last executing test programs: 36m5.512861611s ago: executing program 32 (id=284): socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 30m8.714466218s ago: executing program 33 (id=1188): socket$inet(0x2, 0x4000000000000001, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x40020}, 0x20040800) 25m0.496497973s ago: executing program 34 (id=1952): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) io_uring_enter(r2, 0x7368, 0x0, 0x0, 0x0, 0x0) 24m54.903591141s ago: executing program 35 (id=1960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{}, 0x2}}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)='w', 0x1}], 0x1, 0x1) close(r8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r10, 0x1, 0x200000010, 0x0, 0x0) sendto$unix(r9, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r10, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r7, 0x0, r8, 0x0, 0xfffd, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESDEC=r8, @ANYRES16=r5, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX=r4, @ANYRES8=r9, @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) 24m3.008418033s ago: executing program 36 (id=2041): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r6, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="42a1ee5b20dddd57a5", 0x9, 0xc001, 0x0, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0xfe800000, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r9, @ANYBLOB="80001e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 23m32.172178038s ago: executing program 37 (id=2119): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) 21m59.926465803s ago: executing program 38 (id=2321): syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d}, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000580)=0x1) 21m46.254124255s ago: executing program 39 (id=2348): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local={0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x5c, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x7, 0x9, {0x10, 0x4, 0x0, 0x6, 0x65, 0x64, 0x4, 0x9, 0x84, 0x80, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x11, [@private=0xa010100, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x88, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp={0x44, 0x10, 0xfc, 0x0, 0x0, [0x2, 0x4, 0x0]}]}}}}}}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4}, 0x50) open(0x0, 0x64842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r5, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 20m58.925464218s ago: executing program 40 (id=2428): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 20m44.175109998s ago: executing program 41 (id=2443): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) 20m6.502875496s ago: executing program 42 (id=2490): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 19m45.709694922s ago: executing program 43 (id=2513): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x723101, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1df2c8655b798bb9, 0x2, 0x2000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x25, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x1000000000, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x4, 0x2, 0x1ffc], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980912}) 19m37.559905664s ago: executing program 44 (id=2522): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)='\x00\x00', 0x2, r5) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r8, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000400028616573290000000000000000000000000600000000000000000000001400f2d5e3de3d7b4cd07ec3ee777de774fc7987cca4198902025af938cc6aedb8ede70ca5eb45d55c127640b17d7bdbb3b0ec89520927"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ptrace(0x10, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 19m2.898987592s ago: executing program 45 (id=2564): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) sendto$inet(r3, &(0x7f0000000300), 0x0, 0x40040011, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() 17m56.560588759s ago: executing program 46 (id=2668): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x101600, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[0x0, 0x0], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 17m17.829411963s ago: executing program 47 (id=2715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000140)=[{r1, 0x12}], 0x1, 0x79) r2 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc", 0x13}], 0x1}, 0x2400c000) syz_usb_connect(0x6, 0x1a, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m38.795370125s ago: executing program 48 (id=3154): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x43, 0x1, 0x0, "d02066fe6edd9a2a01000100565c000f30807278f8983c3c0a31965ebd9ca8ac", 0x31364d4e}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf250a0000cdff00000102000100080006000000000008000d00060000001400110062"], 0x40}, 0x1, 0x0, 0x0, 0x20008080}, 0x2010) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000040)={&(0x7f00000003c0)=""/134, 0x86}) close(0x3) r8 = dup(r7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './cgroup\x00'}) 11m19.844559926s ago: executing program 49 (id=3174): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 9m43.167397137s ago: executing program 1 (id=3377): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 9m41.804080436s ago: executing program 1 (id=3381): r0 = fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x115440) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) listen(0xffffffffffffffff, 0x3) memfd_create(0x0, 0x6) set_mempolicy(0x2, &(0x7f0000000100)=0x4, 0x3) r4 = memfd_create(&(0x7f0000000380)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000200)={0x32, @empty, 0x4e22, 0x2, 'sed\x00', 0x14, 0x9, 0x54}, 0x2c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x4000005, 0x6cc800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) 9m25.855799191s ago: executing program 50 (id=3381): r0 = fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x115440) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) listen(0xffffffffffffffff, 0x3) memfd_create(0x0, 0x6) set_mempolicy(0x2, &(0x7f0000000100)=0x4, 0x3) r4 = memfd_create(&(0x7f0000000380)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000200)={0x32, @empty, 0x4e22, 0x2, 'sed\x00', 0x14, 0x9, 0x54}, 0x2c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x4000005, 0x6cc800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) 8m29.929446009s ago: executing program 51 (id=3462): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0xfffff411}, 0x8) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001a0000001800018014000200"], 0x2c}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00', "030200", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffbdae00", "0c436d743c97c443084000", "ff81000000008000"]}) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x26, 0x80000, 0x7ff) socket(0x2, 0x80805, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 8m22.954265632s ago: executing program 52 (id=3476): pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) socket(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x6, 0x0) timerfd_settime(r3, 0x2, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e20, @multicast1}, 0x10) timer_create(0x7, &(0x7f0000000080)={0x0, 0x29, 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x2, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x41c, 0xe) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, 0x0) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 7m40.824981234s ago: executing program 53 (id=3521): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) 7m29.262440809s ago: executing program 3 (id=3541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) mq_open(0x0, 0x40, 0x16b, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m27.742248176s ago: executing program 3 (id=3544): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7m26.775368365s ago: executing program 3 (id=3547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r2) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3348484bb8df93fe521fe1040f858fb0192fdb61165ae96e54e95f986e1991666a28ea84021377f854fb46b740fc923244159bca8f8f9df6582f8c01dc05733e2e55fc52557ead879afe7c49146aea5741c8105fe87b521f427bf000000000000000000000000000000000000000000000000000000000000004f701390124865885190ca06cb4f206ba657fc27bf050e5038735848f0cf75411468e4dfe3b6b09f3604b8e53e9e597e20f046c1cd9dcbced8b86658007017e0"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0100000000000300"/28], 0x50) pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 7m13.671343556s ago: executing program 3 (id=3568): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000100), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 7m3.537332437s ago: executing program 54 (id=3560): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r4, 0xfffffffc}, 0x63) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r7, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 6m58.049081417s ago: executing program 55 (id=3568): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000100), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6m14.323285731s ago: executing program 7 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000002000)=ANY=[], 0x0) 6m13.487144863s ago: executing program 7 (id=3665): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000740)={0x40, 0x12, 0x3, "d63549"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xae}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000880), 0x0}) 6m13.254809567s ago: executing program 1 (id=3584): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c300000040000000950074000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r0}, 0x18) 6m12.602562579s ago: executing program 1 (id=3668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x2, 0xb, 0x1, 0x1, 0xffff, 0x5, 0x3, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m11.761104686s ago: executing program 1 (id=3671): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m10.734865042s ago: executing program 1 (id=3674): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000009c40)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x40000000, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000), 0x10) 6m10.247756021s ago: executing program 7 (id=3676): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 6m9.297851632s ago: executing program 7 (id=3678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 6m7.900831214s ago: executing program 7 (id=3682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) read(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) 6m6.770271864s ago: executing program 7 (id=3685): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5m53.646421239s ago: executing program 56 (id=3674): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000009c40)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x40000000, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000), 0x10) 5m49.850044785s ago: executing program 57 (id=3685): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5m33.601870102s ago: executing program 58 (id=3706): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4c01, &(0x7f0000000240)={0x0, 0x417a, 0x40, 0x8001002, 0x3d5}) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r11, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 5m6.135516811s ago: executing program 2 (id=3755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x4000000) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x480d0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 5m2.059713136s ago: executing program 2 (id=3758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x104, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m0.788769049s ago: executing program 2 (id=3760): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r0}, 0x18) 5m0.108045067s ago: executing program 2 (id=3762): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 4m59.253951367s ago: executing program 2 (id=3763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) syz_open_dev$usbmon(&(0x7f00000001c0), 0xfff, 0x101000) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m57.640365339s ago: executing program 2 (id=3765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x200000000000, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x2) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000180)=0x4) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f00000000c0), 0x5005) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0xb1, 0x80, 0x2, 0xdfeffffe}, {0x16}]}, 0x10) 4m48.429183332s ago: executing program 8 (id=3772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0xc, 0x5, 0x80}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r5, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4m45.201289456s ago: executing program 8 (id=3773): socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 4m44.433770012s ago: executing program 8 (id=3775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x104, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m41.164167562s ago: executing program 59 (id=3765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x200000000000, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x2) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000180)=0x4) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f00000000c0), 0x5005) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0xb1, 0x80, 0x2, 0xdfeffffe}, {0x16}]}, 0x10) 4m39.610042657s ago: executing program 8 (id=3779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) 4m36.990037131s ago: executing program 8 (id=3780): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="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", 0x79a00}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) 4m35.82269459s ago: executing program 8 (id=3782): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000002080), &(0x7f00000020c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000000)=0x84) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0xd, 0x80) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet_tcp(0x2, 0x1, 0x0) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) sendmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m19.595514891s ago: executing program 60 (id=3782): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000002080), &(0x7f00000020c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000000)=0x84) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0xd, 0x80) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet_tcp(0x2, 0x1, 0x0) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) sendmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m0.828677178s ago: executing program 4 (id=3801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x104, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m59.657400719s ago: executing program 4 (id=3802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0x0) read(r1, &(0x7f0000000000)=""/269, 0xfffffdef) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e26, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r2, 0xffffffffffffffff, 0x0) 3m58.349937387s ago: executing program 4 (id=3803): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3m57.502664448s ago: executing program 4 (id=3804): r0 = syz_open_dev$media(0x0, 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) io_setup(0x23, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="000106"], 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 3m53.568052944s ago: executing program 4 (id=3805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x1, 0x0, &(0x7f0000000280)="f8"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 3m52.049887551s ago: executing program 4 (id=3806): ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000200)=0x90a1240) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="00214717a70700000000030600710a5eeb9d04710400bbd6e76880000000005c786d17fd8beb29b773c0c6b84caec25c498e8b8a686fd42e2e4dd0728a9cde87af6cbd434628bbc0968e30fe1d03", 0x4e}], 0x1, 0xee, 0x4000004) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) syz_io_uring_setup(0x2085, &(0x7f0000000380)={0x0, 0x86f7, 0x10000, 0x3, 0x1ac}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffffffac}, 0x8048801) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0) r5 = openat$dsp(0xffffff9c, 0x0, 0x101200, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) r8 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010800000000000000000a0000000900020073797a320000000005000400000000000c0007800500150005000000050005000a00000014000300686173682c69700005003d5231150000"], 0x58}}, 0x84000) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000380)={0x0, 0x49, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r6, @ANYRES16=r7, @ANYRES8=r6], 0x2c}}, 0x4000010) 3m35.860805009s ago: executing program 61 (id=3806): ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000200)=0x90a1240) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="00214717a70700000000030600710a5eeb9d04710400bbd6e76880000000005c786d17fd8beb29b773c0c6b84caec25c498e8b8a686fd42e2e4dd0728a9cde87af6cbd434628bbc0968e30fe1d03", 0x4e}], 0x1, 0xee, 0x4000004) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) syz_io_uring_setup(0x2085, &(0x7f0000000380)={0x0, 0x86f7, 0x10000, 0x3, 0x1ac}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffffffac}, 0x8048801) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0) r5 = openat$dsp(0xffffff9c, 0x0, 0x101200, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) r8 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010800000000000000000a0000000900020073797a320000000005000400000000000c0007800500150005000000050005000a00000014000300686173682c69700005003d5231150000"], 0x58}}, 0x84000) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000380)={0x0, 