last executing test programs: 17m59.853735439s ago: executing program 32 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x2, 0x7, @local, 0x7}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 16m57.086249792s ago: executing program 33 (id=929): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x0, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0xfffffff8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 16m49.244230245s ago: executing program 34 (id=948): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x81, 0x18}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [], [], 'veth0_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xe54}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 15m42.010170178s ago: executing program 35 (id=1063): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$video4linux(&(0x7f0000000080), 0xd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$kcm(0x10, 0x2, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/94, 0x5e}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x1000}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe, 0x100000}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x7f, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd, 0x10000000}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xfffffffc}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x7, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {0x200000}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}, {0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 14m19.031962172s ago: executing program 36 (id=1265): pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12m39.459866913s ago: executing program 37 (id=1529): preadv(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0xfffffff8, 0x81) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x560d, 0x10000000000004) 12m32.71763022s ago: executing program 38 (id=1545): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0x94, 0x0, 0x0) 12m18.395627145s ago: executing program 39 (id=1570): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2000, 0xa3) 10m56.43486959s ago: executing program 40 (id=1699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) socket$alg(0x26, 0x5, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, 0x0, 0x0) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r2, &(0x7f0000014140)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="a3", 0x1}], 0x1}}], 0x1, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) 9m54.672438912s ago: executing program 41 (id=1797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x10, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"/410, @ANYRES64=0x0, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x35, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200000000000000000000000000000000000000004000", "24431a1e77a68e174f000000000000000010e200"}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0xb, 0x400008, 0x3002, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000094) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20000000) 8m53.146581459s ago: executing program 42 (id=1881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) 8m32.469954907s ago: executing program 43 (id=1911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x3, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x0, 0x2, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x141200}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000009c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x10, 0x800, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m54.574538804s ago: executing program 44 (id=1946): getpid() syz_emit_ethernet(0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000030180c20000000800461c006d0067000006339078ac1e0001ffffffff94040100fc3f91d49e41956d05eaf082658b2de1e07e168adbca8b77358605718b43c297b26fc78d7efaddb55c7ecb6b8486534ed144d73997800fb553104100000000e4ffb5ca8100b400"/123], 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000280)) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', 0x0, &(0x7f0000000480)='+.\x00']}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_notify(r4, 0x0) close(r5) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x3) 6m1.594796072s ago: executing program 3 (id=2107): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 5m59.84484119s ago: executing program 3 (id=2111): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}}}]}]}]}}]}, 0x60}}, 0x0) 5m58.793639103s ago: executing program 3 (id=2114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt(r2, 0x1, 0xe, &(0x7f0000000040)=""/232, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) mq_open(0x0, 0x40, 0x100, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x446000, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0xb) write$nci(r3, 0x0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, 0x0, 0x0) 5m53.742829483s ago: executing program 3 (id=2120): socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) connect$bt_rfcomm(r4, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) 5m49.022304171s ago: executing program 3 (id=2130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 5m48.048619909s ago: executing program 3 (id=2135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x86b1b18158a7c382) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e24, @private=0xac141436}}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c0004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) socket(0x2c, 0x3, 0x0) 5m32.614949819s ago: executing program 45 (id=2132): unshare(0x0) unshare(0x2a020480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 5m32.23524565s ago: executing program 46 (id=2135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x86b1b18158a7c382) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e24, @private=0xac141436}}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c0004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) socket(0x2c, 0x3, 0x0) 5m17.482234473s ago: executing program 1 (id=2175): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x10008, 0x4) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 5m6.253965774s ago: executing program 1 (id=2187): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r2, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x183f, 0x0) 5m3.361594706s ago: executing program 1 (id=2192): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="6a0cc193beb70a", 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', 0x0}}, 0x3c) 5m0.328653604s ago: executing program 1 (id=2194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001b000)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x800) 4m58.089939669s ago: executing program 1 (id=2198): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) creat(0x0, 0xd931d3864d39ddd8) open$dir(0x0, 0x0, 0x1) creat(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000280)) 4m56.577789599s ago: executing program 1 (id=2200): pipe(&(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a884d788a89806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) pread64(r1, &(0x7f000001a240)=""/102398, 0x18ffe, 0x2) 4m50.722024881s ago: executing program 6 (id=2204): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_debug_messages', 0x21a02, 0x62) sendfile(r1, r3, 0x0, 0x101) recvmmsg(r2, 0x0, 0x0, 0x40, &(0x7f0000002340)) fdatasync(r2) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[3\xa9\xfd\xfa\xae\xd1m\x81\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\t\x00\x00\x00\x00\x00\x00\x00\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf88ZG\xf0\x00\x00\x00\x00\x00\x00\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00', 0x7) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000300)={0x1, 0x1, @start={0x1}}) 4m45.886354995s ago: executing program 6 (id=2209): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, 0x0, 0x30010001) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) chdir(&(0x7f0000000300)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 4m42.378601087s ago: executing program 6 (id=2211): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="6a0cc193beb70a", 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', 0x0}}, 0x3c) 4m40.65209525s ago: executing program 47 (id=2200): pipe(&(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a884d788a89806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) pread64(r1, &(0x7f000001a240)=""/102398, 0x18ffe, 0x2) 4m40.514387382s ago: executing program 6 (id=2213): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) 4m39.047426101s ago: executing program 6 (id=2216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 4m37.699803215s ago: executing program 6 (id=2217): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000001180), 0x80) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xf}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4040028) 4m29.592958517s ago: executing program 8 (id=2223): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) 4m26.90731957s ago: executing program 8 (id=2226): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x2000c010}}], 0x1, 0x0) 4m24.998573286s ago: executing program 8 (id=2228): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0x8, 0xbd1, 0x10, 0x10, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m21.819434356s ago: executing program 48 (id=2217): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000001180), 0x80) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xf}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4040028) 4m20.242493802s ago: executing program 8 (id=2232): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x74}}, 0x0) 4m17.44427107s ago: executing program 8 (id=2234): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) 4m15.966748226s ago: executing program 8 (id=2236): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x5, 0x0, 0x4) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m0.157142509s ago: executing program 49 (id=2236): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x5, 0x0, 0x4) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m42.303924074s ago: executing program 0 (id=2212): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x10008, 0x4) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 2m34.027166202s ago: executing program 0 (id=2289): r0 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) listen(r5, 0xda8c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x406903, 0x0) accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc885}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x8, 0xe74, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x19, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x0, 0x402], [0x3, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e89, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x40000012, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x5, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x3, 0x0, 0xa, 0x101, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) 2m29.114818359s ago: executing program 0 (id=2298): r0 = syz_usbip_server_init(0x2) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db60000000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00'], 0x35) 2m26.353669974s ago: executing program 0 (id=2302): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "fb7faf0400", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", "46d93a3b", "8891ea13f18ef0be"}, 0x38) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x0) 2m25.31367008s ago: executing program 0 (id=2304): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 2m23.494345747s ago: executing program 0 (id=2308): getpid() syz_emit_ethernet(0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000030180c20000000800461c006d0067000006339078ac1e0001ffffffff94040100fc3f91d49e41956d05eaf082658b2de1e07e168adbca8b77358605718b43c297b26fc78d7efaddb55c7ecb6b8486534ed144d73997800fb553104100000000e4ffb5ca8100b400"/123], 0x0) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, &(0x7f0000000280)) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.', 0x0, &(0x7f0000000480)='+.\x00', 0x0]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_notify(r5, &(0x7f0000000300)={0x0, 0x3e, 0x4, @tid=r1}) close(r6) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x3) 2m7.493288526s ago: executing program 50 (id=2308): getpid() syz_emit_ethernet(0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000030180c20000000800461c006d0067000006339078ac1e0001ffffffff94040100fc3f91d49e41956d05eaf082658b2de1e07e168adbca8b77358605718b43c297b26fc78d7efaddb55c7ecb6b8486534ed144d73997800fb553104100000000e4ffb5ca8100b400"/123], 0x0) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, &(0x7f0000000280)) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.', 0x0, &(0x7f0000000480)='+.\x00', 0x0]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_notify(r5, &(0x7f0000000300)={0x0, 0x3e, 0x4, @tid=r1}) close(r6) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x3) 1m15.603955934s ago: executing program 4 (id=2441): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x2}) fcntl$lock(r0, 0x5, &(0x7f0000000440)={0x1, 0x1, 0x2, 0xb}) 1m14.510944178s ago: executing program 4 (id=2446): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0x8, 0xbd1, 0x10, 0x10, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m10.629483277s ago: executing program 4 (id=2454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) creat(0x0, 0xd931d3864d39ddd8) open$dir(0x0, 0x0, 0x1) creat(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000280)) 1m9.308541013s ago: executing program 4 (id=2459): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m8.354912652s ago: executing program 4 (id=2464): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0x8, 0xbd1, 0x10, 0x10, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m3.971659462s ago: executing program 4 (id=2477): io_uring_setup(0x75b0, &(0x7f0000000100)={0x0, 0xfdcf, 0x1, 0x1}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000380)={0x2, 0x85b, 0x7, 0x3, 0x2, "928fa4a3930a5a876e64084d011ff91cdbb8e4"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getpgrp(0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1m2.446599753s ago: executing program 2 (id=2482): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m0.354197715s ago: executing program 2 (id=2488): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='rxrpc_retransmit\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) unshare(0x2c020400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x43, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000002060108005ab2111d702e8c150e000000000000000000000005000400020000000900020073797a3100000003000005000a00000005000100060000000c000300686173683a697000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xfffffffffffffc24, [@typedef={0x4, 0x12, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x4, 0x7, 0x0, @void, @value}, 0x28) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d00c900"], 0x10) 54.746029239s ago: executing program 2 (id=2499): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) 53.099088684s ago: executing program 2 (id=2503): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "fb7faf0400", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", "46d93a3b", "8891ea13f18ef0be"}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 52.143939387s ago: executing program 2 (id=2505): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0x8, 0xbd1, 0x10, 0x10, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 48.179269513s ago: executing program 51 (id=2477): io_uring_setup(0x75b0, &(0x7f0000000100)={0x0, 0xfdcf, 0x1, 0x1}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000380)={0x2, 0x85b, 0x7, 0x3, 0x2, "928fa4a3930a5a876e64084d011ff91cdbb8e4"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getpgrp(0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 48.118236646s ago: executing program 2 (id=2514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x10, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"/410, @ANYRES64=0x0, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x35, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200000000000000000000000000000000000000004000", "24431a1e77a68e174f000000000000000010e200"}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0xb, 0x400008, 0x3002, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000094) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20000000) recvmmsg(r0, &(0x7f0000003600), 0x58, 0x10020, 0x0) 38.447537506s