [ 1687.248285][T15556] ? x64_sys_call+0x1cbc/0x3e20 [ 1687.253641][T15556] ? do_syscall_64+0xd9/0x210 [ 1687.258494][T15556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.264745][T15556] ? az6027_i2c_xfer+0x2bdf/0x2c40 [ 1687.270172][T15556] ? kmsan_get_metadata+0xfb/0x160 [ 1687.275506][T15556] ? kmsan_get_metadata+0xfb/0x160 [ 1687.280818][T15556] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1687.286854][T15556] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 1687.292169][T15556] __msan_warning+0x1b/0x30 [ 1687.296865][T15556] __i2c_smbus_xfer+0x23e7/0x2f60 [ 1687.302135][T15556] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1687.308417][T15556] ? rt_mutex_lock+0x3e/0x70 [ 1687.313237][T15556] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1687.319231][T15556] i2c_smbus_xfer+0x31d/0x4d0 [ 1687.324094][T15556] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1687.329373][T15556] i2cdev_ioctl+0xa14/0xf40 [ 1687.334119][T15556] ? __pfx_kmsan_get_shadow_origin_ptr+0x8/0x10 [ 1687.340571][T15556] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1687.345883][T15556] __se_sys_ioctl+0x239/0x400 [ 1687.350806][T15556] __x64_sys_ioctl+0x97/0xe0 [ 1687.355746][T15556] x64_sys_call+0x1cbc/0x3e20 [ 1687.360661][T15556] do_syscall_64+0xd9/0x210 [ 1687.365346][T15556] ? clear_bhb_loop+0x40/0x90 [ 1687.370207][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.376355][T15556] RIP: 0033:0x7f4b3378ec29 [ 1687.380911][T15556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.400883][T15556] RSP: 002b:00007f4b346d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1687.409498][T15556] RAX: ffffffffffffffda RBX: 00007f4b339d5fa0 RCX: 00007f4b3378ec29 [ 1687.417627][T15556] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000004 [ 1687.425824][T15556] RBP: 00007f4b33811e41 R08: 0000000000000000 R09: 0000000000000000 [ 1687.434028][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.442274][T15556] R13: 00007f4b339d6038 R14: 00007f4b339d5fa0 R15: 00007fffdc6adfe8 [ 1687.450432][T15556] [ 1687.454014][T15556] Kernel Offset: disabled [ 1687.458791][T15556] Rebooting in 86400 seconds..