0x49, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r6, @ANYRES16=r7, @ANYRES8=r6], 0x2c}}, 0x4000010) 3m33.845279568s ago: executing program 3 (id=3791): socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 3m32.123868284s ago: executing program 3 (id=3814): socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) getpeername(r1, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000300)=0x80) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x66, 0x0) r3 = gettid() setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x10}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r5 = fanotify_init(0xf00, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) fanotify_mark(r5, 0x105, 0x4800002c, r6, 0x0) read$FUSE(r5, &(0x7f0000002f00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 3m16.449656788s ago: executing program 62 (id=3814): socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) getpeername(r1, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000300)=0x80) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x66, 0x0) r3 = gettid() setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x10}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r5 = fanotify_init(0xf00, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) fanotify_mark(r5, 0x105, 0x4800002c, r6, 0x0) read$FUSE(r5, &(0x7f0000002f00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 2m48.798222854s ago: executing program 5 (id=3848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="c744240268000000c7442406000000000f011424450f2286c0f9c9f3446e66baf80cb8f44d7d86650f01c8c744240035000000c74424023eb3ddb8ff1c24edc402bf1947c9c907b9b10a0000b80d000000ba010000000f300c0c776c048def66bafc0cec460f01d6c9950000001c56400f06", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0x9, &(0x7f0000000240)={0x8, 0x7d}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/277, 0x115, 0xad9) pidfd_send_signal(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x40, 0x46, 0x8}, 0x0) r1 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m45.385105333s ago: executing program 5 (id=3853): r0 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000002200)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) unshare(0x40400) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xffffffffffffff9c, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080) 2m38.15986983s ago: executing program 5 (id=3859): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x43, 0x1, 0x0, "d02066fe6edd9a2a01000100565c000f30807278f8983c3c0a31965ebd9ca8ac", 0x31364d4e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x40010, 0xffffffffffffffff, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000040)={&(0x7f00000003c0)=""/134, 0x86}) close(0x3) dup(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001300010029bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="86ee01000904000005001100010000002c002b800800"], 0x54}}, 0x24008844) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) 2m36.555923994s ago: executing program 5 (id=3860): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000400)=""/217, 0xd9, 0x120, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) shutdown(r0, 0x0) mkdir(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(0xffffffffffffffff, 0x0, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, 0x0, 0x4080) 2m34.939964234s ago: executing program 5 (id=3863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x1, 0x0, &(0x7f0000000280)="f8"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2m33.389044374s ago: executing program 5 (id=3865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000001a240)={&(0x7f000001a280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC, @ANYRES64=r1, @ANYRES32=r2, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x2004c0c4) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f000001a600)={&(0x7f000001a200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f000001a2c0)={&(0x7f000001a640)=ANY=[@ANYBLOB="1c", @ANYRES16=0x0, @ANYBLOB="04012dbd705da46da2250500000008002d5d88ced8cdf200"/48, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008084) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) recvmmsg(r3, &(0x7f000001ad80)=[{{&(0x7f0000019080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f000001a380), 0x0, &(0x7f0000019100)=""/230, 0xe6}, 0x5}, {{&(0x7f000001a4c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000193c0)=[{&(0x7f000001a540)=""/131, 0x83}, {&(0x7f000001a6c0)=""/135, 0x87}, {&(0x7f0000019200)=""/255, 0xff}, {&(0x7f0000019300)=""/174, 0xae}], 0x4, &(0x7f000001a7c0)=""/88, 0x58}, 0xfffff801}], 0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000019640)={&(0x7f0000019400)=@nl=@unspec, 0x80, &(0x7f00000194c0)=[{&(0x7f0000019480)="b737843428ea587f108c6412b23bf81f15c642eeeeafbe83e315c659ecae03", 0x1f}], 0x1, &(0x7f0000019500)=[{0x38, 0x10e, 0x80, "ffe9797e83055dde99282c27e4effaca9938ce546c57b78bda54860a1dee3cba994bb27b5890"}, {0x78, 0x102, 0x2, "a95f04e56b3e7049498bae005470ac0c0659e4757af2fd8bed780d14f07cddc497acea1b7590bbd2f76f6c0849ef705908eaebf83024ef1cf4a0627ebf2d26a767d54e453747c185bd3aaa571cd80eb9ed3154bc58d45269dc2325ec2e6adc56a5ccedf0264e"}, {0x58, 0x108, 0x9, "a47b01731f3e623b05d358d96bf028dbee239525ca23c057e4828667802f8d2b18694d39432dcd43203790ca62d388d9a8beb04417ed1f311a57ccf45d4fa39baaad3bacbb"}], 0x108}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1d1, 0xa, 0x20, 0x0, 0xaa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x1, 0x0, 0x7}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xf}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe, 0x0, 0x0, 0xfe}}, 0xe8) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 2m16.44165432s ago: executing program 63 (id=3865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000001a240)={&(0x7f000001a280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC, @ANYRES64=r1, @ANYRES32=r2, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x2004c0c4) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f000001a600)={&(0x7f000001a200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f000001a2c0)={&(0x7f000001a640)=ANY=[@ANYBLOB="1c", @ANYRES16=0x0, @ANYBLOB="04012dbd705da46da2250500000008002d5d88ced8cdf200"/48, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008084) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) recvmmsg(r3, &(0x7f000001ad80)=[{{&(0x7f0000019080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f000001a380), 0x0, &(0x7f0000019100)=""/230, 0xe6}, 0x5}, {{&(0x7f000001a4c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000193c0)=[{&(0x7f000001a540)=""/131, 0x83}, {&(0x7f000001a6c0)=""/135, 0x87}, {&(0x7f0000019200)=""/255, 0xff}, {&(0x7f0000019300)=""/174, 0xae}], 0x4, &(0x7f000001a7c0)=""/88, 0x58}, 0xfffff801}], 0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000019640)={&(0x7f0000019400)=@nl=@unspec, 0x80, &(0x7f00000194c0)=[{&(0x7f0000019480)="b737843428ea587f108c6412b23bf81f15c642eeeeafbe83e315c659ecae03", 0x1f}], 0x1, &(0x7f0000019500)=[{0x38, 0x10e, 0x80, "ffe9797e83055dde99282c27e4effaca9938ce546c57b78bda54860a1dee3cba994bb27b5890"}, {0x78, 0x102, 0x2, "a95f04e56b3e7049498bae005470ac0c0659e4757af2fd8bed780d14f07cddc497acea1b7590bbd2f76f6c0849ef705908eaebf83024ef1cf4a0627ebf2d26a767d54e453747c185bd3aaa571cd80eb9ed3154bc58d45269dc2325ec2e6adc56a5ccedf0264e"}, {0x58, 0x108, 0x9, "a47b01731f3e623b05d358d96bf028dbee239525ca23c057e4828667802f8d2b18694d39432dcd43203790ca62d388d9a8beb04417ed1f311a57ccf45d4fa39baaad3bacbb"}], 0x108}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1d1, 0xa, 0x20, 0x0, 0xaa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x1, 0x0, 0x7}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xf}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe, 0x0, 0x0, 0xfe}}, 0xe8) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 19.961524818s ago: executing program 6 (id=3994): socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b64", 0xf8}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 16.930095696s ago: executing program 6 (id=3997): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002180)={0xc, 0x0, &(0x7f0000002140)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 15.808895075s ago: executing program 6 (id=3998): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x6480, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0x9, 0x800400) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/\\xv/bus/usb/00#/00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) bind$alg(r5, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/disk', 0x4b4a00, 0x80) mq_timedreceive(r7, &(0x7f0000000000)=""/122, 0x7a, 0xfffffffffffffff8, &(0x7f0000000080)={0x77359400}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) write$snddsp(r7, &(0x7f0000000380)="32dab9f293aea210e65b639880ec4274560cf95533d35857b12a130ba4aaef996834e95884d5bfaaff2a211b4f246c18139f558c9dee84c34baa69cd21b8b61266a79ffe2f91996b9716013e1dab92a4cc94c7312d22448dd5d9783c5c2bbd02b871612a7ed21227e2ac080cb5e21f431bb27ffa4499d66a954ca01442f4ec8e9287c158b626fba5a8b1635aa0ab89f9972e7af78d7b4f6b553f22a6935da445b1133f2aa22e2df816c2d1", 0xab) 15.374717665s ago: executing program 0 (id=3999): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x1, 0x1}, 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 13.459227483s ago: executing program 0 (id=4001): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 7.372728452s ago: executing program 0 (id=4003): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/pid_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xb3, 0xa, 0x40, 0xc45, 0x60a8, 0xb555, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xd1, 0x84}}]}}]}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5c3, &(0x7f0000000140)={0x0, 0x2, 0x1000, 0x2}, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.35626318s ago: executing program 9 (id=4004): r0 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev2(r4, &(0x7f0000000200)=[{0x0}], 0x1, 0x7, 0x9, 0x17) 6.30136409s ago: executing program 9 (id=4005): socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b64", 0xf8}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5.464349111s ago: executing program 6 (id=4006): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.903401732s ago: executing program 9 (id=4007): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="080026008516000d0a001800"], 0x4c}}, 0x0) 4.221806535s ago: executing program 9 (id=4008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) times(0x0) 4.150365918s ago: executing program 0 (id=4009): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x1, "884ad539"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x7, "2667af2a"}, @main=@item_4={0x3, 0x0, 0x8}, @global, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.057022182s ago: executing program 9 (id=4010): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce6000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.406942498s ago: executing program 6 (id=4011): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.121616095s ago: executing program 0 (id=4012): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0xd2ce5b5aff2a65de, 0x4, 0x7f, 0xfc, 0x0, 0xff, 0x6, 0x100}, [@RTA_UID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x8040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000780)=[@acquire], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 732.066709ms ago: executing program 9 (id=4013): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="71030757c89baa22c248359b"], 0xc) 404.713211ms ago: executing program 6 (id=4014): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x6480, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0x9, 0x800400) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/\\xv/bus/usb/00#/00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) bind$alg(r5, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/disk', 0x4b4a00, 0x80) mq_timedreceive(r7, &(0x7f0000000000)=""/122, 0x7a, 0xfffffffffffffff8, &(0x7f0000000080)={0x77359400}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) write$snddsp(r7, &(0x7f0000000380)="32dab9f293aea210e65b639880ec4274560cf95533d35857b12a130ba4aaef996834e95884d5bfaaff2a211b4f246c18139f558c9dee84c34baa69cd21b8b61266a79ffe2f91996b9716013e1dab92a4cc94c7312d22448dd5d9783c5c2bbd02b871612a7ed21227e2ac080cb5e21f431bb27ffa4499d66a954ca01442f4ec8e9287c158b626fba5a8b1635aa0ab89f9972e7af78d7b4f6b553f22a6935da445b1133f2aa22e2df816c2d1", 0xab) 0s ago: executing program 0 (id=4015): socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b64", 0xf8}, {&(0x7f0000001480)="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", 0x1001}], 0x3) kernel console output (not intermixed with test programs): dge_slave_1) entered blocking state [ 2251.983875][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.992135][T18813] bridge_slave_1: entered allmulticast mode [ 2252.002411][T18813] bridge_slave_1: entered promiscuous mode [ 2252.250402][T12618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2252.258610][T12618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2252.320752][T18813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2252.449210][T18813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2252.488955][T10353] Bluetooth: hci1: command tx timeout [ 2252.684731][T18813] team0: Port device team_slave_0 added [ 2252.741758][T18813] team0: Port device team_slave_1 added [ 2253.039763][ T3756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2253.048098][ T3756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2253.586329][T18813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2253.594226][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2253.620851][T18813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2254.268416][T18813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2254.275722][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2254.310681][T18813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2254.498626][T10353] Bluetooth: hci1: command tx timeout [ 2254.984087][T18860] chnl_net:caif_netlink_parms(): no params data found [ 2255.192043][T18813] hsr_slave_0: entered promiscuous mode [ 2255.201411][T18813] hsr_slave_1: entered promiscuous mode [ 2255.659589][T16625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2255.670553][T16625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2255.689532][T16625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2255.743740][T16625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2255.754585][T16625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2256.588217][T10353] Bluetooth: hci1: command tx timeout [ 2257.208732][T18897] tipc: Enabling of bearer rejected, failed to enable media [ 2257.503634][T18896] syzkaller0: entered promiscuous mode [ 2257.509799][T18896] syzkaller0: entered allmulticast mode [ 2257.659559][T11935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.864113][T11935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.883623][T10353] Bluetooth: hci3: command tx timeout [ 2258.145521][T11935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.524512][T11935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.938498][T10353] Bluetooth: hci3: command tx timeout [ 2260.220867][T18860] bridge0: port 1(bridge_slave_0) entered blocking state [ 2260.232057][T18860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2260.240156][T18860] bridge_slave_0: entered allmulticast mode [ 2260.250630][T18860] bridge_slave_0: entered promiscuous mode [ 2260.603768][T18860] bridge0: port 2(bridge_slave_1) entered blocking state [ 2260.614075][T18860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2260.622775][T18860] bridge_slave_1: entered allmulticast mode [ 2260.641171][T18860] bridge_slave_1: entered promiscuous mode [ 2261.180250][T18860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2261.259135][T18890] chnl_net:caif_netlink_parms(): no params data found [ 2261.463150][T18860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2261.692302][T11935] bridge_slave_1: left allmulticast mode [ 2261.698936][T11935] bridge_slave_1: left promiscuous mode [ 2261.705630][T11935] bridge0: port 2(bridge_slave_1) entered disabled state [ 2261.772907][T11935] bridge_slave_0: left allmulticast mode [ 2261.780500][T11935] bridge_slave_0: left promiscuous mode [ 2261.787262][T11935] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.049363][T10353] Bluetooth: hci3: command tx timeout [ 2262.169665][ T3084] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2262.497363][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2262.504655][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2262.526855][ T3084] usb 5-1: Using ep0 maxpacket: 16 [ 2262.564682][ T3084] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 2262.573205][ T3084] usb 5-1: config 0 has no interface number 0 [ 2262.582006][ T3084] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2262.593093][ T3084] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2262.603479][ T3084] usb 5-1: config 0 interface 41 has no altsetting 0 [ 2262.613568][T11935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2262.641508][T11935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2262.668878][ T3084] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2262.678326][ T3084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.688630][ T3084] usb 5-1: Product: syz [ 2262.693013][ T3084] usb 5-1: Manufacturer: syz [ 2262.699892][ T3084] usb 5-1: SerialNumber: syz [ 2262.713929][T11935] bond0 (unregistering): Released all slaves [ 2262.736192][T18813] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2262.738540][ T3084] usb 5-1: config 0 descriptor?? [ 