ago: executing program 5 (id=2530): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="04"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) 37.249299363s ago: executing program 5 (id=2533): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) 35.472171336s ago: executing program 5 (id=2537): r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[r7], &(0x7f0000000040), 0x0, 0x300}) 32.763023074s ago: executing program 5 (id=2539): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 31.795979546s ago: executing program 52 (id=2514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x10, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"/410, @ANYRES64=0x0, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x35, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200000000000000000000000000000000000000004000", "24431a1e77a68e174f000000000000000010e200"}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0xb, 0x400008, 0x3002, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000094) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20000000) recvmmsg(r0, &(0x7f0000003600), 0x58, 0x10020, 0x0) 30.522979825s ago: executing program 5 (id=2543): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) creat(0x0, 0xd931d3864d39ddd8) open$dir(0x0, 0x0, 0x1) creat(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) 28.748612548s ago: executing program 5 (id=2546): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x6040000, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) close(r4) 17.386852512s ago: executing program 9 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000480)=0xff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 13.043662209s ago: executing program 53 (id=2546): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x6040000, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) close(r4) 11.582475359s ago: executing program 9 (id=2559): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "fb7faf0400", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", "46d93a3b", "8891ea13f18ef0be"}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) 10.1655419s ago: executing program 9 (id=2560): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000524060001052400"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0x8, 0xbd1, 0x10, 0x10, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 9.29560157s ago: executing program 7 (id=2561): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.100858949s ago: executing program 9 (id=2562): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0xf06}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) 5.92224004s ago: executing program 7 (id=2563): r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.597682092s ago: executing program 7 (id=2564): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x40}}, 0x0) socket(0xb, 0x800, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r4, @ANYRES16=r4], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 4.524546599s ago: executing program 9 (id=2565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x84, r1, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.034212433s ago: executing program 9 (id=2566): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x1, 0x1, 0x9, '#'}, @main=@item_4={0x3, 0x0, 0xb, "1ce93ee9"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x3, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.932587598s ago: executing program 7 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}}, 0x24}}, 0x80) 897.392109ms ago: executing program 7 (id=2568): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 0s ago: executing program 7 (id=2569): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d89f09a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x129e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32], 0x31) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000", 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x5, 0xa, 0x5) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000200)={0x0, 0x0, 0x5}) kernel console output (not intermixed with test programs): uld solve the problem. [ 1158.327144][T13181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.768522][T13181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.775900][T13181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.802704][T13181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.391588][ T4033] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.646507][ T4033] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.150591][ T4033] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.226140][T13181] hsr_slave_0: entered promiscuous mode [ 1160.237101][T13181] hsr_slave_1: entered promiscuous mode [ 1160.246656][T13181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.254662][T13181] Cannot create hsr debugfs directory [ 1160.408940][ T4033] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.575411][ T4033] bridge_slave_1: left allmulticast mode [ 1161.582753][ T4033] bridge_slave_1: left promiscuous mode [ 1161.589866][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.694821][ T4033] bridge_slave_0: left allmulticast mode [ 1161.703245][ T4033] bridge_slave_0: left promiscuous mode [ 1161.710271][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.375843][ T4033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.444280][ T4033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.499000][ T4033] bond0 (unregistering): Released all slaves [ 1163.019184][ T4033] hsr_slave_0: left promiscuous mode [ 1163.073473][ T4033] hsr_slave_1: left promiscuous mode [ 1163.082181][ T4033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.092088][ T4033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.222781][ T4033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.230864][ T4033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.356960][ T4033] veth1_macvtap: left promiscuous mode [ 1163.370393][ T4033] veth0_macvtap: left promiscuous mode [ 1163.376422][ T4033] veth1_vlan: left promiscuous mode [ 1163.382312][ T4033] veth0_vlan: left promiscuous mode [ 1164.811754][ T4033] team0 (unregistering): Port device team_slave_1 removed [ 1164.903687][ T4033] team0 (unregistering): Port device team_slave_0 removed [ 1165.251432][T13161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1165.450248][T13161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1165.582718][T13161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1165.801092][T13161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1167.515713][T13181] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1167.637617][T13181] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1167.817009][T13161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.827811][T13181] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1167.932609][T13181] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1168.158078][T13161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.314684][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.322474][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.478702][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.486468][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.002413][T13181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.322229][T13181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.466188][T11423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.474046][T11423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.554711][T13387] syzkaller1: entered promiscuous mode [ 1170.561062][T13387] syzkaller1: entered allmulticast mode [ 1170.636375][T11423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.644146][T11423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.911326][T13389] syzkaller0: entered promiscuous mode [ 1170.917109][T13389] syzkaller0: entered allmulticast mode [ 1171.819004][T13161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.663614][T13161] veth0_vlan: entered promiscuous mode [ 1172.813746][T13161] veth1_vlan: entered promiscuous mode [ 1173.287811][T13161] veth0_macvtap: entered promiscuous mode [ 1173.377790][T13161] veth1_macvtap: entered promiscuous mode [ 1173.744167][T13161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.922159][T13161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.033120][T13161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.042437][T13161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.051698][T13161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.060908][T13161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.616709][T13181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.458952][T13181] veth0_vlan: entered promiscuous mode [ 1178.577796][T13181] veth1_vlan: entered promiscuous mode [ 1179.018913][T13181] veth0_macvtap: entered promiscuous mode [ 1179.151944][T13181] veth1_macvtap: entered promiscuous mode [ 1179.455238][T13181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.605420][T13181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.724024][T13181] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.733348][T13181] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.742689][T13181] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.758005][T13181] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.352031][T11423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.364496][T11423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.830195][ T8753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.838455][ T8753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.145845][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.154136][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.583171][ T5072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.591568][ T5072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.580475][T13583] sctp: failed to load transform for md5: -2 [ 1191.653631][T13588] sctp: failed to load transform for md5: -2 [ 1191.696545][T13591] sctp: failed to load transform for md5: -2 [ 1191.781505][T13593] sctp: failed to load transform for md5: -2 [ 1193.421583][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2111'. [ 1202.093482][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2124'. [ 1207.313052][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2138'. [ 1211.423032][T13739] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1211.883698][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 1213.095559][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.102583][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1215.032331][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2150'. [ 1222.130313][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1222.151574][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1222.167974][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1222.193538][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1222.210521][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1223.927517][ T9918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1223.958747][ T9918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1223.969992][ T9918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1223.995708][ T9918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1224.012533][ T9918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1224.431074][ T5788] Bluetooth: hci1: command tx timeout [ 1224.874691][T13801] chnl_net:caif_netlink_parms(): no params data found [ 1225.380745][ T9918] Bluetooth: hci0: command 0x0406 tx timeout [ 1226.099699][T12727] Bluetooth: hci3: command tx timeout [ 1226.324082][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2163'. [ 1226.501055][T12727] Bluetooth: hci1: command tx timeout [ 1227.110617][T13811] chnl_net:caif_netlink_parms(): no params data found [ 1228.184165][T12727] Bluetooth: hci3: command tx timeout [ 1228.579879][T12727] Bluetooth: hci1: command tx timeout [ 1228.772433][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.780223][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.787901][T13801] bridge_slave_0: entered allmulticast mode [ 1228.806718][T13801] bridge_slave_0: entered promiscuous mode [ 1229.023109][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.030890][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.038769][T13801] bridge_slave_1: entered allmulticast mode [ 1229.047858][T13801] bridge_slave_1: entered promiscuous mode [ 1229.888848][T13801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.047624][T13801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.260363][T12727] Bluetooth: hci3: command tx timeout [ 1230.659621][T12727] Bluetooth: hci1: command tx timeout [ 1231.200504][T13801] team0: Port device team_slave_0 added [ 1231.227083][T13811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.237141][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.245538][T13811] bridge_slave_0: entered allmulticast mode [ 1231.261037][T13811] bridge_slave_0: entered promiscuous mode [ 1231.395158][T13801] team0: Port device team_slave_1 added [ 1232.041290][T13811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.049062][T13811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.057989][T13811] bridge_slave_1: entered allmulticast mode [ 1232.067505][T13811] bridge_slave_1: entered promiscuous mode [ 1232.222500][T13801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.231355][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.259697][T13801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.340040][T12727] Bluetooth: hci3: command tx timeout [ 1232.910799][T13801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.918131][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.944860][T13801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.983654][T13811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.183494][T13811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.679184][T13801] hsr_slave_0: entered promiscuous mode [ 1234.692376][T13801] hsr_slave_1: entered promiscuous mode [ 1234.701786][T13801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1234.710463][T13801] Cannot create hsr debugfs directory [ 1234.732409][T13811] team0: Port device team_slave_0 added [ 1234.860030][T13811] team0: Port device team_slave_1 added [ 1234.931704][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2173'. [ 1235.669024][T13704] bond0: (slave syz_tun): Releasing backup interface [ 1235.806516][T13811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.814004][T13811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.841392][T13811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.318354][T11404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.451447][T13811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.458695][T13811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.489903][T13811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.600938][T11404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.778798][T11404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.060173][T13811] hsr_slave_0: entered promiscuous mode [ 1237.071138][T13811] hsr_slave_1: entered promiscuous mode [ 1237.080510][T13811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.088336][T13811] Cannot create hsr debugfs directory [ 1237.261806][T11404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.267244][T11404] bridge_slave_1: left allmulticast mode [ 1238.273606][T11404] bridge_slave_1: left promiscuous mode [ 1238.280593][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.474497][T11404] bridge_slave_0: left allmulticast mode [ 1238.481286][T11404] bridge_slave_0: left promiscuous mode [ 1238.488072][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.527068][T11404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.598736][T11404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.664888][T11404] bond0 (unregistering): Released all slaves [ 1240.414792][T11404] tipc: Left network mode [ 1241.881773][T11404] hsr_slave_0: left promiscuous mode [ 1241.891960][T11404] hsr_slave_1: left promiscuous mode [ 1241.900315][T11404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.911959][T11404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.992177][T11404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.010624][T11404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.082475][T11404] veth1_macvtap: left promiscuous mode [ 1242.088447][T11404] veth0_macvtap: left promiscuous mode [ 1242.095177][T11404] veth1_vlan: left promiscuous mode [ 1242.101033][T11404] veth0_vlan: left promiscuous mode [ 1243.790633][T11404] team0 (unregistering): Port device team_slave_1 removed [ 1244.012643][T11404] team0 (unregistering): Port device team_slave_0 removed [ 1245.962954][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2185'. [ 1246.178532][T13811] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1246.295347][T13801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1246.405028][T13811] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1246.491444][T13801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1246.562777][T13811] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1246.690300][T13801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1246.789890][T13811] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1246.882379][T13801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1248.748020][T13811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.980031][T13801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.183675][T13811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.346057][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.353655][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.503347][T13801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.532822][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.540639][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.695630][ T1685] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1249.817588][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.825474][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.969806][ T1685] usb 10-1: Using ep0 maxpacket: 16 [ 1250.050536][ T1685] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.063263][ T1685] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.073805][ T1685] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1250.087262][ T1685] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1250.102755][ T1685] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.130803][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.138441][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.427034][T13811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1250.438391][T13811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1250.485834][ T1685] usb 10-1: config 0 descriptor?? [ 1250.990219][T13801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1251.001427][T13801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1251.444079][ T1685] hid-multitouch 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.9-1/input0 [ 1251.657706][ T1685] usb 10-1: USB disconnect, device number 3 [ 1253.498112][T13811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.559610][T13972] fido_id[13972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1253.626709][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2196'. [ 1254.870093][T13801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.864566][T13811] veth0_vlan: entered promiscuous mode [ 1258.066729][T13811] veth1_vlan: entered promiscuous mode [ 1258.894534][T13811] veth0_macvtap: entered promiscuous mode [ 1259.191048][T13811] veth1_macvtap: entered promiscuous mode [ 1259.549669][T13811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.694359][T13811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.898525][T13811] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.908092][T13811] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.917561][T13811] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.930224][T13811] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.662924][T13801] veth0_vlan: entered promiscuous mode [ 1261.132732][T13801] veth1_vlan: entered promiscuous mode [ 1262.059173][T13801] veth0_macvtap: entered promiscuous mode [ 1262.206199][T13801] veth1_macvtap: entered promiscuous mode [ 1262.764036][T13801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.963057][T13801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.971902][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2205'. [ 1263.370464][T13801] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.379857][T13801] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.388905][T13801] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.398330][T13801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.346466][ T5791] Bluetooth: hci6: command 0x0406 tx timeout [ 1266.346502][T14047] Bluetooth: hci4: command 0x0406 tx timeout [ 1268.328424][T14074] 9pnet_virtio: no channels available for device syz [ 1272.744049][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2214'. [ 1274.562641][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.572613][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.112971][T12727] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1275.131222][T12727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1275.145031][T12727] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1275.162194][T12727] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1275.172876][T12727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1275.362768][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.368279][ T4033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.371236][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.392368][ T4033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.627121][T13278] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1276.913101][T13278] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.929750][T13278] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.155304][T13278] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1277.164916][T13278] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.173389][T13278] usb 10-1: Product: syz [ 1277.177805][T13278] usb 10-1: Manufacturer: syz [ 1277.182739][T13278] usb 10-1: SerialNumber: syz [ 1277.229573][T12727] Bluetooth: hci7: command tx timeout [ 1278.450989][T14114] chnl_net:caif_netlink_parms(): no params data found [ 1278.654306][T13278] cdc_ncm 10-1:1.0: bind() failure [ 1278.678746][T13278] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1278.687941][T13278] cdc_ncm 10-1:1.1: bind() failure [ 1279.002781][T13278] usb 10-1: USB disconnect, device number 4 [ 1279.299685][T12727] Bluetooth: hci7: command tx timeout [ 1281.380322][T12727] Bluetooth: hci7: command tx timeout [ 1281.524742][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.542989][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.553682][T14114] bridge_slave_0: entered allmulticast mode [ 1281.562635][T14114] bridge_slave_0: entered promiscuous mode [ 1281.782607][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.790361][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.798096][T14114] bridge_slave_1: entered allmulticast mode [ 1281.807667][T14114] bridge_slave_1: entered promiscuous mode [ 1282.832813][T14114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.921273][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2222'. [ 1283.020169][T14114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.433750][ T9918] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1283.455911][ T9918] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1283.467840][ T9918] Bluetooth: hci7: command tx timeout [ 1283.487609][ T9918] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1283.506653][ T9918] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1283.517606][ T9918] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1283.609218][T14114] team0: Port device team_slave_0 added [ 1283.727213][T14114] team0: Port device team_slave_1 added [ 1283.844864][T14114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.852332][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1283.881392][T14114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.314975][T14114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.322276][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.349318][T14114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1285.710311][ T9918] Bluetooth: hci8: command tx timeout [ 1286.664793][T14114] hsr_slave_0: entered promiscuous mode [ 1286.677561][T14114] hsr_slave_1: entered promiscuous mode [ 1286.686441][T14114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1286.694345][T14114] Cannot create hsr debugfs directory [ 1287.806947][ T9918] Bluetooth: hci8: command tx timeout [ 1288.939665][T10172] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1289.353698][T10172] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.364755][T10172] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.767142][T10172] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1289.776739][T10172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.785475][T10172] usb 9-1: Product: syz [ 1289.790025][T10172] usb 9-1: Manufacturer: syz [ 1289.794798][T10172] usb 9-1: SerialNumber: syz [ 1289.806399][T14156] chnl_net:caif_netlink_parms(): no params data found [ 1289.875136][ T9918] Bluetooth: hci8: command tx timeout [ 1291.387489][T10172] cdc_ncm 9-1:1.0: bind() failure [ 1291.552131][T10172] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1291.710326][T10172] usb 9-1: USB disconnect, device number 7 [ 1291.949753][ T9918] Bluetooth: hci8: command tx timeout [ 1292.256598][ T3625] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.935679][ T3625] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.256932][ T3625] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.850253][T12727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1293.881668][T12727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1293.903535][T12727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1293.915285][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2232'. [ 1293.953942][ T3625] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.042055][T12727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1294.054875][T12727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1294.176548][T14114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1294.219713][T14114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1294.587170][T14114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1295.828767][T14114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1296.106642][T12727] Bluetooth: hci1: command tx timeout [ 1296.816024][T14156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.823910][T14156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.832183][T14156] bridge_slave_0: entered allmulticast mode [ 1296.842360][T14156] bridge_slave_0: entered promiscuous mode [ 1297.194851][ T3625] bridge_slave_1: left allmulticast mode [ 1297.208679][ T3625] bridge_slave_1: left promiscuous mode [ 1297.215385][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.357467][ T3625] bridge_slave_0: left allmulticast mode [ 1297.363636][ T3625] bridge_slave_0: left promiscuous mode [ 1297.370417][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.201964][T12727] Bluetooth: hci1: command tx timeout [ 1298.597055][ T3625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.768943][ T3625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.822087][ T3625] bond0 (unregistering): Released all slaves [ 1299.215882][T14156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.223847][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.231840][T14156] bridge_slave_1: entered allmulticast mode [ 1299.241353][T14156] bridge_slave_1: entered promiscuous mode [ 1299.904816][T14156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.114733][ T3625] hsr_slave_0: left promiscuous mode [ 1300.144271][ T3625] hsr_slave_1: left promiscuous mode [ 1300.152828][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.160777][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.286321][T12727] Bluetooth: hci1: command tx timeout [ 1300.342597][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.351199][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.385310][ T3625] veth1_macvtap: left promiscuous mode [ 1300.392878][ T3625] veth0_macvtap: left promiscuous mode [ 1300.398987][ T3625] veth1_vlan: left promiscuous mode [ 1300.405005][ T3625] veth0_vlan: left promiscuous mode [ 1302.360102][T12727] Bluetooth: hci1: command tx timeout [ 1302.379552][ T3625] team0 (unregistering): Port device team_slave_1 removed [ 1302.402600][ T3625] team0 (unregistering): Port device team_slave_0 removed [ 1303.057011][T14156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.148834][T14156] team0: Port device team_slave_0 added [ 1304.382732][T14156] team0: Port device team_slave_1 added [ 1305.537525][T14156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.544828][T14156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.571876][T14156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.827468][T14207] chnl_net:caif_netlink_parms(): no params data found [ 1305.921576][T14114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.034705][T14156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.042211][T14156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.069722][T14156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.563138][T14114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.933914][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.941754][T11404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.999819][ T5842] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1307.230526][ T5842] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.245822][ T5842] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.425138][ T5842] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1307.435053][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.448300][ T5842] usb 10-1: Product: syz [ 1307.454490][ T5842] usb 10-1: Manufacturer: syz [ 1307.459585][ T5842] usb 10-1: SerialNumber: syz [ 1307.981149][T14156] hsr_slave_0: entered promiscuous mode [ 1307.991846][T14156] hsr_slave_1: entered promiscuous mode [ 1308.001097][T14156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1308.008921][T14156] Cannot create hsr debugfs directory [ 1308.022403][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.029959][T11404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.816033][T14114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1308.827939][T14114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.131273][ T5842] cdc_ncm 10-1:1.0: bind() failure [ 1309.314593][ T5842] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1309.458484][ T5842] usb 10-1: USB disconnect, device number 5 [ 1311.545318][ T3625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.010928][ T3625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.175753][T14207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.184712][T14207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.192675][T14207] bridge_slave_0: entered allmulticast mode [ 1312.201556][T14207] bridge_slave_0: entered promiscuous mode [ 1312.429615][ T3625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.669988][T14207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.677649][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.686111][T14207] bridge_slave_1: entered allmulticast mode [ 1312.695172][T14207] bridge_slave_1: entered promiscuous mode [ 1312.783928][ T3625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.597410][T14207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.835518][T14207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.481945][ T9918] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1314.495512][ T9918] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1314.535268][ T9918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1314.569093][ T9918] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1314.594374][ T3625] bridge_slave_1: left allmulticast mode [ 1314.601469][ T3625] bridge_slave_1: left promiscuous mode [ 1314.602693][ T9918] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1314.619636][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.851108][ T3625] bridge_slave_0: left allmulticast mode [ 1314.857088][ T3625] bridge_slave_0: left promiscuous mode [ 1314.864209][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.824015][T12727] Bluetooth: hci5: command tx timeout [ 1316.927214][ T3625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.958272][ T3625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.046232][ T3625] bond0 (unregistering): Released all slaves [ 1317.359891][T14114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.426433][T14207] team0: Port device team_slave_0 added [ 1317.453905][ T3625] tipc: Left network mode [ 1318.136773][T14207] team0: Port device team_slave_1 added [ 1318.711080][T14207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.718228][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.744937][T14207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.782798][T14207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.790321][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.822539][T14207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.913597][T12727] Bluetooth: hci5: command tx timeout [ 1319.519721][ T3625] hsr_slave_0: left promiscuous mode [ 1319.564769][ T3625] hsr_slave_1: left promiscuous mode [ 1319.572318][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.580213][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.684877][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.693040][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.862873][ T3625] veth1_macvtap: left promiscuous mode [ 1319.868580][ T3625] veth0_macvtap: left promiscuous mode [ 1319.874742][ T3625] veth1_vlan: left promiscuous mode [ 1319.882125][ T3625] veth0_vlan: left promiscuous mode [ 1320.981280][T12727] Bluetooth: hci5: command tx timeout [ 1321.395192][ T3625] team0 (unregistering): Port device team_slave_1 removed [ 1321.529107][ T3625] team0 (unregistering): Port device team_slave_0 removed [ 1322.907447][T14156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1322.978783][T14114] veth0_vlan: entered promiscuous mode [ 1323.061367][T12727] Bluetooth: hci5: command tx timeout [ 1323.079722][T14207] hsr_slave_0: entered promiscuous mode [ 1323.090610][T14207] hsr_slave_1: entered promiscuous mode [ 1323.116964][T14156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1323.332888][T14156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1323.692168][T14156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1323.828851][T14114] veth1_vlan: entered promiscuous mode [ 1324.821924][ T3625] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.060052][T13278] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1325.088158][ T3625] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.286085][T13278] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.296873][T13278] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.387836][ T3625] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.428752][T13278] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1325.438302][T13278] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.446875][T13278] usb 10-1: Product: syz [ 1325.451506][T13278] usb 10-1: Manufacturer: syz [ 1325.456368][T13278] usb 10-1: SerialNumber: syz [ 1325.589911][T14280] chnl_net:caif_netlink_parms(): no params data found [ 1325.751487][ T3625] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.007602][T14114] veth0_macvtap: entered promiscuous mode [ 1326.542644][T14114] veth1_macvtap: entered promiscuous mode [ 1326.916302][T13278] cdc_ncm 10-1:1.0: bind() failure [ 1327.066728][T13278] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1327.180989][T13278] usb 10-1: USB disconnect, device number 6 [ 1327.311170][ T3625] bridge_slave_1: left allmulticast mode [ 1327.317143][ T3625] bridge_slave_1: left promiscuous mode [ 1327.324257][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.462326][ T3625] bridge_slave_0: left allmulticast mode [ 1327.468297][ T3625] bridge_slave_0: left promiscuous mode [ 1327.475161][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.598426][ T3625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.667881][ T3625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.716647][ T3625] bond0 (unregistering): Released all slaves [ 1329.359216][T14114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.724505][T14114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.078446][T14114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.087829][T14114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.097157][T14114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.106241][T14114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.297064][ T3625] hsr_slave_0: left promiscuous mode [ 1330.334638][ T3625] hsr_slave_1: left promiscuous mode [ 1330.343623][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.351603][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.441371][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.449491][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.556490][ T3625] veth1_macvtap: left promiscuous mode [ 1330.562460][ T3625] veth0_macvtap: left promiscuous mode [ 1330.568446][ T3625] veth1_vlan: left promiscuous mode [ 1330.574352][ T3625] veth0_vlan: left promiscuous mode [ 1331.852816][ T3625] team0 (unregistering): Port device team_slave_1 removed [ 1331.979481][ T3625] team0 (unregistering): Port device team_slave_0 removed [ 1333.764120][T14280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.771992][T14280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.780237][T14280] bridge_slave_0: entered allmulticast mode [ 1333.790319][T14280] bridge_slave_0: entered promiscuous mode [ 1334.054992][T14280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.067095][T14280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.075551][T14280] bridge_slave_1: entered allmulticast mode [ 1334.085525][T14280] bridge_slave_1: entered promiscuous mode [ 1334.341567][T11400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.460056][T14156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.774944][T11400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.123202][T11400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.264144][T14280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.389692][T11400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.483690][ T9918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1335.506829][ T9918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1335.538803][T14207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1335.564761][ T9918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1335.615689][T14280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.625983][T14207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1335.665817][ T9918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1335.688257][ T9918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1335.735106][T14156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.972645][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.979590][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.151541][T14207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1336.258342][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.266075][ T8745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.411025][T14207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1336.548269][T14280] team0: Port device team_slave_0 added [ 1336.587268][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.594999][ T8745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.701195][T14280] team0: Port device team_slave_1 added [ 1336.954640][T13278] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1337.189963][T13278] usb 10-1: Using ep0 maxpacket: 16 [ 1337.251068][T13278] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.263682][T13278] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.274071][T13278] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1337.287644][T13278] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1337.297480][T13278] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.392259][T14280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.401062][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.428749][T14280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.498205][T13278] usb 10-1: config 0 descriptor?? [ 1337.684415][T11400] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.781766][ T9918] Bluetooth: hci0: command tx timeout [ 1337.807523][T14280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.816185][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.843307][T14280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.043099][T13278] hid-multitouch 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.9-1/input0 [ 1338.088705][T11400] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.185700][T10172] usb 10-1: USB disconnect, device number 7 [ 1338.616426][T11400] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.928259][T14389] fido_id[14389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1339.254972][T11400] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.404639][T14280] hsr_slave_0: entered promiscuous mode [ 1339.415622][T14280] hsr_slave_1: entered promiscuous mode [ 1339.424990][T14280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1339.433044][T14280] Cannot create hsr debugfs directory [ 1339.862992][ T9918] Bluetooth: hci0: command tx timeout [ 1340.316238][T14376] chnl_net:caif_netlink_parms(): no params data found [ 1340.391466][T11400] bridge_slave_1: left allmulticast mode [ 1340.397414][T11400] bridge_slave_1: left promiscuous mode [ 1340.404449][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.471092][T11400] bridge_slave_0: left allmulticast mode [ 1340.477170][T11400] bridge_slave_0: left promiscuous mode [ 1340.484448][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.551771][T11400] bridge_slave_1: left allmulticast mode [ 1340.557846][T11400] bridge_slave_1: left promiscuous mode [ 1340.564814][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.640971][T11400] bridge_slave_0: left allmulticast mode [ 1340.647086][T11400] bridge_slave_0: left promiscuous mode [ 1340.653999][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.565274][T11400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.625729][T11400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.669166][T11400] bond0 (unregistering): Released all slaves [ 1341.945031][ T9918] Bluetooth: hci0: command tx timeout [ 1342.082641][T11400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.115657][T11400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.132683][T11400] bond0 (unregistering): Released all slaves [ 1342.717391][T12727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1342.732314][T12727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1342.749170][T12727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1342.789177][T12727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1342.880381][T12727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1343.531207][T14207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1344.039590][T12727] Bluetooth: hci0: command tx timeout [ 1344.981397][T12727] Bluetooth: hci3: command tx timeout [ 1345.441323][T14376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.450519][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.458490][T14376] bridge_slave_0: entered allmulticast mode [ 1345.468570][T14376] bridge_slave_0: entered promiscuous mode [ 1346.020528][T14376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.028187][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.038011][T14376] bridge_slave_1: entered allmulticast mode [ 1346.051347][T14376] bridge_slave_1: entered promiscuous mode [ 1346.536193][T11400] hsr_slave_0: left promiscuous mode [ 1346.563654][T11400] hsr_slave_1: left promiscuous mode [ 1346.572290][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.580821][T11400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.633307][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.643538][T11400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.771578][T11400] hsr_slave_0: left promiscuous mode [ 1346.824510][T11400] hsr_slave_1: left promiscuous mode [ 1346.832874][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.841021][T11400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.887256][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.895566][T11400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.059842][T12727] Bluetooth: hci3: command tx timeout [ 1347.060944][T11400] veth1_macvtap: left promiscuous mode [ 1347.073718][T11400] veth0_macvtap: left promiscuous mode [ 1347.080338][T11400] veth1_vlan: left promiscuous mode [ 1347.085970][T11400] veth0_vlan: left promiscuous mode [ 1347.123868][T11400] veth1_macvtap: left promiscuous mode [ 1347.130160][T11400] veth0_macvtap: left promiscuous mode [ 1347.136283][T11400] veth1_vlan: left promiscuous mode [ 1347.143145][T11400] veth0_vlan: left promiscuous mode [ 1348.436611][T11400] team0 (unregistering): Port device team_slave_1 removed [ 1348.506068][T11400] team0 (unregistering): Port device team_slave_0 removed [ 1349.142603][T12727] Bluetooth: hci3: command tx timeout [ 1349.344079][T11400] team0 (unregistering): Port device team_slave_1 removed [ 1349.433798][T11400] team0 (unregistering): Port device team_slave_0 removed [ 1349.801283][T14207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.009911][T14376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.337598][T14376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.380352][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.388105][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.733280][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.741077][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.792934][T14280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1350.836766][T14280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1350.981613][T14376] team0: Port device team_slave_0 added [ 1351.070440][T14280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1351.130301][T14376] team0: Port device team_slave_1 added [ 1351.239841][T12727] Bluetooth: hci3: command tx timeout [ 1351.451169][T14280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1351.725276][T10172] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1351.803252][T14376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.811467][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.838329][T14376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.956584][T10172] usb 10-1: Using ep0 maxpacket: 16 [ 1352.000181][T10172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.011771][T10172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.023394][T10172] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1352.037922][T10172] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1352.048431][T10172] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.173127][T10172] usb 10-1: config 0 descriptor?? [ 1352.203380][T14376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.210868][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.238203][T14376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.431593][T14408] chnl_net:caif_netlink_parms(): no params data found [ 1352.773326][T10172] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.9-1/input0 [ 1352.860964][T10172] usb 10-1: USB disconnect, device number 8 [ 1353.063791][ T9918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1353.076348][ T9918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1353.140186][ T9918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1353.174981][T14376] hsr_slave_0: entered promiscuous mode [ 1353.186018][T14376] hsr_slave_1: entered promiscuous mode [ 1353.195280][T14376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1353.203322][T14376] Cannot create hsr debugfs directory [ 1353.332121][ T9918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1353.347301][ T9918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1353.384050][T14465] fido_id[14465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1353.705197][T11400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.926511][T11400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.201786][T11400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.637671][T11400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.620587][ T9918] Bluetooth: hci4: command tx timeout [ 1356.127604][T11400] bridge_slave_1: left allmulticast mode [ 1356.133819][T11400] bridge_slave_1: left promiscuous mode [ 1356.140780][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.220180][T11400] bridge_slave_0: left allmulticast mode [ 1356.226274][T11400] bridge_slave_0: left promiscuous mode [ 1356.233367][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.264699][T11400] bridge_slave_1: left allmulticast