2262.752673][T18910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2262.779605][T18910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2262.960134][T18813] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2263.011683][T18860] team0: Port device team_slave_0 added [ 2263.024415][T18910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2263.034676][T18910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2263.046538][T18813] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2263.161805][T18860] team0: Port device team_slave_1 added [ 2263.367045][T18813] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2263.510921][ T3084] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 2263.988668][T11935] hsr_slave_0: left promiscuous mode [ 2264.016875][T11935] hsr_slave_1: left promiscuous mode [ 2264.026999][T11935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2264.034897][T11935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2264.096503][T11935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2264.099483][T10353] Bluetooth: hci3: command tx timeout [ 2264.104233][T11935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2264.277644][T11935] veth1_macvtap: left promiscuous mode [ 2264.283956][T11935] veth0_macvtap: left promiscuous mode [ 2264.290095][T11935] veth1_vlan: left promiscuous mode [ 2264.296960][T11935] veth0_vlan: left promiscuous mode [ 2265.254071][ T3084] usb 5-1: USB disconnect, device number 81 [ 2265.350946][T11935] team0 (unregistering): Port device team_slave_1 removed [ 2265.387731][T11935] team0 (unregistering): Port device team_slave_0 removed [ 2265.711046][T18860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2265.718289][T18860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.746145][T18860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2265.798927][T18860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2265.806221][T18860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.834089][T18860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2266.257061][T18890] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.269110][T18890] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.276895][T18890] bridge_slave_0: entered allmulticast mode [ 2266.285700][T18890] bridge_slave_0: entered promiscuous mode [ 2266.516842][T18890] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.525216][T18890] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.533475][T18890] bridge_slave_1: entered allmulticast mode [ 2266.543819][T18890] bridge_slave_1: entered promiscuous mode [ 2266.736855][T18860] hsr_slave_0: entered promiscuous mode [ 2266.748937][T18860] hsr_slave_1: entered promiscuous mode [ 2266.760212][T18860] debugfs: 'hsr0' already exists in 'hsr' [ 2266.766158][T18860] Cannot create hsr debugfs directory [ 2267.359744][T18890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2267.526876][T11935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.778125][T18890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2267.910560][T11935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.038166][T16625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2268.050910][T16625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2268.063879][T16625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2268.155881][T16625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2268.172683][T11935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.234503][T16625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2268.244410][T18890] team0: Port device team_slave_0 added [ 2268.405851][T11935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.471532][T18890] team0: Port device team_slave_1 added [ 2269.085289][T18890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2269.093359][T18890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2269.121162][T18890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2269.318946][T18813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2269.347565][T18890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2269.354869][T18890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2269.381408][T18890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2269.394290][T11935] bridge_slave_1: left allmulticast mode [ 2269.400320][T11935] bridge_slave_1: left promiscuous mode [ 2269.407047][T11935] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.528734][T11935] bridge_slave_0: left allmulticast mode [ 2269.534651][T11935] bridge_slave_0: left promiscuous mode [ 2269.544979][T11935] bridge0: port 1(bridge_slave_0) entered disabled state [ 2270.498296][T16625] Bluetooth: hci0: command tx timeout [ 2270.525975][T11935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2270.559151][T11935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2270.595933][T11935] bond0 (unregistering): Released all slaves [ 2271.232507][T18813] 8021q: adding VLAN 0 to HW filter on device team0 [ 2271.655726][T18890] hsr_slave_0: entered promiscuous mode [ 2271.665105][T18890] hsr_slave_1: entered promiscuous mode [ 2271.674325][T18890] debugfs: 'hsr0' already exists in 'hsr' [ 2271.680377][T18890] Cannot create hsr debugfs directory [ 2271.717577][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 2271.725324][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2271.965352][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state [ 2271.973124][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2272.247098][T11935] hsr_slave_0: left promiscuous mode [ 2272.261506][T11935] hsr_slave_1: left promiscuous mode [ 2272.269346][T11935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2272.276868][T11935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2272.294548][T11935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2272.302292][T11935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2272.346953][T11935] veth1_macvtap: left promiscuous mode [ 2272.353530][T11935] veth0_macvtap: left promiscuous mode [ 2272.359717][T11935] veth1_vlan: left promiscuous mode [ 2272.365755][T11935] veth0_vlan: left promiscuous mode [ 2272.598792][T16625] Bluetooth: hci0: command tx timeout [ 2273.276464][T11935] team0 (unregistering): Port device team_slave_1 removed [ 2273.348133][T11935] team0 (unregistering): Port device team_slave_0 removed [ 2273.700364][T18922] chnl_net:caif_netlink_parms(): no params data found [ 2274.658655][T16625] Bluetooth: hci0: command tx timeout [ 2275.413405][T18860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2275.469306][T18860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2275.595219][T18860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2276.613422][T18860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2276.744738][T16625] Bluetooth: hci0: command tx timeout [ 2277.369487][T18890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2277.544280][T18890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2277.612488][T18922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.620354][T18922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.628649][T18922] bridge_slave_0: entered allmulticast mode [ 2277.640634][T18922] bridge_slave_0: entered promiscuous mode [ 2277.696652][T18890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2277.794335][T18922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.803701][T18922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.813491][T18922] bridge_slave_1: entered allmulticast mode [ 2277.823751][T18922] bridge_slave_1: entered promiscuous mode [ 2277.871579][T18890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2278.267255][T18922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2278.378718][T18922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2278.466330][T18813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2278.478396][T17722] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2278.652703][T18922] team0: Port device team_slave_0 added [ 2278.664163][T17722] usb 5-1: Using ep0 maxpacket: 16 [ 2278.686939][T17722] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 2278.695303][T17722] usb 5-1: config 0 has no interface number 0 [ 2278.701671][T17722] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2278.711730][T17722] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2278.721956][T17722] usb 5-1: config 0 interface 41 has no altsetting 0 [ 2278.808071][T18922] team0: Port device team_slave_1 added [ 2278.951710][T17722] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2278.964127][T17722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.973528][T17722] usb 5-1: Product: syz [ 2278.978356][T17722] usb 5-1: Manufacturer: syz [ 2278.983079][T17722] usb 5-1: SerialNumber: syz [ 2279.006905][T17722] usb 5-1: config 0 descriptor?? [ 2279.014141][T18955] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2279.179748][T18955] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2279.190541][T18922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2279.197599][T18922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2279.224536][T18922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2279.287612][T18860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2279.542053][T18954] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2279.558896][T18922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2279.566232][T18922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2279.594824][T18922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2279.647967][T18860] 8021q: adding VLAN 0 to HW filter on device team0 [ 2279.689216][T18954] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2279.745072][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.752778][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2279.915088][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.922786][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.201638][T17722] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 2280.512944][T18922] hsr_slave_0: entered promiscuous mode [ 2280.522254][T18922] hsr_slave_1: entered promiscuous mode [ 2280.530299][T18922] debugfs: 'hsr0' already exists in 'hsr' [ 2280.536148][T18922] Cannot create hsr debugfs directory [ 2280.550132][T18860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2280.561823][T18860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2281.075666][T18890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2281.553285][T18890] 8021q: adding VLAN 0 to HW filter on device team0 [ 2281.755512][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.763333][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2281.821203][ T8401] usb 5-1: USB disconnect, device number 82 [ 2281.923423][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.931136][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2282.373468][T18967] binder: 18965:18967 ioctl 4018620d 0 returned -22 [ 2283.362500][T18813] veth0_vlan: entered promiscuous mode [ 2283.531482][T18813] veth1_vlan: entered promiscuous mode [ 2283.552908][T18922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2283.688804][T18922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2283.811055][T18922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2283.951948][T18922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2284.022471][T18860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2284.197073][T18813] veth0_macvtap: entered promiscuous mode [ 2284.273055][T18813] veth1_macvtap: entered promiscuous mode [ 2284.541225][T18813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2284.702095][T18813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2284.813045][T12615] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.854070][T12615] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.921910][T12615] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.962062][T12615] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.462584][T18890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2286.359925][T18922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2286.701426][T18922] 8021q: adding VLAN 0 to HW filter on device team0 [ 2286.829492][T14897] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.837089][T14897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2287.911051][T14897] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.918783][T14897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.035065][T18860] veth0_vlan: entered promiscuous mode [ 2289.245935][T18860] veth1_vlan: entered promiscuous mode [ 2289.389892][ T8401] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2289.618670][ T8401] usb 5-1: Using ep0 maxpacket: 16 [ 2289.680809][ T8401] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 2289.691890][ T8401] usb 5-1: config 0 has no interface number 0 [ 2289.699269][ T8401] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2289.709400][ T8401] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2289.721557][ T8401] usb 5-1: config 0 interface 41 has no altsetting 0 [ 2289.896934][T18860] veth0_macvtap: entered promiscuous mode [ 2289.972795][ T8401] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2289.982454][ T8401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.990736][ T8401] usb 5-1: Product: syz [ 2289.995019][ T8401] usb 5-1: Manufacturer: syz [ 2290.000826][ T8401] usb 5-1: SerialNumber: syz [ 2290.083379][T18860] veth1_macvtap: entered promiscuous mode [ 2290.134142][ T8401] usb 5-1: config 0 descriptor?? [ 2290.150181][T19005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2290.158522][T19005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2290.432111][T19005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2290.517775][T19005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2290.658161][T18860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2290.922214][T18860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2290.974713][T18890] veth0_vlan: entered promiscuous mode [ 2290.986998][ T8401] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 2291.116047][T14896] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.254232][T18890] veth1_vlan: entered promiscuous mode [ 2291.287251][T14896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.336432][T14896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.463340][ T3720] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.572069][T14896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.667509][ T3720] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.811733][ T3720] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2292.027148][ T3720] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2292.076023][T18922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2292.293279][T18890] veth0_macvtap: entered promiscuous mode [ 2292.417190][T18890] veth1_macvtap: entered promiscuous mode [ 2292.496060][ T5875] usb 5-1: USB disconnect, device number 83 [ 2292.770364][T18890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2292.873862][ T3720] bridge_slave_1: left allmulticast mode [ 2292.880263][ T3720] bridge_slave_1: left promiscuous mode [ 2292.892078][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.959569][ T3720] bridge_slave_0: left allmulticast mode [ 2292.967570][ T3720] bridge_slave_0: left promiscuous mode [ 2292.974479][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2293.055079][T19025] binder: 19023:19025 ioctl c0306201 0 returned -14 [ 2293.525262][ T3720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2293.557117][ T3720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2293.574411][ T3720] bond0 (unregistering): Released all slaves [ 2293.617389][T18890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2293.820662][T12933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.860872][T18922] veth0_vlan: entered promiscuous mode [ 2293.878909][T12933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.932110][T12933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.012595][T12933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.100353][ T3720] tipc: Left network mode [ 2294.146710][T18922] veth1_vlan: entered promiscuous mode [ 2294.909043][ T3720] hsr_slave_0: left promiscuous mode [ 2294.968839][ T3720] hsr_slave_1: left promiscuous mode [ 2294.977405][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2294.987291][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2295.134753][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2295.144160][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2295.342691][ T3720] veth1_macvtap: left promiscuous mode [ 2295.349711][ T3720] veth0_macvtap: left promiscuous mode [ 2295.355644][ T3720] veth1_vlan: left promiscuous mode [ 2295.362290][ T3720] veth0_vlan: left promiscuous mode [ 2295.928648][T10353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2295.940758][T10353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2295.950422][T10353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2295.968285][T10353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2295.980443][T10353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2296.584636][ T3720] team0 (unregistering): Port device team_slave_1 removed [ 2296.647053][ T3720] team0 (unregistering): Port device team_slave_0 removed [ 2297.543865][T18922] veth0_macvtap: entered promiscuous mode [ 2297.604139][T18922] veth1_macvtap: entered promiscuous mode [ 2297.923634][T18922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2298.028761][T18922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2298.140410][T12616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.153183][T12616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.180061][T16625] Bluetooth: hci4: command tx timeout [ 