mode [ 1356.271998][T11400] bridge_slave_1: left promiscuous mode [ 1356.278642][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.315904][T11400] bridge_slave_0: left allmulticast mode [ 1356.324195][T11400] bridge_slave_0: left promiscuous mode [ 1356.333966][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.367594][T11400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.395170][T11400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.428690][T11400] bond0 (unregistering): Released all slaves [ 1357.727309][ T9918] Bluetooth: hci4: command tx timeout [ 1357.840002][T11400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.884611][T11400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.931654][T11400] bond0 (unregistering): Released all slaves [ 1357.987330][T14408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.996494][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.004775][T14408] bridge_slave_0: entered allmulticast mode [ 1358.014972][T14408] bridge_slave_0: entered promiscuous mode [ 1358.209134][T14408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.217121][T14408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.225312][T14408] bridge_slave_1: entered allmulticast mode [ 1358.237843][T14408] bridge_slave_1: entered promiscuous mode [ 1358.520558][T11400] hsr_slave_0: left promiscuous mode [ 1358.546690][T11400] hsr_slave_1: left promiscuous mode [ 1358.555210][T11400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.569000][T11400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.602787][T11400] hsr_slave_0: left promiscuous mode [ 1358.612163][T11400] hsr_slave_1: left promiscuous mode [ 1358.623118][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.631027][T11400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.664051][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.672080][T11400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.819776][T11400] veth1_macvtap: left promiscuous mode [ 1358.825614][T11400] veth0_macvtap: left promiscuous mode [ 1358.831899][T11400] veth1_vlan: left promiscuous mode [ 1358.837539][T11400] veth0_vlan: left promiscuous mode [ 1359.783450][ T9918] Bluetooth: hci4: command tx timeout [ 1359.791985][T11400] team0 (unregistering): Port device team_slave_1 removed [ 1359.911814][T11400] team0 (unregistering): Port device team_slave_0 removed [ 1360.561838][T11400] team0 (unregistering): Port device team_slave_1 removed [ 1360.591838][T11400] team0 (unregistering): Port device team_slave_0 removed [ 1361.407772][T14280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.543500][T14408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.717011][T14408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.861425][ T9918] Bluetooth: hci4: command tx timeout [ 1362.113773][T14408] team0: Port device team_slave_0 added [ 1362.184139][T14280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.197063][T14466] chnl_net:caif_netlink_parms(): no params data found [ 1362.252368][T14408] team0: Port device team_slave_1 added [ 1362.354687][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.362412][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.378237][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.385960][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.958971][T14408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.966338][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.993197][T14408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.274772][T14376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1363.327882][T14408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.335555][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.364416][T14408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.379881][T14376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1363.407438][T14376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1363.410564][ T1685] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1363.556627][T14376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1363.614020][ T1685] usb 10-1: Using ep0 maxpacket: 16 [ 1363.691442][ T1685] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.703098][ T1685] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.713496][ T1685] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1363.726991][ T1685] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1363.736771][ T1685] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.973642][ T1685] usb 10-1: config 0 descriptor?? [ 1364.390170][ T12] bridge_slave_1: left allmulticast mode [ 1364.396132][ T12] bridge_slave_1: left promiscuous mode [ 1364.403142][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.471945][ T1685] usbhid 10-1:0.0: can't add hid device: -71 [ 1364.481473][ T1685] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1364.526153][ T12] bridge_slave_0: left allmulticast mode [ 1364.532408][ T12] bridge_slave_0: left promiscuous mode [ 1364.539363][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.541588][ T1685] usb 10-1: USB disconnect, device number 9 [ 1365.041301][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.093602][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.126751][ T12] bond0 (unregistering): Released all slaves [ 1365.185267][T14408] hsr_slave_0: entered promiscuous mode [ 1365.199573][T14408] hsr_slave_1: entered promiscuous mode [ 1365.208591][T14408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1365.216704][T14408] Cannot create hsr debugfs directory [ 1365.741180][ T12] hsr_slave_0: left promiscuous mode [ 1365.767133][ T12] hsr_slave_1: left promiscuous mode [ 1365.776309][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.811442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.376207][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1366.402885][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1366.943714][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.952245][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.960322][T14466] bridge_slave_0: entered allmulticast mode [ 1366.970418][T14466] bridge_slave_0: entered promiscuous mode [ 1367.253650][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.261666][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.269829][T14466] bridge_slave_1: entered allmulticast mode [ 1367.279800][T14466] bridge_slave_1: entered promiscuous mode [ 1367.504470][T14280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.737728][T14466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.856719][T14466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.376662][T14466] team0: Port device team_slave_0 added [ 1368.502558][T14466] team0: Port device team_slave_1 added [ 1368.770483][T14466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.779867][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.808333][T14466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.921405][T14376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.038011][T14466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.046608][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.074304][T14466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.292802][T14376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.410110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.417834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.696098][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.703916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.845236][T14408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1369.959022][T14408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1370.171696][T14466] hsr_slave_0: entered promiscuous mode [ 1370.182732][T14466] hsr_slave_1: entered promiscuous mode [ 1370.251107][T14408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1370.375648][T14408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1371.126887][T14280] veth0_vlan: entered promiscuous mode [ 1371.287569][T14280] veth1_vlan: entered promiscuous mode [ 1371.955674][T14280] veth0_macvtap: entered promiscuous mode [ 1372.178973][T14280] veth1_macvtap: entered promiscuous mode [ 1372.384267][T14408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.702293][T14280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.837582][T14408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.852992][T14280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.007517][T14280] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.016783][T14280] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.026747][T14280] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.036129][T14280] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.108821][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.116583][ T5072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1373.128315][T14466] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1373.242646][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.250385][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1373.302213][T14466] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1373.401410][T14466] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1373.564037][T14466] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1373.899107][T14376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.555457][T10172] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1374.671605][T14376] veth0_vlan: entered promiscuous mode [ 1374.770395][T10172] usb 10-1: Using ep0 maxpacket: 16 [ 1374.850041][T10172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.862737][T10172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.873190][T10172] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1374.886634][T10172] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1374.896422][T10172] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.938244][T14376] veth1_vlan: entered promiscuous mode [ 1375.102959][T10172] usb 10-1: config 0 descriptor?? [ 1375.563614][T14376] veth0_macvtap: entered promiscuous mode [ 1375.593961][T10172] usbhid 10-1:0.0: can't add hid device: -71 [ 1375.601100][T10172] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1375.693192][T14376] veth1_macvtap: entered promiscuous mode [ 1375.698948][T10172] usb 10-1: USB disconnect, device number 10 [ 1375.819566][T12727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1375.844090][T12727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1375.874868][T12727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1375.923225][T12727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1375.950382][T12727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1376.023079][T14376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.054757][T14376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.163598][T14466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.183159][T14376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.195151][T14376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.205040][T14376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.214273][T14376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.546573][T14466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.732303][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.740099][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.930965][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.938629][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.634135][T14408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.021907][T12727] Bluetooth: hci1: command tx timeout [ 1379.466254][T14555] chnl_net:caif_netlink_parms(): no params data found [ 1380.108225][T12727] Bluetooth: hci1: command tx timeout [ 1380.165645][T11400] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.296949][T14466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.401567][T11400] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.579837][T11400] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.772340][T11400] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.390242][T14466] veth0_vlan: entered promiscuous mode [ 1381.723645][T11400] bridge_slave_1: left allmulticast mode [ 1381.731758][T11400] bridge_slave_1: left promiscuous mode [ 1381.738473][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.825610][T11400] bridge_slave_0: left allmulticast mode [ 1381.831990][T11400] bridge_slave_0: left promiscuous mode [ 1381.838656][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.201992][T12727] Bluetooth: hci1: command tx timeout [ 1382.671141][T11400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.751177][T11400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.813280][T11400] bond0 (unregistering): Released all slaves [ 1383.044506][T14555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.052359][T14555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.060452][T14555] bridge_slave_0: entered allmulticast mode [ 1383.070481][T14555] bridge_slave_0: entered promiscuous mode [ 1383.191825][T11400] hsr_slave_0: left promiscuous mode [ 1383.268785][T11400] hsr_slave_1: left promiscuous mode [ 1383.277305][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.285343][T11400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.374836][T11400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.382883][T11400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.531933][T11400] veth1_macvtap: left promiscuous mode [ 1383.537788][T11400] veth0_macvtap: left promiscuous mode [ 1383.544162][T11400] veth1_vlan: left promiscuous mode [ 1383.550104][T11400] veth0_vlan: left promiscuous mode [ 1384.260024][T12727] Bluetooth: hci1: command tx timeout [ 1384.693929][T11400] team0 (unregistering): Port device team_slave_1 removed [ 1384.738137][T11400] team0 (unregistering): Port device team_slave_0 removed [ 1385.144017][T14408] veth0_vlan: entered promiscuous mode [ 1385.169724][T14466] veth1_vlan: entered promiscuous mode [ 1385.186078][T14555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.194050][T14555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.202086][T14555] bridge_slave_1: entered allmulticast mode [ 1385.212154][T14555] bridge_slave_1: entered promiscuous mode [ 1385.670785][T14408] veth1_vlan: entered promiscuous mode [ 1385.704243][T14555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.846355][T14555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.318980][T14555] team0: Port device team_slave_0 added [ 1386.418977][T14555] team0: Port device team_slave_1 added [ 1386.769683][T14555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.776914][T14555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.807572][T14555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.873232][T14466] veth0_macvtap: entered promiscuous mode [ 1386.926505][T14408] veth0_macvtap: entered promiscuous mode [ 1386.964204][T14466] veth1_macvtap: entered promiscuous mode [ 1387.007857][T14408] veth1_macvtap: entered promiscuous mode [ 1387.030757][T14555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.038648][T14555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.065527][T14555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.232255][T14466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.323202][T14408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.380889][T14466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.462094][T14408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.527939][T14466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.537445][T14466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.546774][T14466] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.555938][T14466] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.801679][T14408] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.811186][T14408] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.820464][T14408] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.833124][T14408] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.073581][T14555] hsr_slave_0: entered promiscuous mode [ 1388.084292][T14555] hsr_slave_1: entered promiscuous mode [ 1388.093533][T14555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1388.101491][T14555] Cannot create hsr debugfs directory [ 1389.163558][T11423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.172062][T11423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.583476][T11423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.591890][T11423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.262339][T13278] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1390.490956][T13278] usb 10-1: Using ep0 maxpacket: 16 [ 1390.527379][T13278] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.539898][T13278] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.550703][T13278] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1390.564186][T13278] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1390.573784][T13278] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.781412][T13278] usb 10-1: config 0 descriptor?? [ 1391.347311][T13278] usbhid 10-1:0.0: can't add hid device: -71 [ 1391.355748][T13278] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1391.412786][T13278] usb 10-1: USB disconnect, device number 11 [ 1391.543401][T14555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1391.652597][T14555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1391.783320][T14555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1391.911878][T14555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1393.200955][T14683] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2284'. [ 1393.231953][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2284'. [ 1393.715207][T14555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.986940][T14555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.094904][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.102647][ T5072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.241635][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.249449][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.067385][T14555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.433790][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.441474][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.025224][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.033625][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.159954][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.171270][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.395043][ T5072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.403575][ T5072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.617694][ T5072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.625992][ T5072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.928189][T13932] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1399.159961][T13932] usb 10-1: Using ep0 maxpacket: 16 [ 1399.217966][T13932] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1399.226690][T13932] usb 10-1: config 0 has no interface number 0 [ 1399.233418][T13932] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1399.245533][T13932] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1399.511976][T13932] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1399.522003][T13932] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1399.530745][T13932] usb 10-1: Product: syz [ 1399.535291][T13932] usb 10-1: SerialNumber: syz [ 1399.673083][T13932] usb 10-1: config 0 descriptor?? [ 1399.744102][T13932] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input7 [ 1399.797144][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2158'. [ 1399.916881][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1399.929757][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1399.937527][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1399.948557][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1399.960833][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1399.970099][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1399.977831][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1399.985441][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1399.992974][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1400.000466][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1400.099039][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1400.108915][T13932] usb 10-1: USB disconnect, device number 12 [ 1400.164203][T13932] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1401.001827][T14555] veth0_vlan: entered promiscuous mode [ 1401.211569][T14555] veth1_vlan: entered promiscuous mode [ 1401.487477][T14751] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2290'. [ 1401.813927][T14555] veth0_macvtap: entered promiscuous mode [ 1401.906392][T14555] veth1_macvtap: entered promiscuous mode [ 1402.212567][T14555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.367845][T14555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.513958][T14555] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.523207][T14555] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.532718][T14555] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.541903][T14555] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.691601][ T30] audit: type=1326 audit(1750040925.783:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1402.714200][ T30] audit: type=1326 audit(1750040925.823:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1402.736737][ T30] audit: type=1326 audit(1750040925.833:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1403.103791][ T30] audit: type=1326 audit(1750040925.903:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1403.126542][ T30] audit: type=1326 audit(1750040925.903:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1404.142924][T14774] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1404.149823][T14774] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1404.158380][T14774] vhci_hcd vhci_hcd.0: Device attached [ 1404.459819][T14552] vhci_hcd: vhci_device speed not set [ 1404.503511][ T5842] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1404.560349][T14552] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 1404.690555][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 1404.707248][ T5842] usb 1-1: config 0 has no interfaces? [ 1404.714810][ T5842] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1404.729034][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.867919][ T5842] usb 1-1: config 0 descriptor?? [ 1405.209146][T14776] usbip_core: unknown command [ 1405.215054][T14776] vhci_hcd: unknown pdu 0 [ 1405.219841][T14776] usbip_core: unknown command [ 1405.225818][ T4033] vhci_hcd: stop threads [ 1405.234930][ T4033] vhci_hcd: release socket [ 1405.241066][ T4033] vhci_hcd: disconnect device [ 1405.269670][ T5842] usb 1-1: USB disconnect, device number 20 [ 1405.475182][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2299'. [ 1408.230011][T13278] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1408.500439][T13278] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.515348][T13278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.647148][T14820] fuse: Invalid rootmode [ 1408.705106][T13278] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1408.719166][T13278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.729688][T13278] usb 3-1: Product: syz [ 1408.734140][T13278] usb 3-1: Manufacturer: syz [ 1408.739010][T13278] usb 3-1: SerialNumber: syz [ 1409.552859][T13278] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1409.559680][T13278] cdc_ncm 3-1:1.0: bind() failure [ 1409.578756][T13278] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1409.586138][T13278] cdc_ncm 3-1:1.1: bind() failure [ 1409.711294][T14552] vhci_hcd: vhci_device speed not set [ 1411.747184][T14552] usb 3-1: USB disconnect, device number 15 [ 1412.675511][T14848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1412.677005][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2312'. [ 1412.682281][T14848] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1412.683227][T14848] vhci_hcd vhci_hcd.0: Device attached [ 1412.890106][T14552] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1412.922917][T13278] vhci_hcd: vhci_device speed not set [ 1413.010815][T13278] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 1413.122001][T14552] usb 3-1: Using ep0 maxpacket: 32 [ 1413.163345][T14552] usb 3-1: config 0 has no interfaces? [ 1413.169593][T14552] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1413.179102][T14552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.373173][T14552] usb 3-1: config 0 descriptor?? [ 1413.597876][T14850] usbip_core: unknown command [ 1413.603132][T14850] vhci_hcd: unknown pdu 0 [ 1413.607745][T14850] usbip_core: unknown command [ 1413.615573][ T4033] vhci_hcd: stop threads [ 1413.620637][ T4033] vhci_hcd: release socket [ 1413.625373][ T4033] vhci_hcd: disconnect device [ 1413.686476][T14552] usb 3-1: USB disconnect, device number 16 [ 1413.709752][ T5072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.717878][ T5072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.120406][T11423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.128673][T11423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.525896][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2241'. [ 1416.719713][T14882] fuse: Invalid rootmode [ 1418.189918][T13278] vhci_hcd: vhci_device speed not set [ 1418.386535][T14552] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1418.669580][T14552] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.681125][T14552] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.806730][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2323'. [ 1418.869921][T14552] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1418.879449][T14552] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.887718][T14552] usb 8-1: Product: syz [ 1418.892527][T14552] usb 8-1: Manufacturer: syz [ 1418.897312][T14552] usb 8-1: SerialNumber: syz [ 1418.902820][T14898] @: renamed from vlan0 (while UP) [ 1419.751234][T14552] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 1419.761507][T14552] cdc_ncm 8-1:1.0: bind() failure [ 1419.794621][T14552] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1419.802181][T14552] cdc_ncm 8-1:1.1: bind() failure [ 1420.991701][T14910] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1420.998464][T14910] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1421.010315][T14910] vhci_hcd vhci_hcd.0: Device attached [ 1421.231237][ T5842] vhci_hcd: vhci_device speed not set [ 1421.344636][ T5842] usb 51-1: new full-speed USB device number 3 using vhci_hcd [ 1421.405407][T13279] usb 8-1: USB disconnect, device number 3 [ 1421.430886][T13278] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1421.713374][T13278] usb 10-1: Using ep0 maxpacket: 32 [ 1421.835043][T13278] usb 10-1: config 0 has no interfaces? [ 1421.841219][T13278] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1421.850985][T13278] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.970299][T13278] usb 10-1: config 0 descriptor?? [ 1422.250892][T14911] usbip_core: unknown command [ 1422.255847][T14911] vhci_hcd: unknown pdu 0 [ 1422.257868][T13932] usb 10-1: USB disconnect, device number 13 [ 1422.261210][T14911] usbip_core: unknown command [ 1422.326314][ T8753] vhci_hcd: stop threads [ 1422.335902][ T8753] vhci_hcd: release socket [ 1422.344675][ T8753] vhci_hcd: disconnect device [ 1425.735023][T14934] fuse: Bad value for 'rootmode' [ 1426.511940][ T5842] vhci_hcd: vhci_device speed not set [ 1427.241174][ T9918] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1427.301636][ T9918] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1427.331163][ T9918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1427.347949][ T9918] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1427.367158][ T9918] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1427.395742][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2335'. [ 1428.715963][T14958] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1428.722845][T14958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1428.731635][T14958] vhci_hcd vhci_hcd.0: Device attached [ 1428.880015][ T5842] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1428.995458][T13932] vhci_hcd: vhci_device speed not set [ 1429.080564][T13932] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1429.124983][ T5842] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.135667][ T5842] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.205346][T14552] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1429.230788][ T5842] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1429.240347][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.248612][ T5842] usb 10-1: Product: syz [ 1429.253181][ T5842] usb 10-1: Manufacturer: syz [ 1429.258049][ T5842] usb 10-1: SerialNumber: syz [ 1429.460977][T12727] Bluetooth: hci5: command tx timeout [ 1429.467688][T14552] usb 8-1: Using ep0 maxpacket: 32 [ 1429.514878][T14552] usb 8-1: config 0 has no interfaces? [ 1429.521037][T14552] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1429.530763][T14552] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.823074][T14552] usb 8-1: config 0 descriptor?? [ 1430.133323][T14959] usbip_core: unknown command [ 1430.138643][T14959] vhci_hcd: unknown pdu 0 [ 1430.143483][T14959] usbip_core: unknown command [ 1430.181419][ T8753] vhci_hcd: stop threads [ 1430.186186][ T8753] vhci_hcd: release socket [ 1430.192344][ T8753] vhci_hcd: disconnect device [ 1430.227485][T10172] usb 8-1: USB disconnect, device number 4 [ 1430.237266][ T5842] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 1430.244125][ T5842] cdc_ncm 10-1:1.0: bind() failure [ 1430.532232][ T5842] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1430.540200][ T5842] cdc_ncm 10-1:1.1: bind() failure [ 1430.675383][T14943] chnl_net:caif_netlink_parms(): no params data found [ 1431.559621][T12727] Bluetooth: hci5: command tx timeout [ 1431.927318][ T5842] usb 10-1: USB disconnect, device number 14 [ 1432.824538][T14985] fuse: Bad value for 'rootmode' [ 1433.036309][T11423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.335188][T11423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.624125][T12727] Bluetooth: hci5: command tx timeout [ 1433.757384][T11423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.155679][T14943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.163664][T14943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.171811][T14943] bridge_slave_0: entered allmulticast mode [ 1434.181892][T14943] bridge_slave_0: entered promiscuous mode [ 1434.260293][T13932] vhci_hcd: vhci_device speed not set [ 1434.290576][T11423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.305293][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 1434.442514][T14943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.450451][T14943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.458339][T14943] bridge_slave_1: entered allmulticast mode [ 1434.468642][T14943] bridge_slave_1: entered promiscuous mode [ 1434.748069][T14943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.777979][T14943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.315417][T14943] team0: Port device team_slave_0 added [ 1435.452012][T14943] team0: Port device team_slave_1 added [ 1435.700994][T12727] Bluetooth: hci5: command tx timeout [ 1435.917739][T11423] bridge_slave_1: left allmulticast mode [ 1435.924075][T11423] bridge_slave_1: left promiscuous mode [ 1435.930953][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.080529][T11423] bridge_slave_0: left allmulticast mode [ 1436.086506][T11423] bridge_slave_0: left promiscuous mode [ 1436.093474][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.255321][T15012] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1436.262210][T15012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1436.275584][T15012] vhci_hcd vhci_hcd.0: Device attached [ 1436.510830][T10172] vhci_hcd: vhci_device speed not set [ 1436.659129][T10172] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 1436.740932][ T32] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1436.897957][ T5842] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1437.020477][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 1437.054578][ T32] usb 3-1: config 0 has no interfaces? [ 1437.064271][ T32] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1437.074803][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.176311][ T5842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.193253][ T5842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.202315][ T32] usb 3-1: config 0 descriptor?? [ 1437.310618][ T5842] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1437.320645][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.328958][ T5842] usb 6-1: Product: syz [ 1437.333660][ T5842] usb 6-1: Manufacturer: syz [ 1437.338541][ T5842] usb 6-1: SerialNumber: syz [ 1437.432722][T11423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.511099][T15014] usbip_core: unknown command [ 1437.516441][T15014] vhci_hcd: unknown pdu 0 [ 1437.516904][ T32] usb 3-1: USB disconnect, device number 17 [ 1437.521283][T15014] usbip_core: unknown command [ 1437.571689][T11423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.579967][ T3014] vhci_hcd: stop threads [ 1437.585146][ T3014] vhci_hcd: release socket [ 1437.595287][ T3014] vhci_hcd: disconnect device [ 1437.689671][T11423] bond0 (unregistering): Released all slaves [ 1437.930352][T14943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.937781][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.965456][T14943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.212546][ T5842] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1438.219028][ T5842] cdc_ncm 6-1:1.0: bind() failure [ 1438.238607][ T5842] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1438.246006][ T5842] cdc_ncm 6-1:1.1: bind() failure [ 1438.320046][T14943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.327413][T14943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.360357][T14943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.109821][T11423] hsr_slave_0: left promiscuous mode [ 1439.142631][T11423] hsr_slave_1: left promiscuous mode [ 1439.151776][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.159806][T11423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.252747][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.262042][T11423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.459062][T11423] veth1_macvtap: left promiscuous mode [ 1439.465847][T11423] veth0_macvtap: left promiscuous mode [ 1439.472146][T11423] veth1_vlan: left promiscuous mode [ 1439.477789][T11423] veth0_vlan: left promiscuous mode [ 1439.630283][T15040] fuse: Bad value for 'fd' [ 1439.686683][T13932] usb 6-1: USB disconnect, device number 6 [ 1440.898256][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2359'. [ 1441.038343][T11423] team0 (unregistering): Port device team_slave_1 removed [ 1441.240221][T11423] team0 (unregistering): Port device team_slave_0 removed [ 1441.811363][T10172] vhci_hcd: vhci_device speed not set [ 1442.074932][T15035] team0: No ports can be present during mode change [ 1442.372523][T14943] hsr_slave_0: entered promiscuous mode [ 1442.383516][T14943] hsr_slave_1: entered promiscuous mode [ 1442.392951][T14943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1442.406687][T14943] Cannot create hsr debugfs directory [ 1443.349823][T15071] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1443.356781][T15071] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1443.365405][T15071] vhci_hcd vhci_hcd.0: Device attached [ 1443.573298][T13278] vhci_hcd: vhci_device speed not set [ 1443.669923][T13278] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 1443.740364][ T5842] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1443.954779][ T5842] usb 6-1: Using ep0 maxpacket: 32 [ 1443.982809][ T5842] usb 6-1: config 0 has no interfaces? [ 1443.988790][ T5842] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1443.998423][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.107549][ T5842] usb 6-1: config 0 descriptor?? [ 1444.337649][T15072] usbip_core: unknown command [ 1444.343299][T15072] vhci_hcd: unknown pdu 0 [ 1444.351874][T15072] usbip_core: unknown command [ 1444.355690][ T5842] usb 6-1: USB disconnect, device number 7 [ 1444.370290][ T3625] vhci_hcd: stop threads [ 1444.374804][ T3625] vhci_hcd: release socket [ 1444.381019][ T3625] vhci_hcd: disconnect device [ 1445.157536][T14943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1445.282088][T14943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1445.421678][T14943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1445.548303][T14943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1446.112418][T15092] fuse: Unknown parameter 'use00000000000000000000' [ 1447.202735][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 1447.338844][T14943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.675135][T14943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.860798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.868524][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.051371][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.059079][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.839174][T13278] vhci_hcd: vhci_device speed not set [ 1451.297862][T15141] fuse: Unknown parameter 'use00000000000000000000' [ 1451.745285][T14943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.446444][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 1456.205852][T14943] veth0_vlan: entered promiscuous mode [ 1456.400883][T14943] veth1_vlan: entered promiscuous mode [ 1456.700358][T15194] fuse: Unknown parameter 'use00000000000000000000' [ 1456.937015][T14943] veth0_macvtap: entered promiscuous mode [ 1457.103493][T14943] veth1_macvtap: entered promiscuous mode [ 1457.371993][T14943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.534681][T14943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.710933][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2395'. [ 1457.732929][T14943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.742199][T14943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.751401][T14943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.760729][T14943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.863707][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.870604][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1462.688505][T15247] fuse: Unknown parameter 'user_i00000000000000000000' [ 1463.846560][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2408'. [ 1466.022184][ T9918] Bluetooth: hci3: command 0x0406 tx timeout [ 1468.574796][T15310] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 1468.581683][T15310] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1468.590105][T15310] vhci_hcd vhci_hcd.0: Device attached [ 1468.801718][T15312] vhci_hcd: connection closed [ 1468.986845][T11423] vhci_hcd: stop threads [ 1468.996354][T11423] vhci_hcd: release socket [ 1469.001372][T11423] vhci_hcd: disconnect device [ 1469.043611][T14552] usb 52-1: enqueue for inactive port 0 [ 1469.550801][T15317] fuse: Unknown parameter 'user_i00000000000000000000' [ 1469.667603][T14552] usb usb52-port1: attempt power cycle [ 1470.201068][ T8753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.209371][ T8753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.468173][T14552] usb usb52-port1: unable to enumerate USB device [ 1471.120859][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.129006][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.552828][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2421'. [ 1472.726156][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 1474.208391][T15359] fuse: Unknown parameter 'user_i00000000000000000000' [ 1475.714279][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 1475.897886][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2437'. [ 1476.274282][T12727] Bluetooth: hci4: command 0x0406 tx timeout [ 1478.138153][T15406] fuse: Unknown parameter 'user_id00000000000000000000' [ 1478.230126][T13278] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1478.467510][T13278] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1478.476242][T13278] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1478.486091][T13278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.628823][T13278] usb 3-1: config 0 descriptor?? [ 1478.801899][T14552] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1479.049825][T14552] usb 5-1: device descriptor read/64, error -71 [ 1479.336446][T13278] video4linux radio48: keene_cmd_set failed (-71) [ 1479.340976][T14552] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1479.343288][T13278] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1479.501737][T13278] usb 3-1: USB disconnect, device number 18 [ 1479.600884][T14552] usb 5-1: device descriptor read/64, error -71 [ 1479.716856][T14552] usb usb5-port1: attempt power cycle [ 1480.130387][T14552] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1480.196829][T14552] usb 5-1: device descriptor read/8, error -71 [ 1480.479707][T14552] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1480.583991][T14552] usb 5-1: device descriptor read/8, error -71 [ 1480.740448][T14552] usb usb5-port1: unable to enumerate USB device [ 1480.861987][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2450'. [ 1481.515970][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2451'. [ 1483.456767][T15457] fuse: Unknown parameter 'user_id00000000000000000000' [ 1484.912547][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2463'. [ 1485.473516][T14552] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1485.704569][T14552] usb 5-1: device descriptor read/64, error -71 [ 1485.989650][T14552] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1486.154182][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 1486.169861][T14552] usb 5-1: device descriptor read/64, error -71 [ 1486.281100][T14552] usb usb5-port1: attempt power cycle [ 1486.415496][T15492] delete_channel: no stack [ 1486.650134][T14552] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1486.752563][T14552] usb 5-1: device descriptor read/8, error -71 [ 1487.010666][T14552] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1487.123551][T14552] usb 5-1: device descriptor read/8, error -71 [ 1487.248643][T14552] usb usb5-port1: unable to enumerate USB device [ 1488.082977][T15508] fuse: Unknown parameter 'user_id00000000000000000000' [ 1489.376108][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 1490.244725][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2481'. [ 1492.533904][T15556] fuse: Bad value for 'fd' [ 1493.016723][ T8876] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1493.242668][ T8876] usb 10-1: device descriptor read/64, error -71 [ 1493.510654][ T8876] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1493.700164][ T8876] usb 10-1: device descriptor read/64, error -71 [ 1493.844905][ T8876] usb usb10-port1: attempt power cycle [ 1494.260368][ T8876] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1494.332146][ T8876] usb 10-1: device descriptor read/8, error -71 [ 1494.545433][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2492'. [ 1494.600539][ T8876] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1494.676446][ T8876] usb 10-1: device descriptor read/8, error -71 [ 1494.798999][ T8876] usb usb10-port1: unable to enumerate USB device [ 1496.621892][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2495'. [ 1498.080287][T10172] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1498.389703][T10172] usb 8-1: Using ep0 maxpacket: 8 [ 1498.474397][T10172] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1498.484955][T10172] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1498.495423][T10172] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1498.508221][T10172] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1498.526961][T10172] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1498.537905][T10172] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.616315][T15602] fuse: Bad value for 'fd' [ 1499.250390][T10172] usb 8-1: GET_CAPABILITIES returned 2f [ 1499.256386][T10172] usbtmc 8-1:16.0: can't read capabilities [ 1499.569650][ T8876] usb 8-1: USB disconnect, device number 5 [ 1500.903549][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2504'. [ 1501.250868][T10172] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1501.459954][T10172] usb 3-1: device descriptor read/64, error -71 [ 1501.740360][T10172] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1501.860681][ T9918] Bluetooth: hci1: command 0x0406 tx timeout [ 1501.913650][T10172] usb 3-1: device descriptor read/64, error -71 [ 1502.053059][T10172] usb usb3-port1: attempt power cycle [ 1502.469709][T10172] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1502.561705][T10172] usb 3-1: device descriptor read/8, error -71 [ 1502.824873][T10172] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1502.882687][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2510'. [ 1502.933178][T10172] usb 3-1: device descriptor read/8, error -71 [ 1503.055338][T10172] usb usb3-port1: unable to enumerate USB device [ 1503.794208][T15647] fuse: Bad value for 'fd' [ 1505.911827][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2518'. [ 1507.310976][T12727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1507.383186][T12727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1507.412657][T12727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1507.566488][T12727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1507.589013][T12727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1508.939629][T10172] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1509.180087][T10172] usb 6-1: device descriptor read/64, error -71 [ 1509.509547][T10172] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1509.700256][T12727] Bluetooth: hci0: command tx timeout [ 1509.759534][T10172] usb 6-1: device descriptor read/64, error -71 [ 1509.930626][T10172] usb usb6-port1: attempt power cycle [ 1510.456913][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2524'. [ 1510.459866][T10172] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1510.821178][T10172] usb 6-1: device descriptor read/8, error -71 [ 1510.848705][T15672] chnl_net:caif_netlink_parms(): no params data found [ 1511.150670][T10172] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1511.333565][T10172] usb 6-1: device descriptor read/8, error -71 [ 1511.518076][T10172] usb usb6-port1: unable to enumerate USB device [ 1511.781831][T12727] Bluetooth: hci0: command tx timeout [ 1513.860184][T12727] Bluetooth: hci0: command tx timeout [ 1514.512915][T15672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.520708][T15672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.528654][T15672] bridge_slave_0: entered allmulticast mode [ 1514.539036][T15672] bridge_slave_0: entered promiscuous mode [ 1514.664049][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2530'. [ 1514.775675][T15672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.783414][T15672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.791568][T15672] bridge_slave_1: entered allmulticast mode [ 1514.811538][T15672] bridge_slave_1: entered promiscuous mode [ 1515.428178][T15672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.565017][T15672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.939775][T12727] Bluetooth: hci0: command tx timeout [ 1516.185852][T15672] team0: Port device team_slave_0 added [ 1516.307990][T15672] team0: Port device team_slave_1 added [ 1516.910117][T15672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.917549][T15672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.944311][T15672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.291036][T15672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.298351][T15672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.325486][T15672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.337820][ T8876] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1517.560205][ T8876] usb 10-1: device descriptor read/64, error -71 [ 1517.581706][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2536'. [ 1517.861428][ T8876] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1518.033253][ T8876] usb 10-1: device descriptor read/64, error -71 [ 1518.150876][ T8876] usb usb10-port1: attempt power cycle [ 1518.222779][T15672] hsr_slave_0: entered promiscuous mode [ 1518.232401][T15672] hsr_slave_1: entered promiscuous mode [ 1518.241159][T15672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1518.248875][T15672] Cannot create hsr debugfs directory [ 1518.594595][ T8876] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1518.635418][ T8876] usb 10-1: device descriptor read/8, error -71 [ 1518.969729][ T8876] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1519.108195][ T8876] usb 10-1: device descriptor read/8, error -71 [ 1519.221230][ T8876] usb usb10-port1: unable to enumerate USB device [ 