2298.243126][T12616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.351030][T12616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2299.085947][ T3720] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.262734][ T3720] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.374132][T19039] chnl_net:caif_netlink_parms(): no params data found [ 2299.476587][ T3720] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.701431][ T3720] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2300.266282][T16625] Bluetooth: hci4: command tx timeout [ 2300.343165][ T3720] bridge_slave_1: left allmulticast mode [ 2300.351998][ T3720] bridge_slave_1: left promiscuous mode [ 2300.361866][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.381884][ T3720] bridge_slave_0: left allmulticast mode [ 2300.388535][ T3720] bridge_slave_0: left promiscuous mode [ 2300.395479][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.855140][ T3720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2300.876778][ T3720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2300.900273][ T3720] bond0 (unregistering): Released all slaves [ 2301.093843][ T3720] hsr_slave_0: left promiscuous mode [ 2301.112098][ T3720] hsr_slave_1: left promiscuous mode [ 2301.120123][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2301.127641][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2301.183984][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2301.192691][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2301.223137][ T3720] veth1_macvtap: left promiscuous mode [ 2301.229705][ T3720] veth0_macvtap: left promiscuous mode [ 2301.235666][ T3720] veth1_vlan: left promiscuous mode [ 2301.241341][ T3720] veth0_vlan: left promiscuous mode [ 2302.218103][ T3720] team0 (unregistering): Port device team_slave_1 removed [ 2302.241170][ T3720] team0 (unregistering): Port device team_slave_0 removed [ 2302.378633][T16625] Bluetooth: hci4: command tx timeout [ 2303.338222][T19039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.345933][T19039] bridge0: port 1(bridge_slave_0) entered disabled state [ 2303.354736][T19039] bridge_slave_0: entered allmulticast mode [ 2303.364935][T19039] bridge_slave_0: entered promiscuous mode [ 2303.547063][T19039] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.555637][T19039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2303.563680][T19039] bridge_slave_1: entered allmulticast mode [ 2303.574139][T19039] bridge_slave_1: entered promiscuous mode [ 2303.740903][T19039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2303.761956][T12616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2303.770150][T12616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2303.890094][T19039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2303.944152][T11935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2303.953388][T11935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2304.270487][T19039] team0: Port device team_slave_0 added [ 2304.353458][T19039] team0: Port device team_slave_1 added [ 2304.449906][T16625] Bluetooth: hci4: command tx timeout [ 2304.546404][T19039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2304.553822][T19039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2304.583317][T19039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2304.604970][T19039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2304.613884][T19039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2304.642181][T19039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2304.918015][T19039] hsr_slave_0: entered promiscuous mode [ 2304.929233][T19039] hsr_slave_1: entered promiscuous mode [ 2304.942458][T19081] tipc: Started in network mode [ 2304.949146][T19081] tipc: Node identity ba4661a544b6, cluster identity 4711 [ 2304.958145][T19081] tipc: Enabled bearer , priority 0 [ 2304.990297][T19081] syzkaller0: entered promiscuous mode [ 2304.996029][T19081] syzkaller0: entered allmulticast mode [ 2305.146069][T19081] tipc: Resetting bearer [ 2305.177266][T19080] tipc: Resetting bearer [ 2305.210893][T19080] tipc: Disabling bearer [ 2305.459313][T16625] Bluetooth: hci6: command 0x0406 tx timeout [ 2306.580424][T19039] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2306.659580][T19094] syzkaller0: entered promiscuous mode [ 2306.665320][T19094] syzkaller0: entered allmulticast mode [ 2306.708943][T19039] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2306.771713][T19039] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2306.900882][T19039] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2307.289057][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2307.297093][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2307.387093][T16607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2307.396397][T16607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.368680][T18709] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2311.048670][T18709] usb 7-1: Using ep0 maxpacket: 8 [ 2311.170384][T18709] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2311.180084][T18709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.188332][T18709] usb 7-1: Product: syz [ 2311.193888][T18709] usb 7-1: Manufacturer: syz [ 2311.199725][T18709] usb 7-1: SerialNumber: syz [ 2311.238888][T16607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2311.247008][T16607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2311.357242][T16607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2311.365653][T16607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2311.383167][T18709] usb 7-1: config 0 descriptor?? [ 2311.436965][T18709] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2312.659368][T18709] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 2312.669939][T18709] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2312.684703][T19039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2312.780122][T18709] usb 7-1: USB disconnect, device number 71 [ 2312.899072][T16625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2312.973470][T16625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2312.990081][T16625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2313.019323][T16625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2313.057428][T16625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2313.256451][T19039] 8021q: adding VLAN 0 to HW filter on device team0 [ 2313.333469][T16607] bridge0: port 1(bridge_slave_0) entered blocking state [ 2313.341266][T16607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2313.463915][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2313.471647][T16607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2314.652998][T19124] binder: 19119:19124 ioctl c0306201 0 returned -14 [ 2315.225948][T16625] Bluetooth: hci2: command tx timeout [ 2316.199761][T19137] syzkaller0: entered promiscuous mode [ 2316.205393][T19137] syzkaller0: entered allmulticast mode [ 2317.039867][T19112] chnl_net:caif_netlink_parms(): no params data found [ 2317.308933][T16625] Bluetooth: hci2: command tx timeout [ 2317.341911][T19039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2318.826070][ T8401] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2319.161591][ T8401] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2319.172825][ T8401] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2319.184389][ T8401] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2319.263758][ T8401] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2319.274126][ T8401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.284505][ T8401] usb 7-1: Product: syz [ 2319.289905][ T8401] usb 7-1: Manufacturer: syz [ 2319.294630][ T8401] usb 7-1: SerialNumber: syz [ 2319.405663][ T8401] usb 7-1: config 0 descriptor?? [ 2319.413366][T16625] Bluetooth: hci2: command tx timeout [ 2319.638994][ T8401] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2320.060177][ T8401] usb 7-1: USB disconnect, device number 72 [ 2320.370101][T19112] bridge0: port 1(bridge_slave_0) entered blocking state [ 2320.377661][T19112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2320.386806][T19112] bridge_slave_0: entered allmulticast mode [ 2320.395640][T19112] bridge_slave_0: entered promiscuous mode [ 2320.493052][T19112] bridge0: port 2(bridge_slave_1) entered blocking state [ 2320.501597][T19112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2320.509498][T19112] bridge_slave_1: entered allmulticast mode [ 2320.520030][T19112] bridge_slave_1: entered promiscuous mode [ 2320.878840][T19112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2321.026118][T19112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2321.111301][T19039] veth0_vlan: entered promiscuous mode [ 2321.465301][T16625] Bluetooth: hci2: command tx timeout [ 2321.473844][T19112] team0: Port device team_slave_0 added [ 2321.508776][T19039] veth1_vlan: entered promiscuous mode [ 2321.630924][T19112] team0: Port device team_slave_1 added [ 2322.088640][T18709] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2322.352858][T19112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2322.361061][T19112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2322.391440][T19112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2322.613182][T18709] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2322.622758][T18709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.631309][T18709] usb 6-1: Product: syz [ 2322.635589][T18709] usb 6-1: Manufacturer: syz [ 2322.640384][T18709] usb 6-1: SerialNumber: syz [ 2322.660107][T19112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2322.668599][T19112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2322.698611][T19112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2322.735477][T19039] veth0_macvtap: entered promiscuous mode [ 2322.885535][T19039] veth1_macvtap: entered promiscuous mode [ 2323.023217][T18709] usb 6-1: config 0 descriptor?? [ 2323.209469][T18709] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2323.293072][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3823'. [ 2323.512544][T19164] batadv0: entered promiscuous mode [ 2323.518176][T19164] macsec1: entered allmulticast mode [ 2323.523703][T19164] batadv0: entered allmulticast mode [ 2323.579760][T19170] binder: 19167:19170 ioctl c0306201 0 returned -14 [ 2323.654270][T18709] sonixb 6-1:0.0: Error reading register 00: -71 [ 2323.670916][T19112] hsr_slave_0: entered promiscuous mode [ 2323.680431][T18709] usb 6-1: USB disconnect, device number 55 [ 2323.682065][T19112] hsr_slave_1: entered promiscuous mode [ 2323.701061][T19112] debugfs: 'hsr0' already exists in 'hsr' [ 2323.707093][T19112] Cannot create hsr debugfs directory [ 2323.886358][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2323.894560][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2323.971519][T19039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2324.263578][T19039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2324.629175][ T3687] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2324.688152][ T3687] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2324.868345][T19172] loop6: detected capacity change from 0 to 6 [ 2324.923111][T19172] Dev loop6: unable to read RDB block 6 [ 2324.929221][T19172] loop6: unable to read partition table [ 2324.976156][ T3687] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2324.997488][T19172] loop6: partition table beyond EOD, truncated [ 2325.004179][T19172] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2325.038794][ T3687] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.186958][T19174] syzkaller0: entered promiscuous mode [ 2325.192819][T19174] syzkaller0: entered allmulticast mode [ 2326.415467][T19112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2326.558586][T19112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2326.723509][T19112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2326.862474][T19112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2330.295465][T19112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2331.528746][T19112] 8021q: adding VLAN 0 to HW filter on device team0 [ 2332.044158][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2332.051648][T12933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2332.065892][T12933] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.073331][T12933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2333.965822][T10353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2333.989203][T10353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2334.020037][T10353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2334.075332][T10353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2334.100351][T10353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2335.951685][T19203] chnl_net:caif_netlink_parms(): no params data found [ 2336.270450][T10353] Bluetooth: hci5: command tx timeout [ 2337.519109][T18709] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2337.711707][T19112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2337.811084][T18709] usb 7-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2337.822540][T18709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.831083][T18709] usb 7-1: Product: syz [ 2337.835365][T18709] usb 7-1: Manufacturer: syz [ 2337.844273][T18709] usb 7-1: SerialNumber: syz [ 2337.902940][ T3720] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.909135][T19227] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3836'. [ 2338.025733][T18709] usb 7-1: config 0 descriptor?? [ 2338.083406][T18709] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2338.315168][ T3720] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.336271][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3835'. [ 2338.378329][T10353] Bluetooth: hci5: command tx timeout [ 2338.556626][T19221] batadv0: entered promiscuous mode [ 2338.567938][T19221] macsec1: entered allmulticast mode [ 2338.573459][T19221] batadv0: entered allmulticast mode [ 2338.609380][T18709] sonixb 7-1:0.0: Error reading register 00: -110 [ 2338.784718][ T3720] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.831026][T18709] usb 7-1: USB disconnect, device number 73 [ 2339.203525][ T3720] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.509898][T10353] Bluetooth: hci5: command tx timeout [ 2340.773823][T19203] bridge0: port 1(bridge_slave_0) entered blocking state [ 2340.781740][T19203] bridge0: port 1(bridge_slave_0) entered disabled state [ 2340.793456][T19203] bridge_slave_0: entered allmulticast mode [ 2340.804013][T19203] bridge_slave_0: entered promiscuous mode [ 2341.204486][T19203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2341.212535][T19203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.228244][T19203] bridge_slave_1: entered allmulticast mode [ 2341.239078][T19203] bridge_slave_1: entered promiscuous mode [ 2341.250510][ T3720] bridge_slave_1: left allmulticast mode [ 2341.256376][ T3720] bridge_slave_1: left promiscuous mode [ 2341.263361][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.480436][ T3720] bridge_slave_0: left allmulticast mode [ 2341.486479][ T3720] bridge_slave_0: left promiscuous mode [ 2341.493614][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2342.443164][ T3720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2343.021469][T10353] Bluetooth: hci5: command tx timeout [ 2343.042162][ T3720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2343.075408][ T3720] bond0 (unregistering): Released all slaves [ 2343.543821][T19203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2343.800500][T19203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2343.920332][T19112] veth0_vlan: entered promiscuous mode [ 2344.090237][ T3720] hsr_slave_0: left promiscuous mode [ 2344.148041][ T3720] hsr_slave_1: left promiscuous mode [ 2344.156559][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2344.164388][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2344.241555][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2344.249242][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2344.399602][ T3720] veth1_macvtap: left promiscuous mode [ 2344.405399][ T3720] veth0_macvtap: left promiscuous mode [ 2344.412221][ T3720] veth1_vlan: left promiscuous mode [ 2344.418089][ T3720] veth0_vlan: left promiscuous mode [ 2345.358616][ T3720] team0 (unregistering): Port device team_slave_1 removed [ 2345.393198][ T3720] team0 (unregistering): Port device team_slave_0 removed [ 2345.900040][T12618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2345.909876][T12618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2346.197365][T19112] veth1_vlan: entered promiscuous mode [ 2346.296589][T19203] team0: Port device team_slave_0 added [ 2346.328615][ T8357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2346.336673][ T8357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2346.408734][T19203] team0: Port device team_slave_1 added [ 2346.732601][T14897] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2346.892085][T19256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2347.031637][T14897] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.112183][T19203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2347.119674][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2347.147938][T19203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2347.224887][T14897] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.251649][T19203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2347.260080][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2347.290801][T19203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2347.420696][T19112] veth0_macvtap: entered promiscuous mode [ 2348.043579][T14897] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2351.179698][T19112] veth1_macvtap: entered promiscuous mode [ 2351.263158][T19203] hsr_slave_0: entered promiscuous mode [ 2351.274472][T19203] hsr_slave_1: entered promiscuous mode [ 2351.283918][T19203] debugfs: 'hsr0' already exists in 'hsr' [ 2351.290290][T19203] Cannot create hsr debugfs directory [ 2351.406567][T14897] bridge_slave_1: left allmulticast mode [ 2351.412751][T14897] bridge_slave_1: left promiscuous mode [ 2351.419782][T14897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2352.009765][T14897] bridge_slave_0: left allmulticast mode [ 2352.015571][T14897] bridge_slave_0: left promiscuous mode [ 2352.029860][T14897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.699822][ T8401] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2354.927345][T14897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2354.978604][ T8401] usb 10-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2354.989385][ T8401] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.997664][ T8401] usb 10-1: Product: syz [ 2355.003946][ T8401] usb 10-1: Manufacturer: syz [ 2355.009024][ T8401] usb 10-1: SerialNumber: syz [ 2355.028423][ T8401] usb 10-1: config 0 descriptor?? [ 2355.069641][ T8401] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2355.093583][T14897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2355.114764][T14897] bond0 (unregistering): Released all slaves [ 2355.407507][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3845'. [ 2355.582708][T19268] batadv0: entered promiscuous mode [ 2355.588574][T19268] macsec1: entered allmulticast mode [ 2355.594111][T19268] batadv0: entered allmulticast mode [ 2355.647358][ T8401] sonixb 10-1:0.0: Error reading register 00: -110 [ 2355.776516][ T8401] usb 10-1: USB disconnect, device number 17 [ 2357.411580][T14897] hsr_slave_0: left promiscuous mode [ 2357.469585][T14897] hsr_slave_1: left promiscuous mode [ 2357.481196][T14897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2357.489141][T14897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2357.571338][T14897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2357.579134][T14897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2358.499027][T14897] veth1_macvtap: left promiscuous mode [ 2358.506200][T14897] veth0_macvtap: left promiscuous mode [ 2358.514048][T14897] veth1_vlan: left promiscuous mode [ 2358.519591][T14897] veth0_vlan: left promiscuous mode [ 2359.546360][T14897] team0 (unregistering): Port device team_slave_1 removed [ 2359.664410][T14897] team0 (unregistering): Port device team_slave_0 removed [ 2360.113017][T19112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2360.304235][T19112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2360.428514][ T3756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.509713][T12618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.523502][T12618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.539233][T19286] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2360.693591][ T3720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2361.568260][T19295] C: renamed from veth0_to_batadv (while UP) [ 2361.634900][T19295] netlink: 'syz.5.3853': attribute type 3 has an invalid length. [ 2361.643308][T19295] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3853'. [ 2361.660850][T19295] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2362.413960][T19203] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2362.423681][ T30] audit: type=1326 audit(1757696339.334:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.423963][ T30] audit: type=1326 audit(1757696339.334:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.425382][ T30] audit: type=1326 audit(1757696339.354:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.494167][ T30] audit: type=1326 audit(1757696339.414:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.519853][ T30] audit: type=1326 audit(1757696339.414:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.547698][ T30] audit: type=1326 audit(1757696339.414:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.573194][ T30] audit: type=1326 audit(1757696339.414:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.596481][ T30] audit: type=1326 audit(1757696339.414:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.621249][ T30] audit: type=1326 audit(1757696339.414:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.651321][ T30] audit: type=1326 audit(1757696339.424:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2362.670362][T19203] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2362.946153][T19203] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2363.191283][T19203] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2366.566329][T19203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2366.868400][T17722] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2367.036789][T19203] 8021q: adding VLAN 0 to HW filter on device team0 [ 2367.179029][T17722] usb 7-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2367.188687][T17722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.197171][T17722] usb 7-1: Product: syz [ 2367.201825][T17722] usb 7-1: Manufacturer: syz [ 2367.208649][T17722] usb 7-1: SerialNumber: syz [ 2367.266460][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2367.274234][T12933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2367.357147][T12933] bridge0: port 2(bridge_slave_1) entered blocking state [ 2367.365050][T12933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2367.383965][T17722] usb 7-1: config 0 descriptor?? [ 2367.665317][T17722] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2368.204675][T17722] sonixb 7-1:0.0: Error reading register 00: -110 [ 2369.346965][ T8401] usb 7-1: USB disconnect, device number 74 [ 2372.025952][T16625] Bluetooth: hci1: command 0x0406 tx timeout [ 2372.033273][T19203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2372.423145][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2372.423243][ T30] audit: type=1326 audit(1757696349.334:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2372.457068][ T30] audit: type=1326 audit(1757696349.334:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2372.481323][ T30] audit: type=1326 audit(1757696349.334:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2372.507197][ T30] audit: type=1326 audit(1757696349.344:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2372.532320][ T30] audit: type=1326 audit(1757696349.354:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2372.558314][ T30] audit: type=1326 audit(1757696349.354:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2372.581971][ T30] audit: type=1326 audit(1757696349.354:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2372.723534][T19342] binder: 19341:19342 ioctl 4018620d 0 returned -22 [ 2372.919792][T16625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2372.942078][T16625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2372.972141][T16625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2373.021533][T16625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2373.053300][T16625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2373.420044][ T30] audit: type=1326 audit(1757696349.544:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2373.444078][ T30] audit: type=1326 audit(1757696349.544:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2373.468336][ T30] audit: type=1326 audit(1757696349.544:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.6.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6def38eba9 code=0x7ffc0000 [ 2373.819681][ T8401] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2373.925536][T13822] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2373.971510][T13822] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2374.041052][ T8401] usb 10-1: Using ep0 maxpacket: 8 [ 2374.140708][ T8401] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2374.150219][ T8401] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.158628][ T8401] usb 10-1: Product: syz [ 2374.163601][ T8401] usb 10-1: Manufacturer: syz [ 2374.169882][ T8401] usb 10-1: SerialNumber: syz [ 2374.269601][ T8401] usb 10-1: config 0 descriptor?? [ 2374.379207][ T8401] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2374.725963][T19345] chnl_net:caif_netlink_parms(): no params data found [ 2375.075407][ T8401] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 2375.087278][ T8401] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2375.139460][T16625] Bluetooth: hci0: command tx timeout [ 2375.160711][ T8401] usb 10-1: USB disconnect, device number 18 [ 2375.951347][ T3720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2376.165110][ T3720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.218111][T16625] Bluetooth: hci0: command tx timeout [ 2377.509842][ T3720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.956111][ T3720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.095713][T19368] syz.9.3868 (19368): drop_caches: 2 [ 2378.138770][T19203] veth0_vlan: entered promiscuous mode [ 2378.377172][T19345] bridge0: port 1(bridge_slave_0) entered blocking state [ 2378.385351][T19345] bridge0: port 1(bridge_slave_0) entered disabled state [ 2378.396313][T19345] bridge_slave_0: entered allmulticast mode [ 2378.405008][T19345] bridge_slave_0: entered promiscuous mode [ 2378.582170][T19345] bridge0: port 2(bridge_slave_1) entered blocking state [ 2378.589966][T19345] bridge0: port 2(bridge_slave_1) entered disabled state [ 2378.602567][T19345] bridge_slave_1: entered allmulticast mode [ 2378.612883][T19345] bridge_slave_1: entered promiscuous mode [ 2378.728457][ T3720] bridge_slave_1: left allmulticast mode [ 2378.734370][ T3720] bridge_slave_1: left promiscuous mode [ 2378.742698][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2378.804098][ T3720] bridge_slave_0: left allmulticast mode [ 2378.810175][ T3720] bridge_slave_0: left promiscuous mode [ 2378.816950][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2379.526061][T16625] Bluetooth: hci0: command tx timeout [ 2379.962474][ T3720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2380.034404][ T3720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2380.080914][ T3720] bond0 (unregistering): Released all slaves [ 2380.287137][T19203] veth1_vlan: entered promiscuous mode [ 2380.341885][T19345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2380.390380][ T8401] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2380.408239][ T3720] hsr_slave_0: left promiscuous mode [ 2380.442440][ T3720] hsr_slave_1: left promiscuous mode [ 2380.450632][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2380.458643][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2380.509567][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2380.519018][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2380.632832][ T3720] veth1_macvtap: left promiscuous mode [ 2380.638705][ T3720] veth0_macvtap: left promiscuous mode [ 2380.648332][ T3720] veth1_vlan: left promiscuous mode [ 2380.653930][ T3720] veth0_vlan: left promiscuous mode [ 2380.708853][ T8401] usb 7-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2380.718335][ T8401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.727473][ T8401] usb 7-1: Product: syz [ 2380.732121][ T8401] usb 7-1: Manufacturer: syz [ 2380.736834][ T8401] usb 7-1: SerialNumber: syz [ 2380.842020][ T8401] usb 7-1: config 0 descriptor?? [ 2380.989156][ T8401] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2381.245536][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3870'. [ 2381.528943][ T8401] sonixb 7-1:0.0: Error reading register 00: -110 [ 2381.570100][T19379] Bluetooth: hci0: command tx timeout [ 2381.818810][ T3720] team0 (unregistering): Port device team_slave_1 removed [ 2381.897503][ T3720] team0 (unregistering): Port device team_slave_0 removed [ 2382.285073][T19379] Bluetooth: hci3: command 0x0406 tx timeout [ 2382.359256][T19345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2382.793277][T19345] team0: Port device team_slave_0 added [ 2382.883704][T19345] team0: Port device team_slave_1 added [ 2383.129565][T19203] veth0_macvtap: entered promiscuous mode [ 2383.216377][ T8401] usb 7-1: USB disconnect, device number 75 [ 2383.245148][T19203] veth1_macvtap: entered promiscuous mode [ 2383.305106][T19345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2383.315907][T19345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2383.343087][T19345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2383.485431][T19345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2383.494536][T19345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2383.523362][T19345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2383.638257][T19203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2383.744497][T19203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2383.893566][T14896] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2384.056649][T14896] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2384.224996][T19345] hsr_slave_0: entered promiscuous mode [ 2384.237142][T19345] hsr_slave_1: entered promiscuous mode [ 2384.245236][T19345] debugfs: 'hsr0' already exists in 'hsr' [ 2384.251262][T19345] Cannot create hsr debugfs directory [ 2384.298876][T14896] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2384.369629][T14896] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.370864][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2385.377489][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2391.052617][T19345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2391.637454][T19345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2392.369178][T19345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2392.471392][T19345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2395.284438][T19379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2395.309194][T19379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2395.370167][T19379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2395.444899][T19379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2395.461774][T19379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2395.865087][T19345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2396.249815][T19345] 8021q: adding VLAN 0 to HW filter on device team0 [ 2396.496646][T12615] bridge0: port 1(bridge_slave_0) entered blocking state [ 2396.504341][T12615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2396.838654][T12615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2396.846264][T12615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2396.999046][T16625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2397.083717][T16625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2397.094011][T16625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2397.111068][T16625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2397.124558][T16625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2397.352462][T19422] chnl_net:caif_netlink_parms(): no params data found [ 2397.650895][T16625] Bluetooth: hci2: command tx timeout [ 2399.259451][T16625] Bluetooth: hci6: command tx timeout [ 2399.575414][T14896] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2399.710171][T16625] Bluetooth: hci2: command tx timeout [ 2400.525991][T14896] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2401.328566][T16625] Bluetooth: hci6: command tx timeout [ 2402.581826][T16625] Bluetooth: hci2: command tx timeout [ 2403.054445][T14896] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.385642][T16625] Bluetooth: hci6: command tx timeout [ 2403.555665][T14896] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.642846][T19422] bridge0: port 1(bridge_slave_0) entered blocking state [ 2403.650702][T19422] bridge0: port 1(bridge_slave_0) entered disabled state [ 2403.662860][T19422] bridge_slave_0: entered allmulticast mode [ 2403.673065][T19422] bridge_slave_0: entered promiscuous mode [ 2403.719742][T19429] chnl_net:caif_netlink_parms(): no params data found [ 2403.768021][T19422] bridge0: port 2(bridge_slave_1) entered blocking state [ 2403.775632][T19422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2403.783935][T19422] bridge_slave_1: entered allmulticast mode [ 2403.804186][T19422] bridge_slave_1: entered promiscuous mode [ 2403.938077][T19022] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2404.258418][T19022] usb 10-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 2404.268389][T19022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.278264][T19022] usb 10-1: Product: syz [ 2404.282762][T19022] usb 10-1: Manufacturer: syz [ 2404.287681][T19022] usb 10-1: SerialNumber: syz [ 2404.323759][T19422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2404.339188][T14896] bridge_slave_1: left allmulticast mode [ 2404.347553][T14896] bridge_slave_1: left promiscuous mode [ 2404.354976][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 2404.569314][T14896] bridge_slave_0: left allmulticast mode [ 2404.575372][T14896] bridge_slave_0: left promiscuous mode [ 2404.588161][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2405.058510][T16625] Bluetooth: hci2: command tx timeout [ 2405.260926][T19022] usb 10-1: config 0 descriptor?? [ 2405.320402][T19022] go7007 10-1:0.0: Sensoray 2250 found [ 2405.330904][T19022] go7007 10-1:0.0: probe with driver go7007 failed with error -12 [ 2405.468322][T16625] Bluetooth: hci6: command tx timeout [ 2405.602173][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2405.636328][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2405.678024][T14896] bond0 (unregistering): Released all slaves [ 2406.301304][T19422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2406.438766][T19468] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3889'. [ 2406.448306][T19468] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3889'. [ 2406.516584][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2406.516687][ T30] audit: type=1800 audit(1757696383.364:1286): pid=19468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3889" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2406.646943][T19345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2409.960186][T17722] usb 10-1: USB disconnect, device number 19 [ 2410.320770][T14896] tipc: Left network mode [ 2410.336445][T19422] team0: Port device team_slave_0 added [ 2410.572910][T19422] team0: Port device team_slave_1 added [ 2411.030892][T19422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2411.041756][T19422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2411.069158][T19422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2411.302059][T14896] hsr_slave_0: left promiscuous mode [ 2411.325083][T14896] hsr_slave_1: left promiscuous mode [ 2411.334129][T14896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2411.347673][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2411.370913][T14896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2411.378765][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2411.413664][T14896] batadv0: left allmulticast mode [ 2411.419357][T14896] batadv0: left promiscuous mode [ 2411.424653][T14896] veth1_macvtap: left promiscuous mode [ 2411.430843][T14896] veth0_macvtap: left promiscuous mode [ 2411.436803][T14896] veth1_vlan: left promiscuous mode [ 2411.446435][T14896] veth0_vlan: left promiscuous mode [ 2411.686284][T19478] binder: 19474:19478 ioctl c0306201 0 returned -14 [ 2412.310313][T14896] team0 (unregistering): Port device team_slave_1 removed [ 2412.442406][T14896] team0 (unregistering): Port device team_slave_0 removed [ 2412.788058][T19422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2412.795242][T19422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2412.827949][T19422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2413.098525][T19480] bridge0: port 3(syz_tun) entered blocking state [ 2413.106819][T19480] bridge0: port 3(syz_tun) entered disabled state [ 2413.114220][T19480] syz_tun: entered allmulticast mode [ 2413.126775][T19480] syz_tun: entered promiscuous mode [ 2413.134683][T19480] bridge0: port 3(syz_tun) entered blocking state [ 2413.141777][T19480] bridge0: port 3(syz_tun) entered forwarding state [ 2413.159212][T19429] bridge0: port 1(bridge_slave_0) entered blocking state [ 2413.166838][T19429] bridge0: port 1(bridge_slave_0) entered disabled state [ 2413.177222][T19429] bridge_slave_0: entered allmulticast mode [ 2413.190301][T19429] bridge_slave_0: entered promiscuous mode [ 2413.378051][T19429] bridge0: port 2(bridge_slave_1) entered blocking state [ 2413.390276][T19429] bridge0: port 2(bridge_slave_1) entered disabled state [ 2413.399522][T19429] bridge_slave_1: entered allmulticast mode [ 2413.410932][T19429] bridge_slave_1: entered promiscuous mode [ 2413.445166][T19422] hsr_slave_0: entered promiscuous mode [ 2413.455833][T19422] hsr_slave_1: entered promiscuous mode [ 2413.464779][T19422] debugfs: 'hsr0' already exists in 'hsr' [ 2413.470728][T19422] Cannot create hsr debugfs directory [ 2413.757485][T19429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2413.842107][T14896] ------------[ cut here ]------------ [ 2413.848138][T14896] WARNING: CPU: 1 PID: 14896 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x2f7/0x4c0 [ 2413.858563][T14896] Modules linked in: [ 2413.862733][T14896] CPU: 1 UID: 0 PID: 14896 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(none) [ 2413.872781][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2413.883793][T14896] Workqueue: netns cleanup_net [ 2413.888997][T14896] RIP: 0010:xfrm_state_fini+0x2f7/0x4c0 [ 2413.894883][T14896] Code: 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 8b 3a e8 48 09 c4 f3 4d 39 f7 0f 84 ac fd ff ff e8 2a 45 21 f3 90 <0f> 0b 90 e9 a3 fd ff ff 8b 3a e8 2a 09 c4 f3 4d 85 f6 0f 84 03 fe [ 2413.916274][T14896] RSP: 0018:ffff8880286a7a48 EFLAGS: 00010293 [ 2413.923240][T14896] RAX: ffffffff8ed3c056 RBX: ffff8880260ac740 RCX: ffff88806c834180 [ 2413.934828][T14896] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880260ad540 [ 2413.943433][T14896] RBP: ffff8880286a7a88 R08: ffffea000000000f R09: 0000000000000000 [ 2413.951810][T14896] R10: ffff888237b7a028 R11: ffffffff81d44d30 R12: 00000000063c0157 [ 2413.960125][T14896] R13: ffff8880260ac768 R14: ffff8880260ad540 R15: ffff888050019458 [ 2413.968540][T14896] FS: 0000000000000000(0000) GS:ffff8881aa791000(0000) knlGS:0000000000000000 [ 2413.977825][T14896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2413.984632][T14896] CR2: 00007f8aba9056c0 CR3: 0000000038150000 CR4: 00000000003526f0 [ 2413.993124][T14896] Call Trace: [ 2413.996569][T14896] [ 2413.999889][T14896] xfrm_net_exit+0x46/0x90 [ 2414.005719][T14896] ? __pfx_xfrm_net_exit+0x10/0x10 [ 2414.011647][T14896] ops_undo_list+0x6c5/0xb80 [ 2414.016581][T14896] cleanup_net+0xb8f/0x14b0 [ 2414.021582][T14896] ? __pfx_cleanup_net+0x10/0x10 [ 2414.029126][T14896] process_scheduled_works+0xb8e/0x1d80 [ 2414.035099][T14896] worker_thread+0xedf/0x1590 [ 2414.041167][T14896] kthread+0xd59/0xf00 [ 2414.045513][T14896] ? __pfx_worker_thread+0x10/0x10 [ 2414.051134][T14896] ? __pfx_kthread+0x10/0x10 [ 2414.055995][T14896] ret_from_fork+0x233/0x380 [ 2414.061008][T14896] ? __pfx_kthread+0x10/0x10 [ 2414.065884][T14896] ret_from_fork_asm+0x1a/0x30 [ 2414.071192][T14896] [ 2414.074388][T14896] ---[ end trace 0000000000000000 ]--- [ 2414.084150][T14896] ------------[ cut here ]------------ [ 2414.089877][T14896] WARNING: CPU: 1 PID: 14896 at net/xfrm/xfrm_state.c:3310 xfrm_state_fini+0x389/0x4c0 [ 2414.100150][T14896] Modules linked in: [ 2414.105629][T14896] CPU: 1 UID: 0 PID: 14896 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(none) [ 2414.117667][T14896] Tainted: [W]=WARN [ 2414.121825][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2414.134438][T14896] Workqueue: netns cleanup_net [ 2414.140395][T14896] RIP: 0010:xfrm_state_fini+0x389/0x4c0 [ 2414.146284][T14896] Code: 89 f7 e8 aa fd c3 f3 4c 8b 28 8b 02 89 45 d4 e9 25 fe ff ff 8b 3a e8 b6 08 c4 f3 4d 85 ff 0f 84 86 fe ff ff e8 98 44 21 f3 90 <0f> 0b 90 4d 8b 26 4c 89 f7 e8 79 fd c3 f3 4c 8b 28 8b 02 89 45 d4 [ 2414.166477][T14896] RSP: 0018:ffff8880286a7a48 EFLAGS: 00010293 [ 2414.172970][T14896] RAX: ffffffff8ed3c0e8 RBX: ffff8880260ac740 RCX: ffff88806c834180 [ 2414.181448][T14896] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88804d280f40 [ 2414.189757][T14896] RBP: ffff8880286a7a88 R08: ffffea000000000f R09: 0000000000400032 [ 2414.198095][T14896] R10: ffff88804ca80c80 R11: ffffffff81d44d30 R12: ffff88804d280f40 [ 2414.206330][T14896] R13: 0000000000000000 R14: ffff8880260ad558 R15: ffff888050019398 [ 2414.216303][T14896] FS: 0000000000000000(0000) GS:ffff8881aa791000(0000) knlGS:0000000000000000 [ 2414.226183][T14896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2414.235287][T14896] CR2: 00007f8aba9056c0 CR3: 0000000038150000 CR4: 00000000003526f0 [ 2414.244365][T14896] Call Trace: [ 2414.247906][T14896] [ 2414.251021][T14896] xfrm_net_exit+0x46/0x90 [ 2414.255699][T14896] ? __pfx_xfrm_net_exit+0x10/0x10 [ 2414.261202][T14896] ops_undo_list+0x6c5/0xb80 [ 2414.266283][T14896] cleanup_net+0xb8f/0x14b0 [ 2414.271285][T14896] ? __pfx_cleanup_net+0x10/0x10 [ 2414.276523][T14896] process_scheduled_works+0xb8e/0x1d80 [ 2414.282925][T14896] worker_thread+0xedf/0x1590 [ 2414.288117][T14896] kthread+0xd59/0xf00 [ 2414.292458][T14896] ? __pfx_worker_thread+0x10/0x10 [ 2414.298084][T14896] ? __pfx_kthread+0x10/0x10 [ 2414.302983][T14896] ret_from_fork+0x233/0x380 [ 2414.308142][T14896] ? __pfx_kthread+0x10/0x10 [ 2414.314230][T14896] ret_from_fork_asm+0x1a/0x30 [ 2414.319964][T14896] [ 2414.323190][T14896] ---[ end trace 0000000000000000 ]--- [ 2414.332876][T14896] ------------[ cut here ]------------ [ 2414.341825][T14896] WARNING: CPU: 1 PID: 14896 at net/xfrm/xfrm_state.c:3312 xfrm_state_fini+0x3ba/0x4c0 [ 2414.351935][T14896] Modules linked in: [ 2414.356116][T14896] CPU: 1 UID: 0 PID: 14896 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(none) [ 2414.367878][T14896] Tainted: [W]=WARN [ 2414.371848][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2414.382353][T14896] Workqueue: netns cleanup_net [ 2414.387449][T14896] RIP: 0010:xfrm_state_fini+0x3ba/0x4c0 [ 2414.393464][T14896] Code: 89 f7 e8 79 fd c3 f3 4c 8b 28 8b 02 89 45 d4 e9 6a fe ff ff 8b 3a e8 85 08 c4 f3 4d 85 ff 0f 84 cb fe ff ff e8 67 44 21 f3 90 <0f> 0b 90 4d 8b 26 4c 89 f7 e8 48 fd c3 f3 4c 8b 28 8b 02 89 45 d4 [ 2414.414744][T14896] RSP: 0018:ffff8880286a7a48 EFLAGS: 00010293 [ 2414.421803][T14896] RAX: ffffffff8ed3c119 RBX: ffff8880260ac740 RCX: ffff88806c834180 [ 2414.430240][T14896] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88804d280580 [ 2414.440836][T14896] RBP: ffff8880286a7a88 R08: ffffea000000000f R09: 0000000000400031 [ 2414.449931][T14896] R10: ffff88804ca80f40 R11: ffffffff81d44d30 R12: ffff88804d280580 [ 2414.458327][T14896] R13: 0000000000000000 R14: ffff8880260ad550 R15: ffff888050019388 [ 2414.466568][T14896] FS: 0000000000000000(0000) GS:ffff8881aa791000(0000) knlGS:0000000000000000 [ 2414.475920][T14896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2414.482879][T14896] CR2: 00007f8aba9056c0 CR3: 0000000012666000 CR4: 00000000003526f0 [ 2414.491268][T14896] Call Trace: [ 2414.494724][T14896] [ 2414.498248][T14896] xfrm_net_exit+0x46/0x90 [ 2414.502924][T14896] ? __pfx_xfrm_net_exit+0x10/0x10 [ 2414.508426][T14896] ops_undo_list+0x6c5/0xb80 [ 2414.513391][T14896] cleanup_net+0xb8f/0x14b0 [ 2414.519434][T14896] ? __pfx_cleanup_net+0x10/0x10 [ 2414.524664][T14896] process_scheduled_works+0xb8e/0x1d80 [ 2414.531173][T14896] worker_thread+0xedf/0x1590 [ 2414.536243][T14896] kthread+0xd59/0xf00 [ 2414.542848][T14896] ? __pfx_worker_thread+0x10/0x10 [ 2414.549125][T14896] ? __pfx_kthread+0x10/0x10 [ 2414.554009][T14896] ret_from_fork+0x233/0x380 [ 2414.559071][T14896] ? __pfx_kthread+0x10/0x10 [ 2414.563946][T14896] ret_from_fork_asm+0x1a/0x30 [ 2414.569200][T14896] [ 2414.572393][T14896] ---[ end trace 0000000000000000 ]--- [ 2414.669237][T19429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2415.566995][T14896] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.677099][T19345] veth0_vlan: entered promiscuous mode [ 2415.714524][T19429] team0: Port device team_slave_0 added [ 2415.775915][T14896] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.862753][T19429] team0: Port device team_slave_1 added [ 2416.025706][T14896] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2416.510183][T19345] veth1_vlan: entered promiscuous mode [ 2416.654682][T14896] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2416.886457][T19429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2416.896401][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2416.923627][T19429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2417.121795][T19429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2417.129392][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2417.131075][T19502] binder: 19500:19502 ioctl c0306201 0 returned -14 [ 2417.156492][T19429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2417.565226][T19429] hsr_slave_0: entered promiscuous mode [ 2417.576674][T19429] hsr_slave_1: entered promiscuous mode [ 2417.588469][T19429] debugfs: 'hsr0' already exists in 'hsr' [ 2417.594428][T19429] Cannot create hsr debugfs directory [ 2417.605723][T14896] bridge_slave_1: left allmulticast mode [ 2417.614559][T14896] bridge_slave_1: left promiscuous mode [ 2417.621580][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.656897][T14896] bridge_slave_0: left allmulticast mode [ 2417.663198][T14896] bridge_slave_0: left promiscuous mode [ 2417.670605][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2418.172387][T14896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2418.250197][T14896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2418.282948][T14896] bond0 (unregistering): Released all slaves [ 2418.649697][T14896] hsr_slave_0: left promiscuous mode [ 2418.670086][T14896] hsr_slave_1: left promiscuous mode [ 2418.678225][T14896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2418.685822][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2418.698985][T14896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2418.706642][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2418.819908][T14896] veth1_macvtap: left promiscuous mode [ 2418.825637][T14896] veth0_macvtap: left promiscuous mode [ 2418.831536][T14896] veth1_vlan: left promiscuous mode [ 2418.836957][T14896] veth0_vlan: left promiscuous mode [ 2419.671602][T14896] team0 (unregistering): Port device team_slave_1 removed [ 2419.719306][T14896] team0 (unregistering): Port device team_slave_0 removed [ 2420.379313][T19345] veth0_macvtap: entered promiscuous mode [ 2420.593959][T19345] veth1_macvtap: entered promiscuous mode [ 2420.778373][T19422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2420.923370][T19345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2420.949948][T19422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2421.062205][T19422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2421.110339][T19345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2421.198453][T19422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2421.277170][T11935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.342682][T11935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.388471][T11935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.506243][T11935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.130146][T19528] binder: 19524:19528 ioctl c0306201 0 returned -14 [ 2422.691912][T19422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2423.002678][T19422] 8021q: adding VLAN 0 to HW filter on device team0 [ 2423.092491][T19410] bridge0: port 1(bridge_slave_0) entered blocking state [ 2423.100368][T19410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2423.291166][T16625] Bluetooth: hci4: command 0x0406 tx timeout [ 2423.432090][T19410] bridge0: port 2(bridge_slave_1) entered blocking state [ 2423.440006][T19410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2425.212185][T19429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2425.246330][T19429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2425.321192][T19429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2425.399986][T19429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2425.837360][T19022] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2426.058253][T19022] usb 10-1: Using ep0 maxpacket: 32 [ 2426.105109][T19022] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2426.119279][T19022] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2426.126396][T19022] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2426.136990][T19022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2426.188832][T19022] usb 10-1: config 0 descriptor?? [ 2427.028567][T19429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2427.100768][T19022] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 2427.113083][T19022] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 2427.122813][T19022] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 2427.130787][T19022] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 2427.141884][T19022] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 2427.204640][T19429] 8021q: adding VLAN 0 to HW filter on device team0 [ 2427.252332][T19022] corsair-cpro 0003:1B1C:0C10.003B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0 [ 2427.335734][T12618] bridge0: port 1(bridge_slave_0) entered blocking state [ 2427.343498][T12618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2427.465249][T12618] bridge0: port 2(bridge_slave_1) entered blocking state [ 2427.473003][T12618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2427.587195][T19422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2427.662685][T19022] corsair-cpro 0003:1B1C:0C10.003B: probe with driver corsair-cpro failed with error -110 [ 2427.769777][T19022] usb 10-1: USB disconnect, device number 20 [ 2428.357540][T19422] veth0_vlan: entered promiscuous mode [ 2428.476803][T19422] veth1_vlan: entered promiscuous mode [ 2428.888132][T19022] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2428.921628][T19422] veth0_macvtap: entered promiscuous mode [ 2429.007147][T19422] veth1_macvtap: entered promiscuous mode [ 2429.101776][T19022] usb 7-1: Using ep0 maxpacket: 16 [ 2429.133383][T19022] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 2429.142096][T19022] usb 7-1: config 0 has no interface number 0 [ 2429.149441][T19022] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2429.160683][T19022] usb 7-1: config 0 interface 41 has no altsetting 0 [ 2429.240092][T19422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2429.271631][T19022] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2429.282885][T19022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.293159][T19022] usb 7-1: Product: syz [ 2429.297642][T19022] usb 7-1: Manufacturer: syz [ 2429.303467][T19022] usb 7-1: SerialNumber: syz [ 2429.382426][T19422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2429.384430][T19022] usb 7-1: config 0 descriptor?? [ 2429.411255][T19564] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2429.481920][T14897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.482997][T19022] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 