1520.322040][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1520.333476][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1521.446963][T15672] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1521.482452][T15672] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1521.580444][T15672] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1521.610393][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2542'. [ 1521.721231][T15672] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1523.482518][ T9918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1523.492995][ T9918] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1523.542799][ T9918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1523.601775][ T9918] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1523.635136][ T9918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1524.863011][T15672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.521885][T15672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.700057][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.707512][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.771489][ T9918] Bluetooth: hci7: command tx timeout [ 1525.945784][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.953467][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.454363][T15765] chnl_net:caif_netlink_parms(): no params data found [ 1527.812195][ T9918] Bluetooth: hci7: command tx timeout [ 1529.470220][ T8876] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1529.725710][ T8876] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.737208][ T8876] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1529.746918][ T8876] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1529.863072][ T9918] Bluetooth: hci7: command tx timeout [ 1529.899983][ T8876] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1529.909987][ T8876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.918296][ T8876] usb 10-1: Product: syz [ 1529.922953][ T8876] usb 10-1: Manufacturer: syz [ 1529.927827][ T8876] usb 10-1: SerialNumber: syz [ 1529.981535][ T8876] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1529.988690][ T8876] cdc_ncm 10-1:1.0: bind() failure [ 1531.671686][ T3625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.941981][ T9918] Bluetooth: hci7: command tx timeout [ 1532.264409][ T3625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.448862][T15765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.457000][T15765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.465964][T15765] bridge_slave_0: entered allmulticast mode [ 1532.476341][T15765] bridge_slave_0: entered promiscuous mode [ 1532.565109][T15672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1532.685611][ T3625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.813082][T15765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.830320][T15765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.838089][T15765] bridge_slave_1: entered allmulticast mode [ 1532.847139][T15765] bridge_slave_1: entered promiscuous mode [ 1532.992777][ T3625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.051318][ T8876] usb 10-1: USB disconnect, device number 23 [ 1534.096170][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2552'. [ 1534.213158][T15765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.621645][T15765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.322606][ T3625] bridge_slave_1: left allmulticast mode [ 1535.328668][ T3625] bridge_slave_1: left promiscuous mode [ 1535.335722][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.574429][ T3625] bridge_slave_0: left allmulticast mode [ 1535.580942][ T3625] bridge_slave_0: left promiscuous mode [ 1535.594055][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.084300][ T3625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.217465][ T3625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.287566][ T3625] bond0 (unregistering): Released all slaves [ 1537.812391][T15765] team0: Port device team_slave_0 added [ 1538.106837][T15765] team0: Port device team_slave_1 added [ 1538.946900][T15765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.954262][T15765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.986267][T15765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.304483][ T3625] hsr_slave_0: left promiscuous mode [ 1539.381570][ T3625] hsr_slave_1: left promiscuous mode [ 1539.390424][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.398253][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.613456][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.621554][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.747238][ T3625] veth1_macvtap: left promiscuous mode [ 1539.753391][ T3625] veth0_macvtap: left promiscuous mode [ 1539.759588][ T3625] veth1_vlan: left promiscuous mode [ 1539.765234][ T3625] veth0_vlan: left promiscuous mode [ 1541.884152][ T3625] team0 (unregistering): Port device team_slave_1 removed [ 1542.031617][ T3625] team0 (unregistering): Port device team_slave_0 removed [ 1542.330894][T12727] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1542.367831][T12727] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1542.383309][T12727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1542.455521][T12727] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1542.467567][T12727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1542.921352][T15672] veth0_vlan: entered promiscuous mode [ 1543.012771][T15765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.020281][T15765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.047001][T15765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.339300][T15672] veth1_vlan: entered promiscuous mode [ 1543.459714][ T8876] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1543.702434][ T8876] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.713110][ T8876] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1543.722446][ T8876] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1544.014075][ T8876] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1544.023786][ T8876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.032286][ T8876] usb 10-1: Product: syz [ 1544.036752][ T8876] usb 10-1: Manufacturer: syz [ 1544.041764][ T8876] usb 10-1: SerialNumber: syz [ 1544.224937][ T1685] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1544.402900][ T8876] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1544.410281][ T8876] cdc_ncm 10-1:1.0: bind() failure [ 1544.524500][ T1685] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1544.531804][ T1685] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1544.541501][ T1685] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.677844][ T9918] Bluetooth: hci5: command tx timeout [ 1544.729087][ T1685] usb 8-1: config 0 descriptor?? [ 1544.999790][T15765] hsr_slave_0: entered promiscuous mode [ 1545.017974][T15765] hsr_slave_1: entered promiscuous mode [ 1545.027435][T15765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1545.035682][T15765] Cannot create hsr debugfs directory [ 1545.348795][T15672] veth0_macvtap: entered promiscuous mode [ 1545.452343][ T1685] video4linux radio48: keene_cmd_set failed (-71) [ 1545.459531][ T1685] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 1545.690273][ T1685] usb 8-1: USB disconnect, device number 6 [ 1545.858515][T15672] veth1_macvtap: entered promiscuous mode [ 1546.392251][T10172] usb 10-1: USB disconnect, device number 24 [ 1546.741849][T12727] Bluetooth: hci5: command tx timeout [ 1547.317514][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.442732][T15672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.521503][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.632127][T15672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.728428][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.902039][T15672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.911347][T15672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.920689][T15672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.929863][T15672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.037090][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.271674][T15851] chnl_net:caif_netlink_parms(): no params data found [ 1548.473382][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2564'. [ 1548.822958][T12727] Bluetooth: hci5: command tx timeout [ 1549.680214][ T12] bridge_slave_1: left allmulticast mode [ 1549.686201][ T12] bridge_slave_1: left promiscuous mode [ 1549.693657][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.894925][ T12] bridge_slave_0: left allmulticast mode [ 1549.901297][ T12] bridge_slave_0: left promiscuous mode [ 1549.908017][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.238095][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2567'. [ 1550.329967][T10172] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1550.542014][T10172] usb 10-1: device descriptor read/64, error -71 [ 1550.722521][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.780696][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.810702][T10172] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1550.815979][ T12] bond0 (unregistering): Released all slaves [ 1550.903713][T12727] Bluetooth: hci5: command tx timeout [ 1550.955339][T15901] bridge_slave_1: left allmulticast mode [ 1550.961793][T15901] bridge_slave_1: left promiscuous mode [ 1550.968887][T15901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.000995][T15901] bridge_slave_0: left allmulticast mode [ 1551.007164][T15901] bridge_slave_0: left promiscuous mode [ 1551.009945][T10172] usb 10-1: device descriptor read/64, error -71 [ 1551.014651][T15901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.134315][T10172] usb usb10-port1: attempt power cycle [ 1551.510806][T10172] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1551.590310][T10172] usb 10-1: device descriptor read/8, error -71 [ 1551.836227][T10172] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1551.910471][T10172] usb 10-1: device descriptor read/8, error -71 [ 1552.046218][T10172] usb usb10-port1: unable to enumerate USB device [ 1552.082647][ T12] hsr_slave_0: left promiscuous mode [ 1552.121807][ T12] hsr_slave_1: left promiscuous mode [ 1552.131230][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.139049][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.233605][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.242654][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.357008][ T12] veth1_macvtap: left promiscuous mode [ 1552.364782][ T12] veth0_macvtap: left promiscuous mode [ 1552.370953][ T12] veth1_vlan: left promiscuous mode [ 1552.376586][ T12] veth0_vlan: left promiscuous mode [ 1553.149478][T15916] ===================================================== [ 1553.157043][T15916] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1553.164830][T15916] _copy_to_user+0xcc/0x120 [ 1553.169832][T15916] vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 1553.175987][T15916] compat_ptr_ioctl+0x82/0xe0 [ 1553.181478][T15916] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1553.187320][T15916] ia32_sys_call+0x2d07/0x42c0 [ 1553.192597][T15916] __do_fast_syscall_32+0xb0/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1553.202036][T15916] do_fast_syscall_32+0x38/0x80 [ 1553.208317][T15916] do_SYSENTER_32+0x1f/0x30 [ 1553.214210][T15916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1553.221557][T15916] [ 1553.224042][T15916] Uninit was stored to memory at: [ 1553.230560][T15916] kmemdup_noprof+0xb0/0x100 [ 1553.235429][T15916] vmci_datagram_dispatch+0x4eb/0x1560 [ 1553.241468][T15916] vmci_ctx_put+0x88e/0x15d0 [ 1553.247340][T15916] vmci_ctx_destroy+0x15d/0x250 [ 1553.252668][T15916] vmci_host_unlocked_ioctl+0x4592/0x5200 [ 1553.258649][T15916] compat_ptr_ioctl+0x82/0xe0 [ 1553.263781][T15916] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1553.269823][T15916] ia32_sys_call+0x2d07/0x42c0 [ 1553.274817][T15916] __do_fast_syscall_32+0xb0/0x150 [ 1553.280389][T15916] do_fast_syscall_32+0x38/0x80 [ 1553.285485][T15916] do_SYSENTER_32+0x1f/0x30 [ 1553.290456][T15916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1553.297058][T15916] [ 1553.304776][T15916] Local variable ev.i.i created at: [ 1553.311550][T15916] vmci_ctx_put+0x76b/0x15d0 [ 1553.316403][T15916] vmci_ctx_destroy+0x15d/0x250 [ 1553.321714][T15916] [ 1553.324196][T15916] Bytes 28-31 of 40 are uninitialized [ 1553.330089][T15916] Memory access of size 40 starts at ffff888039a8ea00 [ 1553.337043][T15916] Data copied to user address 000000000000a4bf [ 1553.343599][T15916] [ 1553.346108][T15916] CPU: 0 UID: 0 PID: 15916 Comm: syz.7.2569 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(undef) [ 1553.358918][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1553.369505][T15916] ===================================================== [ 1553.376631][T15916] Disabling lock debugging due to kernel taint [ 1553.383291][T15916] Kernel panic - not syncing: kmsan.panic set ... [ 1553.389932][T15916] CPU: 0 UID: 0 PID: 15916 Comm: syz.7.2569 Tainted: G B 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(undef) [ 1553.403966][T15916] Tainted: [B]=BAD_PAGE [ 1553.408273][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1553.418639][T15916] Call Trace: [ 1553.422095][T15916] [ 1553.425201][T15916] __dump_stack+0x26/0x30 [ 1553.429808][T15916] dump_stack_lvl+0x53/0x270 [ 1553.434670][T15916] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1553.440813][T15916] dump_stack+0x1e/0x25 [ 1553.445245][T15916] panic+0x4bd/0xd50 [ 1553.449472][T15916] kmsan_report+0x31c/0x320 [ 1553.454274][T15916] ? kmsan_get_metadata+0xfb/0x160 [ 1553.459679][T15916] ? kmsan_internal_check_memory+0x16c/0x230 [ 1553.465949][T15916] ? kmsan_copy_to_user+0xf1/0x190 [ 1553.471348][T15916] ? _copy_to_user+0xcc/0x120 [ 1553.476275][T15916] ? vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 1553.482427][T15916] ? compat_ptr_ioctl+0x82/0xe0 [ 1553.487546][T15916] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1553.493553][T15916] ? ia32_sys_call+0x2d07/0x42c0 [ 1553.498718][T15916] ? __do_fast_syscall_32+0xb0/0x150 [ 1553.504267][T15916] ? do_fast_syscall_32+0x38/0x80 [ 1553.509523][T15916] ? do_SYSENTER_32+0x1f/0x30 [ 1553.514445][T15916] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1553.521227][T15916] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1553.527565][T15916] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1553.533744][T15916] ? stack_depot_save_flags+0x60f/0x7b0 [ 1553.539601][T15916] ? kmsan_get_metadata+0xfb/0x160 [ 1553.544995][T15916] ? kmsan_get_metadata+0xfb/0x160 [ 1553.550369][T15916] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1553.556956][T15916] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1553.563277][T15916] ? kmsan_get_metadata+0xfb/0x160 [ 1553.568640][T15916] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1553.574713][T15916] kmsan_internal_check_memory+0x16c/0x230 [ 1553.580786][T15916] kmsan_copy_to_user+0xf1/0x190 [ 1553.585993][T15916] _copy_to_user+0xcc/0x120 [ 1553.590742][T15916] vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 1553.596713][T15916] ? do_vfs_ioctl+0x17c3/0x3720 [ 1553.601821][T15916] ? kmsan_get_metadata+0xfb/0x160 [ 1553.607212][T15916] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1553.613532][T15916] compat_ptr_ioctl+0x82/0xe0 [ 1553.618465][T15916] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 1553.624097][T15916] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1553.629903][T15916] ? kmsan_get_metadata+0xfb/0x160 [ 1553.635281][T15916] ? kmsan_get_metadata+0xfb/0x160 [ 1553.640653][T15916] ia32_sys_call+0x2d07/0x42c0 [ 1553.645615][T15916] __do_fast_syscall_32+0xb0/0x150 [ 1553.650961][T15916] do_fast_syscall_32+0x38/0x80 [ 1553.656039][T15916] do_SYSENTER_32+0x1f/0x30 [ 1553.660746][T15916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1553.667330][T15916] RIP: 0023:0xf7f33539 [ 1553.671573][T15916] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1553.691405][T15916] RSP: 002b:00000000f503555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1553.700052][T15916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007ac [ 1553.708200][T15916] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1553.716346][T15916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1553.724491][T15916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1553.732629][T15916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1553.740800][T15916] [ 1553.744267][T15916] Kernel Offset: disabled [ 1553.748695][T15916] Rebooting in 86400 seconds..