2429.563280][T14897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.600091][T14897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.630483][T14897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.945304][T19429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2433.129257][T13822] usb 7-1: USB disconnect, device number 76 [ 2437.333427][T19429] veth0_vlan: entered promiscuous mode [ 2437.357601][T16625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2437.376147][T16625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2437.386015][T16625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2437.413037][T16625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2437.426293][T16625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2437.491368][T19429] veth1_vlan: entered promiscuous mode [ 2438.126085][T19429] veth0_macvtap: entered promiscuous mode [ 2438.242153][T19429] veth1_macvtap: entered promiscuous mode [ 2438.517252][T19429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2438.649551][T19429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2438.812321][ T3756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.833270][ T3756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.868413][ T3756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.925366][ T3756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2439.349428][T19606] chnl_net:caif_netlink_parms(): no params data found [ 2439.538986][T16625] Bluetooth: hci1: command tx timeout [ 2439.688841][T12516] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 2439.888305][T12516] usb 7-1: Using ep0 maxpacket: 16 [ 2439.939249][T12516] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 2439.948389][T12516] usb 7-1: config 0 has no interface number 0 [ 2439.954838][T12516] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2439.965885][T12516] usb 7-1: config 0 interface 41 has no altsetting 0 [ 2440.087502][T12516] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2440.097060][T12516] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.106601][T12516] usb 7-1: Product: syz [ 2440.112094][T12516] usb 7-1: Manufacturer: syz [ 2440.118603][T12516] usb 7-1: SerialNumber: syz [ 2440.194887][ T3756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2440.222145][T12516] usb 7-1: config 0 descriptor?? [ 2440.247065][T19627] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2440.280086][T12516] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 2440.450109][ T3756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2440.659423][ T3756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2440.783829][ T3756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2441.319360][ T3756] bridge_slave_1: left allmulticast mode [ 2441.325302][ T3756] bridge_slave_1: left promiscuous mode [ 2441.335807][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.410210][ T3756] bridge_slave_0: left allmulticast mode [ 2441.416268][ T3756] bridge_slave_0: left promiscuous mode [ 2441.423395][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.718541][T16625] Bluetooth: hci1: command tx timeout [ 2442.366230][ T3756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2442.481459][ T3756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2442.545199][ T3756] bond0 (unregistering): Released all slaves [ 2442.609378][T19606] bridge0: port 1(bridge_slave_0) entered blocking state [ 2442.617145][T19606] bridge0: port 1(bridge_slave_0) entered disabled state [ 2442.626585][T19606] bridge_slave_0: entered allmulticast mode [ 2442.637090][T19606] bridge_slave_0: entered promiscuous mode [ 2443.228097][T13822] usb 7-1: USB disconnect, device number 77 [ 2443.264140][ T3756] hsr_slave_0: left promiscuous mode [ 2443.322745][ T3756] hsr_slave_1: left promiscuous mode [ 2443.334234][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2443.342075][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2443.496212][ T3756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2443.503972][ T3756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2443.709079][ T3756] veth1_macvtap: left promiscuous mode [ 2443.715097][ T3756] veth0_macvtap: left promiscuous mode [ 2443.725167][ T3756] veth1_vlan: left promiscuous mode [ 2443.731067][ T3756] veth0_vlan: left promiscuous mode [ 2444.696497][T16625] Bluetooth: hci1: command tx timeout [ 2445.179424][T19661] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 2446.369751][ T3756] team0 (unregistering): Port device team_slave_1 removed [ 2446.425868][ T3756] team0 (unregistering): Port device team_slave_0 removed [ 2446.744300][T16625] Bluetooth: hci1: command tx timeout [ 2446.804567][T19606] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.812453][T19606] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.819613][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2446.819933][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2446.826786][T19606] bridge_slave_1: entered allmulticast mode [ 2446.843037][T19606] bridge_slave_1: entered promiscuous mode [ 2447.365677][T19410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2447.375458][T19410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2447.551955][T19606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2447.583925][T19606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2447.752448][T14897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2447.760849][T14897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2447.880111][T19606] team0: Port device team_slave_0 added [ 2447.961455][T19606] team0: Port device team_slave_1 added [ 2448.396566][T19606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2448.404038][T19606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2448.435980][T19606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2448.542281][T19606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2448.549844][T19606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2448.576362][T19606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2448.804688][T19606] hsr_slave_0: entered promiscuous mode [ 2448.816252][T19606] hsr_slave_1: entered promiscuous mode [ 2448.828371][T13822] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2448.828978][T19606] debugfs: 'hsr0' already exists in 'hsr' [ 2448.847247][T19606] Cannot create hsr debugfs directory [ 2448.975050][T19683] loop9: detected capacity change from 0 to 7 [ 2448.985305][T19683] buffer_io_error: 4 callbacks suppressed [ 2448.985481][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.000052][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.008847][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.017306][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.031409][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.040248][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.056195][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.064852][T19683] ldm_validate_partition_table(): Disk read failed. [ 2449.072064][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.080709][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.089174][T19683] Buffer I/O error on dev loop9, logical block 0, async page read [ 2449.097426][T19683] Dev loop9: unable to read RDB block 0 [ 2449.103989][T19683] loop9: unable to read partition table [ 2449.376390][T13822] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2449.385941][T13822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.394577][T13822] usb 1-1: Product: syz [ 2449.399202][T13822] usb 1-1: Manufacturer: syz [ 2449.404033][T13822] usb 1-1: SerialNumber: syz [ 2449.415211][T13822] usb 1-1: config 0 descriptor?? [ 2449.442068][T13822] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2449.496109][T19683] loop9: partition table beyond EOD, truncated [ 2449.503045][T19683] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2449.503045][T19683] ) failed (rc=-5) [ 2450.544149][T13822] sonixb 1-1:0.0: Error reading register 00: -110 [ 2450.697996][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3879'. [ 2450.727116][T19680] batadv0: entered promiscuous mode [ 2450.733022][T19680] macsec1: entered allmulticast mode [ 2450.738856][T19680] batadv0: entered allmulticast mode [ 2450.775218][T12516] usb 1-1: USB disconnect, device number 61 [ 2451.201788][T13822] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2451.384380][T13822] usb 10-1: Using ep0 maxpacket: 16 [ 2451.523929][T13822] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 2451.532818][T13822] usb 10-1: config 0 has no interface number 0 [ 2451.540287][T13822] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2451.550668][T13822] usb 10-1: config 0 interface 41 has no altsetting 0 [ 2451.899229][T13822] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2451.909030][T13822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2451.920406][T13822] usb 10-1: Product: syz [ 2451.925069][T13822] usb 10-1: Manufacturer: syz [ 2451.931225][T13822] usb 10-1: SerialNumber: syz [ 2451.943983][T13822] usb 10-1: config 0 descriptor?? [ 2451.978412][T19688] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2452.104036][T13822] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -22 [ 2452.745212][T19606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2452.873463][T19606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2452.969121][T19606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2453.149610][T19606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2455.392214][T19606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2455.459267][T12516] usb 10-1: USB disconnect, device number 21 [ 2455.715390][T19606] 8021q: adding VLAN 0 to HW filter on device team0 [ 2455.880468][T16607] bridge0: port 1(bridge_slave_0) entered blocking state [ 2455.888827][T16607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2456.257861][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2456.265954][T16607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2456.780059][T19606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2458.219516][T19379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2458.232191][T19379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2458.253972][T19379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2458.337952][T19379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2458.387955][T19379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2460.498510][T19379] Bluetooth: hci0: command tx timeout [ 2462.634993][T19379] Bluetooth: hci0: command tx timeout [ 2464.670803][T19379] Bluetooth: hci0: command tx timeout [ 2466.140116][T19713] chnl_net:caif_netlink_parms(): no params data found [ 2466.239393][T12516] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2466.389154][T19606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2466.562321][T12516] usb 10-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2466.572975][T12516] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.583555][T12516] usb 10-1: Product: syz [ 2466.589451][T12516] usb 10-1: Manufacturer: syz [ 2466.596380][T12516] usb 10-1: SerialNumber: syz [ 2466.696792][T12516] usb 10-1: config 0 descriptor?? [ 2466.752408][T12516] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2466.765965][T19379] Bluetooth: hci0: command tx timeout [ 2467.002098][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3948'. [ 2467.012460][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3948'. [ 2467.143500][T12516] sonixb 10-1:0.0: Error reading register 00: -71 [ 2467.230264][T12516] usb 10-1: USB disconnect, device number 22 [ 2467.305465][T19606] veth0_vlan: entered promiscuous mode [ 2467.431549][T19606] veth1_vlan: entered promiscuous mode [ 2467.568907][ T8401] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2467.768895][ T8401] usb 1-1: Using ep0 maxpacket: 16 [ 2467.814704][ T8401] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2467.825396][ T8401] usb 1-1: config 0 has no interface number 0 [ 2467.832908][ T8401] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2467.843679][ T8401] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2467.955466][T19410] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.962922][ T8401] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2467.980156][ T8401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.988582][ T8401] usb 1-1: Product: syz [ 2467.996306][ T8401] usb 1-1: Manufacturer: syz [ 2468.002920][ T8401] usb 1-1: SerialNumber: syz [ 2468.164296][T19410] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.202686][ T8401] usb 1-1: config 0 descriptor?? [ 2468.214317][T19739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2468.282570][ T8401] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 2468.282744][T19410] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.360958][T19606] veth0_macvtap: entered promiscuous mode [ 2468.548164][T19410] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2468.691252][T19606] veth1_macvtap: entered promiscuous mode [ 2468.715065][T19713] bridge0: port 1(bridge_slave_0) entered blocking state [ 2468.730973][T19713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2468.740749][T19713] bridge_slave_0: entered allmulticast mode [ 2468.755712][T19713] bridge_slave_0: entered promiscuous mode [ 2468.944420][T19713] bridge0: port 2(bridge_slave_1) entered blocking state [ 2468.954388][T19713] bridge0: port 2(bridge_slave_1) entered disabled state [ 2468.963197][T19713] bridge_slave_1: entered allmulticast mode [ 2468.975548][T19713] bridge_slave_1: entered promiscuous mode [ 2469.056374][T19606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2469.254472][T19606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2469.441504][T19410] bridge_slave_1: left allmulticast mode [ 2469.447524][T19410] bridge_slave_1: left promiscuous mode [ 2469.455053][T19410] bridge0: port 2(bridge_slave_1) entered disabled state [ 2469.523291][T19410] bridge_slave_0: left allmulticast mode [ 2469.539207][T19410] bridge_slave_0: left promiscuous mode [ 2469.546338][T19410] bridge0: port 1(bridge_slave_0) entered disabled state [ 2471.200503][T19410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2471.283828][T17722] usb 1-1: USB disconnect, device number 62 [ 2471.453160][T19410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2471.629698][T19410] bond0 (unregistering): Released all slaves [ 2471.745245][T19713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2471.833469][ T85] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2471.908665][ T3756] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2471.935028][T19713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2472.012848][ T3720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.053869][ T3720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.205339][T19410] hsr_slave_0: left promiscuous mode [ 2472.221596][T19410] hsr_slave_1: left promiscuous mode [ 2472.231637][T19410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2472.241541][T19410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2472.281530][T19410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2472.289905][T19410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2472.936358][T19410] veth1_macvtap: left promiscuous mode [ 2472.943476][T19410] veth0_macvtap: left promiscuous mode [ 2472.949795][T19410] veth1_vlan: left promiscuous mode [ 2472.955913][T19410] veth0_vlan: left promiscuous mode [ 2474.119259][T19410] team0 (unregistering): Port device team_slave_1 removed [ 2474.286551][T19410] team0 (unregistering): Port device team_slave_0 removed [ 2474.920546][ T8401] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2475.044938][T19713] team0: Port device team_slave_0 added [ 2475.110234][T19713] team0: Port device team_slave_1 added [ 2475.168669][ T8401] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2475.178539][ T8401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.186830][ T8401] usb 1-1: Product: syz [ 2475.191428][ T8401] usb 1-1: Manufacturer: syz [ 2475.196450][ T8401] usb 1-1: SerialNumber: syz [ 2475.329814][ T8401] usb 1-1: config 0 descriptor?? [ 2475.360329][ T8401] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2475.628520][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'. [ 2475.632232][T19713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2475.638944][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3961'. [ 2475.658796][T19713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2475.689731][T19713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2475.758555][ T8401] sonixb 1-1:0.0: Error reading register 00: -71 [ 2475.849010][ T8401] usb 1-1: USB disconnect, device number 63 [ 2475.905909][T19713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2475.914430][T19713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2475.942528][T19713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2476.434205][T19713] hsr_slave_0: entered promiscuous mode [ 2476.445850][T19713] hsr_slave_1: entered promiscuous mode [ 2476.455924][T19713] debugfs: 'hsr0' already exists in 'hsr' [ 2476.462113][T19713] Cannot create hsr debugfs directory [ 2476.472014][T19022] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2476.681560][T19022] usb 10-1: Using ep0 maxpacket: 16 [ 2476.717339][T19022] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2476.729665][T19022] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2476.744430][T19022] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2476.754131][T19022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2477.351244][T19022] usb 10-1: config 0 descriptor?? [ 2481.080167][T19022] usbhid 10-1:0.0: can't add hid device: -71 [ 2481.090235][T19022] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2481.188654][T17736] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2481.208929][T19022] usb 10-1: USB disconnect, device number 23 [ 2481.399781][T17736] usb 7-1: Using ep0 maxpacket: 16 [ 2481.436546][T17736] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 2481.445412][T17736] usb 7-1: config 0 has no interface number 0 [ 2481.452002][T17736] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2481.463353][T17736] usb 7-1: config 0 interface 41 has no altsetting 0 [ 2481.717624][T17736] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2481.728041][T17736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.736414][T17736] usb 7-1: Product: syz [ 2481.741546][T17736] usb 7-1: Manufacturer: syz [ 2481.746463][T17736] usb 7-1: SerialNumber: syz [ 2481.925645][T17736] usb 7-1: config 0 descriptor?? [ 2481.935662][T19792] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2482.043849][T17736] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 2483.527060][T19713] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2483.853621][T19713] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2483.945388][T19713] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2484.077945][T19713] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2484.284694][T17736] usb 7-1: USB disconnect, device number 78 [ 2485.356499][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3973'. [ 2486.605755][T19713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2486.812423][T19826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3974'. [ 2486.856661][T19713] 8021q: adding VLAN 0 to HW filter on device team0 [ 2487.535847][T11935] bridge0: port 1(bridge_slave_0) entered blocking state [ 2487.544175][T11935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2488.634630][T11935] bridge0: port 2(bridge_slave_1) entered blocking state [ 2488.642463][T11935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2489.856912][T19713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2490.287587][T19836] Illegal XDP return value 19836 on prog (id 425) dev N/A, expect packet loss! [ 2493.925521][T19850] 9pnet_fd: Insufficient options for proto=fd [ 2495.694688][T19713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2497.759597][T16625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2497.798152][T16625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2497.819919][T16625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2497.845033][T16625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2498.007227][T16625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2499.750851][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3986'. [ 2500.180438][T13393] Bluetooth: hci5: command tx timeout [ 2501.644756][T19868] chnl_net:caif_netlink_parms(): no params data found [ 2502.089050][T19895] 9pnet_fd: Insufficient options for proto=fd [ 2502.302214][T13393] Bluetooth: hci5: command tx timeout [ 2502.521151][T19713] veth0_vlan: entered promiscuous mode [ 2502.776263][T19713] veth1_vlan: entered promiscuous mode [ 2504.450360][T13393] Bluetooth: hci5: command tx timeout [ 2504.492266][T12618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2506.528655][T13393] Bluetooth: hci5: command tx timeout [ 2506.681266][T19868] bridge0: port 1(bridge_slave_0) entered blocking state [ 2506.689791][T19868] bridge0: port 1(bridge_slave_0) entered disabled state [ 2506.701516][T19868] bridge_slave_0: entered allmulticast mode [ 2506.713218][T19868] bridge_slave_0: entered promiscuous mode [ 2506.912736][T12618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2508.610146][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2508.617246][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2508.700476][T19868] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.709005][T19868] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.718423][T19868] bridge_slave_1: entered allmulticast mode [ 2508.739098][T19868] bridge_slave_1: entered promiscuous mode [ 2508.775711][T19713] veth0_macvtap: entered promiscuous mode [ 2508.917227][ T30] audit: type=1326 audit(1757696485.834:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19910 comm="syz.9.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2508.944000][ T30] audit: type=1326 audit(1757696485.834:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19910 comm="syz.9.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2508.971663][ T30] audit: type=1326 audit(1757696485.844:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19910 comm="syz.9.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2508.998164][ T30] audit: type=1326 audit(1757696485.844:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19910 comm="syz.9.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2509.021872][ T30] audit: type=1326 audit(1757696485.844:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19910 comm="syz.9.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2509.190207][T12618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.452689][T19915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3996'. [ 2509.521085][T12618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.751064][T19917] binder: 19916:19917 ioctl c0306201 0 returned -14 [ 2509.998871][T19713] veth1_macvtap: entered promiscuous mode [ 2510.645209][T19868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2510.813768][T19713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2510.876271][T19868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2512.518693][T12618] bridge_slave_1: left allmulticast mode [ 2512.524699][T12618] bridge_slave_1: left promiscuous mode [ 2512.531553][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2512.555236][T12618] bridge_slave_0: left allmulticast mode [ 2512.562659][T12618] bridge_slave_0: left promiscuous mode [ 2512.569315][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.496733][T19933] 9pnet_fd: Insufficient options for proto=fd [ 2513.607008][T12618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2513.692015][T12618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2513.716005][T12618] bond0 (unregistering): Released all slaves [ 2513.791441][T19868] team0: Port device team_slave_0 added [ 2513.811554][T19713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2513.855335][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4002'. [ 2513.863067][T19868] team0: Port device team_slave_1 added [ 2514.036903][T19936] block nbd9: Attempted send on invalid socket [ 2514.043920][T19936] blk_print_req_error: 54 callbacks suppressed [ 2514.043998][T19936] I/O error, dev nbd9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2514.061927][T19936] block nbd9: Attempted send on invalid socket [ 2514.068519][T19936] I/O error, dev nbd9, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2514.081800][T19936] Mount JFS Failure: -5 [ 2514.346513][T12618] hsr_slave_0: left promiscuous mode [ 2515.040869][T12618] hsr_slave_1: left promiscuous mode [ 2515.050241][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2515.058782][T12618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2517.521050][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2517.531818][T12618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2518.121660][T12618] veth1_macvtap: left promiscuous mode [ 2518.128800][T12618] veth0_macvtap: left promiscuous mode [ 2518.139260][T12618] veth1_vlan: left promiscuous mode [ 2518.148664][T12618] veth0_vlan: left promiscuous mode [ 2519.471484][T12618] team0 (unregistering): Port device team_slave_1 removed [ 2519.669314][T17722] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2519.680844][T12618] team0 (unregistering): Port device team_slave_0 removed [ 2520.187239][T17722] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2520.200855][T17722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.210437][T17722] usb 1-1: Product: syz [ 2520.218798][T17722] usb 1-1: Manufacturer: syz [ 2520.224888][T17722] usb 1-1: SerialNumber: syz [ 2520.541249][T17722] usb 1-1: config 0 descriptor?? [ 2520.597346][T17722] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2520.670459][T19379] Bluetooth: hci2: command 0x0406 tx timeout [ 2520.849559][T19868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2520.856957][T19868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2520.883698][T19868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2520.892952][T19942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4003'. [ 2521.018581][T17722] sonixb 1-1:0.0: Error reading register 00: -71 [ 2521.041175][T19868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2521.049767][T19868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2521.077027][T19868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2521.078950][T19379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2521.091603][T17722] usb 1-1: USB disconnect, device number 64 [ 2521.100435][T19379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2521.118033][T19379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2521.164813][T19379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2521.236059][T19379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2521.404925][T19868] hsr_slave_0: entered promiscuous mode [ 2521.416769][T19868] hsr_slave_1: entered promiscuous mode [ 2521.429897][T19868] debugfs: 'hsr0' already exists in 'hsr' [ 2521.435990][T19868] Cannot create hsr debugfs directory [ 2521.449203][ T8401] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2521.541684][T19950] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4007'. [ 2521.668110][ T8401] usb 7-1: Using ep0 maxpacket: 16 [ 2521.714311][ T8401] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 2521.723740][ T8401] usb 7-1: config 0 has no interface number 0 [ 2521.732201][ T8401] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2521.744305][ T8401] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2521.758069][ T8401] usb 7-1: config 0 interface 41 has no altsetting 0 [ 2521.844550][ T8401] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2521.860631][ T8401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.871292][ T8401] usb 7-1: Product: syz [ 2521.876238][ T8401] usb 7-1: Manufacturer: syz [ 2521.882571][ T8401] usb 7-1: SerialNumber: syz [ 2522.038621][ T8401] usb 7-1: config 0 descriptor?? [ 2522.054982][T19947] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2522.089961][T19947] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2522.362899][T19947] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2522.402368][T19947] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2522.683242][T17722] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2522.940302][T17722] usb 1-1: Using ep0 maxpacket: 16 [ 2523.009849][ T8401] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -32 [ 2523.118284][T17722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2523.130938][T17722] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2523.145043][T17722] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2523.154882][T17722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.345068][T17722] usb 1-1: config 0 descriptor?? [ 2523.379527][ T30] audit: type=1326 audit(1757696500.284:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19951 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2523.398342][T19379] Bluetooth: hci1: command tx timeout [ 2523.413297][ T30] audit: type=1326 audit(1757696500.284:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19951 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2523.444351][ T30] audit: type=1326 audit(1757696500.294:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19951 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2523.470668][ T30] audit: type=1326 audit(1757696500.294:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19951 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2523.498107][ T30] audit: type=1326 audit(1757696500.294:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19951 comm="syz.9.4008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab9b8eba9 code=0x7ffc0000 [ 2523.811103][T17722] microsoft 0003:045E:07DA.003C: item 0 4 0 8 parsing failed [ 2523.937404][T17722] microsoft 0003:045E:07DA.003C: parse failed [ 2523.946710][T17722] microsoft 0003:045E:07DA.003C: probe with driver microsoft failed with error -22 [ 2524.256573][T17722] usb 1-1: USB disconnect, device number 65 [ 2524.719793][T19022] usb 7-1: USB disconnect, device number 79 [ 2525.150965][T19965] 9pnet_fd: Insufficient options for proto=fd [ 2525.469409][T19379] Bluetooth: hci1: command tx timeout [ 2525.483059][T19945] chnl_net:caif_netlink_parms(): no params data found [ 2525.577462][T19868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2525.582109][ T30] audit: type=1326 audit(1757696502.474:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96858eba9 code=0x7ffc0000 [ 2525.611960][ T30] audit: type=1326 audit(1757696502.504:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb96858eba9 code=0x7ffc0000 [ 2525.640655][ T30] audit: type=1326 audit(1757696502.514:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96858eba9 code=0x7ffc0000 [ 2525.665327][ T30] audit: type=1326 audit(1757696502.514:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb96858eba9 code=0x7ffc0000 [ 2525.695091][ T30] audit: type=1326 audit(1757696502.514:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19966 comm="syz.0.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96858eba9 code=0x7ffc0000 [ 2525.769244][T19967] binder: BINDER_SET_CONTEXT_MGR already set [ 2525.777014][T19967] binder: 19966:19967 ioctl 4018620d 2000000000c0 returned -16 [ 2525.829682][T19868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2526.192193][T19868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2526.204441][T16607] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9b [ 2526.215381][T16607] ===================================================== [ 2526.223682][T16607] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2b0b/0x42b0 [ 2526.234259][T16607] nci_ntf_packet+0x2b0b/0x42b0 [ 2526.242252][T16607] nci_rx_work+0x403/0x750 [ 2526.247252][T16607] process_scheduled_works+0xb8e/0x1d80 [ 2526.255143][T16607] worker_thread+0xedf/0x1590 [ 2526.263475][T16607] kthread+0xd59/0xf00 [ 2526.269937][T16607] ret_from_fork+0x233/0x380 [ 2526.276020][T16607] ret_from_fork_asm+0x1a/0x30 [ 2526.281789][T16607] [ 2526.284741][T16607] Uninit was created at: [ 2526.290149][T16607] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 2526.298171][T16607] kmalloc_reserve+0x13c/0x4b0 [ 2526.303866][T16607] __alloc_skb+0x347/0x7d0 [ 2526.309578][T16607] virtual_ncidev_write+0x6b/0x430 [ 2526.322353][T16607] vfs_write+0x48a/0x15d0 [ 2526.329546][T16607] __x64_sys_write+0x1fb/0x4d0 [ 2526.336858][T16607] x64_sys_call+0x3014/0x3e20 [ 2526.344127][T16607] do_syscall_64+0xd9/0x210 [ 2526.349712][T16607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2526.356481][T16607] [ 2526.362333][T16607] CPU: 1 UID: 0 PID: 16607 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT(none) [ 2526.376021][T16607] Tainted: [W]=WARN [ 2526.380218][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2526.391481][T16607] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 2526.398021][T16607] ===================================================== [ 2526.406281][T16607] Disabling lock debugging due to kernel taint [ 2526.414101][T16607] Kernel panic - not syncing: kmsan.panic set ... [ 2526.421507][T16607] CPU: 1 UID: 0 PID: 16607 Comm: kworker/u8:9 Tainted: G B W syzkaller #0 PREEMPT(none) [ 2526.432980][T16607] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2526.438200][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2526.449226][T16607] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 2526.455555][T16607] Call Trace: [ 2526.459199][T16607] [ 2526.462339][T16607] __dump_stack+0x26/0x30 [ 2526.467765][T16607] dump_stack_lvl+0x53/0x270 [ 2526.474254][T16607] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2526.480585][T16607] dump_stack+0x1e/0x25 [ 2526.485097][T16607] vpanic+0x361/0xc50 [ 2526.489358][T16607] panic+0x15d/0x160 [ 2526.493472][T16607] kmsan_report+0x31c/0x320 [ 2526.498374][T16607] ? __msan_warning+0x1b/0x30 [ 2526.503180][T16607] ? nci_ntf_packet+0x2b0b/0x42b0 [ 2526.508750][T16607] ? nci_rx_work+0x403/0x750 [ 2526.513585][T16607] ? process_scheduled_works+0xb8e/0x1d80 [ 2526.519861][T16607] ? worker_thread+0xedf/0x1590 [ 2526.525054][T16607] ? kthread+0xd59/0xf00 [ 2526.529659][T16607] ? ret_from_fork+0x233/0x380 [ 2526.535434][T16607] ? ret_from_fork_asm+0x1a/0x30 [ 2526.540931][T16607] ? ret_from_fork_asm+0x1a/0x30 [ 2526.547298][T16607] ? vprintk_emit+0xab3/0xcd0 [ 2526.553290][T16607] ? vprintk_default+0x3f/0x50 [ 2526.560010][T16607] ? vprintk+0x36/0x50 [ 2526.564275][T16607] ? _printk+0x17e/0x1b0 [ 2526.568901][T16607] ? kmsan_get_metadata+0xfb/0x160 [ 2526.575343][T16607] __msan_warning+0x1b/0x30 [ 2526.580310][T16607] nci_ntf_packet+0x2b0b/0x42b0 [ 2526.586236][T16607] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2526.594024][T16607] ? sk_skb_reason_drop+0x13f/0x440 [ 2526.600455][T16607] nci_rx_work+0x403/0x750 [ 2526.606313][T16607] ? __pfx_nci_rx_work+0x10/0x10 [ 2526.612844][T16607] process_scheduled_works+0xb8e/0x1d80 [ 2526.620432][T16607] worker_thread+0xedf/0x1590 [ 2526.625940][T16607] kthread+0xd59/0xf00 [ 2526.631742][T16607] ? __pfx_worker_thread+0x10/0x10 [ 2526.638044][T16607] ? __pfx_kthread+0x10/0x10 [ 2526.643864][T16607] ret_from_fork+0x233/0x380 [ 2526.651799][T16607] ? __pfx_kthread+0x10/0x10 [ 2526.656927][T16607] ret_from_fork_asm+0x1a/0x30 [ 2526.665206][T16607] [ 2526.669701][T16607] Kernel Offset: disabled [ 2526.674564][T16607] Rebooting in 86400 seconds..